last executing test programs:

2.640415146s ago: executing program 3 (id=12):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/93, 0x5d, 0x0, &(0x7f00000003c0)=""/168, 0xa8}}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==")
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/42)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000002200000c0000000000fee300760000000f8a49dc75000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x2c49, &(0x7f0000002240))
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000380)={0x0, 0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000500)={{0x0, 0x2, 0x7, 0x88, 0xa6, 0x0, 0x4, 0x9, 0x10, 0xf0000000, 0x1, 0x1, 0x1, 0xbc9, 0x6}})
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_alloc\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r6 = socket$tipc(0x1e, 0x5, 0x0)
ppoll(&(0x7f0000000100)=[{r6}, {r6}], 0x2, 0x0, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1)

2.34866456s ago: executing program 2 (id=13):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x8848, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

2.255540897s ago: executing program 2 (id=17):
clock_adjtime(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0xd000000})

2.239783419s ago: executing program 2 (id=18):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x15}}}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000ffdbdf2549000000080001006700000008000300", @ANYRES32=0x0, @ANYBLOB="0e000c00020008006f000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c140}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000004940)=ANY=[@ANYBLOB="12f2dbe091fffae6d752b5c33badb99baad955d7e9041ffb38b64e1a0529babc5120a22be89729aad765ce32d001387648a6c728a239d99129ef3a9d8c7f51f24aaf203906727292ed1cd50700000000000000597a25ba1c5b202900cafcb16f8cc28420edcde3fc9b5ee100d7bf1bc62d1f697293", @ANYRES16=r2, @ANYBLOB="0b14d86d7004fddbdf25550000000800010059000000c36c64309d26d42d39445e55f7a1b0f0943ec8ab4b919abb63718f36a3219fb6698d41f4df9c436d2816ff53df1060c87b0000067659af918a66e77c84a6172aa89c6e9da38d7122f39e5505a9ce8a84832c9af6ff1dd2920eeabe6fe849699b197bcfcafc"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004001)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000004a40)=ANY=[@ANYBLOB="34000000100001000000000000002000080000000000000008000000f7f64d5ce1faa5a963a4ef9a6a5eb0cf2b7c0e6c353a945ee3c480d4772d6516a6fb467e396c711768860f8e850cf4381ea03a7b5634b346c69c449de036a783516cf52b3ffad17ba57e1324f7ac1f3eb8d64759f95bf7a0ef6a94a573742ee044336a4c6fa34a7daaca3448c14fcc9f76ef6db2f08a0f124c4a1234ea992f078ee16147ff8a49e3c7259033c03387ea0bffbcd9c5ece85e3bb4163df710", @ANYRES32=0x0, @ANYBLOB="14001b01000000000000001a0007000001200001"], 0x34}], 0x1}, 0x8000)
r5 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r6=>0x0})
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x9de, 0x4)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$packet(r5, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000440)=0x3f, 0x4)
recvmmsg(r5, &(0x7f00000046c0)=[{{&(0x7f00000004c0)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000380)=""/44, 0x2c}], 0x3, &(0x7f0000000940)=""/103, 0x67}, 0x3}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000009c0)=""/169, 0xa9}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/13, 0xd}, {&(0x7f0000000d00)=""/64, 0x40}, {&(0x7f0000000d40)=""/217, 0xd9}, {&(0x7f0000000e40)=""/62, 0x3e}, {&(0x7f0000000e80)=""/40, 0x28}, {&(0x7f0000000ec0)=""/76, 0x4c}], 0xa, &(0x7f0000001000)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f0000002000)=@un=@abs, 0x80, &(0x7f0000004540)=[{&(0x7f0000002080)=""/84, 0x54}, {&(0x7f0000002100)=""/105, 0x69}, {&(0x7f0000002180)=""/25, 0x19}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/157, 0x9d}, {&(0x7f0000004280)=""/224, 0xe0}, {&(0x7f0000004380)=""/79, 0x4f}, {&(0x7f0000004400)=""/165, 0xa5}, {&(0x7f00000044c0)=""/81, 0x51}], 0xa, &(0x7f0000004600)=""/177, 0xb1}, 0xffff5975}], 0x3, 0x12040, &(0x7f0000004780))
recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2022)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c", @ANYBLOB="e8ff29bd700103dbdf256800000040ea0efee200000000000000c7e4eeab153c31dbdba5560aa84effc74400b014e85a08fb4b57e6f938e8c586e20af982ef0a0ec47c31f43eb89000f9aa2978c3eb9ad187ab6ffc9289bb57695e24c056", @ANYRES32=<r8=>r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004880)=ANY=[@ANYBLOB="be3e152b3819654189e9717beda69fb25dc4ace46b79d22c84c2a07fc0c15dfebc1a", @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf2537000000080003002bb886659b9e994b5ab00829cc7dc50555abbae49dbcf3c2d6ce0eac6dddc1790f4b4bccb326ffa7514cfcdc7255bd7ce81e0bdcfc5e", @ANYRES32=r7, @ANYBLOB="050018010c00f7ff0700a0000800000005001801280000000800a000050000000800a000f7ffffff050019010f000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40008013}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="347e7d0000000000000000000000f6a985b0287fc7ddd1d39500", @ANYRES16=r2, @ANYBLOB="009b1e14617104032cf4bd700cff45c73f985cb7802d10909a294eb0a47a72b6294be7b4c56a000000000c000058f8b8d6", @ANYRESHEX=r2, @ANYBLOB="0800090001ac0f0008003700f093cace050008000300000008003700000000000c000a009721e887699e4083"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x20)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="000426bd8900fcdbdf256800000008000300d1b8872e82e816f3fe327f22e14988d9d36e69797a7f35ce7e3138edf1819127648783ab55d24973b72e36a69b013522d93d0770b3dbcede8debf2397da044ab41e66cde0c0f74bd60475e4703bd7a8626096f6dade69e1b1a4dc7e7cc67371cb02f7d6b110e279f157c9e607354ca8ea905864544d9ce8315976957ee4677751fd307fea0591a1053539ad98ecdf86ba3b0e99777980783efb0edc58adbfe1704b8eedf04b3c5b18062e282d830a2", @ANYRES32=r7, @ANYBLOB="0c0099007c0000006a0000001600c7007c057f049806050400073b4a831b4f64af6200001200c700200010070801d54cb4bce165444200001400c70080000206ff010000dbfec268d0679f373200c700030044040205800409037f001f010206090604070400ff04030600010805bb03b1070105020725972ce98bb5d4f40000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40480c0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x801)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x9f, 0x20}]}, 0x10)
pipe2$9p(&(0x7f0000001900), 0x0)

1.85504138s ago: executing program 0 (id=29):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40084504, &(0x7f0000001440)={0x5, 0x1e, 0x185, 0x9, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"})
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x94, 0x0, 0x0, 0xffffff9b}, {0x25}, {0x6}]}, 0x10)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)=0x32)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e22, @loopback}, 0x10)
read(r2, &(0x7f0000000440)=""/4090, 0x1033)
r5 = fcntl$dupfd(r2, 0x0, r3)
write$sndseq(r5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x0, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0xc7, &(0x7f0000001500)=""/199, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'wg1\x00', 0x1000})
socketpair(0x1, 0x0, 0x0, 0x0)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180))

1.763423637s ago: executing program 0 (id=31):
socket(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a74c4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee19210490639d0f4893d7d2c79c2d5cec4ebf2e04aeb1e36e370645e52e1328e70f011a950f8ae1dfa42b14ea99ffe35186534534630ad8a4881ff625e1b389cedc085acdba51308f2c4ab4b781e3756adbe6d012874666b157d1f077614a1e7c90180694efeb4094dc87f969af3e0a4ecdae32a091fd3ca0b86d732d130b983602ff21887eb1692e622d880a8378b129731c379bdcc7db13d2ab8b189ff83ca71d967fd7e1c46def217e7a9d0ac26bb6f65bbe904e3"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)=']&#,@\x00', &(0x7f0000000200)=':\x00', 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x7000000)

