last executing test programs:

3.170282737s ago: executing program 2 (id=316):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
socket(0x2, 0x80805, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1e, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

2.960731548s ago: executing program 2 (id=319):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110a300000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280)=0x2, 0x4)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff020000000000000000000000004d025b5c0e2200649078020000000200000001000000bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d8ab859c3d9fe9a2f9edb8e36339e135d1f142a168a75d33e838bef40d2fcff6cb8d91538c6c53fafd6fea68a0e45b49f"], 0x0)

2.074595585s ago: executing program 2 (id=333):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50)
r4 = memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1805000000000000000000007f000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000006767190975d80000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9b, 0x7}, 0x100002, 0xfffffffffffffffc, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

1.829295399s ago: executing program 4 (id=335):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x20000, 0x4)
lseek(r0, 0x7fffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rtt_tx\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x10, 0x1e, 0x105, &(0x7f00000000c0)})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="03", 0x1}], 0x1, 0x0, 0x0, 0x20000801}], 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x0, 0x0, 0x103, 0x84, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
socket$inet6(0xa, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080), 0x0, 0x512, &(0x7f00000001c0)="$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")
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x11, r10, 0x1, 0xf, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@getchain={0x24, 0x66, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffec, 0xd}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c8d1}, 0x0)

1.500208951s ago: executing program 3 (id=339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.498223532s ago: executing program 4 (id=340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x12, 0x0, &(0x7f0000000140)="00ce6597c41ca238873f3b12936c26ce13be", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xd5, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")

1.398306172s ago: executing program 1 (id=343):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x20000, 0x4)
lseek(r0, 0x7fffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rtt_tx\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x10, 0x1e, 0x105, &(0x7f00000000c0)})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="03", 0x1}], 0x1, 0x0, 0x0, 0x20000801}], 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x0, 0x0, 0x103, 0x84, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
socket$inet6(0xa, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080), 0x0, 0x512, &(0x7f00000001c0)="$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")
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x11, r10, 0x1, 0xf, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@getchain={0x24, 0x66, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffec, 0xd}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c8d1}, 0x0)

1.357594285s ago: executing program 0 (id=344):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.288287272s ago: executing program 3 (id=345):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
lstat(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodelalloc}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'data_err=abort'}}, {@fsname={'fsname', 0x3d, '/@'}}, {@measure}, {@fowner_eq={'fowner', 0x3d, r4}}, {@dont_appraise}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r7 = gettid()
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x4081)
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
open_tree(0xffffffffffffffff, 0x0, 0x8000)

1.234277438s ago: executing program 0 (id=346):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x2000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000200)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x3}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}])
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

1.148389336s ago: executing program 0 (id=347):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x2404c044)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000004c0)={'security\x00', 0x8e, "d0f0b0a9a219ec93be1c590cf892691eacf7ac7b937b619687bce8933edb07f2e67c3255c59de515a458571809638813bbd852dc9bf0f978a6701f3af86e554e4c519e13beb30410cbc4290f807708d7a2827986471368e70fd6d6309ad5a4eafa9fe5ce7c5e3a44bbc05947e1ad0be6effcdf0e4316b01ed019efb609b1bc76191a4a0408df5eda605375a41e35"}, &(0x7f0000000580)=0xb2)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r4, r3, 0x0)
recvmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/222, 0xde}], 0x1}, 0x3}], 0x1, 0x40000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1.145919046s ago: executing program 2 (id=348):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x1, 0x0, {{0x10, 0x4, 0x2, 0x2, 0x40, 0x64, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, {[@rr={0x7, 0xb, 0x8, [@private=0xa010100, @broadcast]}, @noop, @timestamp_addr={0x44, 0x1c, 0xeb, 0x1, 0x9, [{@broadcast, 0x5}, {@local, 0x8}, {@multicast1, 0x9}]}, @end, @noop]}}}}})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r3=>r1, 0x400, 0xc, 0x5})
mq_timedreceive(r3, &(0x7f00000002c0)=""/94, 0x5e, 0xb, &(0x7f0000000240)={0x77359400})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc08c5332, &(0x7f0000000400)={{}, 0x1, 0x0, 0x0, {0x1}, 0x0, 0x1a})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000540)={0x0, 0x3, {0x1, 0x2, 0x1, 0x2, 0x6}, 0x7})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[], 0xfd, 0x0, &(0x7f0000000080))

1.120036909s ago: executing program 1 (id=349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='kfree\x00', r1}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {<r3=>r2}}, './file0\x00'})
openat$cgroup_subtree(r3, &(0x7f00000003c0), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x86)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10)
rmdir(0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket(0x10, 0x3, 0x0)
connect$netlink(r10, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (fail_nth: 2)
socket(0x400000000010, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x81}, 0x18)
r12 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r12, 0x5608)

1.096320321s ago: executing program 4 (id=350):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e14", 0x1a}], 0x1}, 0x4080)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000440), &(0x7f0000000d40)=""/162}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r6 = socket$pppoe(0x18, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x1a, &(0x7f0000000c80)=ANY=[@ANYRES8=r5, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000206070002000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7031000010000008500000006000000182a0000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000440)='oom_score_adj_update\x00', r7, 0x0, 0x13}, 0x18)
r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$selinux_access(r8, &(0x7f0000001a80)=ANY=[@ANYRESDEC=r4], 0x56)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(r6, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r9=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfe, 0x30e, &(0x7f0000000f00)="$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")
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x0, <r11=>0x0}, 0x8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000066ddffff040000000f00000082000000", @ANYRES32=r2, @ANYBLOB="ff7f000000000000000000000000000000000000154f4c476133c753b84157bcb8917e4d5974f1c92cf1bcc284b5af55320fd48d04b42d85260c21e9b39fed570b3269bd22154f6f557c5eeae7de501ac07ad1504cc6f48243da489fdf3713945104aae9d3e5015dd46d047bfd57cfdb7ea02cca3a3b412d17b30aea0555fc77ab45f1ffffdf78a29f54ee214757baabda124dd796a4c4385eb907a315358438f04042618c1c98808905d546c20354f179b3072463b12f2e1b4590fd700e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400010005000000010000000800"/28], 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r13, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r13, <r14=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b700007b8af8ff00000000bfa200000000000007020000f8ff03000008000000b7040000884be40385000000030000006500100008000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffff8)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000b7080000000000007b8af8ff00000000b7080000290000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r15, @ANYBLOB="0000007f00000000b70516000800000085000000a5000000185a000009000000000006dabcedaf11888021e7803581893ec783c8073084f4ab229e5cd47b2f05d70dbf977eb75b3427214caa4fc7620841321688c0823397a6ad8c8e8d75f0916ced2b2976f25b880adce87adb3beed17ee96ef567612029da3f32d525700392a9294f6de329e4b742bb5053ac431951b2c06394d9fa8774ce5fc66e488fcb18e8283e53e1b13f7f8c0cf0c53b78318d47f4932c168bec9e126f89db7f6fc854b4479354996d89e9d5734d4ddc00286ef42f461a72bac6031b443e2a4e8ff5b3", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0xf4, &(0x7f0000000740)=""/244, 0x41000, 0x47, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x9, 0x62, 0x8}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f0000000640), &(0x7f0000000640), 0x10, 0x2}, 0x94)
r16 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x30200, 0x0)
getdents64(r16, &(0x7f00000003c0)=""/38, 0x26)

1.065267695s ago: executing program 3 (id=351):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x20000, 0x4)
lseek(r0, 0x7fffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rtt_tx\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x10, 0x1e, 0x105, &(0x7f00000000c0)})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="03", 0x1}], 0x1, 0x0, 0x0, 0x20000801}], 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x0, 0x0, 0x103, 0x84, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
socket$inet6(0xa, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080), 0x0, 0x512, &(0x7f00000001c0)="$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")
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x11, r10, 0x1, 0xf, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@getchain={0x24, 0x66, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffec, 0xd}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c8d1}, 0x0)

799.190811ms ago: executing program 4 (id=352):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
lsm_get_self_attr(0x67, 0x0, &(0x7f0000000180), 0x0)

788.631252ms ago: executing program 4 (id=353):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x1}, 0x18)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000880), 0x0, 0x0)
r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed00006203000000ffffff9c440000000000007a0a00fe00ffffffc303000051000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8)
unshare(0x50030700)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='bcache_invalidate\x00'}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

758.426105ms ago: executing program 0 (id=354):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0)

595.484471ms ago: executing program 1 (id=355):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESDEC], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
syz_clone(0x80000411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)

583.897872ms ago: executing program 0 (id=356):
r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb8)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES64=r0], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_set_self_attr(0x0, 0x0, 0x65, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x1)
fchdir(r6)
r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80)
rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

575.980583ms ago: executing program 1 (id=357):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x2404c044)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000004c0)={'security\x00', 0x8e, "d0f0b0a9a219ec93be1c590cf892691eacf7ac7b937b619687bce8933edb07f2e67c3255c59de515a458571809638813bbd852dc9bf0f978a6701f3af86e554e4c519e13beb30410cbc4290f807708d7a2827986471368e70fd6d6309ad5a4eafa9fe5ce7c5e3a44bbc05947e1ad0be6effcdf0e4316b01ed019efb609b1bc76191a4a0408df5eda605375a41e35"}, &(0x7f0000000580)=0xb2)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/222, 0xde}], 0x1}, 0x3}], 0x1, 0x40000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

508.881729ms ago: executing program 3 (id=358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0, r3}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x2, &(0x7f0000000380)={0x0, 0x27, 0x1, @thr={&(0x7f0000000200), &(0x7f0000000ac0)="658b2f7cc6f02888ad517950f3ed6927ac3af2a8f2d92a66de059063a87814dbe89f18399837c36154545d25bef18352637bd100341dcc5089baa400008de1a5bf7960e93deb2992b8368c468a276ec1f26af388e249a11eb7cb533b4732f427d5e5a47ac6cc551fbb9c4841575fa74e194d749fed8998217f633b47b6279dc95b70046e53bf97961d99b8f4f371d6b43322e673ac85958c4a0eb4f4398c9908c36d823997e72044f46dc174453c37908bfe41a7469504cf18e832ff573ea5bc698c187f827b3157ec4aa7edae5f9226dbdb40b8f80103dd8703f710a3387f866872"}}, &(0x7f0000000400))
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000aa4e4010900010073797a31000000002c0004802800018008000100666962001c0002800800014000000014080002401200000108000340000000120900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg2\x00'})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000940)=@broute={'broute\x00', 0x20, 0x1, 0x14e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000007c0], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x1c6)

229.017327ms ago: executing program 0 (id=359):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50)
r4 = memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1805000000000000000000007f000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000006767190975d80000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9b, 0x7}, 0x100002, 0xfffffffffffffffc, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

