last executing test programs:

8.201016921s ago: executing program 0 (id=144):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)

8.11931183s ago: executing program 0 (id=146):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="78a1f6bab5e816", @ANYRES16=r0], 0x4)

7.95647511s ago: executing program 0 (id=148):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x1000000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

7.94982436s ago: executing program 0 (id=149):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$eJzs3U1oHOf5APBnFMlx5D/G5F/cYBxn7KTggKOsVolSkUOyWY3kSVa7YndVbEpJTSwHYTkJdkNrXxJTSNrSUnrqoYc019x6aym00EObU6E59NJbIKeSQr9IGwoqsx+yJGsl+Tupfz8hvbMzzzvvM6PVPDuSZjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEiq06XSeBK1vL5wIh2sOt1szG2xvL++X69r1nl23bgRSfEZu3fHJ3/vzvvClcX7iy9H4mD30cHYXTS749Ke/fue/v/hoX7/LRK6Xod3GJdEvFkkdfbU8vLi+WseJnZfc5db53u/vOYu/1opvs5m9bwV+VxlNkvzViOdmpwsPX58ppXO5LWsdbLVzubSajOrtBvN9Gj10XR8amoizcZONhbqs9OVWtaf+dRj5VJpMn1+bD6rNFuN+uPPR6t6PK/V8vpsJ6Zc+mYUMU8VT8QX8nbazipzaXpmaXlxYrtUi6DxzRbc033+HHxk30evf/i3pcXiCTloJUnviVkeHy+XxyefnHryqVJpuFwqr59R2iBWI2Ioooi4JU9aPkdu7gEcbsBQr/5HLfKox0KciHSTj5GoxnQ0oxFzxeM/jlwV0dOv/196/C+/32rctfW/X+UfuLL4QHTq/6Huo0OD6v+mud7OjwtxMS7F2TgVy7Eci3H+jme0zcfQja4hWfvo3/8XEfXIoxWNyGMuKjEbWaS9OWlMxWRMRilejOMxE61IYybyqEUWrTgZrWhH1nlGVaMZWVSiHY1oRhpHoxqPRhrjMRVTMRFpZDEWJ6MRC1GP2ZiOSmctZ2Kps98nNmS5/774xct/+OidYno1aHyrzSpezBVBf90iaCjK11D/V1aK1wsbI9T/u8CurRbegqM4XJ+Vfv0HAAAA/mclnd++F+f/I/FgZ2omr2VfvdNpAQAAADdR5y//B4tmpJh6MJLi/L+0SeQHtz03AAAA4OZIOtfYJRExGg91p87EUrwZi7HZLwEiYt/tThEAAAC4QZ2//x8qmtGINzoz+rdLGXD+DwAAAHzefGfQPfY/7N9jtzV/b/KrkYgYSS7Pn3gkOVcp4irn7un26zVfWV1je+ZAsre3kk4zOXxpTxIRw9XsYNK/++V/7u22H3e+Hhhe7T7oXv9Js7llArF1Ap1H8f043I05fLrT7Ol1GU66o4zO5LVsrNqoPd25JWLx2X79laVvRRSjf7c+tzeJM0vLi2Mvvbp8upPL5aL75XO9GyhedR/FLXJZ6e2BeHDzLR7pXIjRG3e0O25p7fYPdbsPbT1msnbMt+JIN+bIaLcd7S/pjrm7GHN87OnxqFT2DrWzE+3XV9ZsfS+L8dUtH1m75T/Zs8Mtfyse7sY8fPThbrNJFuV1WbxydRbltft/Z/tix1m8c/iNE//8bSPJJrbLYuIasli5J2JjFgB3ypnOXX+uVKH7OlXo05Wuov53625RrCrdgJ4dHGv/cWWU1VcZ/f5rat1wbKzuQ6sHxp1V95XoHtGPdmOOdl9PDB/YpK6UNjmiv7b02u96R/Qn3vvxT7926P2fdca9rrr+Xjzajek1cf9vBtTYYpt/sKGqvlv0eHfguK1audhfEd8491rsv3Dx0mNL5069vPjy4ivl8sRk6YlS6cnyrl7sSOcVwxaZAnD32v49dgZG9OtM8sSGs+o4vb7u3r/6LwVj8VK8GstxOo51rjaIiIc2H3d0zb8hHNvmrHV0zTu8HNvm3PJKbPnq2CQGxE6s2WNf/FGn+eSWfDsA4LY4sk0dTuLI+73QQa8QkmPbnHevr+Ubzo5jcC3fzJdv5c4AgLtE1vw4GW2/nTSb+fyL41NT45X28SxtNqovpM18ejZL83o7a1aPV+qzWTrfbLQb1f4vjqezVtpamJ9vNNvpTKOZxlArP9F55/e099bvrWyuUm/n1dZ8Lau0srTaqLcr1XY6nbeq6fzCc7W8dTxrdjq35rNqPpNXK+28UU9bjYVmNRtL01aWrQnMp7N6O5/Ji8l6Ot/M5yrNyxFRW5jL0umsVW3m8+1Gd4X9sfL6TKM511nt2NWb/+fbvb8B4LPgwsVLZ08tLy+ev76JP+0k+E5vIwCwnioNAAAAAAAAAAAAAACffRcuXjq7O5YXz+/rXwhQzL2BKwKvbeLeuOVD3LUTxTfyM5DGnZ34+jPPnB0U89wbDxzf2Xp6PynDse2lrm/vjdj18x925zw7OPjbvZ+/m7OlH0TEdXRfSTZZ9OlKd2LdYWLX7T8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV/hsAAP//MMlb4Q==")
pivot_root(&(0x7f0000000540)='./file0/../file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_bond\x00', {}, 0x25})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000007ccfb6fbdcec0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'pim6reg0\x00', {}, 0x1000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20028840}, 0x40000)

7.535764839s ago: executing program 0 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, @void, @value}, 0x94)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000000)=[{r2}, {r2, 0x10}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TCSETSW2(r4, 0x5437, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)

7.216088319s ago: executing program 0 (id=158):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x5, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
lchown(&(0x7f0000000200)='./file2\x00', 0x0, 0x0)
setrlimit(0x9, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0xab, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r6 = open(&(0x7f0000000180)='./file0\x00', 0xc540, 0x110)
fcntl$notify(r6, 0x402, 0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
dup2(r7, r7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000240)=0xe8)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x901008, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_any}], [{@appraise_type}, {@fsname={'fsname', 0x3d, 'kmem_cache_free\x00'}}, {@euid_lt={'euid<', r8}}]}})
unshare(0xc040400)
r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r9, 0x402, 0x14)
fcntl$notify(r6, 0x402, 0x8000003d)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

7.210429369s ago: executing program 32 (id=158):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x5, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
lchown(&(0x7f0000000200)='./file2\x00', 0x0, 0x0)
setrlimit(0x9, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0xab, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r6 = open(&(0x7f0000000180)='./file0\x00', 0xc540, 0x110)
fcntl$notify(r6, 0x402, 0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
dup2(r7, r7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000240)=0xe8)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x901008, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_any}], [{@appraise_type}, {@fsname={'fsname', 0x3d, 'kmem_cache_free\x00'}}, {@euid_lt={'euid<', r8}}]}})
unshare(0xc040400)
r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r9, 0x402, 0x14)
fcntl$notify(r6, 0x402, 0x8000003d)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

4.328022811s ago: executing program 4 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
umount2(&(0x7f00000002c0)='./file0\x00', 0x200000000000000)

4.309746851s ago: executing program 4 (id=195):
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001a000000010001004900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
fgetxattr(r4, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000008011d0000000000000000020000080900010073797a310000000004000480050003001100000006000240001700"], 0x34}, 0x1, 0x0, 0x0, 0x4c40}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x478, &(0x7f0000000940)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYBLOB="70341615790ffaf843431b833a1e23b6b11bee7e89b7e43fa4aacff33fb1682b3f5a488403b2cbdc22a132caebec12e58fcb86b152d6e9f2a6435383974a750dfd28606d33c3223b38b2c77365fb3d5414448883a9565d24404429eba5b73a2924dd25"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4c810)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r10, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r10}}, 0x18)

4.303991841s ago: executing program 3 (id=196):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000000})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(r0, r1, 0x0)

4.149423461s ago: executing program 3 (id=198):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000000)=""/39, 0x27}], 0x2, 0x4, 0x2c6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10a1010, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@directio}, {@cache_none}, {@cache_none}, {@noextend}, {@mmap}, {@version_u}, {@access_uid={'access', 0x3d, r5}}, {@nodevmap}, {@access_user}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'lblc\x00'}}]}})
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000a40)={0x6, @empty, 0x4e23, 0x2, 'lblc\x00', 0x35, 0x2, 0x42}, 0x2c)
socket$inet_udp(0x2, 0x2, 0x0) (async)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) (async)
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000000)=""/39, 0x27}], 0x2, 0x4, 0x2c6) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async)
setuid(r5) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10a1010, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@directio}, {@cache_none}, {@cache_none}, {@noextend}, {@mmap}, {@version_u}, {@access_uid={'access', 0x3d, r5}}, {@nodevmap}, {@access_user}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'lblc\x00'}}]}}) (async)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000a40)={0x6, @empty, 0x4e23, 0x2, 'lblc\x00', 0x35, 0x2, 0x42}, 0x2c) (async)

3.483585709s ago: executing program 3 (id=205):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xfffffffc, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
gettid()
r5 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91)
fallocate(r5, 0x11, 0x9, 0x5)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x8, 0x87, 0x0, @local, @mcast2, {[@srh={0x87, 0x0, 0x4, 0x0, 0x73, 0x10, 0xae8}]}}}}}, 0x0)
r6 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
write$cgroup_int(r6, &(0x7f0000000380)=0x100000003, 0x12)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x38}}}}}, 0x28}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffdffffffffffe}, 0x18)
creat(&(0x7f0000000ec0)='./file0\x00', 0x90)
socket$inet6(0xa, 0x6, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r6, &(0x7f0000001600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x1, 0x9, 0x6, 0x3, 0x3e, 0xfffffda3, 0xd5, 0x40, 0x5c, 0x7, 0x2, 0x38, 0x4, 0xee27, 0x6, 0x8100}, [{0x70000000, 0x1cec, 0x7ff, 0xf, 0x75, 0x8, 0x8, 0x5}, {0x7, 0x6, 0x100, 0x8, 0xffffffffffffffff, 0x100, 0x6, 0x5d7}, {0x3, 0x5, 0x100000000, 0xc038, 0x7b, 0x6, 0x7b, 0xffffffff}, {0x5, 0x0, 0x3, 0x8000000000000, 0x0, 0xc, 0x2}], "55edcc47bc88a27c4e2f3c51d80e5335b87976c6d0edce2eba5bad525425e3c7ee7b12dc194672ac7d6de4bc9f9ca6659a4d3ebe267059f1ad7fd068d7ceca7494b1cdce35a1be645284a848f187a662e0e9df693a6795c8f674552101d2abf2ff4ef89c0ac8b36fe7f3b7d91c186699d56949776c911d58df5d8c839d5f238e52bab65323d7139ef40de752eb2442b273eda3780bdae8d95786600204720a31ea09d5f30bae58976652d43c26", ['\x00', '\x00', '\x00', '\x00']}, 0x5cd)
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)

3.001040098s ago: executing program 2 (id=209):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000008e000000040000000200000000000000", @ANYRES32, @ANYBLOB="c0bbec089b0a09000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6, <r9=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000740)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
unshare(0x68040200)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)

2.444397517s ago: executing program 5 (id=159):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000))
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8100)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpeername(0xffffffffffffffff, 0x0, 0x0)

2.146317636s ago: executing program 3 (id=212):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f00000003c0)="240000001e005f80004000000000000002000000000000000000080008000000000303ff", 0x24)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004290d922b6dfcf4dc047de3f76390a06260e81e5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000040000000500"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r3 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@remote, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
listen(r3, 0x3)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r7 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0x8, 0x4)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/softnet_stat\x00')
lseek(r8, 0x75, 0x0)
recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x130, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
sendmmsg(r7, &(0x7f0000001500), 0x588, 0x1f8)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, &(0x7f0000003100)}, 0x3}], 0x2, 0x2, 0x0)

1.656092475s ago: executing program 5 (id=214):
r0 = socket(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000700)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@commit={'commit', 0x3d, 0x7}}, {@discard}, {@noauto_da_alloc}, {@barrier}]}, 0xfc, 0x562, &(0x7f0000000d00)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000070000000200010009000000010000003fe75db5bd6cad793021ff3b652ce93c4681c0e8618747cdc559f570cfe6564b0263b42043fea46df508365a6dcbc378cc29866fbb73803e09b1ef09ec8881c1422daeeb320683d75726a0eb403b6b218afadd8f85b40c66bd1d28dd8566cc98dc593806b11bb30c527533140ab905ea77850fa07a8a117735ad4ab8955dda4fc0bfb769d90d232a34e387104939f10f14154cbfc615e4916ef5aee66705219524c86cfb1699c732b2dc2f52", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff0000000010e3a8bfa200000000000007020000f8ffffffb703000008000000b704000000a529883fddf34589a4af794811240085000000030000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r7, 0x0, 0x1b)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r2)