1.762549397s ago: executing program 4 (id=32):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x2220e00a, &(0x7f00000002c0)={[{@noload}], [{@flag='sync'}, {@fowner_lt}, {@measure}]}, 0x0, 0x479, &(0x7f0000001340)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {0x5}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}]}, 0x2c}}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8}]}, 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000320000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2, 0x3)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}]}]}, 0x30}}, 0x0)
acct(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001040000000000000bb402780000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x50}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @rand_addr=' \x01\x00'}})

1.762069177s ago: executing program 3 (id=33):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0x40082104, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x8000)
socket(0x1, 0x0, 0x80000000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x8}}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x4, 0x800000)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r7, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="00000000000607ad"], 0x48}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000a40)="9e0c5896442ae30006b0838b883c293b239041cee677cf2cf8b18f4f3e719efbd06d48db833163c8fc147cb7176433b79905ebd3e2051bf56d39ad64fb6d64f83cefd9a5d6240fc5e321cb264d842e4c03bc4aa606d1450dee580149fa4138e617ce8c38cb8204052366c9e4ba9da417981800b172462a3cff7ba3f2e1da9f2bbf07227b31748b2b265a597af511e2ef39847e9a140b34ab42af10be7599c356874ee7dda95dd1d1e72368479ca9b832ec4d1938868bba7ef35e597d131b52a968a7109dee70e5fb75b7c762a978af08d72918ba80bdba31cb8fdc06e51999c07634ceae1f7b852627d4e7c66c6f7d7bce4de0ec44efaff6b3", 0xf9}, {&(0x7f0000000b40)="48ce918742857ecf13f888dd4009a8ac1ff430765631", 0x16}, {&(0x7f0000000b80)="e1676d0841ae80c2e405fce050722a", 0xf}, {&(0x7f0000000bc0)="8104815c003d839ee9771b607dda", 0xe}], 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="140000000000000000000000020000000500000000000000e40000000000000000000000070000000705a6f05a441056907fffffff00000008000000024424fb4000000005000000ab00000101ffffffff0000000400009249000000080000000800441c1721e0000001000000050000000000000002ffffffff000002408313cbac141441ac1414aaac1414aae00000028617ffffffff07041987020ded163ad2948f562bfd773a440c7891ac1e0001000002b000444446f364010100000000036401010200000000ac1414bb00000080e000000200000485ac1414aa00000f92ac1414bb000000010a01010200000008ac1414bb000000c4000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff64010102000000001400000000000000000000000100000000000080000000001400000000000000000000000100000067000000000000001100000000000000000000000100000081000000000000001400000000000000000000000100000002000000000000001c000000000000000000000008000000caf65fe97dcb2bbe9beb3666d725e564c091c79032669045dff5635c811850f9431f948ea46ada3ff44145636e6e448d5efb1078519a667ab7b898", @ANYRES32=r7, @ANYBLOB="ac1414bbe000000100000000"], 0x1a0}}], 0x1, 0x20000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
sendfile(r10, r9, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6}]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x700)

1.71741624s ago: executing program 4 (id=35):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="ae", 0x31}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x10}}], 0x2, 0x0)

1.617201649s ago: executing program 4 (id=36):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000870000000000000076000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r1 = eventfd(0x0)
writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0xa, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x40, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)="d544991bfd088548", 0x8}], 0x1)
gettid()
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r1)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x8}})
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
unshare(0x2a000600)
syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index})

1.502056668s ago: executing program 0 (id=37):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
select(0x810, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})

1.35594027s ago: executing program 1 (id=38):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x2f}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000ac0)={r4, &(0x7f0000000c40), &(0x7f0000000a40), 0x3}, 0x20)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x2, 0x10, 0x0, @dev={0xac, 0x3}, 0x0, "20f0ddf9a66a"}]}}}}}}}}, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a30000000001400020077673000000000000000000000000000bb0918b8b2a5756f340cdf8658629eb124642cdbfe51568f19c2991294cddc4761862a125c05db35e36c9814c1a8890b5f55ac77255b12f4127eaac8d02372da71c25eea053937d7aa898896ebd52f9f3b919d8cdcc0c24d0441"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xf8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xf8}}, 0x0)
socket(0x10, 0x803, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2})
ioctl$TUNGETVNETHDRSZ(r7, 0x400454de, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.088479221s ago: executing program 0 (id=39):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x900}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90)

1.087813462s ago: executing program 1 (id=40):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
inotify_init1(0x0)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (fail_nth: 6)

1.082418702s ago: executing program 0 (id=41):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000000101040000000000000000030000000000000000000000000000000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000ffaa"], 0xb8}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0006, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@nobarrier}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f0000000900)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)

642.974958ms ago: executing program 3 (id=42):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x51, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,privport,version=9p2000.u,cache=fscache'])

556.170975ms ago: executing program 3 (id=43):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x1c8, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x9b}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x8}, @jmp={0x6, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r3}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0)
syz_io_uring_setup(0x2f06, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) (async)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x817f20104678dc2a, 0x0, 0x0, 0x0, &(0x7f0000000000))
r9 = socket$inet6(0xa, 0x800, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)

554.663535ms ago: executing program 1 (id=44):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x81fd)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

539.935066ms ago: executing program 4 (id=45):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x10000}, @in6={0xa, 0x4e24, 0x0, @local, 0x6}, @in6={0xa, 0x4e24, 0x3f, @loopback, 0x20}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x5}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @empty}], 0xdc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xce}}, 0x0, 0x0, r1, 0x1)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x55, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x39, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000800)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x23, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000840)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x1, 0x2, 0x1ec78000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r5, r5, r5], 0x0, 0x10, 0x7ff}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, [@map_idx, @alu={0x4, 0x1, 0x6, 0x9, 0xa, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xa, 0x0, 0xef4c7729d53bfaa8, 0x2, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x0, 0x9, 0xa, 0x100}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000007c0)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0xe8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000880)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={<r7=>0xffffffffffffffff}, 0x106}}, 0x20)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48)
mkdir(0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0)
r9 = memfd_secret(0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r9, 0x2e, 0x4608, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4)

479.906731ms ago: executing program 3 (id=46):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000007c0)={0x9, &(0x7f0000000740)=[{0xd, 0x7, 0xf, 0xfffffff9}, {0x5, 0x9, 0x5, 0x8}, {0x80, 0x40, 0x7, 0x7}, {0x1, 0x6, 0x2, 0x7}, {0x4, 0xbf, 0x3}, {0xf, 0x4, 0xbc, 0xffff594a}, {0x3, 0x6, 0xa, 0x10}, {0x4, 0xa, 0x0, 0x1fc00}, {0x2000, 0xe, 0x2, 0x1}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000800)={0x0, <r1=>0x0})
syz_open_procfs(r1, &(0x7f0000000700)='oom_score_adj\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00')
write$cgroup_int(r2, &(0x7f0000000500)=0x10, 0x12)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c001c001800ffff0000000000000000d8800000ff00000900000000885a7ce8e23b9121bdf0d988e358105a5fa7354855d3a71bd90660cd044ef608d0cdfdbcb76126baf0548614e1e9ff84ced152"], 0x1c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, r6, 0x2)
fsetxattr(r9, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
fgetxattr(r9, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000680)=@ethtool_eee={0x44, 0x1, 0x0, 0x80000, 0x0, 0x3, 0x0, 0x0, [0x0, 0x7ffffffe]}})
linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000010400000000000000000000000030951114d5399ebb04aa4fd4414208d794b6a3e8f0e5968bc3407203c0c8a35026988bc12d8e43a51cd30ecadced0b7c8a258c2756d1", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002400010000000500250000000000"], 0x44}}, 0x0)
syz_open_dev$loop(&(0x7f0000000d40), 0x7, 0x0)