228.610057ms ago: executing program 2 (id=360):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x2000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000200)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x3}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}])
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

163.629803ms ago: executing program 3 (id=361):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x20, 0x4, @loopback, 0xc}, {0xa, 0x4e20, 0xf7, @empty, 0xd}, r2, 0x40099c}}, 0x48)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

147.825385ms ago: executing program 1 (id=362):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x8000)
syz_emit_ethernet(0xdda, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xdcc, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "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"}}}}, 0x0)

92.64556ms ago: executing program 4 (id=363):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
socket(0x2, 0x80805, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1e, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

47.413685ms ago: executing program 3 (id=364):
socket$inet(0xa, 0x801, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

20.013178ms ago: executing program 1 (id=365):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
pipe2$9p(&(0x7f00000000c0), 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

0s ago: executing program 2 (id=366):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts.
[   32.444619][   T29] audit: type=1400 audit(1760245743.528:62): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   32.467884][   T29] audit: type=1400 audit(1760245743.548:63): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.468887][ T3301] cgroup: Unknown subsys name 'net'
[   32.495935][   T29] audit: type=1400 audit(1760245743.578:64): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.595234][ T3301] cgroup: Unknown subsys name 'cpuset'
[   32.601625][ T3301] cgroup: Unknown subsys name 'rlimit'
[   32.723698][   T29] audit: type=1400 audit(1760245743.798:65): avc:  denied  { setattr } for  pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.747051][   T29] audit: type=1400 audit(1760245743.808:66): avc:  denied  { create } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.767521][   T29] audit: type=1400 audit(1760245743.808:67): avc:  denied  { write } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.777474][ T3304] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   32.787906][   T29] audit: type=1400 audit(1760245743.808:68): avc:  denied  { read } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   32.816805][   T29] audit: type=1400 audit(1760245743.808:69): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   32.841845][   T29] audit: type=1400 audit(1760245743.808:70): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   32.849485][ T3301] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   32.865409][   T29] audit: type=1400 audit(1760245743.878:71): avc:  denied  { relabelto } for  pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   34.275071][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   34.329502][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   34.388880][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.396117][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.403380][ T3313] bridge_slave_0: entered allmulticast mode
[   34.409930][ T3313] bridge_slave_0: entered promiscuous mode
[   34.431152][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.438272][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.445529][ T3311] bridge_slave_0: entered allmulticast mode
[   34.451961][ T3311] bridge_slave_0: entered promiscuous mode
[   34.458541][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.465943][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.473091][ T3313] bridge_slave_1: entered allmulticast mode
[   34.479538][ T3313] bridge_slave_1: entered promiscuous mode
[   34.495458][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   34.505395][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.512543][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.519765][ T3311] bridge_slave_1: entered allmulticast mode
[   34.526351][ T3311] bridge_slave_1: entered promiscuous mode
[   34.537477][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   34.579290][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.601645][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.613820][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.623872][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.644999][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   34.676857][ T3313] team0: Port device team_slave_0 added
[   34.683036][ T3311] team0: Port device team_slave_0 added
[   34.702054][ T3313] team0: Port device team_slave_1 added
[   34.708595][ T3311] team0: Port device team_slave_1 added
[   34.740047][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.747180][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.754484][ T3320] bridge_slave_0: entered allmulticast mode
[   34.760893][ T3320] bridge_slave_0: entered promiscuous mode
[   34.769403][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.776523][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.783661][ T3320] bridge_slave_1: entered allmulticast mode
[   34.790318][ T3320] bridge_slave_1: entered promiscuous mode
[   34.819685][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.826886][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.834040][ T3317] bridge_slave_0: entered allmulticast mode
[   34.840519][ T3317] bridge_slave_0: entered promiscuous mode
[   34.847618][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.854706][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.881120][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.892460][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.899565][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.925483][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.943836][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.951118][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.958586][ T3317] bridge_slave_1: entered allmulticast mode
[   34.965060][ T3317] bridge_slave_1: entered promiscuous mode
[   34.972233][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.979705][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.005726][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.016699][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.023683][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.049814][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.067533][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.106802][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.131351][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.138575][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.145925][ T3319] bridge_slave_0: entered allmulticast mode
[   35.152253][ T3319] bridge_slave_0: entered promiscuous mode
[   35.165930][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.182226][ T3313] hsr_slave_0: entered promiscuous mode
[   35.188527][ T3313] hsr_slave_1: entered promiscuous mode
[   35.196811][ T3311] hsr_slave_0: entered promiscuous mode
[   35.202960][ T3311] hsr_slave_1: entered promiscuous mode
[   35.209145][ T3311] debugfs: 'hsr0' already exists in 'hsr'
[   35.214914][ T3311] Cannot create hsr debugfs directory
[   35.220511][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.227729][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.235021][ T3319] bridge_slave_1: entered allmulticast mode
[   35.241320][ T3319] bridge_slave_1: entered promiscuous mode
[   35.248612][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.264167][ T3320] team0: Port device team_slave_0 added
[   35.287826][ T3320] team0: Port device team_slave_1 added
[   35.294891][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.324598][ T3317] team0: Port device team_slave_0 added
[   35.336903][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.352231][ T3317] team0: Port device team_slave_1 added
[   35.388483][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.395485][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.421601][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.432615][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.439619][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.465583][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.479176][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.486197][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.512617][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.524036][ T3319] team0: Port device team_slave_0 added
[   35.532386][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.539414][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.565375][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.584781][ T3319] team0: Port device team_slave_1 added
[   35.632144][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.639429][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.665586][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.679164][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.686175][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.712247][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.725472][ T3317] hsr_slave_0: entered promiscuous mode
[   35.731500][ T3317] hsr_slave_1: entered promiscuous mode
[   35.737431][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   35.743349][ T3317] Cannot create hsr debugfs directory
[   35.765404][ T3320] hsr_slave_0: entered promiscuous mode
[   35.771428][ T3320] hsr_slave_1: entered promiscuous mode
[   35.777425][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   35.783161][ T3320] Cannot create hsr debugfs directory
[   35.838293][ T3319] hsr_slave_0: entered promiscuous mode
[   35.844427][ T3319] hsr_slave_1: entered promiscuous mode
[   35.850368][ T3319] debugfs: 'hsr0' already exists in 'hsr'
[   35.856160][ T3319] Cannot create hsr debugfs directory
[   35.941768][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   35.967153][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   35.978264][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   36.006403][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   36.043761][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   36.058026][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   36.069671][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.078868][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.098946][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   36.107982][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   36.123089][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   36.140025][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   36.167486][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.179823][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   36.188837][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   36.197896][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   36.250994][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   36.260427][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   36.269819][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   36.281886][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.294070][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   36.321309][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   36.340848][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.348039][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.367903][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.376189][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.383241][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.409009][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.442508][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   36.451152][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   36.461854][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.472851][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.482566][  T126] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.489775][  T126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.506575][  T126] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.513668][  T126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.526849][  T126] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.534058][  T126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.544192][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   36.555823][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.562952][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.582328][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.589538][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.598450][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.605526][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.616559][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   36.632370][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.655093][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.662236][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.679868][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.687063][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.698760][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.709238][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.731485][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.742014][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.887647][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.895759][ T3311] veth0_vlan: entered promiscuous mode
