last executing test programs:

3m38.526019518s ago: executing program 2 (id=1490):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18)
sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, 0xc, 0x0, 0x18}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000e00)="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", 0x7fc}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="078804000300000008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

3m38.197346882s ago: executing program 2 (id=1500):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200))
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r4)

3m37.254618152s ago: executing program 2 (id=1504):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xe}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
write$tun(r1, &(0x7f0000000480)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "8007d0", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e1f, 0x4e21, 0x8}}}}}}}, 0x42)

3m37.043681162s ago: executing program 2 (id=1505):
r0 = syz_open_procfs(0x0, 0x0)
open_tree(r0, 0x0, 0x89901)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
io_uring_setup(0xaae, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r2, r2, 0x0, 0x800000009)

3m36.801087262s ago: executing program 2 (id=1506):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)

3m35.113100264s ago: executing program 2 (id=1523):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', r1, 0x0, 0x7}, 0xffffffffffffff89)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4084}, 0x8040)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

3m35.103965265s ago: executing program 32 (id=1523):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', r1, 0x0, 0x7}, 0xffffffffffffff89)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4084}, 0x8040)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

7.134363374s ago: executing program 0 (id=4715):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99bc9d55d6aa4c43ddeb7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=<r7=>r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=r8], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x9, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32=r9, @ANYBLOB, @ANYRES64=r8], 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000002480)={<r11=>0xffffffffffffffff})
read(r11, &(0x7f0000032440)=""/102364, 0x18fdc)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r11)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000001840)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x224, r12, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_MESH_SETUP={0x204, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xb9, 0x3, "5c64b4d3858acf5939f6e52a1e1633912c010862ceedc983e2722dd9798b61e5f3f778d1c7bb159fd5b7e20b8bc50a08ddbb19d855107a8784da4d82005042726145030eac30c585b73aff090ea117f9ea62f4fad98988607de5dfe0e9ac6e09955930453e504f0e9185e9c6fc5c35a4b8e6fdb096a04fb83be23233cb773756d836d8f5fc0885f64ab68ca93a6b693a4a164513fe546db0769e895d0bd3e29cadff140db5fdc980293a55675027e20b953315bf09"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xda, 0x3, "e88b58080e06233739aef5d4addc352739b9e461f7fc41e0a6e5f87f8578e0661d1c754081dfcaa01bf36d056664b597685f1345b2e1844e039458f88c48d5be1f72979424851d2c316695b6ea083197f070905762fd37d4fc15c88d246adb0ede83a40386f629c67a64783d08969dba380f4dc6d55d7ef4569f6ba2ccc2addff129edd762e6f3ea9402ebcdee4c052d073c577bf7c6a2cee3f4ff382487adc383b5f4d50af7ff2469db505d2864d0fe56f6fac374546bd96dc0b41c11dfa966ed5d049220c9806fad9448a92d2d8feb40b9cf2a9651"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x54, 0x3, "b66448e187eda975c00615d6178d4f2745354d5f8a8f27020256083628bc63eb589bc49f45fc37e17968227e27891af71420f89fa5022cc60102caf1bb61d34c9a957da4b93f8c912d2f6e1c3210685c"}]}]}, 0x224}}, 0x4090)

6.824107647s ago: executing program 3 (id=4723):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048005}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf2507000000040001801c00018008000100", @ANYRES32=r2, @ANYBLOB="080003800100000008000300020000003c3000", @ANYRES32, @ANYBLOB="1400020070696d72656730000000000000000000080001", @ANYRES32=r2, @ANYBLOB="1400020077673000000000000000000000000000140001800800030002000000080003000200"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
writev(r4, &(0x7f0000000180)=[{0x0}], 0x1)
sendto$inet6(r5, 0x0, 0xfc00, 0x700, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)

6.220941713s ago: executing program 0 (id=4727):
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0x0, [0x2, 0xfffffffffffffffc, 0x9, 0x8, 0x9, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000c80)=0x78)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff2e89, 0x4, 0x6, 0x4, 0x101, 0x9]}, &(0x7f0000000200)=0x78)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf}, 0x1c)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850)
r3 = epoll_create(0x8617)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000001c0)={0x80000000})
mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r5=>0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}})
unshare(0x6a040000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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")
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r5, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}})
unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
read$watch_queue(0xffffffffffffffff, &(0x7f0000000cc0)=""/4096, 0x1000)

6.125077267s ago: executing program 0 (id=4728):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x7f, 0x9a, 0x4, 0xb6, 0x0, 0x382, 0xb05, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000640), 0x2}, 0x400, 0xa9, 0x3, 0x7, 0x5, 0x80, 0xf, 0x0, 0x7, 0x0, 0xc2f}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x7}, 0x110, 0x32, 0x1, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095a5a084502ae867e70720bf018aefa7b27e6bf3b7a2e653c208e6087474f18041e3b370447e72427e2ae35a3bace0c4802ff07bddd8a035650cf415d847c6a3e3"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r2], 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', <r5=>0x0, 0x4, 0x1f, 0x9, 0xf358, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x7800, 0x8, 0x5}})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x5, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffb}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff63)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000007c0))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596f8aca1f26c4e54dd3c839c63ecba701f7518abef567139fd50aba0ce94ab8786582ae2f35099ba41"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)

6.009022482s ago: executing program 0 (id=4729):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="060700"/13, @ANYRES16], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080c20000fd0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
r2 = msgget$private(0x0, 0x228)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/236)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='ext4_nfs_commit_metadata\x00', r4, 0x0, 0x40}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)="bd335a1dca247bb3b919c91c3273d032a2e4e9654ee5a17af639338cce3981338bd3a5c97853902d6a082841d8dcd40f5cc1d584d7e12df333089a9e67b432c53b6d118442d7a7aa5aa61d83b641db338891803f8f9a9da60297a13f75bc6d600004af8801", &(0x7f00000002c0)="f7b1ecf59876d753e70d0018aa1af0a75e7338cffc20d6e0543a16819f45ac0ddeea586b498b3fdb4694f480b98407851d2045edec3ba41e800ab434cecc7a349218ddb37e03e9060286cdf07bf9da7a10de4e5ce9d0d0fe2c58d34126a1b64473f3e23b97040c26038f7ddb60eb0991dc340103472e8e73e2", 0xffffd6c0, r6}, 0x38)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0)
r7 = gettid()
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
gettid()
read(0xffffffffffffffff, 0x0, 0x0)
read$rfkill(0xffffffffffffffff, &(0x7f00000004c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x0, 0x0, 0x0, 0x13, 0x1, 0x8}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x2}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0043"], 0x40}}, 0x0)