364.51811ms ago: executing program 1 (id=47):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005080)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@setlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x0, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
socket(0x0, 0x803, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400000024003f302dbd7000ffdbdf25000400000600030096"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

363.82353ms ago: executing program 3 (id=48):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@block_validity}, {@noinit_itable}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@errors_remount}, {}]}, 0x45, 0x7de, &(0x7f0000000d00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
socketpair$unix(0x1, 0x5, 0xfe, &(0x7f0000000240))

328.076473ms ago: executing program 2 (id=49):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1ee000000000000)

298.331966ms ago: executing program 4 (id=50):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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")
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r4, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x68, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "1b2f4c7f41ec9a8b6647d543b164ef60"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0xe, "ce2781a9dfe9bc8597d90a8c"}, @mptcp=@generic={0x0, 0x4, "e2cb"}]}}}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb253567fc1ed15d0}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x98, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x84, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x48041}, 0x40)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000300))
getpgid(0x0)
getpgrp(0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$9p(0xffffffffffffffff, &(0x7f0000000400)="5cf3bad5307ea5cca2116882eb0ad76d5f0f440a5211757881f3f7406f36aaf5ba64fe5729f81ccc1c5962ae4e1fa25838044afa7e1ac8e10db625eb73ebb09a036b190ef7982113a6f7da9fc42a5fc02023e92fbfe2cc18c1bc561dc58b2158f7", 0x61)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000000340), 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000180)=0x9, 0x4)
getdents(r1, &(0x7f0000000200)=""/136, 0x88)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

172.415846ms ago: executing program 4 (id=51):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x2f}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000ac0)={r4, &(0x7f0000000c40), &(0x7f0000000a40), 0x3}, 0x20)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x2, 0x10, 0x0, @dev={0xac, 0x3}, 0x0, "20f0ddf9a66a"}]}}}}}}}}, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a30000000001400020077673000000000000000000000000000bb0918b8b2a5756f340cdf8658629eb124642cdbfe51568f19c2991294cddc4761862a125c05db35e36c9814c1a8890b5f55ac77255b12f4127eaac8d02372da71c25eea053937d7aa898896ebd52f9f3b919d8cdcc0c24d0441"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xf8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xf8}}, 0x0)
socket(0x10, 0x803, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2})
ioctl$TUNGETVNETHDRSZ(r7, 0x400454de, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

169.401176ms ago: executing program 0 (id=52):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0xa7c, r0, 0x0, 0xfffe}, 0x38)

126.21865ms ago: executing program 1 (id=53):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc) (async)
sendfile(r0, r0, 0x0, 0x800000009) (async, rerun: 64)
ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, 0x0) (async, rerun: 64)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100b3f5b0cb1c9029f9f262cd00100000000200000000000000000000ba0660f2ee01d7f201000000000000000000005b07aede2b3a5905d7a0d621ef234ea147a928cc9fe96a"], 0x0, 0x2a}, 0x20) (async, rerun: 32)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async)
fcntl$setpipe(r2, 0x407, 0x0) (async)
fcntl$setpipe(r2, 0x407, 0x100000) (async)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x8000, 0x4) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x400000, 0x91, 0x0, r2}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) (async, rerun: 64)
madvise(&(0x7f0000000000/0x4000)=nil, 0xffffffffdfffffff, 0x1) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='initcall_level\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00bfba0000a200000000000007020000f8ffffffb703000008ee0000b70400000000000085000000010000009576ff712a941b1e4e206eef2359f0f9a71c3b83414a9f571b60b66ae8ca02e0b163ecfc39359f0a42082ffdf7e6f05aceed6b1a87034ab1568e8e6f88f22685fb811fa522b39d43083cec4906cbe93139848ddc645de41205e1451dd8fd853931e4309f1f5d10ca847d5e29ff76b36d6d283f3556727b140fc7a0159a65bc6edad4e8c868f5ae00a98000374303be2bd2bc39155c506db14345e9ca31295e8d56dd84d869746e6244b779382f743cd8"], 0x0, 0xffffff9c, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0)
ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000280)=0x8) (async)
fcntl$setpipe(r7, 0x407, 0x7000000) (async, rerun: 32)
fcntl$setpipe(r7, 0x407, 0x100000) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48)
accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=0x6e, 0x0) (async)
accept4$unix(r0, &(0x7f0000000440)=@abs, &(0x7f0000000180)=0x6e, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)

115.88659ms ago: executing program 2 (id=54):
open$dir(&(0x7f0000000000)='./file0\x00', 0x41, 0x0)
mount$nfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{'\x02\x00\x00\x00\x02\x00\b\x10ef'}], [{@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [], 0x2d, [0x0, 0x0, 0x37]}}}]})

44.268966ms ago: executing program 1 (id=55):
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r1 = gettid()
timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r1}, &(0x7f0000000080))
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000280)={[{@noquota}, {@noblock_validity}, {@nombcache}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x53e, &(0x7f00000002c0)="$eJzs3c1rJGkZAPCnerqz85HZzqgHXXBd3ZWZRad7snF3g4d1BNHTgrjex5j0hDCd9JDu7E7CgJm/QBBR0ZNevAj+AYIMePEowoCeFVYU0YweBHVKqrqSySbdSc/Y052P3w9q6q2vfp63hqrUW/VSFcCp9VJEXI+IR2mavhoR1YiYiIhSMcRmd8jWe7h1dz4bkkjTd/6WRFLM2/6tpBhfKDY7GxFf+0rEN5P9cdvrG7fmms3GajFd7yzfrrfXN64uLc8tNhYbKzMz02/Mvjn7+uy1odTzYkS89aU/fe/bP/3yW7/87Ht/vPGXK1m1Y7JYvrseTyDbReWDVuhWvZLvi23ZBqtPEeyoKuc1LJzrtUaapumjtLprzr2RZAYAwF7ZBeyHIuJTEfFqVOPMwZezAAAAwDGUfmEy/pN0n9D0MNFnPgAAAHCMlPI+sEmpVvQFmIxSqVbr9uH9SJwvNVvtzmduttZWFh78cDIipqJSurnUbFwr+gpPRSXJpqfz8uPp1/ZMz0TEpYj4bvVcPl2bbzUXxn3zAwAAAE6JC3va//+sdtv/+1x6fgzZAQAAAEMztX9WaRx5AAAAAM9Oj/Y/AAAAcMJo/wMAAMCJ9tW3386GdPv71wvvrq/dar17daHRvlVbXpuvzbdWb9cWW63F/J19y4f9XrPVuv25WFm7U+802p16e33jxnJrbaVzY+kDn8AGAAAARujSJ+7/PomIzc+fy4fMxLiTAkaivFNKinGPo/8Pxbs/3x9RUsBInBlgnfefG0EiwMiVx50AMDaVcScAjF1yyPK+nXd+U4w/Odx8AACA4bv8sf7P/w/+BsCmTwTAMecghtNrz/P/tDquRICRy5//D9rh18UCnCiVgXoAAifZ//38/1Bp+kQJAQAAQzeZD0mpVtzem4xSqVaLuJh/FqCS3FxqNq5FxPMR8btq5blsejrfMjm0zQAAAAAAAAAAAAAAAAAAAAAAAAAAdKVpEulBrh+4FAAAADgGIkp/Tn7VfZf/5eork3vvD0wk/8o/CTwREe/96J3v35nrdFans/l/35nf+UEx/7Vx3MEAAAAA9tpup2+34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgmB5u3Z1/uHU3/ffW3flRxv3rFyNiaid+PnSXlONsPj4blYg4/48kyru2SyLizBDib96LiI/2ip9kae2E7BX/3LOPH1PFXugV/8IQ4sNpdj87/1zvdfyV4qV83Pv4K0d8YPpp9T//xc7570yf4//igDFeePDzet/49yJeKPc+/2zHT/rEfzlKA8X/xtc3NvotS38ccTl6x98dq95Zvl1vr29cXVqeW2wsNlZmZqbfmH1z9vXZa/WbS81G8W/PGN/5+C8eHVT/833iTx1S/1cGqn3Efx/c2fpwt1jpFf/Kyz3i//onxRr745eKv32fLsrZ8svb5c1uebcXf/bbFw+q/8Lj+lee5P//yoD1H8qBAgAMTXt949Zcs9lYPQ6FytNslbXSj0LyCkev8K2h/mCapml2TPVYdD8iBvmdJI7CbskL4z4zAQAAw/b4on/cmQAAAAAAAAAAAAAAAAAAAMDpNcR3hk30e83e3pibO6XEm4EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPjfwEAAP//pk/fCw==")
timer_settime(0x0, 0x700, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@ipv6_getroute={0x64, 0x1a, 0x200, 0x0, 0x25dfdbff, {0xa, 0x10, 0x80, 0x4, 0x2, 0x0, 0x6ab0f5c3e21851ef, 0x9}, [@RTA_IIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_UID={0x8}, @RTA_OIF={0x8}, @RTA_MARK={0x8, 0x10, 0x9}, @RTA_GATEWAY={0x14, 0x5, @private2}]}, 0x64}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x7a05, 0x1700)