[   36.913382][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.937212][ T3311] veth1_vlan: entered promiscuous mode
[   36.967411][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.988016][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.000869][ T3311] veth0_macvtap: entered promiscuous mode
[   37.021667][ T3311] veth1_macvtap: entered promiscuous mode
[   37.042122][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.082598][ T3317] veth0_vlan: entered promiscuous mode
[   37.107011][ T3317] veth1_vlan: entered promiscuous mode
[   37.114311][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.127879][   T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.161630][ T3317] veth0_macvtap: entered promiscuous mode
[   37.176890][   T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.189812][ T3317] veth1_macvtap: entered promiscuous mode
[   37.203998][   T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.220904][   T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.246570][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.248023][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.269317][ T3319] veth0_vlan: entered promiscuous mode
[   37.275845][ T3320] veth0_vlan: entered promiscuous mode
[   37.286811][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.304256][ T3319] veth1_vlan: entered promiscuous mode
[   37.310881][ T3320] veth1_vlan: entered promiscuous mode
[   37.323534][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.350591][ T3480] loop0: detected capacity change from 0 to 1024
[   37.357790][ T3480] =======================================================
[   37.357790][ T3480] WARNING: The mand mount option has been deprecated and
[   37.357790][ T3480]          and is ignored by this kernel. Remove the mand
[   37.357790][ T3480]          option from the mount to silence this warning.
[   37.357790][ T3480] =======================================================
[   37.402478][ T3319] veth0_macvtap: entered promiscuous mode
[   37.408691][ T3480] EXT4-fs: Ignoring removed nobh option
[   37.414371][ T3480] EXT4-fs: Ignoring removed bh option
[   37.420988][ T3313] veth0_vlan: entered promiscuous mode
[   37.430523][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.446695][ T3313] veth1_vlan: entered promiscuous mode
[   37.454920][ T3319] veth1_macvtap: entered promiscuous mode
[   37.469057][ T3320] veth0_macvtap: entered promiscuous mode
[   37.476403][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.485999][ T3480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.488661][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.499879][   T29] kauditd_printk_skb: 25 callbacks suppressed
[   37.499897][   T29] audit: type=1400 audit(1760245748.578:97): avc:  denied  { mount } for  pid=3479 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.507192][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.552072][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.554166][   T29] audit: type=1400 audit(1760245748.628:98): avc:  denied  { add_name } for  pid=3479 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.565995][ T3313] veth0_macvtap: entered promiscuous mode
[   37.579499][   T29] audit: type=1400 audit(1760245748.628:99): avc:  denied  { create } for  pid=3479 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   37.589556][ T3313] veth1_macvtap: entered promiscuous mode
[   37.612234][ T3320] veth1_macvtap: entered promiscuous mode
[   37.612934][   T29] audit: type=1400 audit(1760245748.688:100): avc:  denied  { write open } for  pid=3479 comm="syz.0.1" path="/0/file2/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   37.625686][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.648439][   T29] audit: type=1400 audit(1760245748.698:101): avc:  denied  { read } for  pid=3479 comm="syz.0.1" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   37.670368][   T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.685310][   T29] audit: type=1400 audit(1760245748.748:102): avc:  denied  { write } for  pid=3479 comm="syz.0.1" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.710754][   T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.720506][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.726414][   T29] audit: type=1400 audit(1760245748.798:103): avc:  denied  { create } for  pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.737186][ T3489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'.
[   37.748964][   T29] audit: type=1400 audit(1760245748.818:104): avc:  denied  { write } for  pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.762854][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.776931][   T29] audit: type=1400 audit(1760245748.818:105): avc:  denied  { read } for  pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.791172][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.811791][   T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.844359][   T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.867102][   T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.878727][   T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.909368][   T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.924584][ T3493] tipc: Started in network mode
[   37.929705][ T3493] tipc: Node identity 26cf34825816, cluster identity 4711
[   37.936938][ T3493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   37.954431][   T29] audit: type=1400 audit(1760245749.028:106): avc:  denied  { ioctl } for  pid=3492 comm="syz.3.4" path="socket:[3900]" dev="sockfs" ino=3900 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.955134][   T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.001706][ T3493] syzkaller0: entered promiscuous mode
[   38.007972][ T3493] syzkaller0: entered allmulticast mode
[   38.033666][   T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.072867][ T3496] tipc: Resetting bearer <eth:syzkaller0>
[   38.278343][   T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.339174][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.374269][ T3492] tipc: Resetting bearer <eth:syzkaller0>
[   38.430603][ T3492] tipc: Disabling bearer <eth:syzkaller0>
[   38.449038][   T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.499790][ T1571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.513527][ T3501] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[   38.530935][ T3504] loop4: detected capacity change from 0 to 128
[   38.598148][ T3506] loop3: detected capacity change from 0 to 1024
[   38.606925][ T3501] loop1: detected capacity change from 0 to 512
[   38.637022][ T3506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.687593][ T3501] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.6: Bad quota inum: 393220, type: 1
[   38.699288][ T3501] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   38.724269][ T3501] EXT4-fs (loop1): mount failed
[   38.736768][ T3504] pim6reg: entered allmulticast mode
[   38.782117][ T3504] pim6reg: left allmulticast mode
[   38.787662][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.800786][ T3517] loop1: detected capacity change from 0 to 128
[   38.863929][ T3520] netlink: 19 bytes leftover after parsing attributes in process `syz.3.10'.
[   38.905041][ T3521] pim6reg: entered allmulticast mode
[   38.926083][ T3521] pim6reg: left allmulticast mode
[   38.988003][ T3527] netlink: 19 bytes leftover after parsing attributes in process `syz.2.14'.
[   39.053764][ T3529] tipc: Started in network mode
[   39.058882][ T3529] tipc: Node identity caa1d0a0ed03, cluster identity 4711
[   39.066140][ T3529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.078985][ T3529] syzkaller0: entered promiscuous mode
[   39.087541][ T3529] syzkaller0: entered allmulticast mode
[   39.098710][ T3529] tipc: Resetting bearer <eth:syzkaller0>
[   39.111153][ T3531] loop2: detected capacity change from 0 to 1024
[   39.117846][ T3528] tipc: Resetting bearer <eth:syzkaller0>
[   39.125326][ T3528] tipc: Disabling bearer <eth:syzkaller0>
[   39.126003][ T3531] EXT4-fs: Ignoring removed nobh option
[   39.136929][ T3531] EXT4-fs: Ignoring removed bh option
[   39.166250][ T3531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.166473][ T3535] loop1: detected capacity change from 0 to 128
[   39.256588][ T3540] netlink: 'syz.3.19': attribute type 13 has an invalid length.
[   39.302709][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.309953][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.348578][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.358845][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.420654][ T3535] pim6reg: entered allmulticast mode
[   39.432521][ T3541] pim6reg: left allmulticast mode
[   39.457871][ T1571] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.460994][ T3544] netlink: 19 bytes leftover after parsing attributes in process `syz.0.20'.
[   39.469515][ T1571] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.485805][ T1571] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.498427][ T1571] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.570116][ T3548] loop3: detected capacity change from 0 to 1024
[   39.604787][ T3548] EXT4-fs: Ignoring removed nobh option
[   39.610448][ T3548] EXT4-fs: Ignoring removed bh option
[   39.621253][ T3550] loop0: detected capacity change from 0 to 1024
[   39.637604][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.655876][ T3550] EXT4-fs: Ignoring removed nobh option
[   39.661571][ T3550] EXT4-fs: Ignoring removed bh option
[   39.672017][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.698540][ T3558] netlink: 156 bytes leftover after parsing attributes in process `syz.2.25'.
[   39.717774][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.854967][ T3566] netlink: 'syz.1.26': attribute type 13 has an invalid length.
[   39.901099][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.908327][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.953591][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.964144][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.021060][   T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.030278][   T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.039702][   T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.048790][   T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.077415][ T3570] loop1: detected capacity change from 0 to 128
[   40.084625][ T3570] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.423123][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.468722][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.744859][ T3583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'.
[   40.755280][ T3585] netlink: 'syz.4.32': attribute type 13 has an invalid length.
[   40.808084][ T3584] loop0: detected capacity change from 0 to 8192
[   40.945315][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.952525][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.048294][ T3598] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET)
[   41.057913][ T3598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'.
[   41.059873][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.077567][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.220585][ T3600] vcan0 speed is unknown, defaulting to 1000
[   41.225063][ T3598] vlan2: entered promiscuous mode
[   41.242244][ T3598] dummy0: entered promiscuous mode