5.880169228s ago: executing program 1 (id=4731):
mmap(&(0x7f000009b000/0x4000)=nil, 0x4000, 0x3000002, 0x11, 0xffffffffffffffff, 0xd43be000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x3a)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x90000, 0x8)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={0xffffffffffffffff, 0x0}, 0x20)

5.646180758s ago: executing program 0 (id=4732):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800482, &(0x7f0000000240)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000", @ANYBLOB="28448e5dde9b2c4778f494f15437", @ANYRESDEC], 0x3, 0x191, &(0x7f0000000640)="$eJzs3c+qElEcB/Cff5qkletoMdCmlVRPYIWCNBAULmpVYG00gtxMrXyL3qBX6XXClTsv3hHlyly4F64O1/l8Nn7xq5xzZjFnNWc+P/k+nfyYf/v77090Oo1o96Mfq0Z0oxmtKCwCADgnq/U6/q8LN/j56xNMCQA4slvu/wDAGbD/A0D92P8BoH4+fPz09lWWDd6naSdiucjH+bj4LPrhKBs8Ty919/9a5vm4tetfFH16tX8Qj7b9y9I+iWdPi37TvXmXHfQPY1I24X7jzq8BAAAAAAAAAAAAAAAAAAAAAACcWi/dKT3fp9dLrumLNBwl2+8Oz/dpx+N2yYDJUZYBAAAAAAAAAAAAAAAAAAAA99r81+/pl9ns609BEIRdqPrOBAAAAAAAAAAAAAAAAAAA9bN/6LfqmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAdfbv/z9e2IzTrHqhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU2kUAAAD//1z+TP8=")
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x41)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r2, 0x402, 0x1a)
fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2})
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x140)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40047211, &(0x7f0000000200)={@desc={0x1, 0x0, @desc3}})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
sendto$inet6(r6, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0x7, 0x8000, 0x7, 0x30b, 0x4, 0xf7c, 0x3, <r7=>0x0}, &(0x7f0000000400)=0x20)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000500)={r7, 0x5, 0x1, [0xe]}, &(0x7f0000000640)=0xa)
shutdown(r6, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "728c8ac252aec942", "052fc21567726db1136329d5b4984635", "15b7e3a2", "e9670f4f50869b8b"}, 0x28)

5.524796203s ago: executing program 0 (id=4733):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x44}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
rmdir(0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0xfffe, {[@mptcp=@ack={0x1e, 0x4, 0x7}, @sack={0x5, 0x2}]}}}}}}}, 0x0)
r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES8=r8, @ANYBLOB="ec2b1fc016d15d4812def11b01b0ba166c091614bb96", @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRESHEX=r5], 0x64}, 0x1, 0x0, 0x0, 0x2000800d}, 0x4000000)

4.306128775s ago: executing program 1 (id=4736):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}})
readv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1)
r1 = timerfd_create(0x0, 0x80800)
timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})
read(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000006c0)={[{@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noinit_itable}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r3}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
ioctl$BLKCRYPTOPREPAREKEY(0xffffffffffffffff, 0xc040128b, &(0x7f00000005c0)={&(0x7f0000000500)="6a9d755352fc2cb50739a938f33c5f10eea40b46c4b4c281dcad665eef7b553f009601d1d0c7e45f68cbf314aeb03ad6d35d6f88da16121bce06efc2033d9a80a6cf81ab56aa0714918764c7fde305d1871a03c1689835fe776b17ea87c067a2eb19bf9c9f4a37", 0x67, &(0x7f0000000580)=""/11, 0xb})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000003c0)=""/34)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x40, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='kvm_vcpu_wakeup\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18)
clock_gettime(0x0, &(0x7f00000002c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00')
read(r0, &(0x7f00000002c0)=""/200, 0x39)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

4.303969085s ago: executing program 3 (id=4738):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a02000000000018"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
getrusage(0x0, &(0x7f0000000900))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats})
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

3.826233186s ago: executing program 5 (id=4740):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x400, 0x2, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@fwd={0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x50}, 0x28)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x2, @empty, 0x9}, 0x19)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x3, 0x2, 0x100, 0x8, 0x4900000, r9})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})

3.825293396s ago: executing program 4 (id=4741):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x4004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
r1 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
set_mempolicy(0x4005, 0x0, 0x9)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==")
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000840)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0)

3.26619843s ago: executing program 1 (id=4742):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x2fd7782f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x200600, &(0x7f00000000c0)=ANY=[], 0x1, 0x3f9, &(0x7f00000007c0)="$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")
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3.26512355s ago: executing program 4 (id=4743):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000010c0)='alloc_extent_state\x00', r1}, 0x18)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006140)='/proc/key-users\x00', 0x0, 0x0)
read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0)
read$hiddev(r3, &(0x7f0000001100)=""/234, 0xea)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
r4 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.26125138s ago: executing program 5 (id=4744):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$rfkill(r1, &(0x7f0000000040), 0x8)
sendmmsg$inet(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="b7", 0x1}], 0x1}}], 0x2, 0x24001844)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095", @ANYRESHEX=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = dup(r3)
setsockopt$inet_int(r4, 0x0, 0xce, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0x8eef0a3e)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000003c0)={<r8=>0x0, @in6={{0xa, 0x4e24, 0xffff, @private0, 0x838b}}, 0x8, 0x5, 0x32f, 0x200, 0x4f8}, &(0x7f0000000480)=0x98)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000500)={r8}, &(0x7f00000006c0)=0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138)
write$UHID_DESTROY(r10, &(0x7f0000000340), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