0s ago: executing program 2 (id=56):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x5, 0x8}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x180000000)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x8, 0x0, 0x81}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffff35)
r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

kernel console output (not intermixed with test programs):


syzkaller
syzkaller login: [   17.312443][   T29] kauditd_printk_skb: 43 callbacks suppressed
[   17.312456][   T29] audit: type=1400 audit(1719996127.320:76): avc:  denied  { transition } for  pid=2961 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   17.316477][   T29] audit: type=1400 audit(1719996127.320:77): avc:  denied  { noatsecure } for  pid=2961 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   17.319177][   T29] audit: type=1400 audit(1719996127.320:78): avc:  denied  { write } for  pid=2961 comm="sh" path="pipe:[652]" dev="pipefs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   17.322346][   T29] audit: type=1400 audit(1719996127.320:79): avc:  denied  { rlimitinh } for  pid=2961 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   17.325088][   T29] audit: type=1400 audit(1719996127.320:80): avc:  denied  { siginh } for  pid=2961 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.026956][   T29] audit: type=1400 audit(1719996128.040:81): avc:  denied  { read } for  pid=2765 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts.
[   23.666967][   T29] audit: type=1400 audit(1719996133.680:82): avc:  denied  { mounton } for  pid=3071 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.667922][ T3071] cgroup: Unknown subsys name 'net'
[   23.689674][   T29] audit: type=1400 audit(1719996133.680:83): avc:  denied  { mount } for  pid=3071 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.717023][   T29] audit: type=1400 audit(1719996133.710:84): avc:  denied  { unmount } for  pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.888405][ T3071] cgroup: Unknown subsys name 'rlimit'
[   24.011537][   T29] audit: type=1400 audit(1719996134.020:85): avc:  denied  { create } for  pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.033696][   T29] audit: type=1400 audit(1719996134.020:86): avc:  denied  { write } for  pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.044636][ T3073] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.054175][   T29] audit: type=1400 audit(1719996134.020:87): avc:  denied  { read } for  pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.074574][ T3071] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.082955][   T29] audit: type=1400 audit(1719996134.020:88): avc:  denied  { mounton } for  pid=3071 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.116516][   T29] audit: type=1400 audit(1719996134.020:89): avc:  denied  { mount } for  pid=3071 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   24.139817][   T29] audit: type=1400 audit(1719996134.080:90): avc:  denied  { relabelto } for  pid=3073 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.165666][   T29] audit: type=1400 audit(1719996134.080:91): avc:  denied  { write } for  pid=3073 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.655646][ T3080] chnl_net:caif_netlink_parms(): no params data found
[   24.739419][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.746496][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.753879][ T3080] bridge_slave_0: entered allmulticast mode
[   24.760228][ T3080] bridge_slave_0: entered promiscuous mode
[   24.778205][ T3086] chnl_net:caif_netlink_parms(): no params data found
[   24.789055][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.796110][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.803345][ T3080] bridge_slave_1: entered allmulticast mode
[   24.809719][ T3080] bridge_slave_1: entered promiscuous mode
[   24.850306][ T3080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.862629][ T3080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.883478][ T3085] chnl_net:caif_netlink_parms(): no params data found
[   24.893761][ T3081] chnl_net:caif_netlink_parms(): no params data found
[   24.902226][ T3084] chnl_net:caif_netlink_parms(): no params data found
[   24.927580][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.934638][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.941775][ T3086] bridge_slave_0: entered allmulticast mode
[   24.948029][ T3086] bridge_slave_0: entered promiscuous mode
[   24.954954][ T3080] team0: Port device team_slave_0 added
[   24.961467][ T3080] team0: Port device team_slave_1 added
[   24.980668][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.987859][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.995172][ T3086] bridge_slave_1: entered allmulticast mode
[   25.001779][ T3086] bridge_slave_1: entered promiscuous mode
[   25.047713][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.054970][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.080943][ T3080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.099176][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.112564][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.119575][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.145605][ T3080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.161860][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.168959][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.176069][ T3081] bridge_slave_0: entered allmulticast mode
[   25.182423][ T3081] bridge_slave_0: entered promiscuous mode
[   25.191492][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.207817][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.214987][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.222165][ T3081] bridge_slave_1: entered allmulticast mode
[   25.228495][ T3081] bridge_slave_1: entered promiscuous mode
[   25.243762][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.250851][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.258119][ T3085] bridge_slave_0: entered allmulticast mode
[   25.264332][ T3085] bridge_slave_0: entered promiscuous mode
[   25.271173][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.278238][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.285347][ T3085] bridge_slave_1: entered allmulticast mode
[   25.291780][ T3085] bridge_slave_1: entered promiscuous mode
[   25.326859][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.334023][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.341352][ T3084] bridge_slave_0: entered allmulticast mode
[   25.347743][ T3084] bridge_slave_0: entered promiscuous mode
[   25.354642][ T3086] team0: Port device team_slave_0 added
[   25.365634][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.377825][ T3080] hsr_slave_0: entered promiscuous mode
[   25.383810][ T3080] hsr_slave_1: entered promiscuous mode
[   25.390997][ T3081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.405093][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.412181][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.419319][ T3084] bridge_slave_1: entered allmulticast mode
[   25.425735][ T3084] bridge_slave_1: entered promiscuous mode
[   25.437183][ T3086] team0: Port device team_slave_1 added
[   25.443698][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.457850][ T3081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.486689][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.497024][ T3085] team0: Port device team_slave_0 added
[   25.510370][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.517526][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.543439][ T3086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.559479][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.569104][ T3085] team0: Port device team_slave_1 added
[   25.580079][ T3081] team0: Port device team_slave_0 added
[   25.590191][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.597199][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.623198][ T3086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.643246][ T3081] team0: Port device team_slave_1 added
[   25.653883][ T3084] team0: Port device team_slave_0 added
[   25.660418][ T3084] team0: Port device team_slave_1 added
[   25.694859][ T3086] hsr_slave_0: entered promiscuous mode
[   25.700743][ T3086] hsr_slave_1: entered promiscuous mode
[   25.706895][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   25.714439][ T3086] Cannot create hsr debugfs directory
[   25.720311][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.727295][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.753622][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.765015][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.772126][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.798211][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.809191][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.816502][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.842832][ T3081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.869101][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.876055][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.902079][ T3081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.913094][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.920049][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.946200][ T3084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.959634][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.966600][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.993655][ T3084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.022617][ T3084] hsr_slave_0: entered promiscuous mode