[   41.266419][   T53] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.275913][ T3600] vcan0 speed is unknown, defaulting to 1000
[   41.276808][   T53] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.291159][ T3600] vcan0 speed is unknown, defaulting to 1000
[   41.350266][   T53] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.377566][ T3606] netlink: 19 bytes leftover after parsing attributes in process `syz.2.41'.
[   41.387121][   T53] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.422823][ T3600] infiniband syz1: set down
[   41.427520][ T3600] infiniband syz1: added vcan0
[   41.432375][ T3568] vcan0 speed is unknown, defaulting to 1000
[   41.572966][ T3600] RDS/IB: syz1: added
[   41.598092][ T3600] vcan0 speed is unknown, defaulting to 1000
[   41.614690][ T3612] loop2: detected capacity change from 0 to 1024
[   41.644408][ T3612] EXT4-fs: Ignoring removed nobh option
[   41.650198][ T3612] EXT4-fs: Ignoring removed bh option
[   41.720323][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.764472][ T3600] vcan0 speed is unknown, defaulting to 1000
[   41.888732][ T3600] vcan0 speed is unknown, defaulting to 1000
[   41.895041][ T3607] loop4: detected capacity change from 0 to 512
[   41.939288][ T3607] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.40: bad orphan inode 11862016
[   41.965013][ T3607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   42.009374][ T3607] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.027344][ T3624] netlink: 'syz.0.46': attribute type 13 has an invalid length.
[   42.043991][ T3600] vcan0 speed is unknown, defaulting to 1000
[   42.133608][ T3628] netlink: 156 bytes leftover after parsing attributes in process `syz.3.48'.
[   42.167252][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.174666][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.237700][ T3607] capability: warning: `syz.4.40' uses deprecated v2 capabilities in a way that may be insecure
[   42.241635][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.255345][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.259580][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.158357][   T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.168092][ T3600] vcan0 speed is unknown, defaulting to 1000
[   43.285801][   T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.299443][ T3637] netlink: 19 bytes leftover after parsing attributes in process `syz.3.50'.
[   43.334208][   T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.362854][   T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.409191][   T29] kauditd_printk_skb: 151 callbacks suppressed
[   43.409254][   T29] audit: type=1326 audit(1760245754.478:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.439008][   T29] audit: type=1326 audit(1760245754.478:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.462314][   T29] audit: type=1326 audit(1760245754.478:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.486681][   T29] audit: type=1326 audit(1760245754.478:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.510182][   T29] audit: type=1326 audit(1760245754.478:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.533371][   T29] audit: type=1326 audit(1760245754.478:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.546566][ T3600] syz.1.39 (3600) used greatest stack depth: 10584 bytes left
[   43.556623][   T29] audit: type=1326 audit(1760245754.478:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.587365][   T29] audit: type=1326 audit(1760245754.478:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.610523][   T29] audit: type=1326 audit(1760245754.478:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.634000][   T29] audit: type=1326 audit(1760245754.478:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   43.660616][ T3649] syz1: rxe_newlink: already configured on vcan0
[   43.704747][ T3646] netlink: 52 bytes leftover after parsing attributes in process `syz.2.53'.
[   43.715297][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   43.757985][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   43.770287][ T3655] vlan2: entered promiscuous mode
[   43.775420][ T3655] team0: entered promiscuous mode
[   43.780805][ T3655] team_slave_0: entered promiscuous mode
[   43.786544][ T3655] team_slave_1: entered promiscuous mode
[   43.807823][ T3658] syzkaller1: entered promiscuous mode
[   43.813360][ T3658] syzkaller1: entered allmulticast mode
[   43.823425][ T3664] netlink: 'syz.4.61': attribute type 3 has an invalid length.
[   43.861232][ T3666] netlink: 19 bytes leftover after parsing attributes in process `syz.4.62'.
[   43.903577][ T3670] loop2: detected capacity change from 0 to 1024
[   43.911205][ T3670] EXT4-fs: Ignoring removed nobh option
[   43.916928][ T3670] EXT4-fs: Ignoring removed bh option
[   43.943632][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.467736][ T3683] loop3: detected capacity change from 0 to 128
[   44.477751][ T3683] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   44.621781][ T3688] netlink: 'syz.1.69': attribute type 13 has an invalid length.
[   44.902938][ T3696] netlink: 19 bytes leftover after parsing attributes in process `syz.4.72'.
[   45.025704][ T3700] loop0: detected capacity change from 0 to 128
[   45.033123][ T3698] tipc: Started in network mode
[   45.038042][ T3698] tipc: Node identity 66fe8d4c4d2a, cluster identity 4711
[   45.045535][ T3698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   45.074083][ T3698] syzkaller0: entered promiscuous mode
[   45.079666][ T3698] syzkaller0: entered allmulticast mode
[   45.092632][ T3698] tipc: Resetting bearer <eth:syzkaller0>
[   45.100946][ T3697] tipc: Resetting bearer <eth:syzkaller0>
[   45.108241][ T3697] tipc: Disabling bearer <eth:syzkaller0>
[   45.139757][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.150354][ T3700] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   45.190360][ T3702] loop2: detected capacity change from 0 to 128
[   45.251473][ T3704] loop1: detected capacity change from 0 to 128
[   45.251788][ T3702] pim6reg: entered allmulticast mode
[   45.277811][ T3702] pim6reg: left allmulticast mode
[   45.294457][ T3704] bond1: option miimon: invalid value (18446744073709551615)
[   45.301959][ T3704] bond1: option miimon: allowed values 0 - 2147483647
[   45.327385][ T3704] bond1 (unregistering): Released all slaves
[   45.342036][ T3708] tipc: Started in network mode
[   45.347113][ T3708] tipc: Node identity 1ac080171e2b, cluster identity 4711
[   45.354436][ T3708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   45.371005][ T3708] syzkaller0: entered promiscuous mode
[   45.376556][ T3708] syzkaller0: entered allmulticast mode
[   45.391259][ T3708] Zero length message leads to an empty skb
[   45.401274][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.410226][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.418848][ T3708] tipc: Resetting bearer <eth:syzkaller0>
[   45.431334][ T3704] syz1: rxe_newlink: already configured on vcan0
[   45.437967][ T3707] tipc: Resetting bearer <eth:syzkaller0>
[   45.447255][ T3707] tipc: Disabling bearer <eth:syzkaller0>
[   45.507122][ T3716] loop2: detected capacity change from 0 to 512
[   45.539299][ T3716] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.80: Bad quota inum: 393220, type: 1
[   45.564456][ T3716] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   45.605034][ T3716] EXT4-fs (loop2): mount failed
[   45.614455][ T3724] netlink: 'syz.3.82': attribute type 13 has an invalid length.
[   45.639539][ T3714] loop4: detected capacity change from 0 to 512
[   45.673943][ T3714] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.81: bad orphan inode 11862016
[   45.686756][ T3726] loop0: detected capacity change from 0 to 1024
[   45.693503][ T3726] EXT4-fs: Ignoring removed nobh option
[   45.699167][ T3726] EXT4-fs: Ignoring removed bh option
[   45.709876][ T3714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   45.727251][ T3714] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.739451][ T3726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.768366][ T3734] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   45.793344][ T3734] syzkaller0: entered promiscuous mode
[   45.798956][ T3734] syzkaller0: entered allmulticast mode
[   45.815413][ T3736] loop3: detected capacity change from 0 to 8192
[   45.932152][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   45.963718][ T3739] loop2: detected capacity change from 0 to 512
[   46.001278][ T3739] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.88: Bad quota inum: 393220, type: 1
[   46.015476][ T3739] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   46.039650][ T3746] loop4: detected capacity change from 0 to 128
[   46.046848][ T3739] EXT4-fs (loop2): mount failed
[   46.047874][ T3748] loop1: detected capacity change from 0 to 512
[   46.116306][ T3748] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.90: Bad quota inum: 393220, type: 1
[   46.133189][ T3748] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   46.142473][ T3751] pim6reg: entered allmulticast mode
[   46.165754][ T3748] EXT4-fs (loop1): mount failed
[   46.177503][ T3753] loop2: detected capacity change from 0 to 512
[   46.186403][ T3753] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   46.224485][ T3753] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.92: couldn't read orphan inode 26 (err -116)
[   46.236665][ T3746] pim6reg: left allmulticast mode
[   46.242195][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.255414][ T3757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   46.264521][ T3757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.93'.
[   46.298367][ T3761] netlink: 19 bytes leftover after parsing attributes in process `syz.0.94'.
[   46.337315][ T3753] EXT4-fs (loop2): Remounting filesystem read-only
[   46.352720][ T3753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.365457][ T3753] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.423005][ T3765] netlink: 156 bytes leftover after parsing attributes in process `syz.0.99'.
[   46.504588][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.568911][ T3770] loop1: detected capacity change from 0 to 128
[   46.596494][ T3770] bond1: option miimon: invalid value (18446744073709551615)
[   46.603926][ T3770] bond1: option miimon: allowed values 0 - 2147483647
[   46.611785][ T3770] bond1 (unregistering): Released all slaves
[   46.628114][ T3775] tipc: Started in network mode
[   46.633137][ T3775] tipc: Node identity ee7ff7c9b08, cluster identity 4711
[   46.640409][ T3775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.651613][ T3775] syzkaller0: entered promiscuous mode
[   46.657169][ T3775] syzkaller0: entered allmulticast mode
[   46.782062][ T3775] tipc: Resetting bearer <eth:syzkaller0>
[   46.805523][ T3770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.835598][ T3770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.867622][ T3770] syz1: rxe_newlink: already configured on vcan0
[   46.875153][ T3774] tipc: Resetting bearer <eth:syzkaller0>
[   46.883590][ T3786] netlink: 'syz.4.102': attribute type 13 has an invalid length.
[   46.895056][ T3774] tipc: Disabling bearer <eth:syzkaller0>
[   47.002198][ T3789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.032338][ T3789] syzkaller0: entered promiscuous mode
[   47.037934][ T3789] syzkaller0: entered allmulticast mode
[   47.084737][ T3789] tipc: Resetting bearer <eth:syzkaller0>
[   47.091964][ T3788] tipc: Resetting bearer <eth:syzkaller0>
[   47.102818][ T3788] tipc: Disabling bearer <eth:syzkaller0>
[   47.136860][ T3791] loop4: detected capacity change from 0 to 8192
[   47.196716][ T3793] loop2: detected capacity change from 0 to 128
[   47.303844][ T3793] pim6reg: entered allmulticast mode
[   47.311863][ T3793] pim6reg: left allmulticast mode
[   47.379554][ T3797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'.
[   47.391440][ T3797] vlan2: entered promiscuous mode
[   47.396617][ T3797] team0: entered promiscuous mode
[   47.401767][ T3797] team_slave_0: entered promiscuous mode
[   47.407678][ T3797] team_slave_1: entered promiscuous mode
[   47.467355][ T3799] loop1: detected capacity change from 0 to 128
[   47.560228][ T3803] vlan2: entered promiscuous mode
[   47.600501][ T3805] pim6reg: entered allmulticast mode
[   47.609439][ T3807] loop0: detected capacity change from 0 to 128
[   47.629400][ T3807] bond1: option miimon: invalid value (18446744073709551615)
[   47.637018][ T3807] bond1: option miimon: allowed values 0 - 2147483647