2.611939888s ago: executing program 1 (id=4745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x38}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff033168440372b89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x2)
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x9}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', <r6=>0x0, 0x780, 0x8, 0xfffffffd, 0x1, {{0x1e, 0x4, 0x2, 0x0, 0x78, 0x64, 0x0, 0xf0, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@rr={0x7, 0x23, 0x4d, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, @loopback, @rand_addr=0x64010100, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}]}, @timestamp_prespec={0x44, 0x14, 0xaa, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x200}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xc}]}, @generic={0x88, 0x9, "17d018877f4187"}, @timestamp={0x44, 0x10, 0x86, 0x0, 0x0, [0x0, 0x2, 0xb]}]}}}}})
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000480)={0x0, 0x8, 0xa, 0x0, @vifc_lcl_ifindex=r6, @rand_addr=0x64010102}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000580)={<r10=>0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x2, 0x3, 0x8, 0x7fffffff, 0x3ff}, &(0x7f0000000640)=0x98)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000680)={r10, 0xb4, "cb90ee0ac601968429cea10c4a5bafb5fe97afa2edd0a12c6b4e2c528e7021a1f693aa4723adbf04c38b3ef26911774f07472465df87db5cf44e37a2b9bda169c1e1a9d9d5089b3ea1cb54fa2f5c53a481c93de0404fb2bc0771599f83bf1c25175e2c176bdb8eb29f16399238d85fc55d065d458a45e8b736ff066b89d89e6d0ad41d71ce69ccf2e1e507c1d2cd9ec2c646f1ffb0b22fd8303923699e1535b155af4ae1b56d999c2c102996a725b774a96fd7c1"}, &(0x7f0000000740)=0xbc)
mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001000)={'syz', 0x1}, &(0x7f0000001000)='.', 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8d, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}, @IFLA_MACSEC_ES={0x5}]}}}]}, 0x44}}, 0x0)

2.611311078s ago: executing program 5 (id=4747):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @private=0xa010102}], 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x84, 0x1, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x53, 0x3, '}mJ3[\xc59\xdf\xdd=i\xedQ\xc1]\xc8l\x00a\x02\xfbH\xa0\x8e\ng&\x92X\x9aD\x1eJ+\xad0s\xfd*\xdbwU\xd4\x0f\xcb}\x1e\x02_@\x8d\x9b\xb9R8D\xbb\xfe\x8cp\xcd9\xde\xccm\x98\xc3\xd3\xfb\xfd1\xb6w\xb4q\xd4\xe6V\xb9'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x9c}}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r7}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r5, 0x0, 0x9}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42708, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x40}, 0x100b28, 0x6, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xa0000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0x8eef0a3e)

2.610211568s ago: executing program 3 (id=4748):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095", @ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5816}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50)
socket$xdp(0x2c, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)="001094bd2e4935970eaef7d96780a53d81784c8823a1ee0935eeece0f6a46a41a17cec14384a0177477c2c671e5b7fc3583e3b4883", &(0x7f0000000140), 0x5, r4}, 0xffa1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc4e4268ca7a4d45a, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r7}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='security.'], 0x0, 0x0, 0x1)
rmdir(&(0x7f0000000000)='./file0\x00')
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, &(0x7f0000000180)=0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2.608203058s ago: executing program 4 (id=4749):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10)
connect$tipc(r2, &(0x7f0000000000)=@id, 0x10)
close(r2)
r3 = socket(0x2a, 0x2, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmsg(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2100)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r8=>0x0})
r9 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r11=>0x0})
bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)
sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

1.843483641s ago: executing program 1 (id=4750):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000043fbf4e2c007886618d82daed6ce0000000095f9ff0003000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$kcm(0xa, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000580)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @remote}, 0x2a, {0x2, 0x4e22, @empty}, 'macsec0\x00'})
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28)
exit(0xffff)
r3 = epoll_create1(0x80000)
epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0xbf7)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000010})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb3}, 0x50)

1.842475831s ago: executing program 5 (id=4751):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b45, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}})
r1 = socket(0x11, 0x800000003, 0x96)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x22020600)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000000)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})

1.841447351s ago: executing program 3 (id=4752):
r0 = creat(&(0x7f0000000340)='./file1\x00', 0x5)
write$cgroup_pressure(r0, &(0x7f0000000500)={'some', 0x20, 0xc, 0x20, 0x1}, 0x2f)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='itimer_state\x00', r1}, 0x18)
setitimer(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3210046, &(0x7f0000000480)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}, {@dont_measure}, {@fowner_eq}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor}, {@appraise}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
waitid$P_PIDFD(0x3, r6, 0x0, 0x4, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000a40)={0x1, 0x5, 0x1})
openat2$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x2003, 0x180, 0x7}, 0x18)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000ac0)={0x0, {{0xa, 0x4e24, 0x8, @private0, 0xe}}}, 0x88)
syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")

1.835434541s ago: executing program 4 (id=4753):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18)
syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
creat(0x0, 0xd931d3864d39dcdb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x1000000, 0x0, 0x1, 0x1}, 0x21)
r5 = gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)

977.003218ms ago: executing program 5 (id=4754):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x4004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
r1 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
set_mempolicy(0x4005, 0x0, 0x9)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==")
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000840)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0)

976.042158ms ago: executing program 3 (id=4755):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mknod(0x0, 0x8001420, 0xffffff7f)
io_setup(0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
close(0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x10000000000}, 0x18)
socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x13f, 0x8}}, 0x20)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r1)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250d00000034000180140002006970366772657461703000000000000008000100", @ANYRES32=r2, @ANYBLOB="140002000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x200408c4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="06000000040000000800000008", @ANYBLOB="fd139a1159409b6a54d89172f796a30e7ad650266904a2fff2f94767d1af8ab64275edc9e50bdd34222649cddb51a498047fcd5e6d97f3a4e1a0288b8d7db442bb6f5b7494db98960df507f611dd881fa15cd15ad9fff7e58b0eb7312e4329378aa1f857c63cca8f77664a38d4c8ae53e589d73e619861f0588c8d8faaa3f506806c68b27536ccad326e79ee0872ec2cc5ed9532553e00852d371d3f8df9e1def22933c799e2a0eb70f1480a74e68408997c747f2c12d003ce407ca901e3ca58d1632317e1207edb", @ANYRES64], 0x48)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4)
sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x28, 0x3f7, 0x4, 0x70bd2a, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94)