1.615083265s ago: executing program 2 (id=215):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x4)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x5)

1.480893725s ago: executing program 1 (id=217):
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000200)})
openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x202080, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000060000000000000000000000000000000000000000f0e522336cfc3c15eabcce33c0f24774b2860ac3888970dd2e9e73209ce52d0eecd08d095bc012499965b49f6e964d7091041093f424527e37207ffe970495b17208ef"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0xfffffffffffffffc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
pipe2(&(0x7f0000000840), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
pipe2$9p(&(0x7f0000000140), 0x0)

1.479289464s ago: executing program 3 (id=218):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0))
ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xcf, 0xcd, 0x5a, 0x40, 0x738, 0xa2c5, 0x1ece, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5d, 0x1}}]}}]}}, 0x0)
r6 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800)
accept4$nfc_llcp(r6, 0x0, 0x0, 0x80000)
dup(r4)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='rxrpc_conn\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r10)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0)
write$UHID_INPUT(r11, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)

1.407872504s ago: executing program 5 (id=219):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f00000003c0)="240000001e005f80004000000000000002000000000000000000080008000000000303ff", 0x24)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004290d922b6dfcf4dc047de3f76390a06260e81e5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000040000000500"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r3 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@remote, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
listen(r3, 0x3)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r7 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0x8, 0x4)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/softnet_stat\x00')
lseek(r8, 0x75, 0x0)
recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x130, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rename(0x0, &(0x7f00000000c0)='./file0/file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
sendmmsg(r7, &(0x7f0000001500), 0x588, 0x1f8)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, &(0x7f0000003100)}, 0x3}], 0x2, 0x2, 0x0)

1.407439004s ago: executing program 2 (id=220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x74c, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)=0x32)
close(r5)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1.388764494s ago: executing program 2 (id=221):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x1a, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (fail_nth: 5)

1.349083234s ago: executing program 4 (id=222):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='pwc_handler_enter\x00', r3, 0x0, 0x4eb2}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32)
close(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0427fbd49925fc0}, 0x800)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf252500000008000200", @ANYRES32=0x0, @ANYBLOB="027dd26f2ef3d2e244718336eed4c66e4de32485373ba2d0dd105e17b39a9f00907c7ea0a544913afefb5643e0e9a7a56024301062768f4703cccbcf3ac83d283adde6eb1fc42f0cae5c40f33b0ed9f0fc2c73f30cc7c595d3cae124c2de6d48e38f4c4e410b1ef07cef437fdbdc84e73cdc11a5b14c06857effac6af5e93d211d7b89be7e5e2d3e352db76669a4a154cb99bba3b50ed5f3d167f62cacab7c6fe8729a6282f7151612a390d8211f29"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000884)
r11 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='ext4_es_insert_delayed_block\x00', r12}, 0x18)
r13 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc))
ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x21, 0x80400, 0x2007, 0x2b, r13})

1.063987853s ago: executing program 2 (id=223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x4, 0x2, 0x7fffffff}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x1d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef)
r7 = syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f00000005c0)=r7, 0x12)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x104}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f00000002c0)=""/48, 0x100000, 0x1800, 0x9, 0x1}, 0x20)
r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0)
pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000280)='M', 0x1}], 0x1, 0x0, 0x0, 0xfe)

1.030843803s ago: executing program 5 (id=224):
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001a000000010001004900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000200))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000008011d0000000000000000020000080900010073797a310000000004000480050003001100000006000240001700"], 0x34}, 0x1, 0x0, 0x0, 0x4c40}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x478, &(0x7f0000000940)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYBLOB="70341615790ffaf843431b833a1e23b6b11bee7e89b7e43fa4aacff33fb1682b3f5a488403b2cbdc22a132caebec12e58fcb86b152d6e9f2a6435383974a750dfd28606d33c3223b38b2c77365fb3d5414448883a9565d24404429eba5b73a2924dd25"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4c810)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r10, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r10}}, 0x18)

1.001260703s ago: executing program 4 (id=225):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4000000000101030000000000124500000000020800084000000000140018800800014000000800080003400000000708000840000100001c000f80080001400000007908000140000000da080002000000000508000c4000000000060012400001000008001640000000408000018014000300fc0000000000000000ed0000000000011400000000000000000000000000bb060003400000000006000340000300000c00028005000100110000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa06001240000000000000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x881)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

856.027082ms ago: executing program 4 (id=226):
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_uring_setup(0x36db, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x20048004)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x801, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x444, &(0x7f0000000400)="$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")
getgroups(0x3, &(0x7f0000000100)=[0x0, 0x0, <r6=>0xee01])
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f00000002c0)={'trans=virtio,', {[{@access_any}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@directio}, {@access_client}, {@nodevmap}], [{@euid_gt={'euid>', r7}}, {@audit}]}})
write$selinux_user(r0, &(0x7f0000000240)={'system_u:object_r:logrotate_exec_t:s0', 0x20, 'root\x00'}, 0x2b)

695.654722ms ago: executing program 4 (id=227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x4, 0x1e, &(0x7f0000000200)=""/30, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0xa93, 0xfff}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000300)=[{0x4, 0x2, 0xa, 0xa}, {0x0, 0x5, 0x0, 0xa}, {0x4, 0x3, 0x7, 0x7}, {0x1, 0x2, 0x7, 0x1}, {0x0, 0x1, 0x3, 0xc}, {0x0, 0x4, 0x7, 0x4}, {0x3, 0x1, 0xd, 0x9}], 0x10, 0x10, @void, @value}, 0x94)

458.466752ms ago: executing program 3 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003900)=ANY=[@ANYBLOB="55a98274", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x4008010)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x770c, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x7e, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100), 0xff, 0x790, &(0x7f0000000f80)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setitimer(0x2, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)
r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000002c0)="8b2a18ac0c136ba4db6b9aace30019db1d1f018c57984218f8ce025a0b7a0e5abe407ba7b10320e3e23792c3ff9337347a93fdb807f817b5ca28df27c9a272ec9c85ae391d05f671856ac0e1845603c9e589b55900ffafd7ed7ce41c7ae2ab07994dcadb93a35a9dee8d826d49c01ce4293e70030122e3a5a51422e8763a83110dab0e50b83b1d5a7052c38ebaa70c4afb254921c687e3ebb2f8449d519dbac862cff1d77d918534429d522d63c9c5a4c6898bc342a0dec4d5f8a61469e3b87d8aa770af128f85eb2ccab9a2d9b8d24a3095e8fd0635b26ab724ba3f6fd5ab114eabac", 0xe3, 0x7)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)

438.742762ms ago: executing program 1 (id=229):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

316.162021ms ago: executing program 1 (id=230):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$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")
creat(&(0x7f0000000140)='./file2\x00', 0x4)
open(&(0x7f0000000300)='./file2\x00', 0x0, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x2000, 0x0)

270.374511ms ago: executing program 5 (id=231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x1000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x40}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

227.189471ms ago: executing program 1 (id=232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x74c, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)=0x32)
close(r5)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

141.668541ms ago: executing program 1 (id=233):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000080)=[{0x9, 0xc, 0x81, 0x7}, {0x10, 0x80, 0x4, 0x5}, {0x3, 0xc0, 0x20, 0xa85c}, {0x3ff, 0x4, 0xfa}, {0x64, 0x6, 0x3, 0x2}, {0x80, 0x3a, 0xff, 0x80000000}]}) (async, rerun: 64)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (rerun: 64)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x2700006c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x8000}, 0x18) (async, rerun: 64)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) (async)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) (async)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000000)='schedstat\x00') (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 32)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (rerun: 32)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}})
write$sndseq(r8, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0xe1, 0x9}, 0xae, &(0x7f00000002c0)={0x9, 0x8, 0x59, 0x7, @time={0xbec, 0x3}, {0x5b, 0x81}, {0x1, 0x3b}, @control={0x6, 0x4, 0x8}}}}], 0x45) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7}, 0x18) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x222000, 0x1000, 0x10, 0x1}, 0x20)

119.975031ms ago: executing program 2 (id=234):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f00000003c0)="240000001e005f80004000000000000002000000000000000000080008000000000303ff", 0x24)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004290d922b6dfcf4dc047de3f76390a06260e81e5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000040000000500"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r3 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@remote, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
listen(r3, 0x3)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r7 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0x8, 0x4)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/softnet_stat\x00')
lseek(r8, 0x75, 0x0)
recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x130, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rename(0x0, &(0x7f00000000c0)='./file0/file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
sendmmsg(r7, &(0x7f0000001500), 0x588, 0x1f8)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, &(0x7f0000003100)}, 0x3}], 0x2, 0x2, 0x0)

0s ago: executing program 1 (id=235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fd5800006ca3000000000000800000000002be6c36c624ede13ef2980b13b1090000"], 0x55)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200ffffffb703000008000000b704000000000000850000000900000095000000000000000000dfd6b86aa479aa8351b150e669efff8edff300627ccf0d19753f4759d7478be788581d46b841"], 0x0, 0x884, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kvm_ack_irq\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket(0x10, 0x803, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_open_dev$usbfs(&(0x7f0000000240), 0x6, 0x240800)
socket(0x400000000010, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/warn_count', 0x0, 0x114)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