[   47.646861][ T3807] bond1 (unregistering): Released all slaves
[   47.669545][ T3799] pim6reg: left allmulticast mode
[   47.739586][ T3807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.757654][ T3807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.767098][ T3815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.794378][ T3815] syzkaller0: entered promiscuous mode
[   47.799257][ T3807] rdma_rxe: rxe_newlink: failed to add vcan0
[   47.799897][ T3815] syzkaller0: entered allmulticast mode
[   47.827622][ T3814] tipc: Resetting bearer <eth:syzkaller0>
[   47.845125][ T3819] loop1: detected capacity change from 0 to 128
[   47.852211][ T3814] tipc: Disabling bearer <eth:syzkaller0>
[   47.871721][ T3819] bond1: option miimon: invalid value (18446744073709551615)
[   47.879868][ T3819] bond1: option miimon: allowed values 0 - 2147483647
[   47.887681][ T3819] bond1 (unregistering): Released all slaves
[   47.926389][ T3821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.943074][ T3821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.976817][ T3825] syzkaller1: entered promiscuous mode
[   47.982380][ T3825] syzkaller1: entered allmulticast mode
[   47.995485][ T3821] syz1: rxe_newlink: already configured on vcan0
[   48.060602][ T3823] netlink: 'syz.3.117': attribute type 13 has an invalid length.
[   48.108313][ T3831] loop2: detected capacity change from 0 to 1024
[   48.115300][ T3829] loop3: detected capacity change from 0 to 512
[   48.120265][ T3831] EXT4-fs: Ignoring removed nobh option
[   48.127344][ T3831] EXT4-fs: Ignoring removed bh option
[   48.138357][ T3829] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.120: Bad quota inum: 393220, type: 1
[   48.151456][ T3829] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   48.158086][ T3831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.167610][ T3829] EXT4-fs (loop3): mount failed
[   48.213934][ T3839] loop3: detected capacity change from 0 to 512
[   48.221223][ T3839] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.232116][ T3839] EXT4-fs (loop3): 1 truncate cleaned up
[   48.238515][ T3839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.263614][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.287468][ T3843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.294872][ T3843] syzkaller0: entered promiscuous mode
[   48.300402][ T3843] syzkaller0: entered allmulticast mode
[   48.309340][ T3843] tipc: Resetting bearer <eth:syzkaller0>
[   48.316322][ T3842] tipc: Resetting bearer <eth:syzkaller0>
[   48.322661][ T3842] tipc: Disabling bearer <eth:syzkaller0>
[   48.445497][ T3850] netlink: 'syz.0.125': attribute type 13 has an invalid length.
[   48.467556][   T29] kauditd_printk_skb: 197 callbacks suppressed
[   48.467573][   T29] audit: type=1326 audit(1760245759.548:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   48.497895][   T29] audit: type=1326 audit(1760245759.548:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   48.521689][ T3851] netlink: 'syz.3.126': attribute type 13 has an invalid length.
[   48.590702][ T3855] netlink: 19 bytes leftover after parsing attributes in process `syz.0.128'.
[   48.652562][ T3857] loop1: detected capacity change from 0 to 1024
[   48.679081][ T3857] EXT4-fs: Ignoring removed nobh option
[   48.684820][ T3857] EXT4-fs: Ignoring removed bh option
[   48.706702][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.734038][ T3867] loop0: detected capacity change from 0 to 512
[   48.760304][ T3867] EXT4-fs error (device loop0): ext4_quota_enable:7132: comm syz.0.134: Bad quota inum: 393220, type: 1
[   48.771946][ T3873] loop3: detected capacity change from 0 to 512
[   48.775912][ T3867] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   48.788917][ T3873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.804258][ T3867] EXT4-fs (loop0): mount failed
[   48.810771][ T3873] EXT4-fs (loop3): 1 truncate cleaned up
[   48.821662][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.868568][ T3879] loop0: detected capacity change from 0 to 128
[   48.868545][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.893446][ T3879] bond1: option miimon: invalid value (18446744073709551615)
[   48.901020][ T3879] bond1: option miimon: allowed values 0 - 2147483647
[   48.908604][   T29] audit: type=1326 audit(1760245759.988:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb150aceec9 code=0x7ffc0000
[   48.932207][   T29] audit: type=1326 audit(1760245759.988:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb150aceec9 code=0x7ffc0000
[   48.956911][ T3883] loop3: detected capacity change from 0 to 128
[   48.975334][ T3879] bond1 (unregistering): Released all slaves
[   48.981534][ T3883] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   48.993664][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.012149][   T29] audit: type=1326 audit(1760245760.088:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   49.035995][   T29] audit: type=1326 audit(1760245760.088:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   49.064646][   T29] audit: type=1326 audit(1760245760.088:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   49.090319][   T29] audit: type=1326 audit(1760245760.088:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   49.113678][   T29] audit: type=1326 audit(1760245760.088:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   49.137426][   T29] audit: type=1326 audit(1760245760.088:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   49.172738][ T3881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.182084][ T3881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.193756][ T3890] syzkaller0: entered promiscuous mode
[   49.199325][ T3890] syzkaller0: entered allmulticast mode
[   49.204069][ T3881] rdma_rxe: rxe_newlink: failed to add vcan0
[   49.223307][ T3894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.230555][ T3894] syzkaller0: entered promiscuous mode
[   49.236194][ T3894] syzkaller0: entered allmulticast mode
[   49.245487][ T3894] tipc: Resetting bearer <eth:syzkaller0>
[   49.252245][ T3893] tipc: Resetting bearer <eth:syzkaller0>
[   49.258726][ T3893] tipc: Disabling bearer <eth:syzkaller0>
[   49.350687][ T3899] loop4: detected capacity change from 0 to 128
[   49.366703][ T3899] bond1: option miimon: invalid value (18446744073709551615)
[   49.374491][ T3899] bond1: option miimon: allowed values 0 - 2147483647
[   49.382251][ T3899] bond1 (unregistering): Released all slaves
[   49.406785][ T3902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.414546][ T3902] syzkaller0: entered promiscuous mode
[   49.420135][ T3902] syzkaller0: entered allmulticast mode
[   49.433310][ T3902] tipc: Resetting bearer <eth:syzkaller0>
[   49.439962][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.448856][ T3901] tipc: Resetting bearer <eth:syzkaller0>
[   49.455068][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.463818][ T3901] tipc: Disabling bearer <eth:syzkaller0>
[   49.468423][ T3899] rdma_rxe: rxe_newlink: failed to add vcan0
[   49.470749][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.520312][ T3907] loop1: detected capacity change from 0 to 1024
[   49.527110][ T3907] EXT4-fs: Ignoring removed nobh option
[   49.532802][ T3907] EXT4-fs: Ignoring removed bh option
[   49.545972][ T3907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.591561][ T3911] netlink: 156 bytes leftover after parsing attributes in process `syz.3.149'.
[   49.953617][ T3916] loop0: detected capacity change from 0 to 1024
[   49.962256][ T3916] EXT4-fs: Ignoring removed nobh option
[   49.967910][ T3916] EXT4-fs: Ignoring removed bh option
[   50.058755][ T3916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.138601][ T3920] loop4: detected capacity change from 0 to 512
[   50.181857][ T3920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   50.196136][ T3920] EXT4-fs (loop4): 1 truncate cleaned up
[   50.202512][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.233273][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.306500][ T3927] loop4: detected capacity change from 0 to 128
[   50.317631][ T3927] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   50.381036][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.454010][ T3932] netlink: 'syz.4.155': attribute type 13 has an invalid length.
[   50.541059][ T3937] loop4: detected capacity change from 0 to 128
[   50.680897][ T3935] loop1: detected capacity change from 0 to 512
[   50.715630][ T3941] pim6reg: entered allmulticast mode
[   50.756418][ T3935] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.154: Bad quota inum: 393220, type: 1
[   50.808604][ T3944] pim6reg: left allmulticast mode
[   50.831318][ T3935] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   50.876557][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.910187][ T3935] EXT4-fs (loop1): mount failed
[   51.009083][ T3948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.016188][ T3948] syzkaller0: entered promiscuous mode
[   51.018093][ T3946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.160'.
[   51.021684][ T3948] syzkaller0: entered allmulticast mode
[   51.040280][ T3950] loop1: detected capacity change from 0 to 128
[   51.047756][ T3948] tipc: Resetting bearer <eth:syzkaller0>
[   51.076336][ T3952] loop4: detected capacity change from 0 to 128
[   51.087474][ T3952] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   51.115581][ T3947] tipc: Resetting bearer <eth:syzkaller0>
[   51.146900][ T3947] tipc: Disabling bearer <eth:syzkaller0>
[   51.191928][ T3957] loop4: detected capacity change from 0 to 128
[   51.194929][ T3950] bond1: option miimon: invalid value (18446744073709551615)
[   51.206734][ T3950] bond1: option miimon: allowed values 0 - 2147483647
[   51.207247][ T3957] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   51.224822][ T3950] bond1 (unregistering): Released all slaves
[   51.327408][ T3960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.164'.
[   51.348128][ T3961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.372813][ T3961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.518284][ T3954] syz1: rxe_newlink: already configured on vcan0
[   51.620445][ T3969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.167'.
[   51.676218][ T3971] loop2: detected capacity change from 0 to 512
[   51.731658][ T3971] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.168: Bad quota inum: 393220, type: 1
[   51.743321][ T3971] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   51.758841][ T3971] EXT4-fs (loop2): mount failed
[   51.758998][ T3974] loop4: detected capacity change from 0 to 1024
[   51.778533][ T3974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.814893][ T3981] loop2: detected capacity change from 0 to 128
[   51.822916][ T3981] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   51.827080][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.879043][ T3983] loop4: detected capacity change from 0 to 128
[   51.912783][ T3985] netlink: 156 bytes leftover after parsing attributes in process `syz.2.172'.
[   51.958662][ T3987] netlink: 19 bytes leftover after parsing attributes in process `syz.3.173'.
[   51.967865][ T3983] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   52.058229][ T3992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.066304][ T3992] syzkaller0: entered promiscuous mode
[   52.071846][ T3992] syzkaller0: entered allmulticast mode
[   52.147082][ T3992] tipc: Resetting bearer <eth:syzkaller0>
[   52.155143][ T3991] tipc: Resetting bearer <eth:syzkaller0>
[   52.162332][ T3991] tipc: Disabling bearer <eth:syzkaller0>
[   52.983719][ T4000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.010598][ T4000] syzkaller0: entered promiscuous mode
[   53.015164][ T4002] netlink: 'syz.0.178': attribute type 25 has an invalid length.
[   53.016603][ T4000] syzkaller0: entered allmulticast mode
[   53.035482][ T3999] tipc: Resetting bearer <eth:syzkaller0>
[   53.043074][ T3999] tipc: Disabling bearer <eth:syzkaller0>
[   53.155402][ T4010] loop3: detected capacity change from 0 to 128
[   53.156093][ T4008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.179'.
[   53.178533][ T4013] netlink: 156 bytes leftover after parsing attributes in process `syz.4.183'.
[   53.191577][ T4010] bond1: option miimon: invalid value (18446744073709551615)
[   53.199283][ T4010] bond1: option miimon: allowed values 0 - 2147483647
[   53.212881][ T4010] bond1 (unregistering): Released all slaves
[   53.254891][ T4017] rdma_rxe: rxe_newlink: failed to add vcan0