975.116248ms ago: executing program 4 (id=4756):
socket$inet6(0xa, 0x3, 0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f00000004c0)="20ed9e644c28a73697633ed7b3b269e2aab6d7337f8891fdd7c02a59dbc28577cdc7c11b4d524928e3861ef63cfde460d7f897bfdb23ab501d4194e93b5f0ce804873afacad558a44fd981d26afd1dcc6cd6635c7856290e51ee5c5b9c9d68d7f73ccb907496f074098d46e46a09a8b0ca4311c3e766083ae5ad98fc6e16a5faf96d31f8e8f266ad587add36699b31132dc065abe101d90dca0b0954c5b6042bcdce6bea125f2aa3397d2480f3e988bfea32afb5a01c67f90f", &(0x7f0000000580)=""/179, &(0x7f0000000640)="664b76b3c62333f42ee61bcb2f14869d506ef9ed7b282a038df6c295d82a025d4a40c9cb36616dfbd05b8f8b1c5234479c2c0cac5c6ef1c87da859038526184dffd3f6221ac2191276ef0ec1ea09bd4bc5b18423d1fbf9042ad5222665db10e699aa0475b598f60db8754150e33e2db1a09addb1439457ef4b3ea062635585c1c705128a3587528fa6df5e538b2a937d", &(0x7f0000000700)="0d0e319fd603f14312b18a1550752bfd60bbe68162fbec944a686b2ce70fef88b014a237e9effba28de5433f02a9856704d8ba15556bc13e0ca5521c81a471a426de24eaaab8763516805bdd7f230d212cb8e80c2dcc3a2687bc228cf987a49743a16a90d88278f107b3655a05a7c18e2f70304d2e20ddac72f1dbd74cd1ffab493458ef87eae5afbefdcb6701a25d0c25f466e7a01687b9452b3b832abb5c116580", 0x200, r0}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf)
r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380))
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)='6', 0x1}], 0x1}}], 0x1, 0x24088804)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x40000, &(0x7f0000000300)={0xa, 0x100, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x9, 0x1}, 0xc)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000840)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xdbQ1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xf6As\x1a\xe3\x95\xa1\xb2nZ\x95\xc7&\xecK\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x8b\xe2Z?\xc5\x9aJ\xa3\xb7\xd4lA\x9e\n\xfd\x9d\xf8{V\x8f\"\xcd\nb\x82', &(0x7f0000000800)='dE\x00', 0x0)
close(r4)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

4.49078ms ago: executing program 1 (id=4757):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3, 0xd, 0x1, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
link(0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r5, 0x737f92dba6bf2ad6, 0x8, 0x5, 0x9, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast2, 0x40, 0x80, 0xff, 0x7f}})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r7 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000e1ff00000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0xfffffffffffffffd)
shmdt(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)

1.95536ms ago: executing program 5 (id=4758):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084)
ioctl$TCSETS(r0, 0x5435, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, &(0x7f0000000080))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000001000000002000000000000000181100001ce9f85e41a24ad26b6d879ce9c08b121b9204b4b5f840e3cd99d556bda46e1e341e8d69ac58d618c1836b7c22", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x10, 0x0, @multicast1}}}}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x11)
capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0x0, 0x3, 0x3ff})
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)

887.26µs ago: executing program 3 (id=4759):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x10010000)
fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x10005, 0x1, 0xfffffbff, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t')
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r8, 0x0, 0x6}, 0x18)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280))
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

0s ago: executing program 4 (id=4760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000201040000643000000000000000000000797a300000000009000384ca797a3100000000"], 0x43}}, 0x0)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004070203"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x10}, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000340a1e0aa53f3e3e86026062ebf2a39d1c133cb2e5d067be6841565d0483ced727ef37c1f8e3a5690e770c084aeae203b13dcfbfad0cafd9e42400a84018a1bfe02e5a7e16dbb1811b6864f89ca52aa7bd2ebeb2412a97e67aa3225e206f1716f44e3753"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x2}, 0x18)
unshare(0x62040200)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x429a, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@delchain={0x4a8, 0x65, 0x520, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0x6}, {0x2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_route={{0xa}, {0x460, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x7fff, 0x8, 0x0, 0x80000000, 0x6, 0x6, 0x7fffffff, 0x7, 0x2, 0x2, 0x80000000, 0x81, 0x0, 0x6, 0x2, 0x0, 0x7, 0xd7, 0x80000000, 0x3a, 0x3, 0x5, 0x10001, 0x9, 0x5, 0xd76, 0xfffffbff, 0x0, 0x9, 0x7ff, 0xa019, 0x7, 0x6, 0x2, 0x1000, 0xa3, 0x8, 0x6, 0x101, 0x2, 0x10, 0x5, 0x8, 0x1, 0x33b, 0xfff, 0x800, 0x9, 0xec10, 0x200, 0x7, 0xc, 0x8, 0x2, 0x9, 0x7f, 0x1, 0x1, 0x7fffffff, 0x40, 0x2, 0xfffffff8, 0x6, 0xfffffffc, 0x1d40fb86, 0x3, 0x4, 0x8, 0x1, 0x0, 0x5, 0xfffffff7, 0x0, 0x8, 0x2, 0x1, 0x8, 0x9, 0x4, 0x0, 0x7, 0xff, 0x9, 0x1000, 0x3, 0x101, 0x1, 0x7, 0xfffffffc, 0x6, 0x9, 0x4, 0x2, 0xb78, 0x8001, 0x5, 0x40, 0x4, 0xe67, 0x4, 0x5, 0x1000, 0x3eff, 0x0, 0x2, 0x4, 0x8, 0x5, 0x6, 0xff4, 0x7, 0x4, 0xfffffffb, 0x2, 0x5, 0x8, 0xfffffeff, 0x8, 0x7, 0xd, 0x3, 0xe, 0x7, 0x80000001, 0x5, 0xb, 0x8001, 0x9, 0x2, 0x4, 0x9, 0x2, 0x8, 0x6, 0x6, 0x4, 0x2, 0x29, 0x4cd6, 0x3, 0x7a, 0x80000001, 0x7fffffff, 0x9, 0x3550, 0x7, 0x0, 0x7, 0x7, 0x0, 0x40, 0xe512, 0x8, 0x3, 0xfffffffd, 0x10000, 0x3, 0x5, 0x0, 0xfffffffb, 0x8, 0x9, 0x5, 0xc, 0x3, 0x2, 0x5, 0x0, 0x8, 0x6, 0x3f, 0x2, 0x4, 0x6, 0x3, 0x7, 0x8001, 0x769a, 0xff, 0xfffff800, 0x800, 0x900000, 0x5, 0xa, 0x5a0, 0x8000, 0x2, 0xfffff001, 0x2, 0x6, 0x1, 0x0, 0x6, 0x0, 0x1ff, 0x8, 0x1, 0x2, 0x2, 0x2, 0x7da0fa1c, 0x8, 0x5, 0x1, 0x2, 0x9, 0x4, 0x10, 0xa00000, 0xcfc5, 0x1000, 0x1fc20a14, 0x0, 0x749, 0x4, 0x6, 0x1, 0x1, 0x2, 0x5, 0x101, 0xc5a, 0x3, 0x4, 0x1, 0x6, 0x5, 0xf45, 0x5, 0xc0, 0x6, 0xc5, 0x50, 0x0, 0x40, 0xfffffff8, 0x4, 0x2, 0xd470, 0x5, 0x28, 0x95, 0xffffffff, 0x3, 0x224, 0x8, 0x3, 0x0, 0x0, 0x44, 0x5, 0xa, 0x6, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0xfe}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd8}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4000091}, 0x240088c1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40c, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffc}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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")

kernel console output (not intermixed with test programs):