[   26.028604][ T3084] hsr_slave_1: entered promiscuous mode
[   26.034438][ T3084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   26.042154][ T3084] Cannot create hsr debugfs directory
[   26.079878][ T3085] hsr_slave_0: entered promiscuous mode
[   26.085934][ T3085] hsr_slave_1: entered promiscuous mode
[   26.091916][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   26.099573][ T3085] Cannot create hsr debugfs directory
[   26.125066][ T3081] hsr_slave_0: entered promiscuous mode
[   26.131450][ T3081] hsr_slave_1: entered promiscuous mode
[   26.137373][ T3081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   26.144934][ T3081] Cannot create hsr debugfs directory
[   26.255630][ T3080] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   26.277461][ T3080] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   26.294685][ T3080] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   26.304966][ T3080] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   26.338276][ T3084] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   26.352064][ T3084] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   26.363459][ T3086] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   26.372032][ T3084] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   26.381502][ T3086] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   26.390770][ T3084] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   26.404971][ T3086] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   26.413651][ T3086] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   26.435275][ T3085] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   26.450527][ T3085] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   26.459070][ T3085] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   26.468268][ T3085] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   26.498976][ T3081] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   26.507454][ T3081] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   26.516628][ T3081] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   26.525685][ T3081] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   26.563571][ T3080] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.615670][ T3080] 8021q: adding VLAN 0 to HW filter on device team0
[   26.628875][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.640078][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.647212][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.655805][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.663028][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.687696][ T3084] 8021q: adding VLAN 0 to HW filter on device team0
[   26.701736][  T972] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.709337][  T972] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.724272][ T3081] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.742356][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.749524][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.762054][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.771980][ T3080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   26.783635][ T3080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   26.796702][ T3081] 8021q: adding VLAN 0 to HW filter on device team0
[   26.815606][ T3084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   26.827168][ T3084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   26.845933][ T3085] 8021q: adding VLAN 0 to HW filter on device team0
[   26.863625][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.870824][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.887663][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.911886][ T3086] 8021q: adding VLAN 0 to HW filter on device team0
[   26.920818][  T972] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.928069][  T972] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.944419][  T972] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.951542][  T972] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.960812][  T972] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.967978][  T972] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.985543][ T3081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   26.996065][ T3081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.021453][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.028579][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.042198][ T3080] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.053489][ T3084] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.070287][  T972] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.077549][  T972] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.106809][ T3086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.145446][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.190902][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.242089][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.277552][ T3080] veth0_vlan: entered promiscuous mode
[   27.286066][ T3080] veth1_vlan: entered promiscuous mode
[   27.311425][ T3084] veth0_vlan: entered promiscuous mode
[   27.322679][ T3084] veth1_vlan: entered promiscuous mode
[   27.336501][ T3080] veth0_macvtap: entered promiscuous mode
[   27.354444][ T3080] veth1_macvtap: entered promiscuous mode
[   27.365462][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.379648][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.388236][ T3080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.397073][ T3080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.405749][ T3080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.414453][ T3080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.440165][ T3084] veth0_macvtap: entered promiscuous mode
[   27.458340][ T3081] veth0_vlan: entered promiscuous mode
[   27.475035][ T3085] veth0_vlan: entered promiscuous mode
[   27.481556][ T3084] veth1_macvtap: entered promiscuous mode
[   27.505561][ T3085] veth1_vlan: entered promiscuous mode
[   27.513962][ T3081] veth1_vlan: entered promiscuous mode
[   27.530371][ T3084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   27.540897][ T3084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   27.552771][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.564248][ T3084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   27.574836][ T3084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   27.585556][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.599444][ T3086] veth0_vlan: entered promiscuous mode
[   27.610272][ T3085] veth0_macvtap: entered promiscuous mode
[   27.624635][ T3086] veth1_vlan: entered promiscuous mode
[   27.632432][ T3084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.641380][ T3084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.650366][ T3084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.659197][ T3084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.667984][ T3225] loop3: detected capacity change from 0 to 2048
[   27.673061][ T3225] EXT4-fs: Ignoring removed mblk_io_submit option
[   27.689831][ T3085] veth1_macvtap: entered promiscuous mode
[   27.690055][ T3225] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   27.701293][ T3086] veth0_macvtap: entered promiscuous mode
[   27.722060][ T3081] veth0_macvtap: entered promiscuous mode
[   27.731565][ T3081] veth1_macvtap: entered promiscuous mode
[   27.737260][ T3225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.740820][ T3086] veth1_macvtap: entered promiscuous mode
[   27.762638][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   27.773180][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   27.783069][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   27.793614][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   27.806255][ T3225] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6: bg 0: block 234: padding at end of block bitmap is not set
[   27.807208][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.821555][ T3225] EXT4-fs (loop3): Remounting filesystem read-only
[   27.837964][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   27.848557][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   27.858525][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   27.869102][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   27.879775][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.888634][ T3225] FAULT_INJECTION: forcing a failure.
[   27.888634][ T3225] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   27.891028][ T3085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.901867][ T3225] CPU: 0 PID: 3225 Comm: syz.3.6 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0
[   27.910520][ T3085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.920282][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   27.920302][ T3225] Call Trace:
[   27.929046][ T3085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.939059][ T3225]  <TASK>
[   27.939070][ T3225]  dump_stack_lvl+0xf2/0x150
[   27.942360][ T3085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.951002][ T3225]  dump_stack+0x15/0x20