[   53.320802][ T4024] loop1: detected capacity change from 0 to 128
[   53.345856][ T4024] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   53.491822][ T4036] vlan2: entered promiscuous mode
[   53.497124][ T4036] syz_tun: entered promiscuous mode
[   53.982734][ T4038] loop2: detected capacity change from 0 to 1024
[   54.025095][ T4038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.032209][ T4042] syzkaller1: entered promiscuous mode
[   54.042866][ T4042] syzkaller1: entered allmulticast mode
[   54.060092][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.079320][   T29] kauditd_printk_skb: 231 callbacks suppressed
[   54.079341][   T29] audit: type=1400 audit(1760245765.158:706): avc:  denied  { remount } for  pid=4043 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   54.140450][ T4048] netlink: 68 bytes leftover after parsing attributes in process `syz.2.196'.
[   54.182225][ T4052] loop2: detected capacity change from 0 to 1024
[   54.191536][ T4052] EXT4-fs: Ignoring removed nobh option
[   54.197352][ T4052] EXT4-fs: Ignoring removed bh option
[   54.246524][ T4052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.281596][ T4056] loop0: detected capacity change from 0 to 512
[   54.293243][ T4062] loop1: detected capacity change from 0 to 128
[   54.319343][ T4062] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   54.320133][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'.
[   54.351299][ T4067] loop4: detected capacity change from 0 to 128
[   54.362799][ T4064] vlan2: entered promiscuous mode
[   54.367987][ T4064] dummy0: entered promiscuous mode
[   54.368692][   T29] audit: type=1326 audit(1760245765.438:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.396591][   T29] audit: type=1326 audit(1760245765.438:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.419922][   T29] audit: type=1326 audit(1760245765.438:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.443305][   T29] audit: type=1326 audit(1760245765.438:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.455686][ T4067] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   54.466975][   T29] audit: type=1326 audit(1760245765.438:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.499581][   T29] audit: type=1326 audit(1760245765.438:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.513338][ T4056] EXT4-fs error (device loop0): ext4_quota_enable:7132: comm syz.0.199: Bad quota inum: 393220, type: 1
[   54.522952][   T29] audit: type=1326 audit(1760245765.438:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.534679][ T4056] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   54.557731][   T29] audit: type=1326 audit(1760245765.438:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.573234][ T4056] EXT4-fs (loop0): mount failed
[   54.596336][   T29] audit: type=1326 audit(1760245765.438:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   54.654395][ T4071] netlink: 'syz.1.205': attribute type 25 has an invalid length.
[   54.715409][ T4075] syzkaller1: entered promiscuous mode
[   54.721034][ T4075] syzkaller1: entered allmulticast mode
[   54.731814][ T4078] loop3: detected capacity change from 0 to 128
[   54.746799][ T4078] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   54.779651][ T4083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.828713][ T4083] netlink: 'syz.0.211': attribute type 12 has an invalid length.
[   54.836683][ T4083] netlink: 'syz.0.211': attribute type 29 has an invalid length.
[   54.844551][ T4083] netlink: 148 bytes leftover after parsing attributes in process `syz.0.211'.
[   54.849464][ T4085] loop1: detected capacity change from 0 to 8192
[   54.912139][ T4093] loop0: detected capacity change from 0 to 1024
[   54.921390][ T4089] loop3: detected capacity change from 0 to 1024
[   54.956268][ T4093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.970415][ T4089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.018964][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.035325][ T4102] netlink: 'syz.4.218': attribute type 25 has an invalid length.
[   55.046317][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.088328][ T4106] loop4: detected capacity change from 0 to 128
[   55.096229][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.221688][ T4115] loop3: detected capacity change from 0 to 1024
[   55.237510][ T4115] EXT4-fs: Ignoring removed nobh option
[   55.243299][ T4115] EXT4-fs: Ignoring removed bh option
[   55.256496][ T4112] pim6reg: entered allmulticast mode
[   55.266223][ T4118] pim6reg: left allmulticast mode
[   55.310464][ T4117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.323224][ T4117] syzkaller0: entered promiscuous mode
[   55.328875][ T4117] syzkaller0: entered allmulticast mode
[   55.347512][ T4117] tipc: Resetting bearer <eth:syzkaller0>
[   55.414461][ T4116] tipc: Resetting bearer <eth:syzkaller0>
[   55.445397][ T4116] tipc: Disabling bearer <eth:syzkaller0>
[   55.457695][ T4115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.680714][ T4126] netlink: 'syz.0.227': attribute type 12 has an invalid length.
[   55.688617][ T4126] netlink: 'syz.0.227': attribute type 29 has an invalid length.
[   55.696500][ T4126] netlink: 148 bytes leftover after parsing attributes in process `syz.0.227'.
[   55.726113][ T4125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'.
[   55.768888][ T4125] vlan2: entered promiscuous mode
[   55.803043][ T4125] dummy0: entered promiscuous mode
[   55.884745][ T4134] netlink: 'syz.0.229': attribute type 13 has an invalid length.
[   55.896256][ T4135] netlink: 'syz.1.228': attribute type 13 has an invalid length.
[   55.907559][ T4137] netlink: 156 bytes leftover after parsing attributes in process `syz.4.231'.
[   55.997536][ T4142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.004965][ T4142] syzkaller0: entered promiscuous mode
[   56.010788][ T4142] syzkaller0: entered allmulticast mode
[   56.021919][ T4146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.235'.
[   56.022774][ T4142] tipc: Resetting bearer <eth:syzkaller0>
[   56.107973][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.123022][ T4141] tipc: Resetting bearer <eth:syzkaller0>
[   56.131573][ T4141] tipc: Disabling bearer <eth:syzkaller0>
[   56.149787][ T4156] netlink: 'syz.2.240': attribute type 12 has an invalid length.
[   56.157665][ T4156] netlink: 'syz.2.240': attribute type 29 has an invalid length.
[   56.165583][ T4156] netlink: 148 bytes leftover after parsing attributes in process `syz.2.240'.
[   56.230149][ T4164] mmap: syz.2.244 (4164): VmData 29208576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[   56.247351][ T4169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.246'.
[   56.308349][ T4173] loop3: detected capacity change from 0 to 1024
[   56.317621][ T4173] EXT4-fs: Ignoring removed nobh option
[   56.319368][ T4177] FAULT_INJECTION: forcing a failure.
[   56.319368][ T4177] name failslab, interval 1, probability 0, space 0, times 1
[   56.323254][ T4173] EXT4-fs: Ignoring removed bh option
[   56.336012][ T4177] CPU: 0 UID: 0 PID: 4177 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.336058][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   56.336081][ T4177] Call Trace:
[   56.336092][ T4177]  <TASK>
[   56.336104][ T4177]  __dump_stack+0x1d/0x30
[   56.336137][ T4177]  dump_stack_lvl+0xe8/0x140
[   56.336171][ T4177]  dump_stack+0x15/0x1b
[   56.336262][ T4177]  should_fail_ex+0x265/0x280
[   56.336316][ T4177]  ? selinux_netlbl_sock_genattr+0x88/0x260
[   56.336379][ T4177]  should_failslab+0x8c/0xb0
[   56.336423][ T4177]  __kmalloc_cache_noprof+0x4c/0x4a0
[   56.336473][ T4177]  selinux_netlbl_sock_genattr+0x88/0x260
[   56.336515][ T4177]  selinux_netlbl_socket_post_create+0x68/0x100
[   56.336634][ T4177]  selinux_socket_post_create+0x214/0x2a0
[   56.336673][ T4177]  security_socket_post_create+0x5d/0xb0
[   56.336760][ T4177]  __sock_create+0x362/0x5b0
[   56.336838][ T4177]  sock_create_kern+0x38/0x50
[   56.336874][ T4177]  mptcp_subflow_create_socket+0x84/0x500
[   56.336934][ T4177]  __mptcp_nmpc_sk+0xb5/0x3d0
[   56.337046][ T4177]  mptcp_connect+0x58/0x890
[   56.337092][ T4177]  __inet_stream_connect+0x169/0x7d0
[   56.337146][ T4177]  ? _raw_spin_unlock_bh+0x36/0x40
[   56.337213][ T4177]  ? release_sock+0x116/0x150
[   56.337247][ T4177]  ? _raw_spin_unlock_bh+0x36/0x40
[   56.337295][ T4177]  ? lock_sock_nested+0x112/0x140
[   56.337324][ T4177]  ? selinux_netlbl_socket_connect+0x115/0x130
[   56.337504][ T4177]  inet_stream_connect+0x44/0x70
[   56.337566][ T4177]  ? __pfx_inet_stream_connect+0x10/0x10
[   56.337619][ T4177]  __sys_connect+0x1f2/0x2b0
[   56.337667][ T4177]  __x64_sys_connect+0x3f/0x50
[   56.337765][ T4177]  x64_sys_call+0x2c0c/0x3000
[   56.337833][ T4177]  do_syscall_64+0xd2/0x200
[   56.337941][ T4177]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   56.337986][ T4177]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   56.338021][ T4177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.338086][ T4177] RIP: 0033:0x7fbc1062eec9
[   56.338131][ T4177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.338160][ T4177] RSP: 002b:00007fbc0f097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   56.338194][ T4177] RAX: ffffffffffffffda RBX: 00007fbc10885fa0 RCX: 00007fbc1062eec9
[   56.338208][ T4177] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004
[   56.338222][ T4177] RBP: 00007fbc0f097090 R08: 0000000000000000 R09: 0000000000000000
[   56.338235][ T4177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.338255][ T4177] R13: 00007fbc10886038 R14: 00007fbc10885fa0 R15: 00007ffc245ac338
[   56.338285][ T4177]  </TASK>
[   56.409422][ T4179] vcan0 speed is unknown, defaulting to 1000
[   56.470501][ T4185] loop0: detected capacity change from 0 to 128
[   56.540354][ T4187] v: renamed from ip6_vti0
[   56.623650][ T4185] FAT-fs (loop0): bread failed, FSINFO block (sector = 366)
[   56.638330][ T4192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4192 comm=syz.1.248
[   56.642401][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.700226][ T4171] vcan0 speed is unknown, defaulting to 1000
[   56.722804][ T4194] netlink: 'syz.0.255': attribute type 12 has an invalid length.
[   56.730750][ T4194] netlink: 'syz.0.255': attribute type 29 has an invalid length.
[   56.738592][ T4194] netlink: 148 bytes leftover after parsing attributes in process `syz.0.255'.
[   56.768972][ T4197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.776185][ T4197] syzkaller0: entered promiscuous mode
[   56.781787][ T4197] syzkaller0: entered allmulticast mode
[   56.813114][ T4197] tipc: Resetting bearer <eth:syzkaller0>
[   56.815985][ T4199] loop0: detected capacity change from 0 to 1024
[   56.826269][ T4196] tipc: Resetting bearer <eth:syzkaller0>
[   56.832833][ T4196] tipc: Disabling bearer <eth:syzkaller0>
[   56.843367][ T4199] EXT4-fs: Ignoring removed nobh option
[   56.849039][ T4199] EXT4-fs: Ignoring removed bh option
[   56.866792][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.893860][ T4203] loop2: detected capacity change from 0 to 1024
[   56.907511][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   56.920272][ T4203] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.991402][ T4210] loop4: detected capacity change from 0 to 128
[   57.042514][ T4210] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   57.053248][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   57.078076][ T4215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.095911][ T4215] syzkaller0: entered promiscuous mode
[   57.101450][ T4215] syzkaller0: entered allmulticast mode
[   57.110817][ T4215] tipc: Resetting bearer <eth:syzkaller0>
[   57.117634][ T4214] tipc: Resetting bearer <eth:syzkaller0>
[   57.124317][ T4214] tipc: Disabling bearer <eth:syzkaller0>
[   57.135936][ T4217] loop2: detected capacity change from 0 to 512
[   57.143736][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.164304][ T4219] loop4: detected capacity change from 0 to 128
[   57.171462][ T4219] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   57.194706][ T4217] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.261: Bad quota inum: 393220, type: 1
[   57.209563][ T4217] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   57.226468][ T4217] EXT4-fs (loop2): mount failed
[   57.235482][ T4222] loop3: detected capacity change from 0 to 512
[   57.278140][ T4222] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.264: Bad quota inum: 393220, type: 1