=1400 audit(233.948:14463): avc:  denied  { create } for  pid=20459 comm="syz.3.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  245.785686][   T29] audit: type=1400 audit(234.023:14464): avc:  denied  { prog_load } for  pid=20458 comm="syz.5.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  245.804356][   T29] audit: type=1400 audit(234.023:14465): avc:  denied  { create } for  pid=20458 comm="syz.5.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  245.823474][   T29] audit: type=1400 audit(234.023:14466): avc:  denied  { create } for  pid=20458 comm="syz.5.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  245.888665][   T29] audit: type=1400 audit(234.089:14467): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  245.912489][   T29] audit: type=1400 audit(234.135:14468): avc:  denied  { create } for  pid=20470 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  245.931766][   T29] audit: type=1400 audit(234.135:14469): avc:  denied  { map_create } for  pid=20470 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  245.950638][   T29] audit: type=1400 audit(234.135:14470): avc:  denied  { prog_load } for  pid=20470 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  245.969279][   T29] audit: type=1400 audit(234.135:14471): avc:  denied  { bpf } for  pid=20470 comm="syz.5.2795" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  246.691423][T20599] ipvlan0: left allmulticast mode
[  246.696499][T20599] veth0_vlan: left allmulticast mode
[  246.704179][T20599] bond5: left promiscuous mode
[  246.709578][T20599] gretap1: left promiscuous mode
[  246.790366][T20597] Falling back ldisc for ttyS3.
[  246.837499][   T23] IPVS: starting estimator thread 0...
[  246.855074][T20622] veth0_vlan: left allmulticast mode
[  246.860478][T20622] macsec0: left promiscuous mode
[  246.866367][T20622] gretap2: left promiscuous mode
[  246.911561][T20629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20629 comm=syz.1.2834
[  246.929378][T20620] IPVS: using max 5136 ests per chain, 256800 per kthread
[  246.993530][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  246.993530][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  247.007048][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  247.188401][T20657] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  248.204882][T20720] validate_nla: 3 callbacks suppressed
[  248.204897][T20720] netlink: 'syz.1.2854': attribute type 29 has an invalid length.
[  248.231743][T20722] gretap0: left allmulticast mode
[  248.236847][T20722] gretap0: left promiscuous mode
[  248.241849][T20722] bridge0: port 1(gretap0) entered disabled state
[  248.469381][T20733] syzkaller0: entered promiscuous mode
[  248.474880][T20733] syzkaller0: entered allmulticast mode
[  248.636545][T20746] netlink: 'syz.5.2863': attribute type 1 has an invalid length.
[  248.668415][T20746] bond2: entered promiscuous mode
[  248.673539][T20746] bond2: entered allmulticast mode
[  248.700605][T20746] 8021q: adding VLAN 0 to HW filter on device bond2
[  249.212449][T20801] __nla_validate_parse: 6 callbacks suppressed
[  249.212519][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'.
[  249.546214][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'.
[  249.558045][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'.
[  249.567474][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'.
[  249.592396][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'.
[  249.601607][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'.
[  251.159118][   T29] kauditd_printk_skb: 1202 callbacks suppressed
[  251.159219][   T29] audit: type=1400 audit(239.102:15674): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  251.194259][T20894] 8021q: adding VLAN 0 to HW filter on device .`
[  251.210211][   T29] audit: type=1400 audit(239.159:15675): avc:  denied  { create } for  pid=20896 comm="syz.5.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[  251.229289][   T29] audit: type=1400 audit(239.159:15676): avc:  denied  { prog_load } for  pid=20896 comm="syz.5.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  251.247951][   T29] audit: type=1400 audit(239.159:15677): avc:  denied  { prog_load } for  pid=20896 comm="syz.5.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  251.266553][   T29] audit: type=1400 audit(239.159:15678): avc:  denied  { prog_load } for  pid=20896 comm="syz.5.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  251.291829][T20894] 8021q: adding VLAN 0 to HW filter on device team0
[  251.304449][T20894] net_ratelimit: 5 callbacks suppressed
[  251.304458][T20894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.426290][T20901] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2888'.
[  251.438540][   T29] audit: type=1400 audit(239.224:15679): avc:  denied  { prog_load } for  pid=20896 comm="syz.5.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  251.457223][   T29] audit: type=1400 audit(239.224:15680): avc:  denied  { mac_admin } for  pid=20896 comm="syz.5.2887" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  251.477965][   T29] audit: type=1401 audit(239.224:15681): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  251.478771][   T29] audit: type=1400 audit(239.271:15682): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  251.593391][   T29] audit: type=1400 audit(239.299:15683): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  251.871568][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'.
[  251.942968][T20946] netlink: 'syz.4.2897': attribute type 10 has an invalid length.
[  251.950824][T20946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2897'.
[  251.963107][T20946] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  252.008022][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'.
[  252.108182][T20957] ip6gre1: entered promiscuous mode
[  252.113390][T20957] ip6gre1: entered allmulticast mode
[  252.123623][ T3814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.131247][ T3814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.146403][T12134] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.283307][T20912] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.317343][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.381429][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  252.381429][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  252.394991][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  252.473189][T20971] netlink: 'syz.5.2906': attribute type 13 has an invalid length.
[  252.927892][T21003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21003 comm=syz.4.2920
[  254.940655][T21099] __nla_validate_parse: 3 callbacks suppressed
[  254.940668][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'.
[  255.579923][T21178] netlink: 'syz.3.2961': attribute type 10 has an invalid length.
[  255.587769][T21178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2961'.
[  255.597282][T21178] veth1_vlan: left promiscuous mode
[  255.603225][T21178] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  255.712661][T21193] netlink: 'syz.4.2969': attribute type 6 has an invalid length.
[  255.731692][T21193] netlink: 'syz.4.2969': attribute type 6 has an invalid length.
[  255.986984][ T3785] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.996349][ T3785] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.030632][ T3785] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.044550][ T3785] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.318820][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'.
[  256.328696][T21256] ip6gretap0 (unregistering): left promiscuous mode
[  256.508025][   T29] kauditd_printk_skb: 11088 callbacks suppressed
[  256.508040][   T29] audit: type=1326 audit(244.107:26766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.608383][T12838] audit: audit_backlog=65 > audit_backlog_limit=64
[  256.614973][T12838] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64
[  256.622699][T12838] audit: backlog limit exceeded