[   27.951032][ T3225]  should_fail_ex+0x229/0x230
[   27.976255][ T3225]  __should_fail_alloc_page+0xfd/0x110
[   27.981772][ T3225]  __alloc_pages_noprof+0x109/0x360
[   27.987081][ T3225]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   27.992444][ T3225]  alloc_migration_target_by_mpol+0x118/0x220
[   27.998498][ T3225]  migrate_pages_batch+0x327/0x1950
[   28.003694][ T3225]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   28.010301][ T3225]  migrate_pages+0xedf/0x1820
[   28.014972][ T3225]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   28.021600][ T3225]  ? mas_next_slot+0xbea/0xc40
[   28.026450][ T3225]  ? mbind_range+0x174/0x460
[   28.031153][ T3225]  __se_sys_mbind+0xf76/0x1160
[   28.035917][ T3225]  __x64_sys_mbind+0x78/0x90
[   28.040691][ T3225]  x64_sys_call+0x1d0a/0x2d70
[   28.045715][ T3225]  do_syscall_64+0xc9/0x1c0
[   28.050210][ T3225]  ? clear_bhb_loop+0x55/0xb0
[   28.054947][ T3225]  ? clear_bhb_loop+0x55/0xb0
[   28.059706][ T3225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   28.065712][ T3225] RIP: 0033:0x7f5ff3889b99
[   28.070170][ T3225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.089856][ T3225] RSP: 002b:00007f5ff2b0b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   28.098259][ T3225] RAX: ffffffffffffffda RBX: 00007f5ff3a17f60 RCX: 00007f5ff3889b99
[   28.106296][ T3225] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020000000
[   28.114266][ T3225] RBP: 00007f5ff2b0b0a0 R08: 0000000000000000 R09: 0000000000000002
[   28.122271][ T3225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   28.130278][ T3225] R13: 000000000000000b R14: 00007f5ff3a17f60 R15: 00007ffe63ac0b18
[   28.138502][ T3225]  </TASK>
[   28.147079][ T3225] syz.3.6 (3225) used greatest stack depth: 9912 bytes left
[   28.152559][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.165158][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.175158][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.185646][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.195461][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.205979][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.218959][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.233380][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.243945][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.253888][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.264470][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.270068][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.274356][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.293825][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.304499][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.313399][ T3086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.322419][ T3086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.331209][ T3086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.340030][ T3086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.354138][ T3234] loop0: detected capacity change from 0 to 512
[   28.360731][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.371354][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.381235][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.388902][ T3234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.391803][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.413996][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.419916][ T3234] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.424453][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.444547][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   28.455048][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.466038][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.485494][ T3084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.504615][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.515407][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.525252][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.535813][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.545862][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.556505][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.566578][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   28.577140][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   28.590356][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.615949][ T3081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.616995][ T3242] capability: warning: `syz.0.8' uses 32-bit capabilities (legacy support in use)
[   28.624822][ T3081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.642658][ T3081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.651402][ T3081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.663443][ T3242] Zero length message leads to an empty skb
[   28.704831][ T3250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'.
[   28.745645][ T3245] loop2: detected capacity change from 0 to 2048
[   28.761519][ T3257] loop0: detected capacity change from 0 to 512
[   28.769494][   T29] kauditd_printk_skb: 62 callbacks suppressed
[   28.769506][   T29] audit: type=1400 audit(1719996138.780:154): avc:  denied  { read } for  pid=3254 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   28.798882][ T3245] EXT4-fs: Ignoring removed mblk_io_submit option
[   28.805825][ T3245] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   28.816977][   T29] audit: type=1400 audit(1719996138.810:155): avc:  denied  { prog_run } for  pid=3252 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   28.835975][   T29] audit: type=1400 audit(1719996138.820:156): avc:  denied  { create } for  pid=3258 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   28.872983][ T3269] loop3: detected capacity change from 0 to 256
[   28.882445][ T3245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.909429][ T3257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   28.911634][ T3253] loop1: detected capacity change from 0 to 1764
[   28.929499][ T3253] =======================================================
[   28.929499][ T3253] WARNING: The mand mount option has been deprecated and
[   28.929499][ T3253]          and is ignored by this kernel. Remove the mand
[   28.929499][ T3253]          option from the mount to silence this warning.
[   28.929499][ T3253] =======================================================
[   28.937541][   T29] audit: type=1400 audit(1719996138.910:157): avc:  denied  { mount } for  pid=3268 comm="syz.3.12" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   28.978458][ T3259] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 58438 - 0
[   28.986286][   T29] audit: type=1400 audit(1719996138.920:158): avc:  denied  { create } for  pid=3268 comm="syz.3.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   28.995044][ T3259] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 58438 - 0
[   29.015956][   T29] audit: type=1400 audit(1719996138.920:159): avc:  denied  { read } for  pid=3268 comm="syz.3.12" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.015983][   T29] audit: type=1400 audit(1719996138.920:160): avc:  denied  { open } for  pid=3268 comm="syz.3.12" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.024868][ T3259] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 58438 - 0
[   29.047947][   T29] audit: type=1400 audit(1719996138.920:161): avc:  denied  { ioctl } for  pid=3268 comm="syz.3.12" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   29.049668][   T29] audit: type=1400 audit(1719996138.980:162): avc:  denied  { write } for  pid=3258 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   29.071720][ T3259] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 58438 - 0
[   29.091799][ T3257] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.148542][ T3259] geneve2: entered promiscuous mode
[   29.154198][ T3259] geneve2: entered allmulticast mode
[   29.159794][   T29] audit: type=1400 audit(1719996139.180:163): avc:  denied  { mount } for  pid=3252 comm="syz.1.2" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   29.185593][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.200534][ T3084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   29.270363][ T3284] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   29.308732][ T3288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'.
[   29.377558][ T3288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   29.487011][ T3292] Restarting kernel threads ... done.
[   29.602786][ T3304] tipc: Started in network mode
[   29.607767][ T3304] tipc: Node identity ac1414aa, cluster identity 4711
[   29.628355][ T3304] tipc: Enabled bearer <udp:syz2>, priority 10
[   29.637131][ T3304] tipc: Disabling bearer <udp:syz2>
[   29.672895][ T3315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.731684][ T3319] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   29.733665][ T3321] loop4: detected capacity change from 0 to 512
[   29.813670][ T3324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33'.
[   29.820435][ T3327] loop1: detected capacity change from 0 to 2048
[   29.842343][ T3327] EXT4-fs: Ignoring removed mblk_io_submit option
[   29.860075][ T3327] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   29.878939][ T3327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.960137][ T3327] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.34: bg 0: block 234: padding at end of block bitmap is not set