[   21.157211][   T29] audit: type=1400 audit(1740795129.149:81): avc:  denied  { read } for  pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts.
[   27.065400][   T29] audit: type=1400 audit(1740795135.049:82): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.066424][ T3288] cgroup: Unknown subsys name 'net'
[   27.088179][   T29] audit: type=1400 audit(1740795135.049:83): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.115687][   T29] audit: type=1400 audit(1740795135.079:84): avc:  denied  { unmount } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.307644][ T3288] cgroup: Unknown subsys name 'cpuset'
[   27.313779][ T3288] cgroup: Unknown subsys name 'rlimit'
[   27.425212][   T29] audit: type=1400 audit(1740795135.409:85): avc:  denied  { setattr } for  pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.448744][   T29] audit: type=1400 audit(1740795135.409:86): avc:  denied  { create } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.469247][   T29] audit: type=1400 audit(1740795135.409:87): avc:  denied  { write } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.489662][   T29] audit: type=1400 audit(1740795135.409:88): avc:  denied  { read } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.510055][   T29] audit: type=1400 audit(1740795135.439:89): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.517466][ T3291] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.534841][   T29] audit: type=1400 audit(1740795135.439:90): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.566669][   T29] audit: type=1400 audit(1740795135.539:91): avc:  denied  { relabelto } for  pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.596433][ T3288] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.771541][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   28.802422][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   28.853251][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   28.877678][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   28.890786][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   28.924830][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.932037][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.939354][ T3301] bridge_slave_0: entered allmulticast mode
[   28.945668][ T3301] bridge_slave_0: entered promiscuous mode
[   28.957555][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.964652][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.971809][ T3302] bridge_slave_0: entered allmulticast mode
[   28.978164][ T3302] bridge_slave_0: entered promiscuous mode
[   28.995793][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.002887][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.010072][ T3301] bridge_slave_1: entered allmulticast mode
[   29.016482][ T3301] bridge_slave_1: entered promiscuous mode
[   29.025041][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.032181][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.039381][ T3302] bridge_slave_1: entered allmulticast mode
[   29.045782][ T3302] bridge_slave_1: entered promiscuous mode
[   29.079159][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.106801][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.123799][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.138100][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.145163][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.152428][ T3298] bridge_slave_0: entered allmulticast mode
[   29.158940][ T3298] bridge_slave_0: entered promiscuous mode
[   29.165526][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.172659][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.179811][ T3298] bridge_slave_1: entered allmulticast mode
[   29.186087][ T3298] bridge_slave_1: entered promiscuous mode
[   29.205251][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.214424][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.221640][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.228777][ T3299] bridge_slave_0: entered allmulticast mode
[   29.235293][ T3299] bridge_slave_0: entered promiscuous mode
[   29.252406][ T3302] team0: Port device team_slave_0 added
[   29.272227][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.279324][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.286405][ T3299] bridge_slave_1: entered allmulticast mode
[   29.293150][ T3299] bridge_slave_1: entered promiscuous mode
[   29.300448][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.310142][ T3302] team0: Port device team_slave_1 added
[   29.316851][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.331441][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.338595][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.345693][ T3306] bridge_slave_0: entered allmulticast mode
[   29.352076][ T3306] bridge_slave_0: entered promiscuous mode
[   29.359341][ T3301] team0: Port device team_slave_0 added
[   29.365086][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.372214][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.379453][ T3306] bridge_slave_1: entered allmulticast mode
[   29.385826][ T3306] bridge_slave_1: entered promiscuous mode
[   29.405968][ T3301] team0: Port device team_slave_1 added
[   29.422130][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.440863][ T3298] team0: Port device team_slave_0 added
[   29.457027][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.467220][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.476583][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.483551][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.509611][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.520912][ T3298] team0: Port device team_slave_1 added
[   29.526798][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.533753][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.559705][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.576124][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.606227][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.613210][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.639317][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.655957][ T3299] team0: Port device team_slave_0 added
[   29.662945][ T3299] team0: Port device team_slave_1 added
[   29.673487][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.680500][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.706542][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.720007][ T3306] team0: Port device team_slave_0 added
[   29.733161][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.740122][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.766153][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.788591][ T3306] team0: Port device team_slave_1 added
[   29.807830][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.814874][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.840827][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.858281][ T3301] hsr_slave_0: entered promiscuous mode
[   29.864379][ T3301] hsr_slave_1: entered promiscuous mode
[   29.876025][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.883051][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.909042][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.936075][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.943067][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.968996][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.991020][ T3302] hsr_slave_0: entered promiscuous mode
[   29.997025][ T3302] hsr_slave_1: entered promiscuous mode
[   30.002761][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.010402][ T3302] Cannot create hsr debugfs directory
[   30.016307][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.023297][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.049314][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.063292][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.070274][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.096260][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.119660][ T3298] hsr_slave_0: entered promiscuous mode
[   30.125678][ T3298] hsr_slave_1: entered promiscuous mode
[   30.131578][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.139304][ T3298] Cannot create hsr debugfs directory
[   30.156402][ T3299] hsr_slave_0: entered promiscuous mode
[   30.162435][ T3299] hsr_slave_1: entered promiscuous mode
[   30.168320][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.176027][ T3299] Cannot create hsr debugfs directory
[   30.234507][ T3306] hsr_slave_0: entered promiscuous mode
[   30.240861][ T3306] hsr_slave_1: entered promiscuous mode
[   30.246724][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.254379][ T3306] Cannot create hsr debugfs directory
[   30.399938][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.417723][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.428275][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.439021][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.449878][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.458781][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.467934][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.476974][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.517622][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.528737][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.538021][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.551702][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.573106][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.584053][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.595728][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.604667][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.644727][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.655280][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.668403][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.676734][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.690633][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.710423][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.726152][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   30.751246][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.758348][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.771155][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.778250][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.789428][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   30.804219][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.824076][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.831241][ T1699] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.839986][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.847056][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.863062][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.887353][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   30.905522][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.912699][ T1699] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.926392][  T412] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.933553][  T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.960555][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.971055][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.990664][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   31.014350][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.030608][  T412] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.037702][  T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.048041][  T412] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.055105][  T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.071421][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.101324][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   31.113779][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.135237][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.142429][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.160486][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.167711][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.229422][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.244193][ T3302] veth0_vlan: entered promiscuous mode
[   31.265263][ T3301] veth0_vlan: entered promiscuous mode
[   31.279279][ T3302] veth1_vlan: entered promiscuous mode
[   31.294124][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.302638][ T3301] veth1_vlan: entered promiscuous mode
[   31.322397][ T3302] veth0_macvtap: entered promiscuous mode
[   31.335273][ T3301] veth0_macvtap: entered promiscuous mode
[   31.346618][ T3302] veth1_macvtap: entered promiscuous mode
[   31.368962][ T3301] veth1_macvtap: entered promiscuous mode
[   31.379134][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.393586][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.407711][ T3298] veth0_vlan: entered promiscuous mode
[   31.415494][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.424265][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.433055][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.441842][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.453404][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.461921][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.472426][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.490027][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.511665][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.522191][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.532692][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.542636][ T3298] veth1_vlan: entered promiscuous mode
[   31.553957][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.562864][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.571658][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.580469][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.611256][ T3299] veth0_vlan: entered promiscuous mode
[   31.623252][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.653461][ T3299] veth1_vlan: entered promiscuous mode
[   31.670990][ T3298] veth0_macvtap: entered promiscuous mode
[   31.684491][ T3299] veth0_macvtap: entered promiscuous mode
[   31.702415][ T3298] veth1_macvtap: entered promiscuous mode
[   31.717160][ T3299] veth1_macvtap: entered promiscuous mode
[   31.739376][ T3438] loop0: detected capacity change from 0 to 512
[   31.744441][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.756124][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.765980][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.770227][ T3438] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   31.776438][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.788673][ T3442] loop2: detected capacity change from 0 to 512
[   31.797609][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.818093][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.828673][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.838566][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.849166][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.850223][ T3438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   31.859111][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.871611][ T3438] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1: corrupted in-inode xattr: e_value size too large
[   31.877848][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.893085][ T3438] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1: couldn't read orphan inode 15 (err -117)