[  256.640862][   T29] audit: type=1326 audit(244.116:26767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.663639][   T29] audit: type=1326 audit(244.116:26768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.686390][   T29] audit: type=1326 audit(244.116:26769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.709053][   T29] audit: type=1326 audit(244.116:26770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.731746][   T29] audit: type=1326 audit(244.116:26771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.754463][   T29] audit: type=1326 audit(244.116:26772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x50000
[  256.873856][T21281] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2997'.
[  257.564764][T21336] xt_connbytes: Forcing CT accounting to be enabled
[  257.598645][T21336] Cannot find set identified by id 0 to match
[  257.745589][T21340] netlink: 'syz.5.3007': attribute type 6 has an invalid length.
[  257.753435][T21340] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3007'.
[  257.769702][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  257.769702][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  257.783285][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  257.944908][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'.
[  258.036955][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'.
[  258.074698][T21371] netlink: 'syz.3.3012': attribute type 6 has an invalid length.
[  258.111631][T21352] netlink: 'syz.3.3012': attribute type 1 has an invalid length.
[  258.138281][T21352] 8021q: adding VLAN 0 to HW filter on device bond3
[  258.198362][T21371] bond3: (slave geneve2): making interface the new active one
[  258.207086][T21371] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  258.215796][ T3814] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.225443][ T3814] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.234165][ T3814] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.243737][ T3814] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.283033][T21435] netlink: 'syz.1.3018': attribute type 6 has an invalid length.
[  258.290778][T21435] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3018'.
[  258.352202][T21446] netem: change failed
[  258.681357][T21460] xt_connbytes: Forcing CT accounting to be enabled
[  258.769270][T21460] Cannot find set identified by id 0 to match
[  258.907243][T21467] netlink: 'syz.5.3031': attribute type 6 has an invalid length.
[  258.915488][T21467] netlink: 'syz.5.3031': attribute type 6 has an invalid length.
[  259.045517][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'.
[  259.068845][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'.
[  259.424806][T21491] $H�: (slave dummy0): Releasing backup interface
[  259.438045][T21491] dummy0: left promiscuous mode
[  259.443399][T21491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  259.461244][T21491] netlink: 'syz.3.3042': attribute type 10 has an invalid length.
[  259.488821][T21497] 8021q: adding VLAN 0 to HW filter on device bond3
[  259.501029][T21491] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  259.520226][T21497] bond3 (unregistering): Released all slaves
[  259.710860][T21612] ������: renamed from vlan0
[  259.784492][T21631] ip6gre2: entered promiscuous mode
[  259.789789][T21631] ip6gre2: entered allmulticast mode
[  259.796103][ T3823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  259.803655][ T3823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  259.822135][ T3397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  259.948579][T21587] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  260.112441][ T3397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  260.388894][ T3397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  260.718432][T21710] syzkaller0: tun_chr_ioctl cmd 2147767521
[  260.870614][T21744] vlan2: entered promiscuous mode
[  260.875673][T21744] hsr_slave_1: entered promiscuous mode
[  260.881461][T21744] vlan2: entered allmulticast mode
[  260.886569][T21744] hsr_slave_1: entered allmulticast mode
[  260.900427][T21744] __nla_validate_parse: 3 callbacks suppressed
[  260.900439][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'.
[  260.948192][T21749] xt_connbytes: Forcing CT accounting to be enabled
[  260.958130][T21749] set match dimension is over the limit!
[  261.428608][T21761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21761 comm=syz.1.3099
[  261.452713][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'.
[  261.583440][T21769] validate_nla: 2 callbacks suppressed
[  261.583451][T21769] netlink: 'syz.1.3102': attribute type 13 has an invalid length.
[  261.618106][T21769] bridge0: port 2(gretap0) entered blocking state
[  261.624626][T21769] bridge0: port 2(gretap0) entered forwarding state
[  261.632938][T21769] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.640807][T21769] 8021q: adding VLAN 0 to HW filter on device team0
[  261.649416][T21769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.770281][T21779] netlink: 'syz.1.3105': attribute type 30 has an invalid length.
[  261.858278][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'.
[  261.864066][   T29] kauditd_printk_skb: 3989 callbacks suppressed
[  261.864080][   T29] audit: type=1400 audit(249.111:30762): avc:  denied  { map_create } for  pid=21795 comm="syz.4.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  261.960728][   T29] audit: type=1400 audit(249.121:30763): avc:  denied  { prog_load } for  pid=21794 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  261.979390][   T29] audit: type=1400 audit(249.121:30764): avc:  denied  { prog_load } for  pid=21794 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  261.998055][   T29] audit: type=1400 audit(249.121:30765): avc:  denied  { create } for  pid=21794 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[  262.017099][   T29] audit: type=1400 audit(249.121:30766): avc:  denied  { prog_load } for  pid=21794 comm="syz.1.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  262.035728][   T29] audit: type=1400 audit(249.121:30767): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  262.059416][   T29] audit: type=1326 audit(249.149:30768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9ff80af749 code=0x7ffc0000
[  262.081668][   T29] audit: type=1326 audit(249.149:30769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x7ffc0000
[  262.092547][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'.
[  262.104148][   T29] audit: type=1326 audit(249.149:30770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ff80af749 code=0x7ffc0000
[  262.135183][   T29] audit: type=1400 audit(249.177:30771): avc:  denied  { prog_load } for  pid=21803 comm="syz.4.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  262.227666][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'.
[  262.287296][ T3820] Bluetooth: hci0: Frame reassembly failed (-84)
[  262.398225][T21837] ip6t_srh: unknown srh match flags  4000
[  262.502531][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'.
[  262.557504][T21851] vlan1: entered allmulticast mode
[  262.562693][T21851] veth0_to_bond: entered allmulticast mode
[  262.641570][T21877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21877 comm=syz.4.3130
[  262.655407][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'.
[  262.773123][T21885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3132'.
[  263.157587][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  263.157587][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  263.171115][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  263.756248][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  264.165164][T21944] xt_hashlimit: max too large, truncated to 1048576
[  264.232710][T21944] xt_CT: You must specify a L4 protocol and not use inversions on it
[  264.440676][ T8542] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  265.076373][T21983] netlink: 'syz.0.3161': attribute type 1 has an invalid length.
[  265.101679][T21985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21985 comm=syz.0.3162