[   57.322586][ T4227] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   57.336009][ T4222] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   57.369070][ T4231] loop2: detected capacity change from 0 to 1024
[   57.381579][ T4231] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   57.392538][ T4231] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   57.409321][ T4222] EXT4-fs (loop3): mount failed
[   57.424691][ T4231] JBD2: no valid journal superblock found
[   57.431163][ T4231] EXT4-fs (loop2): Could not load journal inode
[   57.506298][ T4237] vlan2: entered promiscuous mode
[   57.525717][ T4237] dummy0: entered promiscuous mode
[   57.544957][ T4239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.558069][ T4239] syzkaller0: entered promiscuous mode
[   57.563629][ T4239] syzkaller0: entered allmulticast mode
[   57.582197][ T4239] tipc: Resetting bearer <eth:syzkaller0>
[   57.589242][ T4238] tipc: Resetting bearer <eth:syzkaller0>
[   57.595674][ T4241] loop1: detected capacity change from 0 to 1024
[   57.600954][ T4231] SELinux: security_context_str_to_sid () failed with errno=-22
[   57.603219][ T4241] ext4: Unknown parameter 'smackfsroot'
[   57.616124][ T4238] tipc: Disabling bearer <eth:syzkaller0>
[   57.627180][ T4229] loop4: detected capacity change from 0 to 512
[   57.638760][ T4231] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   57.658164][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.690027][ T4229] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.265: bad orphan inode 11862016
[   57.785100][ T4248] loop0: detected capacity change from 0 to 8192
[   57.794982][ T4229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   57.814959][ T4229] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.151621][ T4263] netlink: 'syz.3.278': attribute type 12 has an invalid length.
[   58.159442][ T4263] netlink: 'syz.3.278': attribute type 29 has an invalid length.
[   58.376149][ T4266] FAULT_INJECTION: forcing a failure.
[   58.376149][ T4266] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   58.389325][ T4266] CPU: 0 UID: 0 PID: 4266 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.389361][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.389378][ T4266] Call Trace:
[   58.389387][ T4266]  <TASK>
[   58.389398][ T4266]  __dump_stack+0x1d/0x30
[   58.389426][ T4266]  dump_stack_lvl+0xe8/0x140
[   58.389507][ T4266]  dump_stack+0x15/0x1b
[   58.389527][ T4266]  should_fail_ex+0x265/0x280
[   58.389603][ T4266]  should_fail+0xb/0x20
[   58.389653][ T4266]  should_fail_usercopy+0x1a/0x20
[   58.389731][ T4266]  _copy_from_user+0x1c/0xb0
[   58.389766][ T4266]  ___sys_sendmsg+0xc1/0x1d0
[   58.389816][ T4266]  __x64_sys_sendmsg+0xd4/0x160
[   58.389849][ T4266]  x64_sys_call+0x191e/0x3000
[   58.389910][ T4266]  do_syscall_64+0xd2/0x200
[   58.389940][ T4266]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.389969][ T4266]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.390075][ T4266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.390105][ T4266] RIP: 0033:0x7f0ea743eec9
[   58.390122][ T4266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.390146][ T4266] RSP: 002b:00007f0ea5e9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.390245][ T4266] RAX: ffffffffffffffda RBX: 00007f0ea7695fa0 RCX: 00007f0ea743eec9
[   58.390258][ T4266] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003
[   58.390270][ T4266] RBP: 00007f0ea5e9f090 R08: 0000000000000000 R09: 0000000000000000
[   58.390286][ T4266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.390303][ T4266] R13: 00007f0ea7696038 R14: 00007f0ea7695fa0 R15: 00007ffda207ecd8
[   58.390325][ T4266]  </TASK>
[   58.574732][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   58.590706][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.597957][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.708823][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.754201][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.131779][ T4268] vlan2: entered promiscuous mode
[   59.152299][   T29] kauditd_printk_skb: 190 callbacks suppressed
[   59.152329][   T29] audit: type=1326 audit(1760245770.228:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   59.181827][   T29] audit: type=1326 audit(1760245770.228:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7999eec9 code=0x7ffc0000
[   59.212824][  T126] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.224557][ T4277] vcan0 speed is unknown, defaulting to 1000
[   59.250372][   T29] audit: type=1400 audit(1760245770.328:908): avc:  denied  { write } for  pid=4288 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   59.276579][  T126] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.285910][  T126] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.295575][  T126] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.714994][   T29] audit: type=1326 audit(1760245770.498:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.738341][   T29] audit: type=1326 audit(1760245770.498:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.761725][   T29] audit: type=1326 audit(1760245770.508:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.785096][   T29] audit: type=1326 audit(1760245770.508:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.808793][   T29] audit: type=1326 audit(1760245770.518:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.832096][   T29] audit: type=1326 audit(1760245770.518:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.855449][   T29] audit: type=1326 audit(1760245770.518:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea743eec9 code=0x7ffc0000
[   59.882828][ T4303] __nla_validate_parse: 6 callbacks suppressed
[   59.882856][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   59.936490][ T4304] loop4: detected capacity change from 0 to 1024
[   59.953694][ T4304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   59.984035][ T4308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.999056][ T4301] netlink: 128 bytes leftover after parsing attributes in process `syz.0.291'.
[   59.999905][ T4308] syzkaller0: entered promiscuous mode
[   60.013552][ T4308] syzkaller0: entered allmulticast mode
[   60.014514][ T4304] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   60.030142][ T4304] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   60.051471][ T4310] loop3: detected capacity change from 0 to 1024
[   60.054845][ T4301] netlink: 3 bytes leftover after parsing attributes in process `syz.0.291'.
[   60.062437][ T4310] EXT4-fs: Ignoring removed nobh option
[   60.072418][ T4310] EXT4-fs: Ignoring removed bh option
[   60.079058][ T4304] JBD2: no valid journal superblock found
[   60.080882][ T4308] tipc: Resetting bearer <eth:syzkaller0>
[   60.084896][ T4304] EXT4-fs (loop4): Could not load journal inode
[   60.099241][ T4306] loop1: detected capacity change from 0 to 8192
[   60.102589][ T4307] tipc: Resetting bearer <eth:syzkaller0>
[   60.117035][ T4302] FAULT_INJECTION: forcing a failure.
[   60.117035][ T4302] name failslab, interval 1, probability 0, space 0, times 0
[   60.129797][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.129837][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   60.129854][ T4302] Call Trace:
[   60.129862][ T4302]  <TASK>
[   60.129929][ T4302]  __dump_stack+0x1d/0x30
[   60.129971][ T4302]  dump_stack_lvl+0xe8/0x140
[   60.129997][ T4302]  dump_stack+0x15/0x1b
[   60.130019][ T4302]  should_fail_ex+0x265/0x280
[   60.130065][ T4302]  should_failslab+0x8c/0xb0
[   60.130181][ T4302]  __kmalloc_noprof+0xa5/0x570
[   60.130219][ T4302]  ? bpf_test_init+0x86/0x140
[   60.130252][ T4302]  bpf_test_init+0x86/0x140
[   60.130279][ T4302]  bpf_prog_test_run_xdp+0x392/0x970
[   60.130352][ T4302]  ? __rcu_read_unlock+0x4f/0x70
[   60.130392][ T4302]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   60.130430][ T4302]  bpf_prog_test_run+0x22a/0x390
[   60.130493][ T4302]  __sys_bpf+0x4c0/0x7c0
[   60.130611][ T4302]  __x64_sys_bpf+0x41/0x50
[   60.130651][ T4302]  x64_sys_call+0x2aee/0x3000
[   60.130681][ T4302]  do_syscall_64+0xd2/0x200
[   60.130714][ T4302]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.130751][ T4302]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   60.130834][ T4302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.130905][ T4302] RIP: 0033:0x7fb150aceec9
[   60.130920][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.130957][ T4302] RSP: 002b:00007fb14f537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   60.130987][ T4302] RAX: ffffffffffffffda RBX: 00007fb150d25fa0 RCX: 00007fb150aceec9
[   60.131004][ T4302] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   60.131021][ T4302] RBP: 00007fb14f537090 R08: 0000000000000000 R09: 0000000000000000
[   60.131037][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.131054][ T4302] R13: 00007fb150d26038 R14: 00007fb150d25fa0 R15: 00007fffa106da48
[   60.131079][ T4302]  </TASK>
[   60.332615][ T4307] tipc: Disabling bearer <eth:syzkaller0>
[   60.376120][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.410595][ T4317] loop4: detected capacity change from 0 to 1024
[   60.438149][ T4317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.457009][ T4320] loop0: detected capacity change from 0 to 128
[   60.505917][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.523028][ T4320] pim6reg: entered allmulticast mode
[   60.529399][ T4320] pim6reg: left allmulticast mode
[   60.818892][ T4325] loop4: detected capacity change from 0 to 512
[   60.853238][ T4334] FAULT_INJECTION: forcing a failure.
[   60.853238][ T4334] name failslab, interval 1, probability 0, space 0, times 0
[   60.866049][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.866087][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   60.866113][ T4334] Call Trace:
[   60.866121][ T4334]  <TASK>
[   60.866155][ T4334]  __dump_stack+0x1d/0x30
[   60.866253][ T4334]  dump_stack_lvl+0xe8/0x140
[   60.866279][ T4334]  dump_stack+0x15/0x1b
[   60.866301][ T4334]  should_fail_ex+0x265/0x280
[   60.866350][ T4334]  should_failslab+0x8c/0xb0
[   60.866384][ T4334]  kmem_cache_alloc_lru_noprof+0x55/0x490
[   60.866420][ T4334]  ? alloc_inode+0x9a/0x170
[   60.866463][ T4334]  ? vfs_write+0x7e8/0x960
[   60.866583][ T4334]  alloc_inode+0x9a/0x170
[   60.866611][ T4334]  alloc_anon_inode+0x1e/0x170
[   60.866640][ T4334]  anon_inode_make_secure_inode+0x33/0xf0
[   60.866685][ T4334]  __se_sys_memfd_secret+0xcc/0x230
[   60.866710][ T4334]  __x64_sys_memfd_secret+0x1f/0x30
[   60.866811][ T4334]  x64_sys_call+0x2c85/0x3000
[   60.866838][ T4334]  do_syscall_64+0xd2/0x200
[   60.866918][ T4334]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.866963][ T4334]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   60.866996][ T4334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.867029][ T4334] RIP: 0033:0x7fdbb2e7eec9
[   60.867051][ T4334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.867079][ T4334] RSP: 002b:00007fdbb18df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[   60.867106][ T4334] RAX: ffffffffffffffda RBX: 00007fdbb30d5fa0 RCX: 00007fdbb2e7eec9
[   60.867125][ T4334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[   60.867138][ T4334] RBP: 00007fdbb18df090 R08: 0000000000000000 R09: 0000000000000000
[   60.867187][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.867201][ T4334] R13: 00007fdbb30d6038 R14: 00007fdbb30d5fa0 R15: 00007ffca771cd58
[   60.867237][ T4334]  </TASK>
[   61.090835][ T4325] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.299: bad orphan inode 11862016
[   61.102308][ T4325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   61.121807][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.131661][ T4325] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.171370][ T4334] validate_nla: 4 callbacks suppressed
[   61.171388][ T4334] netlink: 'syz.0.302': attribute type 21 has an invalid length.
[   61.185200][ T4334] netlink: 128 bytes leftover after parsing attributes in process `syz.0.302'.
[   61.194630][ T4334] netlink: 'syz.0.302': attribute type 5 has an invalid length.
[   61.202332][ T4334] netlink: 3 bytes leftover after parsing attributes in process `syz.0.302'.
[   61.262279][ T4344] loop0: detected capacity change from 0 to 128
[   61.298094][ T4346] loop2: detected capacity change from 0 to 512
[   61.306172][ T4344] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   61.342832][ T4346] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.306: Bad quota inum: 393220, type: 1