[   31.903705][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.918825][ T3438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.921501][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.942905][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.952807][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.958741][ T3442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.963249][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.987043][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.994473][ T3442] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.005864][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.016383][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.026225][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.036699][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.046530][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.056991][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.067749][ T3438] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   32.067959][   T29] kauditd_printk_skb: 52 callbacks suppressed
[   32.067975][   T29] audit: type=1400 audit(1740795140.059:144): avc:  denied  { remount } for  pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.087018][ T3442] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   32.106609][   T29] audit: type=1400 audit(1740795140.069:145): avc:  denied  { write } for  pid=3437 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   32.137222][   T29] audit: type=1400 audit(1740795140.069:146): avc:  denied  { write } for  pid=3436 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.158637][   T29] audit: type=1400 audit(1740795140.069:147): avc:  denied  { remove_name } for  pid=3436 comm="syz.2.3" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.180956][   T29] audit: type=1400 audit(1740795140.069:148): avc:  denied  { rename } for  pid=3436 comm="syz.2.3" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   32.203002][   T29] audit: type=1400 audit(1740795140.069:149): avc:  denied  { add_name } for  pid=3436 comm="syz.2.3" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.225130][   T29] audit: type=1400 audit(1740795140.069:150): avc:  denied  { unlink } for  pid=3436 comm="syz.2.3" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   32.248647][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.249525][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.265197][   T29] audit: type=1400 audit(1740795140.119:151): avc:  denied  { write } for  pid=3436 comm="syz.2.3" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=39626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   32.273867][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.299128][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.307947][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.316648][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.337131][ T3438] lo speed is unknown, defaulting to 1000
[   32.343097][ T3447] dummy0 speed is unknown, defaulting to 1000
[   32.344229][ T3298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.358003][ T3298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.366836][ T3298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.375656][ T3298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.393340][   T29] audit: type=1400 audit(1740795140.379:152): avc:  denied  { prog_run } for  pid=3449 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.414626][ T3306] veth0_vlan: entered promiscuous mode
[   32.431241][   T29] audit: type=1400 audit(1740795140.419:153): avc:  denied  { read write } for  pid=3437 comm="syz.0.1" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.432096][ T3438] lo speed is unknown, defaulting to 1000
[   32.461037][ T3450] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6'.
[   32.476621][ T3306] veth1_vlan: entered promiscuous mode
[   32.488720][ T3438] lo speed is unknown, defaulting to 1000
[   32.494688][ T3447] dummy0 speed is unknown, defaulting to 1000
[   32.532313][ T3306] veth0_macvtap: entered promiscuous mode
[   32.541701][ T3306] veth1_macvtap: entered promiscuous mode
[   32.574569][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.585277][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.595154][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.605667][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.612269][ T3438] infiniband s
z1: set active
[   32.615565][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.620272][ T3438] infiniband s
z1: added lo
[   32.630677][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.630691][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.630708][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.667533][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.677238][ T3447] dummy0 speed is unknown, defaulting to 1000
[   32.686914][ T3376] lo speed is unknown, defaulting to 1000
[   32.708563][ T3460] loop1: detected capacity change from 0 to 512
[   32.753076][ T3438] RDS/IB: s
z1: added
[   32.757737][ T3438] smc: adding ib device s
z1 with port count 1
[   32.759906][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.763948][ T3438] smc:    ib device s
z1 port 1 has pnetid 
[   32.780384][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.790277][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.800145][ T3460] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   32.800829][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.809584][ T3460] EXT4-fs (loop1): invalid journal inode
[   32.818860][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.824629][ T3460] EXT4-fs (loop1): can't get journal size
[   32.834977][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.850608][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.854281][ T3465] xt_TCPMSS: Only works on TCP SYN packets
[   32.861152][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.864022][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.884204][ T3429] lo speed is unknown, defaulting to 1000
[   32.890193][ T3438] lo speed is unknown, defaulting to 1000
[   32.897060][ T3462] batman_adv: batadv0: Adding interface: dummy0
[   32.903332][ T3462] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.929790][ T3460] EXT4-fs (loop1): 1 truncate cleaned up
[   32.931641][ T3462] batman_adv: batadv0: Interface activated: dummy0
[   32.935797][ T3460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.954446][ T3438] lo speed is unknown, defaulting to 1000
[   32.961867][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.970726][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.979612][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.982136][ T3465] SELinux: syz.2.8 (3465) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   32.988327][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.038352][ T3462] batadv0: mtu less than device minimum
[   33.044261][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.054900][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.065693][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.076451][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.087287][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.098071][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.108763][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.119537][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.130332][ T3462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   33.151180][ T3438] lo speed is unknown, defaulting to 1000
[   33.240821][ T3470] loop2: detected capacity change from 0 to 512
[   33.241960][ T3474] loop3: detected capacity change from 0 to 1024
[   33.288663][ T3438] lo speed is unknown, defaulting to 1000
[   33.290743][ T3470] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   33.304050][ T3474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.318240][ T3470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   33.323681][ T3474] netlink: 'syz.3.10': attribute type 3 has an invalid length.
[   33.345423][ T3470] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.9: corrupted in-inode xattr: e_value size too large
[   33.387366][ T3470] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.9: couldn't read orphan inode 15 (err -117)
[   33.404169][ T3470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.415393][ T3474] xt_CT: No such helper "netbios-ns"
[   33.444761][ T3438] lo speed is unknown, defaulting to 1000
[   33.478403][ T3470] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   33.494753][ T3500] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   33.570229][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.580937][ T3447] infiniband syz2: set active
[   33.585662][ T3447] infiniband syz2: added dummy0
[   33.585965][ T3438] syz.0.1 (3438) used greatest stack depth: 10776 bytes left
[   33.590941][ T3429] dummy0 speed is unknown, defaulting to 1000
[   33.630743][ T3447] RDS/IB: syz2: added
[   33.647175][ T3447] smc: adding ib device syz2 with port count 1
[   33.653464][ T3447] smc:    ib device syz2 port 1 has pnetid 
[   33.659552][ T3429] dummy0 speed is unknown, defaulting to 1000
[   33.666167][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.676437][ T3447] dummy0 speed is unknown, defaulting to 1000
[   33.696438][ T3519] program syz.3.14 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   33.706295][ T3519] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   33.715183][ T3520] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   33.799011][ T3447] dummy0 speed is unknown, defaulting to 1000
[   33.804865][ T3531] loop1: detected capacity change from 0 to 512
[   33.829920][ T3531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.863361][ T3531] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.876614][ T3447] dummy0 speed is unknown, defaulting to 1000
[   33.918002][ T3531] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   33.972997][ T3447] dummy0 speed is unknown, defaulting to 1000
[   34.004897][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.048900][ T3447] dummy0 speed is unknown, defaulting to 1000
[   34.061153][ T3552] loop1: detected capacity change from 0 to 512
[   34.081391][ T3552] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   34.092261][ T3552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   34.105573][ T3470] rdma_rxe: rxe_newlink: failed to add lo
[   34.113279][ T3510] rdma_rxe: rxe_newlink: failed to add dummy0
[   34.121684][ T3552] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.17: corrupted in-inode xattr: e_value size too large
[   34.162748][ T3552] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.17: couldn't read orphan inode 15 (err -117)
[   34.181043][ T3552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.214287][ T3552] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   34.225828][ T3447] syz.0.1 (3447) used greatest stack depth: 10760 bytes left
[   34.235051][ T3552] rdma_rxe: rxe_newlink: failed to add lo
[   34.246717][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.257718][ T3520] syz.4.13 (3520) used greatest stack depth: 10296 bytes left
[   34.285583][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.316490][ T3552] rdma_rxe: rxe_newlink: failed to add dummy0
[   34.351261][ T3579] loop0: detected capacity change from 0 to 2048
[   34.370479][ T3579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.386144][ T3583] loop2: detected capacity change from 0 to 512
[   34.406550][ T3582] loop4: detected capacity change from 0 to 512
[   34.419321][ T3579] syz.0.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   34.437505][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.450459][ T3583] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.462811][ T3582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.477828][ T3583] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   34.496943][ T3582] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.531498][ T3582] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   34.564840][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.615459][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.634046][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.665038][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.696593][ T3595] loop1: detected capacity change from 0 to 2048
[   34.714687][ T3593] netfs: Couldn't get user pages (rc=-14)
[   34.724103][ T3595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.748240][ T3599] batman_adv: batadv0: Adding interface: dummy0
[   34.754528][ T3599] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.780321][ T3599] batman_adv: batadv0: Interface activated: dummy0
[   34.814362][ T3602] loop4: detected capacity change from 0 to 512
[   34.834205][ T3602] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   34.856684][ T3606] loop3: detected capacity change from 0 to 512
[   34.864367][ T3602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   34.873109][ T3606] =======================================================
[   34.873109][ T3606] WARNING: The mand mount option has been deprecated and
[   34.873109][ T3606]          and is ignored by this kernel. Remove the mand
[   34.873109][ T3606]          option from the mount to silence this warning.
[   34.873109][ T3606] =======================================================
[   34.909470][ T3606] EXT4-fs: Ignoring removed nobh option
[   34.915315][ T3602] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.25: corrupted in-inode xattr: e_value size too large
[   34.917834][ T3608] loop2: detected capacity change from 0 to 1024
[   34.943065][ T3602] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.25: couldn't read orphan inode 15 (err -117)
[   34.955791][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.970222][ T3608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.970352][ T3606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.998851][ T3606] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.019637][ T3595] syz.1.23 (3595) used greatest stack depth: 10224 bytes left
[   35.036066][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.045206][ T3602] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   35.076053][ T3602] rdma_rxe: rxe_newlink: failed to add lo
[   35.079343][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.082623][ T3602] rdma_rxe: rxe_newlink: failed to add dummy0
[   35.154471][ T3618] loop0: detected capacity change from 0 to 512
[   35.172852][ T3619] loop2: detected capacity change from 0 to 512
[   35.190513][ T3618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.224375][ T3619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.29: bg 0: block 5: invalid block bitmap
[   35.238179][ T3618] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.253856][ T3618] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   35.259431][ T3619] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   35.278009][ T3619] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.29: invalid indirect mapped block 3 (level 2)
[   35.295643][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.317057][ T3619] EXT4-fs (loop2): 1 orphan inode deleted
[   35.322909][ T3619] EXT4-fs (loop2): 1 truncate cleaned up
[   35.337901][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.367443][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.392127][ T3633] loop1: detected capacity change from 0 to 512
[   35.430218][ T3633] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   35.440936][ T3636] loop0: detected capacity change from 0 to 1024
[   35.447902][ T3633] EXT4-fs (loop1): orphan cleanup on readonly fs
[   35.455244][ T3633] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   35.455252][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.470482][ T3636] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   35.489771][ T3636] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   35.500015][ T3636] JBD2: no valid journal superblock found
[   35.505780][ T3636] EXT4-fs (loop0): Could not load journal inode
[   35.513691][ T3633] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   35.525571][ T3633] ------------[ cut here ]------------
[   35.531197][ T3633] bad length passed for symlink [
[   35.531197][ T3633] ó
] (got 9000, expected 3)
[   35.531452][ T3633] WARNING: CPU: 0 PID: 3633 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0
[   35.550880][ T3633] Modules linked in:
[   35.554823][ T3633] CPU: 0 UID: 0 PID: 3633 Comm: syz.1.35 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   35.558360][ T3619] SELinux:  policydb version 0 does not match my version range 15-34