[  265.381287][T22005] netlink: 'syz.1.3170': attribute type 13 has an invalid length.
[  265.416282][T22005] bridge0: port 2(gretap0) entered disabled state
[  265.459518][T22009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3171'.
[  265.865119][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'.
[  266.340346][T22065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3192'.
[  266.714415][T22090] $H�: renamed from bond0
[  266.721066][T22090] $H�: entered promiscuous mode
[  266.726141][T22090] bond_slave_0: entered promiscuous mode
[  266.732025][T22090] bond_slave_1: entered promiscuous mode
[  266.737758][T22090] bridge_slave_1: entered promiscuous mode
[  267.231023][   T29] kauditd_printk_skb: 2128 callbacks suppressed
[  267.231036][   T29] audit: type=1326 audit(254.144:32900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  267.287778][   T29] audit: type=1326 audit(254.172:32901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  267.310781][   T29] audit: type=1400 audit(254.190:32902): avc:  denied  { map_create } for  pid=22116 comm="syz.4.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  267.329472][   T29] audit: type=1400 audit(254.190:32903): avc:  denied  { prog_load } for  pid=22116 comm="syz.4.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  267.427728][   T29] audit: type=1400 audit(254.312:32904): avc:  denied  { allowed } for  pid=22116 comm="syz.4.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  267.446706][   T29] audit: type=1400 audit(254.312:32905): avc:  denied  { module_request } for  pid=22116 comm="syz.4.3207" kmod="netdev-dummy0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  267.468174][   T29] audit: type=1400 audit(254.312:32906): avc:  denied  { sys_module } for  pid=22116 comm="syz.4.3207" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[  267.582445][T22125] netlink: 'syz.5.3210': attribute type 4 has an invalid length.
[  267.649266][   T29] audit: type=1400 audit(254.396:32907): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  267.672976][   T29] audit: type=1400 audit(254.406:32908): avc:  denied  { prog_load } for  pid=22119 comm="syz.3.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  267.691847][   T29] audit: type=1400 audit(254.443:32909): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  267.871230][T22136] xt_TPROXY: Can be used only with -p tcp or -p udp
[  268.352829][T22201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3221'.
[  268.469564][T22201] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.486174][T22203] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.510079][T22203] bond3: (slave bond0): Enslaving as an active interface with an up link
[  268.542054][T22201] IPv6: sit1: Disabled Multicast RS
[  268.547441][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  268.547441][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  268.560966][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  268.585248][T22201] sit1: entered allmulticast mode
[  268.665454][T22246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3224'.
[  268.745942][T22270] netlink: 'syz.3.3227': attribute type 39 has an invalid length.
[  268.847754][T22296] netlink: 'syz.4.3228': attribute type 13 has an invalid length.
[  269.254887][T22332] netlink: 'syz.0.3233': attribute type 10 has an invalid length.
[  269.254903][T22332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3233'.
[  269.255030][T22332] @: entered promiscuous mode
[  269.255087][T22332] @: entered allmulticast mode
[  269.255099][T22332] veth0_vlan: entered allmulticast mode
[  269.255155][T22332] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  269.489515][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'.
[  269.898566][T22353] binfmt_misc: register: failed to install interpreter file ./file0
[  270.170826][T22378] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  270.277884][T22385] xt_TPROXY: Can be used only with -p tcp or -p udp
[  270.411647][T22425] netlink: 14 bytes leftover after parsing attributes in process `+}[@'.
[  270.737734][T22484] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  270.744290][T22484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  270.751940][T22484] vhci_hcd vhci_hcd.0: Device attached
[  271.015231][   T23] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  271.300372][T22496] wg2: entered promiscuous mode
[  271.305339][T22496] wg2: entered allmulticast mode
[  271.473778][T22523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3270'.
[  271.528558][T22485] vhci_hcd: connection reset by peer
[  271.534020][ T3823] vhci_hcd: stop threads
[  271.538251][ T3823] vhci_hcd: release socket
[  271.542699][ T3823] vhci_hcd: disconnect device
[  272.119697][T22555] netlink: 'syz.3.3279': attribute type 10 has an invalid length.
[  272.127560][T22555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3279'.
[  272.159652][T22555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.223195][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.486198][T22593] netlink: '+}[@': attribute type 10 has an invalid length.
[  272.506755][T22593] team0 (unregistering): Port device team_slave_0 removed
[  272.626477][   T29] kauditd_printk_skb: 1023 callbacks suppressed
[  272.626492][   T29] audit: type=1400 audit(259.185:33933): avc:  denied  { map_create } for  pid=22631 comm="syz.1.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.660580][   T29] audit: type=1400 audit(259.213:33934): avc:  denied  { prog_load } for  pid=22631 comm="syz.1.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.679219][   T29] audit: type=1400 audit(259.213:33935): avc:  denied  { prog_load } for  pid=22631 comm="syz.1.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.697883][   T29] audit: type=1400 audit(259.213:33936): avc:  denied  { module_request } for  pid=22631 comm="syz.1.3289" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  272.719155][   T29] audit: type=1400 audit(259.213:33937): avc:  denied  { execmem } for  pid=22582 comm="syz.3.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  272.748907][   T29] audit: type=1400 audit(259.298:33938): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  272.918448][   T29] audit: type=1400 audit(259.401:33939): avc:  denied  { prog_load } for  pid=22635 comm="syz.5.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.918472][   T29] audit: type=1400 audit(259.401:33940): avc:  denied  { map_create } for  pid=22635 comm="syz.5.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.918490][   T29] audit: type=1400 audit(259.401:33941): avc:  denied  { prog_load } for  pid=22635 comm="syz.5.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.918549][   T29] audit: type=1400 audit(259.401:33942): avc:  denied  { map_create } for  pid=22635 comm="syz.5.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  273.252501][T22664] netlink: 'syz.3.3299': attribute type 4 has an invalid length.
[  273.260354][T22664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3299'.
[  273.270034][T22664] .`: renamed from $H�
[  273.641444][T22681] bridge0: port 2(gretap0) entered blocking state
[  273.647981][T22681] bridge0: port 2(gretap0) entered forwarding state
[  273.705398][T22681] 8021q: adding VLAN 0 to HW filter on device $H�
[  273.744054][T22681] 8021q: adding VLAN 0 to HW filter on device team0
[  273.789921][T22681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.933887][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  273.933887][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  273.947416][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  275.517578][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'.
[  276.329129][T22832] tipc: Resetting bearer <eth:veth0_macvtap>
[  276.413983][   T23] usb 1-1: enqueue for inactive port 0
[  276.424598][   T23] usb 1-1: enqueue for inactive port 0
[  276.569633][   T23] vhci_hcd: vhci_device speed not set