[   30.016082][ T3327] EXT4-fs (loop1): Remounting filesystem read-only
[   30.174045][ T3081] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.291225][ T3341] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   30.318429][ T3341] smc: net device wg0 applied user defined pnetid SYZ0
[   30.546796][ T3349] loop0: detected capacity change from 0 to 512
[   30.565493][ T3349] EXT4-fs: Ignoring removed bh option
[   30.583125][ T3349] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   30.627190][ T3352] FAULT_INJECTION: forcing a failure.
[   30.627190][ T3352] name failslab, interval 1, probability 0, space 0, times 1
[   30.640115][ T3352] CPU: 1 PID: 3352 Comm: syz.1.40 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0
[   30.642131][ T3349] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6
[   30.650016][ T3352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   30.650033][ T3352] Call Trace:
[   30.650040][ T3352]  <TASK>
[   30.650047][ T3352]  dump_stack_lvl+0xf2/0x150
[   30.679574][ T3352]  dump_stack+0x15/0x20
[   30.683757][ T3352]  should_fail_ex+0x229/0x230
[   30.688497][ T3352]  ? __d_alloc+0x3d/0x330
[   30.692835][ T3352]  __should_failslab+0x92/0xa0
[   30.697644][ T3352]  should_failslab+0x9/0x20
[   30.702251][ T3352]  kmem_cache_alloc_lru_noprof+0x51/0x2a0
[   30.708234][ T3352]  __d_alloc+0x3d/0x330
[   30.712514][ T3352]  d_alloc_pseudo+0x1e/0x80
[   30.717137][ T3352]  alloc_file_pseudo+0x70/0x140
[   30.721985][ T3352]  ? _raw_spin_unlock+0x26/0x50
[   30.726910][ T3352]  sock_alloc_file+0x9b/0x1d0
[   30.731646][ T3352]  __sys_socket+0x112/0x240
[   30.736197][ T3352]  __x64_sys_socket+0x3f/0x50
[   30.740889][ T3352]  x64_sys_call+0x21e7/0x2d70
[   30.745567][ T3352]  do_syscall_64+0xc9/0x1c0
[   30.750078][ T3352]  ? clear_bhb_loop+0x55/0xb0
[   30.754850][ T3352]  ? clear_bhb_loop+0x55/0xb0
[   30.759540][ T3352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   30.765474][ T3352] RIP: 0033:0x7fb3e42a69b7
[   30.769877][ T3352] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.789567][ T3352] RSP: 002b:00007fb3e3503fb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   30.798085][ T3352] RAX: ffffffffffffffda RBX: 00007fb3e4433038 RCX: 00007fb3e42a69b7
[   30.806162][ T3352] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   30.814302][ T3352] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   30.822286][ T3352] R10: 00000000200001c0 R11: 0000000000000286 R12: 0000000000000001
[   30.830253][ T3352] R13: 000000000000006e R14: 00007fb3e4433038 R15: 00007ffd96d0ae28
[   30.838273][ T3352]  </TASK>
[   30.923644][ T3356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'.
[   30.924290][ T3333] syz.4.36 (3333) used greatest stack depth: 8336 bytes left
[   30.971889][ T3359] loop1: detected capacity change from 0 to 512
[   31.001498][ T3339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'.
[   31.014942][ T3359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   31.036196][ T3368] loop3: detected capacity change from 0 to 512
[   31.044302][ T3359] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.062215][ T3368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.081555][ T3368] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.102766][ T3368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.46'.
[   31.112588][ T3081] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   31.123674][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.199217][ T3375] loop2: detected capacity change from 0 to 512
[   31.215813][ T3378] loop3: detected capacity change from 0 to 2048
[   31.230354][ T3378] EXT4-fs: Ignoring removed mblk_io_submit option
[   31.240812][ T3382] loop4: detected capacity change from 0 to 764
[   31.253143][ T3378] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   31.254314][ T3382] rock: directory entry would overflow storage
[   31.269301][ T3382] rock: sig=0x4f50, size=4, remaining=3
[   31.271266][ T3379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'.
[   31.274852][ T3382] iso9660: Corrupted directory entry in block 4 of inode 1792
[   31.286608][ T3086] rock: directory entry would overflow storage
[   31.294364][ T3375] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.49: casefold flag without casefold feature
[   31.297837][ T3086] rock: sig=0x4f50, size=4, remaining=3
[   31.316105][ T3086] iso9660: Corrupted directory entry in block 4 of inode 1792
[   31.316615][ T3378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.331684][ T3086] iso9660: Corrupted directory entry in block 4 of inode 1792
[   31.339336][ T3375] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.49: couldn't read orphan inode 15 (err -117)
[   31.356460][ T3375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.395311][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.447594][ T3396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.449289][ T3378] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.48: bg 0: block 234: padding at end of block bitmap is not set
[   31.480547][ T3396] loop1: detected capacity change from 0 to 512
[   31.487949][ T3396] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   31.497760][ T3396] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[   31.505385][ T3378] EXT4-fs (loop3): Remounting filesystem read-only
[   31.507854][ T3396] EXT4-fs (loop1): group descriptors corrupted!
[   31.527381][ T3396] ==================================================================
[   31.535581][ T3396] BUG: KCSAN: data-race in fsnotify / fsnotify_put_mark
[   31.542617][ T3396] 
[   31.545026][ T3396] write to 0xffff8881001c9a54 of 4 bytes by task 3072 on cpu 1:
[   31.552667][ T3396]  fsnotify_put_mark+0x2d8/0x5d0
[   31.557614][ T3396]  __se_sys_inotify_rm_watch+0x105/0x180
[   31.563272][ T3396]  __x64_sys_inotify_rm_watch+0x31/0x40
[   31.568854][ T3396]  x64_sys_call+0x1b06/0x2d70
[   31.573553][ T3396]  do_syscall_64+0xc9/0x1c0
[   31.578093][ T3396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.584019][ T3396] 
[   31.586879][ T3396] read to 0xffff8881001c9a54 of 4 bytes by task 3396 on cpu 0:
[   31.594427][ T3396]  fsnotify+0x36c/0x11a0
[   31.598677][ T3396]  __fsnotify_parent+0x285/0x370
[   31.603727][ T3396]  __fput+0x5ca/0x6f0
[   31.607689][ T3396]  __fput_sync+0x44/0x60
[   31.611907][ T3396]  __se_sys_close+0x101/0x1b0
[   31.616565][ T3396]  __x64_sys_close+0x1f/0x30
[   31.621151][ T3396]  x64_sys_call+0x25f1/0x2d70
[   31.625811][ T3396]  do_syscall_64+0xc9/0x1c0
[   31.630312][ T3396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.636193][ T3396] 
[   31.638497][ T3396] value changed: 0x00002008 -> 0x00000000
[   31.644578][ T3396] 
[   31.646886][ T3396] Reported by Kernel Concurrency Sanitizer on:
[   31.653009][ T3396] CPU: 0 PID: 3396 Comm: syz.1.55 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0
[   31.662967][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   31.673086][ T3396] ==================================================================
[   31.697660][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.756714][ T3405] FAULT_INJECTION: forcing a failure.
[   31.756714][ T3405] name failslab, interval 1, probability 0, space 0, times 0
[   31.770002][ T3405] CPU: 0 PID: 3405 Comm: syz.3.57 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0
[   31.779896][ T3405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   31.790117][ T3405] Call Trace:
[   31.793385][ T3405]  <TASK>
[   31.796384][ T3405]  dump_stack_lvl+0xf2/0x150
[   31.801109][ T3405]  dump_stack+0x15/0x20
[   31.805248][ T3405]  should_fail_ex+0x229/0x230
[   31.810028][ T3405]  ? alloc_vmap_area+0x1e1/0x1810
[   31.815172][ T3405]  __should_failslab+0x92/0xa0
[   31.819918][ T3405]  should_failslab+0x9/0x20
[   31.824399][ T3405]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   31.830223][ T3405]  alloc_vmap_area+0x1e1/0x1810
[   31.835056][ T3405]  ? should_fail_ex+0xd7/0x230
[   31.839848][ T3405]  __get_vm_area_node+0x15e/0x1b0
[   31.844871][ T3405]  __vmalloc_node_range_noprof+0x2eb/0xef0
[   31.850666][ T3405]  ? copy_process+0x3a9/0x1f90
[   31.855538][ T3405]  ? mod_objcg_state+0x3a5/0x4e0
[   31.860504][ T3405]  dup_task_struct+0x4a1/0x710
[   31.865356][ T3405]  ? copy_process+0x3a9/0x1f90
[   31.870204][ T3405]  copy_process+0x3a9/0x1f90
[   31.874788][ T3405]  ? __rcu_read_unlock+0x4e/0x70
[   31.879772][ T3405]  kernel_clone+0x16a/0x570
[   31.884265][ T3405]  __x64_sys_clone+0xe8/0x120
[   31.889004][ T3405]  x64_sys_call+0x23e7/0x2d70
[   31.893723][ T3405]  do_syscall_64+0xc9/0x1c0
[   31.898221][ T3405]  ? clear_bhb_loop+0x55/0xb0
[   31.902919][ T3405]  ? clear_bhb_loop+0x55/0xb0
[   31.907648][ T3405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.913551][ T3405] RIP: 0033:0x7f5ff3889b99
[   31.917996][ T3405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.937718][ T3405] RSP: 002b:00007f5ff2b0aff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   31.946132][ T3405] RAX: ffffffffffffffda RBX: 00007f5ff3a17f60 RCX: 00007f5ff3889b99
[   31.954097][ T3405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200
[   31.962098][ T3405] RBP: 00007f5ff2b0b0a0 R08: 0000000000000000 R09: 0000000000000000
[   31.970052][ T3405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   31.978013][ T3405] R13: 000000000000000b R14: 00007f5ff3a17f60 R15: 00007ffe63ac0b18