[   35.565386][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   35.583595][ T3633] RIP: 0010:inode_set_cached_link+0xc4/0xd0
[   35.589610][ T3633] Code: ff 48 c7 c7 1e f5 b2 86 e8 99 61 c4 ff c6 05 90 71 0b 05 01 90 48 c7 c7 23 33 1b 86 4c 89 f6 89 ea 44 89 f9 e8 ed b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90
[   35.609350][ T3633] RSP: 0018:ffffc90003257a00 EFLAGS: 00010246
[   35.615454][ T3633] RAX: 25b4dee6eef79200 RBX: ffff888116a1ae28 RCX: 0000000000080000
[   35.623625][ T3633] RDX: ffffc900025b7000 RSI: 0000000000006890 RDI: 0000000000006891
[   35.631766][ T3633] RBP: 0000000000002328 R08: ffffffff81343af7 R09: 0000000000000000
[   35.634301][ T3644] batman_adv: batadv0: Adding interface: dummy0
[   35.639829][ T3633] R10: 0001ffffffffffff R11: ffff888119365280 R12: ffff888116a1ae28
[   35.646267][ T3644] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.654055][ T3633] R13: ffff888116a1ae50 R14: ffff888116a1ad00 R15: 0000000000000003
[   35.687457][ T3633] FS:  00007fbc72ad76c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[   35.691478][ T3644] batman_adv: batadv0: Interface activated: dummy0
[   35.696400][ T3633] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.709563][ T3633] CR2: 0000001b32112ff8 CR3: 0000000118aee000 CR4: 00000000003506f0
[   35.717742][ T3633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   35.725800][ T3633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   35.733833][ T3633] Call Trace:
[   35.737216][ T3633]  <TASK>
[   35.738435][ T3375] dummy0 speed is unknown, defaulting to 1000
[   35.740157][ T3633]  ? __warn+0x141/0x350
[   35.740214][ T3633]  ? report_bug+0x315/0x420
[   35.740266][ T3633]  ? inode_set_cached_link+0xc4/0xd0
[   35.747296][ T3375] dummy0 speed is unknown, defaulting to 1000
[   35.750526][ T3633]  ? handle_bug+0x60/0x90
[   35.758497][ T3375] dummy0 speed is unknown, defaulting to 1000
[   35.760274][ T3633]  ? exc_invalid_op+0x1a/0x50
[   35.781602][ T3633]  ? asm_exc_invalid_op+0x1a/0x20
[   35.786706][ T3633]  ? __warn_printk+0x167/0x1b0
[   35.788066][ T3619] SELinux: failed to load policy
[   35.791619][ T3633]  ? inode_set_cached_link+0xc4/0xd0
[   35.801963][ T3633]  __ext4_iget+0x1bb5/0x1e20
[   35.806696][ T3633]  ext4_orphan_get+0x140/0x3e0
[   35.811542][ T3633]  ext4_orphan_cleanup+0x5df/0x9e0
[   35.816783][ T3633]  ? ext4_register_li_request+0xf2/0x660
[   35.822463][ T3633]  ext4_fill_super+0x32ec/0x3630
[   35.827513][ T3633]  ? set_blocksize+0x196/0x270
[   35.832318][ T3633]  ? sb_set_blocksize+0x95/0xb0
[   35.837228][ T3633]  ? setup_bdev_super+0x318/0x370
[   35.842287][ T3633]  ? __pfx_ext4_fill_super+0x10/0x10
[   35.847774][ T3633]  get_tree_bdev_flags+0x29f/0x310
[   35.852934][ T3633]  ? __pfx_ext4_fill_super+0x10/0x10
[   35.853160][ T3643] atomic_op ffff88811810f528 conn xmit_atomic 0000000000000000
[   35.858384][ T3633]  get_tree_bdev+0x1f/0x30
[   35.870390][ T3633]  ext4_get_tree+0x1c/0x30
[   35.874836][ T3633]  vfs_get_tree+0x56/0x1e0
[   35.879384][ T3633]  do_new_mount+0x227/0x690
[   35.883926][ T3633]  path_mount+0x49b/0xb30
[   35.888309][ T3633]  __se_sys_mount+0x27f/0x2d0
[   35.893024][ T3633]  __x64_sys_mount+0x67/0x80
[   35.897675][ T3633]  x64_sys_call+0x2c84/0x2dc0
[   35.902392][ T3633]  do_syscall_64+0xc9/0x1c0
[   35.907032][ T3633]  ? clear_bhb_loop+0x55/0xb0
[   35.911786][ T3633]  ? clear_bhb_loop+0x55/0xb0
[   35.916479][ T3633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.922614][ T3633] RIP: 0033:0x7fbc7446e90a
[   35.927079][ T3633] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.946760][ T3633] RSP: 002b:00007fbc72ad6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   35.955279][ T3633] RAX: ffffffffffffffda RBX: 00007fbc72ad6ef0 RCX: 00007fbc7446e90a
[   35.963288][ T3633] RDX: 0000400000000080 RSI: 0000400000000000 RDI: 00007fbc72ad6eb0
[   35.971339][ T3633] RBP: 0000400000000080 R08: 00007fbc72ad6ef0 R09: 000000000200801f
[   35.979354][ T3633] R10: 000000000200801f R11: 0000000000000246 R12: 0000400000000000
[   35.987427][ T3633] R13: 00007fbc72ad6eb0 R14: 000000000000050e R15: 00004000000002c0
[   35.995431][ T3633]  </TASK>
[   35.998561][ T3633] ---[ end trace 0000000000000000 ]---
[   36.004071][ T3633] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.35: bad orphan inode 16
[   36.014740][ T3633] ext4_test_bit(bit=15, block=18) = 1
[   36.016030][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.020180][ T3633] is_bad_inode(inode)=0
[   36.020191][ T3633] NEXT_ORPHAN(inode)=16711680
[   36.020200][ T3633] max_ino=32
[   36.020207][ T3633] i_nlink=0
[   36.027879][ T3633] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #16: comm syz.1.35: corrupted xattr block 31: invalid header
[   36.059135][ T3633] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[   36.069194][ T3633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.130151][ T3653] loop2: detected capacity change from 0 to 512
[   36.157467][ T3653] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   36.175500][ T3653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   36.196130][ T3653] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.39: corrupted in-inode xattr: e_value size too large
[   36.223034][ T3653] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.39: couldn't read orphan inode 15 (err -117)
[   36.235916][ T3653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.253779][ T3653] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   36.271691][ T3653] rdma_rxe: rxe_newlink: failed to add lo
[   36.280343][ T3669] loop3: detected capacity change from 0 to 512
[   36.285631][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   36.287495][ T3653] rdma_rxe: rxe_newlink: failed to add dummy0
[   36.347020][ T3669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.371270][ T3669] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.390655][ T3675] loop0: detected capacity change from 0 to 512
[   36.420615][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.440226][ T3669] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   36.460752][ T3675] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   36.493621][ T3675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   36.515765][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.526453][ T3675] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.47: corrupted in-inode xattr: e_value size too large
[   36.543293][ T3675] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.47: couldn't read orphan inode 15 (err -117)
[   36.565754][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.569636][ T3675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.587835][ T3679] syz.4.48 (3679) used greatest stack depth: 9456 bytes left
[   36.643226][ T3675] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   36.651032][ T3691] loop4: detected capacity change from 0 to 512
[   36.661790][ T3690] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   36.677202][ T3691] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   36.691916][ T3688] loop3: detected capacity change from 0 to 164
[   36.703115][ T3675] s
z1: rxe_newlink: already configured on lo
[   36.710035][ T3691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   36.723146][ T3675] syz2: rxe_newlink: already configured on dummy0
[   36.731070][ T3691] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.52: corrupted in-inode xattr: e_value size too large
[   36.745458][ T3688] Unable to read rock-ridge attributes
[   36.790444][ T3691] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.52: couldn't read orphan inode 15 (err -117)
[   36.821453][ T3691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.890913][ T3691] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   36.916362][ T3698] rdma_rxe: rxe_newlink: failed to add lo
[   36.927115][ T3697] loop3: detected capacity change from 0 to 512
[   36.937107][ T3697] EXT4-fs: Ignoring removed bh option
[   36.943189][ T3691] rdma_rxe: rxe_newlink: failed to add dummy0
[   36.949721][ T3697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.962850][ T3697] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.988813][ T3697] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.53: corrupted in-inode xattr: bad e_name length
[   37.012718][ T3697] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.53: couldn't read orphan inode 15 (err -117)
[   37.030654][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.060006][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.117587][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.147279][ T3706] loop0: detected capacity change from 0 to 512
[   37.180649][   T29] kauditd_printk_skb: 621 callbacks suppressed
[   37.180666][   T29] audit: type=1326 audit(1740795145.169:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.191253][ T3709] netlink: 92 bytes leftover after parsing attributes in process `syz.3.57'.
[   37.212473][   T29] audit: type=1326 audit(1740795145.169:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.220524][ T3706] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   37.242151][   T29] audit: type=1326 audit(1740795145.179:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.242187][   T29] audit: type=1326 audit(1740795145.179:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.303366][   T29] audit: type=1326 audit(1740795145.179:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.326819][   T29] audit: type=1326 audit(1740795145.179:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.337354][ T3706] EXT4-fs (loop0): mount failed
[   37.349998][   T29] audit: type=1326 audit(1740795145.179:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.378160][   T29] audit: type=1326 audit(1740795145.179:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.401659][   T29] audit: type=1326 audit(1740795145.179:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.424989][   T29] audit: type=1326 audit(1740795145.179:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3708 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6f7f57d169 code=0x7ffc0000
[   37.467023][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.500884][ T3713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'.
[   37.526535][ T3716] loop2: detected capacity change from 0 to 512
[   37.536588][ T3716] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   37.557514][ T3716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   37.566520][ T3716] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.60: corrupted in-inode xattr: e_value size too large
[   37.582133][ T3716] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.60: couldn't read orphan inode 15 (err -117)
[   37.584138][ T3721] program syz.0.62 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   37.594419][ T3716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.603861][ T3721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   37.621005][ T3723] FAULT_INJECTION: forcing a failure.
[   37.621005][ T3723] name failslab, interval 1, probability 0, space 0, times 1
[   37.636108][ T3723] CPU: 0 UID: 0 PID: 3723 Comm: syz.3.61 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   37.636142][ T3723] Tainted: [W]=WARN
[   37.636149][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   37.636161][ T3723] Call Trace:
[   37.636167][ T3723]  <TASK>
[   37.636223][ T3723]  dump_stack_lvl+0xf2/0x150
[   37.636251][ T3723]  dump_stack+0x15/0x1a
[   37.636272][ T3723]  should_fail_ex+0x24a/0x260
[   37.636301][ T3723]  should_failslab+0x8f/0xb0
[   37.636331][ T3723]  __kmalloc_noprof+0xab/0x3f0
[   37.636413][ T3723]  ? copy_splice_read+0xb5/0x5b0
[   37.636515][ T3723]  copy_splice_read+0xb5/0x5b0
[   37.636539][ T3723]  ? __kmalloc_noprof+0x284/0x3f0
[   37.636559][ T3723]  ? alloc_pipe_info+0x1cb/0x360
[   37.636607][ T3723]  ? __pfx_copy_splice_read+0x10/0x10
[   37.636639][ T3723]  splice_direct_to_actor+0x269/0x670
[   37.636687][ T3723]  ? __pfx_direct_splice_actor+0x10/0x10
[   37.636756][ T3723]  do_splice_direct+0xd7/0x150
[   37.636781][ T3723]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   37.636811][ T3723]  do_sendfile+0x398/0x660
[   37.636866][ T3723]  __x64_sys_sendfile64+0x110/0x150
[   37.636901][ T3723]  x64_sys_call+0xfbd/0x2dc0
[   37.636926][ T3723]  do_syscall_64+0xc9/0x1c0
[   37.637035][ T3723]  ? clear_bhb_loop+0x55/0xb0
[   37.637061][ T3723]  ? clear_bhb_loop+0x55/0xb0
[   37.637100][ T3723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.637126][ T3723] RIP: 0033:0x7f6f7f57d169
[   37.637141][ T3723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.637158][ T3723] RSP: 002b:00007f6f7dbc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   37.637176][ T3723] RAX: ffffffffffffffda RBX: 00007f6f7f796080 RCX: 00007f6f7f57d169
[   37.637188][ T3723] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[   37.637199][ T3723] RBP: 00007f6f7dbc6090 R08: 0000000000000000 R09: 0000000000000000
[   37.637253][ T3723] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001
[   37.637264][ T3723] R13: 0000000000000000 R14: 00007f6f7f796080 R15: 00007fffef8764f8
[   37.637282][ T3723]  </TASK>
[   37.853263][ T3716] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   38.015616][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.079724][ T3731] loop0: detected capacity change from 0 to 128
[   38.089414][ T3731] FAULT_INJECTION: forcing a failure.
[   38.089414][ T3731] name failslab, interval 1, probability 0, space 0, times 0
[   38.102121][ T3731] CPU: 0 UID: 0 PID: 3731 Comm: syz.0.63 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   38.102158][ T3731] Tainted: [W]=WARN
[   38.102166][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   38.102180][ T3731] Call Trace:
[   38.102187][ T3731]  <TASK>
[   38.102262][ T3731]  dump_stack_lvl+0xf2/0x150
[   38.102289][ T3731]  dump_stack+0x15/0x1a
[   38.102340][ T3731]  should_fail_ex+0x24a/0x260
[   38.102376][ T3731]  should_failslab+0x8f/0xb0
[   38.102453][ T3731]  kmem_cache_alloc_noprof+0x52/0x320
[   38.102474][ T3731]  ? alloc_empty_file+0xd0/0x200
[   38.102497][ T3731]  alloc_empty_file+0xd0/0x200
[   38.102521][ T3731]  path_openat+0x6a/0x1fc0
[   38.102544][ T3731]  ? _parse_integer_limit+0x167/0x180
[   38.102576][ T3731]  ? _parse_integer+0x27/0x30
[   38.102671][ T3731]  ? kstrtoull+0x110/0x140
[   38.102694][ T3731]  ? kstrtouint+0x77/0xc0
[   38.102717][ T3731]  ? kstrtouint_from_user+0xb0/0xe0
[   38.102757][ T3731]  do_filp_open+0x107/0x230
[   38.102824][ T3731]  do_sys_openat2+0xab/0x120
[   38.102846][ T3731]  __x64_sys_openat+0xf3/0x120
[   38.102925][ T3731]  x64_sys_call+0x2b30/0x2dc0
[   38.102958][ T3731]  do_syscall_64+0xc9/0x1c0
[   38.102996][ T3731]  ? clear_bhb_loop+0x55/0xb0
[   38.103069][ T3731]  ? clear_bhb_loop+0x55/0xb0
[   38.103095][ T3731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.103160][ T3731] RIP: 0033:0x7f01bb46d169
[   38.103174][ T3731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.103250][ T3731] RSP: 002b:00007f01b9a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   38.103349][ T3731] RAX: ffffffffffffffda RBX: 00007f01bb686160 RCX: 00007f01bb46d169
[   38.103361][ T3731] RDX: 0000000000107842 RSI: 0000400000000040 RDI: ffffffffffffff9c
[   38.103373][ T3731] RBP: 00007f01b9a8f090 R08: 0000000000000000 R09: 0000000000000000
[   38.103388][ T3731] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001
[   38.103401][ T3731] R13: 0000000000000000 R14: 00007f01bb686160 R15: 00007ffdd5259288
[   38.103515][ T3731]  </TASK>
[   38.521688][ T3746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'.
[   38.532549][ T3746] sctp: [Deprecated]: syz.2.69 (pid 3746) Use of int in max_burst socket option deprecated.
[   38.532549][ T3746] Use struct sctp_assoc_value instead
[   38.626589][ T3760] loop2: detected capacity change from 0 to 512