[   61.360653][ T4346] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   61.385744][ T4350] loop0: detected capacity change from 0 to 128
[   61.392225][ T4346] EXT4-fs (loop2): mount failed
[   61.399530][ T4350] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   61.479560][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   61.491624][ T4352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.513321][ T4352] syzkaller0: entered promiscuous mode
[   61.518978][ T4352] syzkaller0: entered allmulticast mode
[   61.527174][ T4352] tipc: Resetting bearer <eth:syzkaller0>
[   61.534012][ T4351] tipc: Resetting bearer <eth:syzkaller0>
[   61.540762][ T4342] loop3: detected capacity change from 0 to 512
[   61.551619][ T4358] loop4: detected capacity change from 0 to 128
[   61.607063][ T4351] tipc: Disabling bearer <eth:syzkaller0>
[   61.607887][ T4342] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.304: bad orphan inode 11862016
[   61.631148][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   61.647475][ T4358] pim6reg: entered allmulticast mode
[   61.652990][ T4342] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.667123][ T4358] pim6reg: left allmulticast mode
[   61.782874][ T4372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.798680][ T4372] syzkaller0: entered promiscuous mode
[   61.804243][ T4372] syzkaller0: entered allmulticast mode
[   61.804473][ T4373] netlink: 'syz.2.316': attribute type 13 has an invalid length.
[   61.847903][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'.
[   61.862490][ T4372] tipc: Resetting bearer <eth:syzkaller0>
[   61.869169][ T4371] tipc: Resetting bearer <eth:syzkaller0>
[   61.877133][ T4371] tipc: Disabling bearer <eth:syzkaller0>
[   61.913302][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   61.989005][ T4381] loop4: detected capacity change from 0 to 2048
[   62.056894][ T4386] loop1: detected capacity change from 0 to 512
[   62.070142][ T4388] loop3: detected capacity change from 0 to 1024
[   62.075694][ T4386] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.321: Bad quota inum: 393220, type: 1
[   62.088434][ T4388] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   62.098822][ T4386] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   62.099576][ T4388] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   62.115090][ T4386] EXT4-fs (loop1): mount failed
[   62.131128][ T4388] JBD2: no valid journal superblock found
[   62.137059][ T4388] EXT4-fs (loop3): Could not load journal inode
[   62.162060][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'.
[   62.206600][ T4397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.222606][ T4397] syzkaller0: entered promiscuous mode
[   62.228227][ T4397] syzkaller0: entered allmulticast mode
[   62.237627][ T4399] netlink: 156 bytes leftover after parsing attributes in process `syz.1.326'.
[   62.255418][ T4397] tipc: Resetting bearer <eth:syzkaller0>
[   62.284441][ T4396] tipc: Resetting bearer <eth:syzkaller0>
[   62.291150][ T4396] tipc: Disabling bearer <eth:syzkaller0>
[   62.313924][ T4388] SELinux: security_context_str_to_sid () failed with errno=-22
[   62.386263][ T4405] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.439030][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'.
[   62.460307][ T4408] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.635312][ T4412] SELinux:  Context  is not valid (left unmapped).
[   62.709615][ T4414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'.
[   62.842979][ T4416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.851793][ T4416] syzkaller0: entered promiscuous mode
[   62.857458][ T4416] syzkaller0: entered allmulticast mode
[   62.866071][ T4416] tipc: Resetting bearer <eth:syzkaller0>
[   62.873404][ T4415] tipc: Resetting bearer <eth:syzkaller0>
[   62.880155][ T4415] tipc: Disabling bearer <eth:syzkaller0>
[   63.028567][ T4405] syz.4.328 (4405) used greatest stack depth: 10472 bytes left
[   63.061142][ T4424] loop4: detected capacity change from 0 to 512
[   63.197758][ T4424] EXT4-fs error (device loop4): ext4_quota_enable:7132: comm syz.4.335: Bad quota inum: 393220, type: 1
[   63.197898][ T4424] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   63.198100][ T4424] EXT4-fs (loop4): mount failed
[   63.276333][ T4439] loop3: detected capacity change from 0 to 128
[   63.281278][ T4439] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   63.420245][ T4445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.427453][ T4445] syzkaller0: entered promiscuous mode
[   63.433098][ T4445] syzkaller0: entered allmulticast mode
[   63.441516][ T4445] tipc: Resetting bearer <eth:syzkaller0>
[   63.451751][ T4444] tipc: Resetting bearer <eth:syzkaller0>
[   63.468457][ T4447] loop4: detected capacity change from 0 to 512
[   63.475280][ T4447] EXT4-fs: Ignoring removed nobh option
[   63.481927][ T4444] tipc: Disabling bearer <eth:syzkaller0>
[   63.510785][ T4447] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.340: corrupted inode contents
[   63.536377][ T4454] loop1: detected capacity change from 0 to 512
[   63.544278][ T4447] EXT4-fs (loop4): Remounting filesystem read-only
[   63.551951][ T4447] EXT4-fs (loop4): 1 truncate cleaned up
[   63.558713][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.566614][ T4454] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.343: Bad quota inum: 393220, type: 1
[   63.571420][ T4447] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.586134][ T4459] netlink: 'syz.0.344': attribute type 25 has an invalid length.
[   63.593601][ T4447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.625293][ T4454] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   63.640985][ T4454] EXT4-fs (loop1): mount failed
[   63.649083][ T4461] loop3: detected capacity change from 0 to 128
[   63.713539][ T4461] pim6reg: entered allmulticast mode
[   63.719615][ T4461] pim6reg: left allmulticast mode
[   63.808687][ T4447] syz.4.340 (4447) used greatest stack depth: 9696 bytes left
[   63.830580][ T4472] loop4: detected capacity change from 0 to 128
[   63.877762][ T4474] vlan3: entered promiscuous mode
[   63.882871][ T4474] syz_tun: entered promiscuous mode
[   63.893488][ T4466] loop2: detected capacity change from 0 to 8192
[   63.916070][ T4470] FAULT_INJECTION: forcing a failure.
[   63.916070][ T4470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.929341][ T4470] CPU: 0 UID: 0 PID: 4470 Comm: syz.1.349 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.929368][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   63.929383][ T4470] Call Trace:
[   63.929392][ T4470]  <TASK>
[   63.929401][ T4470]  __dump_stack+0x1d/0x30
[   63.929513][ T4470]  dump_stack_lvl+0xe8/0x140
[   63.929539][ T4470]  dump_stack+0x15/0x1b
[   63.929557][ T4470]  should_fail_ex+0x265/0x280
[   63.929668][ T4470]  should_fail+0xb/0x20
[   63.929727][ T4470]  should_fail_usercopy+0x1a/0x20
[   63.929749][ T4470]  _copy_from_user+0x1c/0xb0
[   63.929817][ T4470]  __copy_msghdr+0x244/0x300
[   63.929861][ T4470]  ___sys_sendmsg+0x109/0x1d0
[   63.929945][ T4470]  __x64_sys_sendmsg+0xd4/0x160
[   63.929990][ T4470]  x64_sys_call+0x191e/0x3000
[   63.930019][ T4470]  do_syscall_64+0xd2/0x200
[   63.930045][ T4470]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   63.930129][ T4470]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   63.930162][ T4470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.930188][ T4470] RIP: 0033:0x7f6b7999eec9
[   63.930207][ T4470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.930244][ T4470] RSP: 002b:00007f6b78407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.930289][ T4470] RAX: ffffffffffffffda RBX: 00007f6b79bf5fa0 RCX: 00007f6b7999eec9
[   63.930303][ T4470] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b
[   63.930375][ T4470] RBP: 00007f6b78407090 R08: 0000000000000000 R09: 0000000000000000
[   63.930391][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.930408][ T4470] R13: 00007f6b79bf6038 R14: 00007f6b79bf5fa0 R15: 00007fff539123e8
[   63.930433][ T4470]  </TASK>
[   64.112613][ T4479] loop3: detected capacity change from 0 to 512
[   64.189204][   T29] kauditd_printk_skb: 396 callbacks suppressed
[   64.189219][   T29] audit: type=1400 audit(1760245775.268:1310): avc:  denied  { remount } for  pid=4464 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   64.238787][ T4479] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.351: Bad quota inum: 393220, type: 1
[   64.298157][ T4479] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=393220). Please run e2fsck to fix.
[   64.315662][ T4483] loop4: detected capacity change from 0 to 512
[   64.325506][ T4479] EXT4-fs (loop3): mount failed
[   64.339683][ T4496] loop0: detected capacity change from 0 to 128
[   64.357287][ T4483] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.353: bad orphan inode 11862016
[   64.377172][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   64.390533][ T4496] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   64.400511][ T4483] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.407458][ T4499] vlan3: entered promiscuous mode
[   64.439025][ T4501] loop3: detected capacity change from 0 to 1024
[   64.467407][ T4501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.513407][   T29] audit: type=1326 audit(1760245775.568:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.537141][   T29] audit: type=1326 audit(1760245775.568:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.562004][   T29] audit: type=1326 audit(1760245775.568:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.585576][   T29] audit: type=1326 audit(1760245775.568:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.608943][   T29] audit: type=1326 audit(1760245775.568:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.632306][   T29] audit: type=1326 audit(1760245775.568:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.655784][   T29] audit: type=1326 audit(1760245775.568:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.679354][   T29] audit: type=1326 audit(1760245775.568:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.702958][   T29] audit: type=1326 audit(1760245775.568:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdbb2e7eec9 code=0x7ffc0000
[   64.915906][ T3305] ==================================================================
[   64.924075][ T3305] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod
[   64.931056][ T3305] 
[   64.933401][ T3305] write to 0xffff8881023fd250 of 8 bytes by task 3302 on cpu 0:
[   64.941041][ T3305]  shmem_mknod+0x12a/0x180
[   64.945484][ T3305]  shmem_create+0x34/0x50
[   64.949829][ T3305]  path_openat+0x1105/0x2170
[   64.954443][ T3305]  do_filp_open+0x109/0x230
[   64.959086][ T3305]  do_sys_openat2+0xa6/0x110
[   64.963845][ T3305]  __x64_sys_openat+0xf2/0x120
[   64.968748][ T3305]  x64_sys_call+0x2eab/0x3000
[   64.973455][ T3305]  do_syscall_64+0xd2/0x200
[   64.978199][ T3305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.984131][ T3305] 
[   64.986479][ T3305] read to 0xffff8881023fd250 of 8 bytes by task 3305 on cpu 1:
[   64.994115][ T3305]  fill_mg_cmtime+0x4e/0x260
[   64.998745][ T3305]  generic_fillattr+0x24a/0x340
[   65.003791][ T3305]  shmem_getattr+0x181/0x200
[   65.008492][ T3305]  vfs_getattr_nosec+0x146/0x1e0
[   65.013574][ T3305]  vfs_statx+0x113/0x390
[   65.017849][ T3305]  vfs_fstatat+0x115/0x170
[   65.022324][ T3305]  __se_sys_newfstatat+0x55/0x260
[   65.027377][ T3305]  __x64_sys_newfstatat+0x55/0x70
[   65.032522][ T3305]  x64_sys_call+0x135a/0x3000
[   65.037306][ T3305]  do_syscall_64+0xd2/0x200
[   65.041831][ T3305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.047774][ T3305] 
[   65.050134][ T3305] value changed: 0x0000000068eb380f -> 0x0000000068eb3810
[   65.057354][ T3305] 
[   65.059782][ T3305] Reported by Kernel Concurrency Sanitizer on:
[   65.066120][ T3305] CPU: 1 UID: 0 PID: 3305 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.075434][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   65.086294][ T3305] ==================================================================
[   65.096803][ T4519] __nla_validate_parse: 13 callbacks suppressed
[   65.096820][ T4519] netlink: 68 bytes leftover after parsing attributes in process `syz.3.364'.
[   65.125516][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[   65.134465][ T4520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.365'.
[   65.143371][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[   65.163742][ T4520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.365'.