[   31.986006][ T3405]  </TASK>
[   31.989299][ T3405] syz.3.57: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[   32.004228][ T3405] CPU: 0 PID: 3405 Comm: syz.3.57 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0
[   32.014129][ T3405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   32.024209][ T3405] Call Trace:
[   32.027530][ T3405]  <TASK>
[   32.030451][ T3405]  dump_stack_lvl+0xf2/0x150
[   32.035105][ T3405]  dump_stack+0x15/0x20
[   32.039265][ T3405]  warn_alloc+0x145/0x1b0
[   32.043579][ T3405]  ? kfree+0xd5/0x290
[   32.047618][ T3405]  __vmalloc_node_range_noprof+0x310/0xef0
[   32.053433][ T3405]  ? mod_objcg_state+0x3a5/0x4e0
[   32.058420][ T3405]  dup_task_struct+0x4a1/0x710
[   32.063180][ T3405]  ? copy_process+0x3a9/0x1f90
[   32.067955][ T3405]  copy_process+0x3a9/0x1f90
[   32.072638][ T3405]  ? __rcu_read_unlock+0x4e/0x70
[   32.077646][ T3405]  kernel_clone+0x16a/0x570
[   32.082142][ T3405]  __x64_sys_clone+0xe8/0x120
[   32.086827][ T3405]  x64_sys_call+0x23e7/0x2d70
[   32.091655][ T3405]  do_syscall_64+0xc9/0x1c0
[   32.096145][ T3405]  ? clear_bhb_loop+0x55/0xb0
[   32.100861][ T3405]  ? clear_bhb_loop+0x55/0xb0
[   32.105580][ T3405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.111463][ T3405] RIP: 0033:0x7f5ff3889b99
[   32.115861][ T3405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.135800][ T3405] RSP: 002b:00007f5ff2b0aff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   32.144278][ T3405] RAX: ffffffffffffffda RBX: 00007f5ff3a17f60 RCX: 00007f5ff3889b99
[   32.152393][ T3405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200
[   32.160347][ T3405] RBP: 00007f5ff2b0b0a0 R08: 0000000000000000 R09: 0000000000000000
[   32.168306][ T3405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   32.176475][ T3405] R13: 000000000000000b R14: 00007f5ff3a17f60 R15: 00007ffe63ac0b18
[   32.184653][ T3405]  </TASK>
[   32.188124][ T3405] Mem-Info:
[   32.191241][ T3405] active_anon:135 inactive_anon:3318 isolated_anon:0
[   32.191241][ T3405]  active_file:3381 inactive_file:3021 isolated_file:0
[   32.191241][ T3405]  unevictable:0 dirty:76 writeback:0
[   32.191241][ T3405]  slab_reclaimable:2394 slab_unreclaimable:12813
[   32.191241][ T3405]  mapped:13004 shmem:331 pagetables:610
[   32.191241][ T3405]  sec_pagetables:0 bounce:0
[   32.191241][ T3405]  kernel_misc_reclaimable:0
[   32.191241][ T3405]  free:1925809 free_pcp:15269 free_cma:0
[   32.238443][ T3405] Node 0 active_anon:540kB inactive_anon:13272kB active_file:13524kB inactive_file:12084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52016kB dirty:304kB writeback:0kB shmem:1324kB writeback_tmp:0kB kernel_stack:2688kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no
[   32.266575][ T3405] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   32.293565][ T3405] lowmem_reserve[]: 0 2874 7852 0
[   32.298836][ T3405] Node 0 DMA32 free:2957152kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960692kB mlocked:0kB bounce:0kB free_pcp:3540kB local_pcp:3540kB free_cma:0kB
[   32.327575][ T3405] lowmem_reserve[]: 0 0 4978 0
[   32.332443][ T3405] Node 0 Normal free:4726276kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:540kB inactive_anon:13272kB active_file:13524kB inactive_file:12084kB unevictable:0kB writepending:304kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:57520kB local_pcp:29848kB free_cma:0kB
[   32.363954][ T3405] lowmem_reserve[]: 0 0 0 0
[   32.368565][ T3405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   32.381481][ T3405] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957152kB
[   32.397627][ T3405] Node 0 Normal: 69*4kB (UM) 106*8kB (UME) 48*16kB (UME) 29*32kB (UME) 32*64kB (UME) 14*128kB (UME) 10*256kB (UME) 15*512kB (UME) 21*1024kB (UME) 17*2048kB (UM) 1136*4096kB (UM) = 4726276kB
[   32.416577][ T3405] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB
[   32.425964][ T3405] 6675 total pagecache pages
[   32.430847][ T3405] 0 pages in swap cache
[   32.435332][ T3405] Free swap  = 124732kB
[   32.439542][ T3405] Total swap = 124996kB
[   32.443712][ T3405] 2097051 pages RAM
[   32.447561][ T3405] 0 pages HighMem/MovableOnly
[   32.452758][ T3405] 78486 pages reserved
[   34.011795][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.050117][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.110677][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.171611][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.246576][   T29] kauditd_printk_skb: 77 callbacks suppressed
[   34.246659][   T29] audit: type=1400 audit(1719996144.250:241): avc:  denied  { search } for  pid=2821 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.276038][   T29] audit: type=1400 audit(1719996144.250:242): avc:  denied  { read } for  pid=2821 comm="dhcpcd" name="n26" dev="tmpfs" ino=766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   34.297883][   T29] audit: type=1400 audit(1719996144.250:243): avc:  denied  { open } for  pid=2821 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   34.320861][   T29] audit: type=1400 audit(1719996144.250:244): avc:  denied  { getattr } for  pid=2821 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   34.344405][   T50] bridge_slave_1: left allmulticast mode
[   34.350433][   T50] bridge_slave_1: left promiscuous mode
[   34.356158][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.376446][   T29] audit: type=1400 audit(1719996144.360:245): avc:  denied  { read } for  pid=3411 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.399372][   T29] audit: type=1400 audit(1719996144.360:246): avc:  denied  { open } for  pid=3411 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.424432][   T29] audit: type=1400 audit(1719996144.360:247): avc:  denied  { getattr } for  pid=3411 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.452902][   T50] bridge_slave_0: left allmulticast mode
[   34.458651][   T50] bridge_slave_0: left promiscuous mode
[   34.464363][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.493945][   T29] audit: type=1400 audit(1719996144.500:248): avc:  denied  { write } for  pid=3410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=341 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.517029][   T29] audit: type=1400 audit(1719996144.500:249): avc:  denied  { add_name } for  pid=3410 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.540993][   T29] audit: type=1400 audit(1719996144.500:250): avc:  denied  { create } for  pid=3410 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   34.659862][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   34.672679][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   34.684185][   T50] bond0 (unregistering): Released all slaves
[   34.737649][   T50] tipc: Left network mode
[   34.780422][   T50] hsr_slave_0: left promiscuous mode
[   34.797506][   T50] hsr_slave_1: left promiscuous mode
[   34.806983][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.814446][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   34.822597][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.830168][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   34.840594][   T50] veth1_macvtap: left promiscuous mode
[   34.846692][   T50] veth0_macvtap: left promiscuous mode
[   34.852654][   T50] veth1_vlan: left promiscuous mode
[   34.857975][   T50] veth0_vlan: left promiscuous mode
[   34.965644][   T50] team0 (unregistering): Port device team_slave_1 removed
[   34.980461][   T50] team0 (unregistering): Port device team_slave_0 removed
[   35.332499][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.342996][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58438 - 0
[   35.409857][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.420327][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58438 - 0
[   35.450227][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.460780][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58438 - 0
[   35.529978][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.540499][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58438 - 0
[   35.612099][   T50] bridge_slave_1: left allmulticast mode
[   35.617827][   T50] bridge_slave_1: left promiscuous mode
[   35.623794][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.637347][   T50] bridge_slave_0: left allmulticast mode
[   35.643226][   T50] bridge_slave_0: left promiscuous mode
[   35.649154][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.799615][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   35.809975][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   35.820707][   T50] bond0 (unregistering): Released all slaves
[   35.918786][   T50] hsr_slave_0: left promiscuous mode
[   35.929272][   T50] hsr_slave_1: left promiscuous mode
[   35.947347][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.954818][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   35.962504][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.969921][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.979739][   T50] veth1_macvtap: left promiscuous mode
[   35.985210][   T50] veth0_macvtap: left promiscuous mode
[   35.990884][   T50] veth1_vlan: left promiscuous mode
[   35.996216][   T50] veth0_vlan: left promiscuous mode
[   36.084154][   T50] team0 (unregistering): Port device team_slave_1 removed
[   36.098838][   T50] team0 (unregistering): Port device team_slave_0 removed