[   38.649165][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.662259][ T3760] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.680208][ T3760] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   38.702870][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   38.757731][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.809986][ T3769] Zero length message leads to an empty skb
[   38.860380][ T3773] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET)
[   38.941874][ T3782] ref_ctr increment failed for inode: 0x62 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119374780
[   38.955125][ T3781] uprobe: syz.0.82:3781 failed to unregister, leaking uprobe
[   39.057908][ T3800] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[   39.067720][ T3799] IPVS: stopping master sync thread 3800 ...
[   39.138530][ T3807] loop0: detected capacity change from 0 to 512
[   39.158431][ T3807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.171059][ T3807] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.182717][ T3807] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   39.220023][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.234126][ T3806] loop2: detected capacity change from 0 to 128
[   39.246552][ T3806] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.260663][ T3806] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   39.310906][ T3816] loop0: detected capacity change from 0 to 512
[   39.328253][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.340978][ T3816] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.361363][ T3816] can: request_module (can-proto-0) failed.
[   39.383620][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.407868][ T3821] nfs: Unknown parameter '
[   39.407868][ T3821] '
[   39.616028][ T3830] loop0: detected capacity change from 0 to 128
[   39.865462][ T3839] process 'syz.1.98' launched './file0' with NULL argv: empty string added
[   39.902623][ T3844] program syz.0.99 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   39.915070][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.930178][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.002027][ T3847] loop1: detected capacity change from 0 to 512
[   40.018559][ T3847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.031473][ T3847] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.043808][ T3847] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   40.065575][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.089732][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.099488][ T3851] loop3: detected capacity change from 0 to 512
[   40.106590][ T3851] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   40.126522][ T3851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   40.134981][ T3851] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.103: corrupted in-inode xattr: e_value size too large
[   40.149603][ T3851] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.103: couldn't read orphan inode 15 (err -117)
[   40.181324][ T3851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.198596][ T3851] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   40.209699][ T3851] rxe_newlink: 2 callbacks suppressed
[   40.209716][ T3851] rdma_rxe: rxe_newlink: failed to add lo
[   40.222102][ T3851] rdma_rxe: rxe_newlink: failed to add dummy0
[   40.232701][ T3862] Process accounting resumed
[   40.265946][ T3866] netlink: 'syz.1.106': attribute type 13 has an invalid length.
[   40.281716][ T3866] gretap0: refused to change device tx_queue_len
[   40.289738][ T3866] net_ratelimit: 31 callbacks suppressed
[   40.289753][ T3866] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   40.415394][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.522809][ T3880] loop3: detected capacity change from 0 to 256
[   40.530719][ T3879] loop4: detected capacity change from 0 to 128
[   40.555089][ T3880] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ'
[   40.651174][ T3893] FAULT_INJECTION: forcing a failure.
[   40.651174][ T3893] name failslab, interval 1, probability 0, space 0, times 0
[   40.663918][ T3893] CPU: 1 UID: 0 PID: 3893 Comm: syz.1.116 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   40.663946][ T3893] Tainted: [W]=WARN
[   40.663953][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   40.664082][ T3893] Call Trace:
[   40.664088][ T3893]  <TASK>
[   40.664095][ T3893]  dump_stack_lvl+0xf2/0x150
[   40.664130][ T3893]  dump_stack+0x15/0x1a
[   40.664155][ T3893]  should_fail_ex+0x24a/0x260
[   40.664189][ T3893]  ? nf_tables_newchain+0xafe/0x1870
[   40.664303][ T3893]  should_failslab+0x8f/0xb0
[   40.664340][ T3893]  __kmalloc_cache_noprof+0x4e/0x320
[   40.664371][ T3893]  nf_tables_newchain+0xafe/0x1870
[   40.664477][ T3893]  ? get_random_u32+0x1a4/0x240
[   40.664536][ T3893]  ? should_failslab+0x8f/0xb0
[   40.664601][ T3893]  ? nft_trans_table_add+0x38/0x1a0
[   40.664648][ T3893]  ? __nla_parse+0x40/0x60
[   40.664680][ T3893]  nfnetlink_rcv+0xb3e/0x15d0
[   40.664765][ T3893]  netlink_unicast+0x599/0x670
[   40.664804][ T3893]  netlink_sendmsg+0x5cc/0x6e0
[   40.664922][ T3893]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.664956][ T3893]  __sock_sendmsg+0x140/0x180
[   40.664986][ T3893]  ____sys_sendmsg+0x326/0x4b0
[   40.665093][ T3893]  __sys_sendmsg+0x19d/0x230
[   40.665139][ T3893]  __x64_sys_sendmsg+0x46/0x50
[   40.665170][ T3893]  x64_sys_call+0x2734/0x2dc0
[   40.665239][ T3893]  do_syscall_64+0xc9/0x1c0
[   40.665278][ T3893]  ? clear_bhb_loop+0x55/0xb0
[   40.665306][ T3893]  ? clear_bhb_loop+0x55/0xb0
[   40.665335][ T3893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.665428][ T3893] RIP: 0033:0x7fbc7446d169
[   40.665446][ T3893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.665468][ T3893] RSP: 002b:00007fbc72ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.665490][ T3893] RAX: ffffffffffffffda RBX: 00007fbc74685fa0 RCX: 00007fbc7446d169
[   40.665556][ T3893] RDX: 0000000000008040 RSI: 000040000000c2c0 RDI: 0000000000000003
[   40.665642][ T3893] RBP: 00007fbc72ad7090 R08: 0000000000000000 R09: 0000000000000000
[   40.665656][ T3893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   40.665671][ T3893] R13: 0000000000000000 R14: 00007fbc74685fa0 R15: 00007ffda1a45b38
[   40.665692][ T3893]  </TASK>
[   40.666110][ T3895] netlink: 292 bytes leftover after parsing attributes in process `syz.4.117'.
[   40.913995][ T3897] lo speed is unknown, defaulting to 1000
[   40.924834][ T3903] program syz.1.119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   40.934571][ T3903] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   40.957412][ T3904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   40.964717][ T3904] IPv6: NLM_F_CREATE should be set when creating new route
[   40.972021][ T3904] IPv6: NLM_F_CREATE should be set when creating new route
[   40.990832][ T3897] dummy0 speed is unknown, defaulting to 1000
[   41.005362][ T3908] bond_slave_1: mtu less than device minimum
[   41.125003][ T3916] xt_CT: No such helper "netbios-ns"
[   41.133739][ T3921] FAULT_INJECTION: forcing a failure.
[   41.133739][ T3921] name failslab, interval 1, probability 0, space 0, times 0
[   41.146455][ T3921] CPU: 0 UID: 0 PID: 3921 Comm: syz.3.125 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   41.146491][ T3921] Tainted: [W]=WARN
[   41.146499][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   41.146585][ T3921] Call Trace:
[   41.146592][ T3921]  <TASK>
[   41.146601][ T3921]  dump_stack_lvl+0xf2/0x150
[   41.146637][ T3921]  dump_stack+0x15/0x1a
[   41.146663][ T3921]  should_fail_ex+0x24a/0x260
[   41.146695][ T3921]  ? rtnl_newlink+0x5d/0x1250
[   41.146724][ T3921]  should_failslab+0x8f/0xb0
[   41.146825][ T3921]  __kmalloc_cache_noprof+0x4e/0x320
[   41.146852][ T3921]  ? __pfx_rtnl_newlink+0x10/0x10
[   41.146882][ T3921]  rtnl_newlink+0x5d/0x1250
[   41.146909][ T3921]  ? bpf_ringbuf_discard+0xd4/0xf0
[   41.146946][ T3921]  ? _raw_spin_lock_irqsave+0x3c/0xb0
[   41.146972][ T3921]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   41.147025][ T3921]  ? __bpf_ringbuf_reserve+0x2c0/0x320
[   41.147059][ T3921]  ? bpf_ringbuf_discard+0xd4/0xf0
[   41.147087][ T3921]  ? __rcu_read_unlock+0x34/0x70
[   41.147110][ T3921]  ? bpf_trace_run3+0x12b/0x1d0
[   41.147184][ T3921]  ? packet_rcv_spkt+0x31a/0x3b0
[   41.147219][ T3921]  ? __kfree_skb+0x102/0x150
[   41.147315][ T3921]  ? __rcu_read_unlock+0x4e/0x70
[   41.147341][ T3921]  ? avc_has_perm_noaudit+0x1cc/0x210
[   41.147388][ T3921]  ? selinux_capable+0x1f2/0x260
[   41.147503][ T3921]  ? security_capable+0x81/0x90
[   41.147552][ T3921]  ? ns_capable+0x7d/0xb0
[   41.147627][ T3921]  ? __pfx_rtnl_newlink+0x10/0x10
[   41.147660][ T3921]  rtnetlink_rcv_msg+0x651/0x710
[   41.147692][ T3921]  ? ref_tracker_free+0x3a5/0x410
[   41.147730][ T3921]  netlink_rcv_skb+0x12c/0x230
[   41.147776][ T3921]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   41.147816][ T3921]  rtnetlink_rcv+0x1c/0x30
[   41.147907][ T3921]  netlink_unicast+0x599/0x670
[   41.147991][ T3921]  netlink_sendmsg+0x5cc/0x6e0
[   41.148037][ T3921]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.148076][ T3921]  __sock_sendmsg+0x140/0x180
[   41.148113][ T3921]  ____sys_sendmsg+0x326/0x4b0
[   41.148218][ T3921]  __sys_sendmsg+0x19d/0x230
[   41.148300][ T3921]  __x64_sys_sendmsg+0x46/0x50
[   41.148331][ T3921]  x64_sys_call+0x2734/0x2dc0
[   41.148361][ T3921]  do_syscall_64+0xc9/0x1c0
[   41.148398][ T3921]  ? clear_bhb_loop+0x55/0xb0
[   41.148443][ T3921]  ? clear_bhb_loop+0x55/0xb0
[   41.148510][ T3921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.148551][ T3921] RIP: 0033:0x7f6f7f57d169
[   41.148569][ T3921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.148593][ T3921] RSP: 002b:00007f6f7dbe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.148610][ T3921] RAX: ffffffffffffffda RBX: 00007f6f7f795fa0 RCX: 00007f6f7f57d169
[   41.148622][ T3921] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003
[   41.148664][ T3921] RBP: 00007f6f7dbe7090 R08: 0000000000000000 R09: 0000000000000000
[   41.148678][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.148691][ T3921] R13: 0000000000000000 R14: 00007f6f7f795fa0 R15: 00007fffef8764f8
[   41.148713][ T3921]  </TASK>
[   41.611977][ T3938] program syz.4.130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   41.621423][ T3938] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   41.639640][ T3939] loop2: detected capacity change from 0 to 512
[   41.661384][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.682394][ T3944] capability: warning: `syz.4.132' uses deprecated v2 capabilities in a way that may be insecure
[   41.693385][ T3939] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.735932][ T3944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.746925][ T3944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.747930][ T3939] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   41.829566][ T3946] loop1: detected capacity change from 0 to 512
[   41.857939][ T3946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   41.858018][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.885867][ T3946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.920243][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   41.930723][ T3946] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.025819][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.148450][ T3968] loop2: detected capacity change from 0 to 512
[   42.166974][ T3968] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   42.197710][ T3968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   42.209864][ T3971] program syz.0.142 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   42.213335][ T3968] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.141: corrupted in-inode xattr: e_value size too large
[   42.236368][ T3971] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   42.238225][ T3968] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.141: couldn't read orphan inode 15 (err -117)
[   42.283915][ T3968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.334568][   T29] kauditd_printk_skb: 214 callbacks suppressed
[   42.334604][   T29] audit: type=1326 audit(1740795150.319:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bb46d169 code=0x7ffc0000
[   42.335183][ T3978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'.
[   42.349737][   T29] audit: type=1326 audit(1740795150.339:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f01bb46d169 code=0x7ffc0000
[   42.364065][ T3978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'.
[   42.405358][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   42.424290][   T29] audit: type=1326 audit(1740795150.369:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bb46d169 code=0x7ffc0000
[   42.447817][   T29] audit: type=1326 audit(1740795150.369:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bb46d169 code=0x7ffc0000
[   42.471394][ T3968] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   42.483208][ T3981] rdma_rxe: rxe_newlink: failed to add lo
[   42.489728][ T3968] rdma_rxe: rxe_newlink: failed to add dummy0
[   42.538068][   T29] audit: type=1400 audit(1740795150.509:1003): avc:  denied  { setopt } for  pid=3979 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   42.582037][ T3984] FAULT_INJECTION: forcing a failure.
[   42.582037][ T3984] name failslab, interval 1, probability 0, space 0, times 0
[   42.594596][ T3989] loop0: detected capacity change from 0 to 764
[   42.594800][ T3984] CPU: 1 UID: 0 PID: 3984 Comm: syz.1.147 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   42.594839][ T3984] Tainted: [W]=WARN
[   42.594848][ T3984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   42.594863][ T3984] Call Trace:
[   42.594870][ T3984]  <TASK>
[   42.594879][ T3984]  dump_stack_lvl+0xf2/0x150
[   42.594914][ T3984]  dump_stack+0x15/0x1a
[   42.594985][ T3984]  should_fail_ex+0x24a/0x260
[   42.595021][ T3984]  ? call_usermodehelper_setup+0x72/0x190
[   42.595050][ T3984]  should_failslab+0x8f/0xb0
[   42.595086][ T3984]  __kmalloc_cache_noprof+0x4e/0x320
[   42.595174][ T3984]  call_usermodehelper_setup+0x72/0x190
[   42.595202][ T3984]  ? __pfx_free_modprobe_argv+0x10/0x10
[   42.595232][ T3984]  __request_module+0x25a/0x3e0
[   42.595278][ T3984]  ? strcmp+0x21/0x50
[   42.595317][ T3984]  ? crypto_alg_mod_lookup+0xb6/0x450
[   42.595389][ T3984]  crypto_alg_mod_lookup+0xe5/0x450
[   42.595434][ T3984]  crypto_alloc_tfm_node+0xaa/0x250
[   42.595527][ T3984]  crypto_alloc_aead+0x2f/0x40
[   42.595554][ T3984]  esp_init_state+0x3f1/0x9f0
[   42.595597][ T3984]  ? should_failslab+0x8f/0xb0
[   42.595635][ T3984]  __xfrm_init_state+0x78e/0xc30
[   42.595666][ T3984]  xfrm_add_sa+0x1fdb/0x25d0
[   42.595744][ T3984]  xfrm_user_rcv_msg+0x55a/0x650
[   42.595790][ T3984]  ? nlmon_xmit+0x51/0x60
[   42.595845][ T3984]  netlink_rcv_skb+0x12c/0x230
[   42.595948][ T3984]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   42.596076][ T3984]  xfrm_netlink_rcv+0x47/0x60
[   42.596119][ T3984]  netlink_unicast+0x599/0x670
[   42.596157][ T3984]  netlink_sendmsg+0x5cc/0x6e0
[   42.596203][ T3984]  ? __pfx_netlink_sendmsg+0x10/0x10
[   42.596304][ T3984]  __sock_sendmsg+0x140/0x180
[   42.596344][ T3984]  ____sys_sendmsg+0x326/0x4b0
[   42.596389][ T3984]  __sys_sendmsg+0x19d/0x230
[   42.596548][ T3984]  __x64_sys_sendmsg+0x46/0x50
[   42.596579][ T3984]  x64_sys_call+0x2734/0x2dc0
[   42.596612][ T3984]  do_syscall_64+0xc9/0x1c0
[   42.596666][ T3984]  ? clear_bhb_loop+0x55/0xb0
[   42.596691][ T3984]  ? clear_bhb_loop+0x55/0xb0
[   42.596763][ T3984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.596844][ T3984] RIP: 0033:0x7fbc7446d169
[   42.596862][ T3984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.596929][ T3984] RSP: 002b:00007fbc72ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   42.596951][ T3984] RAX: ffffffffffffffda RBX: 00007fbc74685fa0 RCX: 00007fbc7446d169
[   42.596966][ T3984] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003
[   42.596981][ T3984] RBP: 00007fbc72ad7090 R08: 0000000000000000 R09: 0000000000000000
[   42.596995][ T3984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   42.597009][ T3984] R13: 0000000000000000 R14: 00007fbc74685fa0 R15: 00007ffda1a45b38
[   42.597030][ T3984]  </TASK>
[   42.714184][ T3992] loop1: detected capacity change from 0 to 512
[   42.900344][ T3992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   42.918196][ T3989] Symlink component flag not implemented
[   42.924539][ T3989] Symlink component flag not implemented (116)
[   42.940700][ T3992] EXT4-fs error (device loop1): ext4_quota_enable:7097: comm syz.1.150: Bad quota inum: 4278190083, type: 0
[   42.980784][ T3992] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=4278190083). Please run e2fsck to fix.
[   43.018440][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.034589][ T3992] EXT4-fs (loop1): mount failed
[   43.060203][   T29] audit: type=1400 audit(1740795151.049:1004): avc:  denied  { read write } for  pid=3991 comm="syz.1.150" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   43.083781][   T29] audit: type=1400 audit(1740795151.049:1005): avc:  denied  { open } for  pid=3991 comm="syz.1.150" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   43.107325][   T29] audit: type=1400 audit(1740795151.049:1006): avc:  denied  { execute } for  pid=3991 comm="syz.1.150" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   43.168677][ T4002] loop3: detected capacity change from 0 to 256
[   43.175218][ T4002] vfat: Unknown parameter '00000000000000000012'
[   43.186339][ T4006] loop1: detected capacity change from 0 to 512
[   43.194385][ T4006] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   43.203361][ T4001] program syz.2.153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.223058][ T4006] EXT4-fs (loop1): invalid journal inode
[   43.229306][ T4001] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   43.230164][ T4006] EXT4-fs (loop1): can't get journal size
[   43.292914][ T4006] EXT4-fs (loop1): 1 truncate cleaned up
[   43.299376][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.312638][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.339711][ T4006] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   43.431681][   T29] audit: type=1400 audit(1740795151.419:1007): avc:  denied  { mounton } for  pid=4019 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   43.471350][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.477424][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.493801][ T4017] lo speed is unknown, defaulting to 1000
[   43.539222][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.551723][ T4017] dummy0 speed is unknown, defaulting to 1000
[   43.566042][   T29] audit: type=1400 audit(1740795151.539:1008): avc:  denied  { accept } for  pid=4024 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   43.644107][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.668038][ T4039] loop4: detected capacity change from 0 to 512
[   43.671602][ T4019] lo speed is unknown, defaulting to 1000
[   43.690028][ T4039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.709134][ T4039] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.725725][ T4019] dummy0 speed is unknown, defaulting to 1000
[   43.759860][   T11] bridge_slave_1: left allmulticast mode
[   43.765571][   T11] bridge_slave_1: left promiscuous mode
[   43.771383][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.778760][ T4039] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   43.796164][   T11] bridge_slave_0: left allmulticast mode
[   43.801901][   T11] bridge_slave_0: left promiscuous mode
[   43.807652][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.848398][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.895448][ T4049] program syz.2.167 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.905051][ T4049] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   43.928269][ T4052] 9pnet_fd: Insufficient options for proto=fd
[   44.063280][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   44.076972][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   44.089653][   T11] bond0 (unregistering): Released all slaves
[   44.102400][ T4045] lo speed is unknown, defaulting to 1000
[   44.160658][ T4046] lo speed is unknown, defaulting to 1000
[   44.168891][ T4045] dummy0 speed is unknown, defaulting to 1000
[   44.248563][ T4082] netlink: 'syz.2.175': attribute type 10 has an invalid length.
[   44.257135][ T4082] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.264405][ T4082] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.278352][ T4082] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.285585][ T4082] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.292971][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.300060][ T4082] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.309399][ T4082] team0: Port device bridge0 added
[   44.332400][ T4046] dummy0 speed is unknown, defaulting to 1000
[   44.397000][ T4019] chnl_net:caif_netlink_parms(): no params data found
[   44.490656][   T11] hsr_slave_0: left promiscuous mode
[   44.496333][   T11] hsr_slave_1: left promiscuous mode
[   44.504836][   T11] batman_adv: batadv0: Interface deactivated: dummy0
[   44.511718][   T11] batman_adv: batadv0: Removing interface: dummy0
[   44.520856][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.528376][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.544338][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.551884][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   44.573533][   T11] veth1_macvtap: left promiscuous mode
[   44.581802][   T11] veth0_macvtap: left promiscuous mode
[   44.589346][   T11] veth1_vlan: left promiscuous mode
[   44.598687][   T11] veth0_vlan: left promiscuous mode
[   44.739185][   T11] team0 (unregistering): Port device team_slave_1 removed
[   44.750811][   T11] team0 (unregistering): Port device team_slave_0 removed
[   44.783688][   T28] smc: removing ib device syz2
[   44.793833][ T1699] smc: removing ib device s
z1
[   44.806677][    T8] dummy0 speed is unknown, defaulting to 1000
[   44.811866][ T4114] erspan0: entered promiscuous mode
[   44.849361][ T4114] erspan0: left promiscuous mode
[   44.869349][    T9] lo speed is unknown, defaulting to 1000
[   44.875166][  T804] dummy0 speed is unknown, defaulting to 1000
[   44.881906][ T4123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'.
[   44.906855][ T4123] loop3: detected capacity change from 0 to 1024
[   44.934935][ T4123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.962017][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.966952][ T4123] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   44.969303][ T4019] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.031593][ T4019] bridge_slave_0: entered allmulticast mode
[   45.080395][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.090379][ T4019] bridge_slave_0: entered promiscuous mode
[   45.122438][ T4132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'.
[   45.131405][ T4132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'.
[   45.147637][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.154749][ T4019] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.200895][ T4019] bridge_slave_1: entered allmulticast mode
[   45.223960][ T4019] bridge_slave_1: entered promiscuous mode
[   45.233582][ T4136] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.184'.
[   45.306434][ T4019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.319070][ T4138] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.187'.
[   45.356096][ T4019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.534727][ T4019] team0: Port device team_slave_0 added
[   45.546409][ T4019] team0: Port device team_slave_1 added
[   45.629924][ T4166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   45.638814][ T4166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   45.722718][ T4019] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.729740][ T4019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.755798][ T4019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.819478][ T4019] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.826484][ T4019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.852463][ T4019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.882405][ T4168] loop1: detected capacity change from 0 to 512
[   45.934166][ T4168] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   45.944993][ T4019] hsr_slave_0: entered promiscuous mode
[   45.957453][ T4019] hsr_slave_1: entered promiscuous mode
[   45.979688][ T4168] EXT4-fs (loop1): orphan cleanup on readonly fs
[   46.047013][ T4168] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   46.070521][ T4168] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   46.096068][ T4168] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #16: comm syz.1.193: corrupted xattr block 31: invalid header
[   46.152657][ T4168] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[   46.187090][ T4168] EXT4-fs (loop1): 1 orphan inode deleted
[   46.223103][ T4168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.242661][ T4190] loop4: detected capacity change from 0 to 512
[   46.259890][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   46.276309][ T4019] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   46.289659][ T4190] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   46.308054][ T4019] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   46.316049][ T4168] unsupported nla_type 32759
[   46.319426][ T4190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   46.323223][ T4019] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   46.339043][ T4019] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   46.347707][ T4190] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.195: corrupted in-inode xattr: e_value size too large
[   46.387196][ T4190] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.195: couldn't read orphan inode 15 (err -117)
[   46.402815][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'.
[   46.403206][ T4190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.442745][ T4207] futex_wake_op: syz.2.199 tries to shift op by -1; fix this program
[   46.452315][ T4190] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   46.466238][ T4202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.479231][ T4190] lo speed is unknown, defaulting to 1000
[   46.490445][ T4190] lo speed is unknown, defaulting to 1000
[   46.496814][ T4190] lo speed is unknown, defaulting to 1000
[   46.520281][ T4217] dummy0 speed is unknown, defaulting to 1000
[   46.524720][ T4019] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.538022][ T4202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.577995][ T4217] dummy0 speed is unknown, defaulting to 1000
[   46.579102][ T4019] 8021q: adding VLAN 0 to HW filter on device team0
[   46.601239][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.625353][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.632461][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.655928][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.663144][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.670221][ T4190] infiniband s
z1: set active
[   46.675057][ T4190] infiniband s
z1: added lo
[   46.707892][ T4019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.718385][ T4019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.745828][ T4217] dummy0 speed is unknown, defaulting to 1000
[   46.754345][ T4202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.785180][ T4190] RDS/IB: s
z1: added
[   46.791871][    T9] lo speed is unknown, defaulting to 1000
[   46.831580][ T4202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.854784][ T4190] smc: adding ib device s
z1 with port count 1
[   46.861387][ T4190] smc:    ib device s
z1 port 1 has pnetid 
[   46.869003][ T3375] lo speed is unknown, defaulting to 1000
[   46.874158][ T4019] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.884275][ T4190] lo speed is unknown, defaulting to 1000
[   46.898231][ T4251] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.203'.
[   46.923454][ T4202] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.946432][ T4202] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.975495][ T4202] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.997231][ T4202] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.015528][ T4190] lo speed is unknown, defaulting to 1000
[   47.042292][ T4263] SET target dimension over the limit!
[   47.062152][ T3000] udevd[3000]: worker [3289] terminated by signal 33 (Unknown signal 33)
[   47.079301][ T4263] loop3: detected capacity change from 0 to 1024
[   47.111118][ T4272] FAULT_INJECTION: forcing a failure.
[   47.111118][ T4272] name failslab, interval 1, probability 0, space 0, times 0
[   47.123823][ T4272] CPU: 1 UID: 0 PID: 4272 Comm: syz.1.206 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   47.123854][ T4272] Tainted: [W]=WARN
[   47.123862][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   47.123875][ T4272] Call Trace:
[   47.123882][ T4272]  <TASK>
[   47.123890][ T4272]  dump_stack_lvl+0xf2/0x150
[   47.123922][ T4272]  dump_stack+0x15/0x1a
[   47.124030][ T4272]  should_fail_ex+0x24a/0x260
[   47.124107][ T4272]  should_failslab+0x8f/0xb0
[   47.124142][ T4272]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   47.124172][ T4272]  ? sidtab_sid2str_get+0xb8/0x140
[   47.124219][ T4272]  kmemdup_noprof+0x2b/0x70
[   47.124249][ T4272]  sidtab_sid2str_get+0xb8/0x140
[   47.124311][ T4272]  security_sid_to_context_core+0x1eb/0x2f0
[   47.124348][ T4272]  security_sid_to_context+0x27/0x30
[   47.124443][ T4272]  avc_audit_post_callback+0x9d/0x530
[   47.124484][ T4272]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   47.124526][ T4272]  common_lsm_audit+0x90e/0x10c0
[   47.124556][ T4272]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   47.124607][ T4272]  slow_avc_audit+0xf9/0x140
[   47.124728][ T4272]  avc_has_perm+0x129/0x160
[   47.124752][ T4272]  sel_write_validatetrans+0xdc/0x370
[   47.124780][ T4272]  ? __pfx_sel_write_validatetrans+0x10/0x10
[   47.124808][ T4272]  vfs_write+0x27d/0x920
[   47.124839][ T4272]  ? __fget_files+0x17c/0x1c0
[   47.124985][ T4272]  ksys_write+0xe8/0x1b0
[   47.125024][ T4272]  __x64_sys_write+0x42/0x50
[   47.125123][ T4272]  x64_sys_call+0x287e/0x2dc0
[   47.125221][ T4272]  do_syscall_64+0xc9/0x1c0
[   47.125251][ T4272]  ? clear_bhb_loop+0x55/0xb0
[   47.125278][ T4272]  ? clear_bhb_loop+0x55/0xb0
[   47.125304][ T4272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.125384][ T4272] RIP: 0033:0x7fbc7446d169
[   47.125399][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.125417][ T4272] RSP: 002b:00007fbc72ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   47.125440][ T4272] RAX: ffffffffffffffda RBX: 00007fbc74685fa0 RCX: 00007fbc7446d169
[   47.125452][ T4272] RDX: 0000000000000061 RSI: 0000400000000500 RDI: 0000000000000005
[   47.125463][ T4272] RBP: 00007fbc72ad7090 R08: 0000000000000000 R09: 0000000000000000
[   47.125474][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.125486][ T4272] R13: 0000000000000000 R14: 00007fbc74685fa0 R15: 00007ffda1a45b38
[   47.125503][ T4272]  </TASK>
[   47.173892][ T4019] veth0_vlan: entered promiscuous mode
[   47.286670][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.294196][ T4019] veth1_vlan: entered promiscuous mode
[   47.302423][ T4019] veth0_macvtap: entered promiscuous mode
[   47.399594][ T4190] lo speed is unknown, defaulting to 1000
[   47.407418][ T4019] veth1_macvtap: entered promiscuous mode
[   47.415416][ T4263] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   47.430300][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.440837][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.450692][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.461187][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.471120][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.481668][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.491564][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.502049][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.513652][ T4019] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.522278][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.532830][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.542852][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.553376][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.563302][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.573753][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.583674][ T4019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.594191][ T4019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.598104][   T29] kauditd_printk_skb: 80 callbacks suppressed
[   47.598120][   T29] audit: type=1400 audit(1740795155.589:1089): avc:  denied  { name_bind } for  pid=4283 comm="syz.2.209" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   47.611335][ T4019] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.637249][ T4284] loop2: detected capacity change from 0 to 512
[   47.638220][ T4190] lo speed is unknown, defaulting to 1000
[   47.654078][ T4285] batman_adv: batadv0: Adding interface: dummy0
[   47.660414][ T4285] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.688590][ T4285] batman_adv: batadv0: Interface activated: dummy0
[   47.698521][ T4286] batadv0: mtu less than device minimum
[   47.704706][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.715330][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.725920][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.736814][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.747887][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.758589][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.769681][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.780443][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.791152][ T4286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   47.806666][ T4190] lo speed is unknown, defaulting to 1000
[   47.817852][ T4019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.826637][ T4019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.835367][ T4019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.836348][ T4284] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   47.844095][ T4019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.852010][ T4284] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   47.878978][ T4284] System zones: 0-1, 15-15, 18-18, 34-34
[   47.890402][ T4284] EXT4-fs (loop2): orphan cleanup on readonly fs
[   47.896979][ T4284] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   47.915031][   T29] audit: type=1400 audit(1740795155.899:1090): avc:  denied  { mounton } for  pid=4019 comm="syz-executor" path="/root/syzkaller.tmbM5n/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   47.922234][ T4284] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   47.956480][ T4284] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   47.956932][ T4217] infiniband syz2: set active
[   47.967838][ T4217] infiniband syz2: added dummy0
[   47.972745][    T8] dummy0 speed is unknown, defaulting to 1000
[   47.983803][ T4217] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[   47.983980][ T4217] infiniband syz2: Couldn't open port 1
[   47.998829][ T4284] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.209: bad orphan inode 16
[   47.999832][   T29] audit: type=1400 audit(1740795155.979:1091): avc:  denied  { mount } for  pid=4019 comm="syz-executor" name="/" dev="gadgetfs" ino=4575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   48.010592][ T4284] ext4_test_bit(bit=15, block=18) = 1
[   48.036639][ T4284] is_bad_inode(inode)=0
[   48.040830][ T4284] NEXT_ORPHAN(inode)=0
[   48.044937][ T4284] max_ino=32
[   48.048248][ T4284] i_nlink=2
[   48.051963][ T4284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.073167][   T29] audit: type=1326 audit(1740795156.059:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7446d169 code=0x7ffc0000
[   48.096746][   T29] audit: type=1326 audit(1740795156.059:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7446d169 code=0x7ffc0000
[   48.120198][   T29] audit: type=1326 audit(1740795156.059:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7446d169 code=0x7ffc0000
[   48.143542][   T29] audit: type=1326 audit(1740795156.059:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7446d169 code=0x7ffc0000
[   48.166954][   T29] audit: type=1326 audit(1740795156.059:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7446d169 code=0x7ffc0000
[   48.184094][ T4217] RDS/IB: syz2: added
[   48.190312][   T29] audit: type=1326 audit(1740795156.059:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7446d169 code=0x7ffc0000
[   48.206435][ T4217] smc: adding ib device syz2 with port count 1
[   48.266848][ T4217] smc:    ib device syz2 port 1 has pnetid 
[   48.273035][ T4217] dummy0 speed is unknown, defaulting to 1000
[   48.282013][ T3374] dummy0 speed is unknown, defaulting to 1000
[   48.328400][ T4298] program syz.1.211 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.349296][ T4298] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   48.368954][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.412111][ T4217] dummy0 speed is unknown, defaulting to 1000
[   48.501686][ T4300] lo speed is unknown, defaulting to 1000
[   48.768468][ T4305] Illegal XDP return value 4294967274 on prog  (id 174) dev syz_tun, expect packet loss!
[   48.791307][ T4300] dummy0 speed is unknown, defaulting to 1000
[   48.826149][ T4308] loop3: detected capacity change from 0 to 512
[   48.834121][ T4217] dummy0 speed is unknown, defaulting to 1000
[   48.846280][ T4307] loop5: detected capacity change from 0 to 512
[   48.859370][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.878609][ T4307] EXT4-fs: Mount option(s) incompatible with ext2
[   48.901042][ T4308] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.917485][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.929011][ T4308] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   48.945312][ T4313] 0ªX¹¦À: renamed from caif0
[   48.952191][ T4313] 0ªX¹¦À: entered allmulticast mode
[   48.957522][ T4217] dummy0 speed is unknown, defaulting to 1000
[   48.987960][ T4312] 1ªX¹¦À: renamed from 
60ªX¹¦À
[   49.012192][ T4217] dummy0 speed is unknown, defaulting to 1000
[   49.034878][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.082008][ T4322] netlink: 'syz.3.218': attribute type 3 has an invalid length.
[   49.089738][ T4322] netlink: 'syz.3.218': attribute type 2 has an invalid length.
[   49.126236][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.140988][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.142072][ T4328] FAULT_INJECTION: forcing a failure.
[   49.142072][ T4328] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   49.162027][ T4328] CPU: 1 UID: 0 PID: 4328 Comm: syz.2.221 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   49.162117][ T4328] Tainted: [W]=WARN
[   49.162125][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   49.162140][ T4328] Call Trace:
[   49.162148][ T4328]  <TASK>
[   49.162157][ T4328]  dump_stack_lvl+0xf2/0x150
[   49.162191][ T4328]  dump_stack+0x15/0x1a
[   49.162217][ T4328]  should_fail_ex+0x24a/0x260
[   49.162296][ T4328]  should_fail+0xb/0x10
[   49.162347][ T4328]  should_fail_usercopy+0x1a/0x20
[   49.162379][ T4328]  _copy_from_iter+0xd5/0xd00
[   49.162456][ T4328]  ? kmalloc_reserve+0x16e/0x190
[   49.162481][ T4328]  ? __build_skb_around+0x196/0x1f0
[   49.162572][ T4328]  ? __alloc_skb+0x21f/0x310
[   49.162595][ T4328]  ? __virt_addr_valid+0x1ed/0x250
[   49.162623][ T4328]  ? __check_object_size+0x364/0x520
[   49.162651][ T4328]  netlink_sendmsg+0x460/0x6e0
[   49.162692][ T4328]  ? __pfx_netlink_sendmsg+0x10/0x10
[   49.162865][ T4328]  __sock_sendmsg+0x140/0x180
[   49.162910][ T4328]  ____sys_sendmsg+0x326/0x4b0
[   49.162943][ T4328]  __sys_sendmsg+0x19d/0x230
[   49.163062][ T4328]  __x64_sys_sendmsg+0x46/0x50
[   49.163090][ T4328]  x64_sys_call+0x2734/0x2dc0
[   49.163121][ T4328]  do_syscall_64+0xc9/0x1c0
[   49.163158][ T4328]  ? clear_bhb_loop+0x55/0xb0
[   49.163210][ T4328]  ? clear_bhb_loop+0x55/0xb0
[   49.163286][ T4328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.163318][ T4328] RIP: 0033:0x7fd62b3cd169
[   49.163332][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.163353][ T4328] RSP: 002b:00007fd629a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   49.163375][ T4328] RAX: ffffffffffffffda RBX: 00007fd62b5e5fa0 RCX: 00007fd62b3cd169
[   49.163390][ T4328] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000006
[   49.163405][ T4328] RBP: 00007fd629a31090 R08: 0000000000000000 R09: 0000000000000000
[   49.163419][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.163433][ T4328] R13: 0000000000000000 R14: 00007fd62b5e5fa0 R15: 00007ffcc6f33c58
[   49.163455][ T4328]  </TASK>
[   49.382135][ T4329] loop5: detected capacity change from 0 to 512
[   49.396158][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.425478][ T4329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.439583][ T4329] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.481310][ T4019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.518152][ T4337] loop5: detected capacity change from 0 to 512
[   49.535212][ T4337] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   49.557914][ T4337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   49.567273][ T4337] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.224: corrupted in-inode xattr: e_value size too large
[   49.582620][ T4337] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.224: couldn't read orphan inode 15 (err -117)
[   49.628554][ T4337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.635498][ T4347] loop4: detected capacity change from 0 to 512
[   49.648925][ T4347] EXT4-fs: Ignoring removed oldalloc option
[   49.656309][ T4347] EXT4-fs (loop4): orphan cleanup on readonly fs
[   49.663568][ T4337] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[   49.663669][ T4347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.226: Parent and EA inode have the same ino 15
[   49.687434][ T4347] EXT4-fs (loop4): Remounting filesystem read-only
[   49.694024][ T4347] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   49.707137][ T4347] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   49.718031][ T4337] rdma_rxe: rxe_newlink: failed to add lo
[   49.724554][ T4337] rdma_rxe: rxe_newlink: failed to add dummy0
[   49.746839][ T4347] EXT4-fs (loop4): 1 orphan inode deleted
[   49.753022][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   49.765217][ T4347] SELinux: (dev loop4, type ext4) getxattr errno 5
[   49.772163][ T4347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.793609][ T4347] SELinux: syz.4.226 (4347) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   49.824183][ T4352] FAULT_INJECTION: forcing a failure.
[   49.824183][ T4352] name failslab, interval 1, probability 0, space 0, times 0
[   49.836960][ T4352] CPU: 0 UID: 0 PID: 4352 Comm: syz.4.227 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   49.836998][ T4352] Tainted: [W]=WARN
[   49.837007][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   49.837022][ T4352] Call Trace:
[   49.837029][ T4352]  <TASK>
[   49.837037][ T4352]  dump_stack_lvl+0xf2/0x150
[   49.837072][ T4352]  dump_stack+0x15/0x1a
[   49.837102][ T4352]  should_fail_ex+0x24a/0x260
[   49.837131][ T4352]  should_failslab+0x8f/0xb0
[   49.837167][ T4352]  kmem_cache_alloc_noprof+0x52/0x320
[   49.837194][ T4352]  ? skb_clone+0x154/0x1f0
[   49.837276][ T4352]  skb_clone+0x154/0x1f0
[   49.837301][ T4352]  __netlink_deliver_tap+0x2bd/0x4f0
[   49.837400][ T4352]  netlink_unicast+0x64a/0x670
[   49.837438][ T4352]  netlink_sendmsg+0x5cc/0x6e0
[   49.837480][ T4352]  ? __pfx_netlink_sendmsg+0x10/0x10
[   49.837591][ T4352]  __sock_sendmsg+0x140/0x180
[   49.837624][ T4352]  ____sys_sendmsg+0x326/0x4b0
[   49.837659][ T4352]  __sys_sendmsg+0x19d/0x230
[   49.837705][ T4352]  __x64_sys_sendmsg+0x46/0x50
[   49.837735][ T4352]  x64_sys_call+0x2734/0x2dc0
[   49.837760][ T4352]  do_syscall_64+0xc9/0x1c0
[   49.837789][ T4352]  ? clear_bhb_loop+0x55/0xb0
[   49.837845][ T4352]  ? clear_bhb_loop+0x55/0xb0
[   49.837957][ T4352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.837991][ T4352] RIP: 0033:0x7fe2341cd169
[   49.838009][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.838031][ T4352] RSP: 002b:00007fe232831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   49.838054][ T4352] RAX: ffffffffffffffda RBX: 00007fe2343e5fa0 RCX: 00007fe2341cd169
[   49.838070][ T4352] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003
[   49.838096][ T4352] RBP: 00007fe232831090 R08: 0000000000000000 R09: 0000000000000000
[   49.838107][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.838118][ T4352] R13: 0000000000000000 R14: 00007fe2343e5fa0 R15: 00007ffd3b1458d8
[   49.838170][ T4352]  </TASK>
[   50.090901][ T4355] loop3: detected capacity change from 0 to 2048
[   50.102327][ T4355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.166940][ T4360] loop1: detected capacity change from 0 to 512
[   50.263929][ T4019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.487576][ T4374] loop2: detected capacity change from 0 to 512
[   50.531199][ T4374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.551119][ T3375] ==================================================================
[   50.559248][ T3375] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages
[   50.567446][ T3375] 
[   50.569775][ T3375] read-write to 0xffff8881006324b0 of 8 bytes by task 4019 on cpu 0:
[   50.577841][ T3375]  __filemap_remove_folio+0x1c5/0x2c0
[   50.583228][ T3375]  __remove_mapping+0x33f/0x470
[   50.588082][ T3375]  remove_mapping+0x22/0x90
[   50.592590][ T3375]  mapping_try_invalidate+0x265/0x3f0
[   50.597969][ T3375]  invalidate_mapping_pages+0x27/0x40
[   50.603346][ T3375]  invalidate_bdev+0x58/0x70
[   50.607947][ T3375]  ext4_put_super+0x571/0x810
[   50.612641][ T3375]  generic_shutdown_super+0xe5/0x220
[   50.617933][ T3375]  kill_block_super+0x2a/0x70
[   50.622625][ T3375]  ext4_kill_sb+0x44/0x80
[   50.626966][ T3375]  deactivate_locked_super+0x7d/0x1c0
[   50.632350][ T3375]  deactivate_super+0x9f/0xb0
[   50.637036][ T3375]  cleanup_mnt+0x268/0x2e0
[   50.641455][ T3375]  __cleanup_mnt+0x19/0x20
[   50.645877][ T3375]  task_work_run+0x13a/0x1a0
[   50.650480][ T3375]  syscall_exit_to_user_mode+0xa8/0x120
[   50.656036][ T3375]  do_syscall_64+0xd6/0x1c0
[   50.660552][ T3375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.666463][ T3375] 
[   50.668786][ T3375] read to 0xffff8881006324b0 of 8 bytes by task 3375 on cpu 1:
[   50.676337][ T3375]  nr_blockdev_pages+0x7c/0xd0
[   50.681114][ T3375]  si_meminfo+0x87/0xd0
[   50.685286][ T3375]  update_defense_level+0x49/0x5b0
[   50.690406][ T3375]  defense_work_handler+0x1f/0x80
[   50.695436][ T3375]  process_scheduled_works+0x4db/0xa20
[   50.700907][ T3375]  worker_thread+0x51d/0x6f0
[   50.705504][ T3375]  kthread+0x4ae/0x520
[   50.709579][ T3375]  ret_from_fork+0x4b/0x60
[   50.714012][ T3375]  ret_from_fork_asm+0x1a/0x30
[   50.718790][ T3375] 
[   50.721137][ T3375] value changed: 0x0000000000000004 -> 0x0000000000000002
[   50.728238][ T3375] 
[   50.730553][ T3375] Reported by Kernel Concurrency Sanitizer on:
[   50.736700][ T3375] CPU: 1 UID: 0 PID: 3375 Comm: kworker/1:3 Tainted: G        W          6.14.0-rc4-syzkaller-00199-g76544811c850 #0
[   50.749295][ T3375] Tainted: [W]=WARN
[   50.753181][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   50.763325][ T3375] Workqueue: events_long defense_work_handler
[   50.769399][ T3375] ==================================================================
[   50.876886][ T4374] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.963670][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.147900][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.