[  277.055694][T22846] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  277.062361][T22846] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  277.070053][T22846] vhci_hcd vhci_hcd.0: Device attached
[  277.077418][T22847] vhci_hcd: connection closed
[  277.085741][ T3814] vhci_hcd: stop threads
[  277.094836][ T3814] vhci_hcd: release socket
[  277.099263][ T3814] vhci_hcd: disconnect device
[  277.194619][ T8542] Bluetooth: hci0: command 0x1003 tx timeout
[  277.201071][ T3846] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  277.646435][T22860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22860 comm=syz.0.3348
[  278.032037][   T29] kauditd_printk_skb: 683 callbacks suppressed
[  278.032050][   T29] audit: type=1400 audit(264.246:34626): avc:  denied  { name_bind } for  pid=22898 comm="syz.5.3354" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0
[  278.110832][   T29] audit: type=1400 audit(264.311:34627): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  278.179058][   T29] audit: type=1400 audit(264.386:34628): avc:  denied  { map_create } for  pid=22902 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  278.198531][   T29] audit: type=1400 audit(264.396:34629): avc:  denied  { prog_load } for  pid=22902 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  278.217374][   T29] audit: type=1400 audit(264.396:34630): avc:  denied  { prog_load } for  pid=22902 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  278.236005][   T29] audit: type=1326 audit(264.396:34631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22902 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  278.259168][   T29] audit: type=1326 audit(264.405:34632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22902 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  278.267985][T22905] netlink: 'syz.1.3356': attribute type 7 has an invalid length.
[  278.282186][   T29] audit: type=1326 audit(264.405:34633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22902 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  278.289878][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'.
[  278.321672][   T29] audit: type=1326 audit(264.405:34634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22902 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  278.344625][   T29] audit: type=1326 audit(264.405:34635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22902 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  278.540990][T22911] netlink: 'syz.3.3357': attribute type 12 has an invalid length.
[  278.992652][T22930] netlink: 'syz.3.3364': attribute type 1 has an invalid length.
[  279.024871][T22930] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.051310][T22930] veth13: entered promiscuous mode
[  279.074955][T22930] bond4: (slave veth13): Enslaving as an active interface with a down link
[  279.097874][T22930] erspan0: entered allmulticast mode
[  279.117744][T22930] bond4: (slave erspan0): making interface the new active one
[  279.141902][T22930] erspan0: entered promiscuous mode
[  279.147234][T22930] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  279.321781][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  279.321781][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  279.335382][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  279.431652][T22986] syzkaller0: entered promiscuous mode
[  279.437146][T22986] syzkaller0: entered allmulticast mode
[  280.229219][T23050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3395'.
[  280.238312][T23050] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3395'.
[  280.413122][T23060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3398'.
[  280.671845][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'.
[  280.700894][T23083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.711834][T23083] .`: (slave batadv0): Releasing backup interface
[  280.756672][T23093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3406'.
[  280.856657][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'.
[  282.574807][T23180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3430'.
[  282.584140][T23180] dummy0: Caught tx_queue_len zero misconfig
[  282.621039][T23187] netlink: 'syz.5.3433': attribute type 4 has an invalid length.
[  282.628874][T23187] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3433'.
[  283.151733][T23213] bridge0: entered promiscuous mode
[  283.174000][T23213] bridge0: port 3(macsec1) entered blocking state
[  283.180475][T23213] bridge0: port 3(macsec1) entered disabled state
[  283.219207][T23213] macsec1: entered allmulticast mode
[  283.224537][T23213] bridge0: entered allmulticast mode
[  283.245896][T23213] macsec1: left allmulticast mode
[  283.250990][T23213] bridge0: left allmulticast mode
[  283.266956][T23213] bridge0: left promiscuous mode
[  283.411695][   T29] kauditd_printk_skb: 1304 callbacks suppressed
[  283.411709][   T29] audit: type=1400 audit(269.278:35940): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  283.460269][   T29] audit: type=1326 audit(269.325:35941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.488513][   T29] audit: type=1326 audit(269.344:35942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.511442][   T29] audit: type=1326 audit(269.344:35943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.534423][   T29] audit: type=1326 audit(269.344:35944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.557358][   T29] audit: type=1326 audit(269.344:35945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.580299][   T29] audit: type=1326 audit(269.344:35946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.603229][   T29] audit: type=1326 audit(269.344:35947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.626182][   T29] audit: type=1400 audit(269.344:35948): avc:  denied  { prog_load } for  pid=23218 comm="syz.5.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  283.644761][   T29] audit: type=1326 audit(269.344:35949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23218 comm="syz.5.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  283.767054][T23224] netlink: 'syz.4.3444': attribute type 39 has an invalid length.
[  284.422359][T23237] netlink: 'syz.5.3447': attribute type 4 has an invalid length.
[  284.430947][T23237] netlink: 'syz.5.3447': attribute type 4 has an invalid length.
[  284.720638][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  284.720638][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  284.734216][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  284.930410][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3460'.
[  284.956478][T23288] syzkaller0: entered promiscuous mode
[  284.961975][T23288] syzkaller0: entered allmulticast mode
[  285.347822][T23315] netlink: 'syz.5.3472': attribute type 10 has an invalid length.
[  285.619860][T23401] xt_policy: too many policy elements
[  285.933893][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'.
[  286.059712][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'.
[  286.392731][T23476] xt_hashlimit: max too large, truncated to 1048576
[  287.099939][T23503] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  287.185347][T23511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'.
[  287.217797][T23517] netlink: 'syz.3.3503': attribute type 30 has an invalid length.
[  287.225689][T23517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3503'.
[  287.241840][T23517] bond5: option arp_missed_max: invalid value (0)
[  287.248307][T23517] bond5: option arp_missed_max: allowed values 1 - 255
[  287.256469][T23517] bond5 (unregistering): Released all slaves
[  287.287562][T23584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3503'.
[  288.643980][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  288.802429][   T29] kauditd_printk_skb: 1081 callbacks suppressed
[  288.802444][   T29] audit: type=1400 audit(274.311:37031): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  288.832995][   T29] audit: type=1400 audit(274.330:37032): avc:  denied  { execmem } for  pid=23653 comm="syz.0.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  288.897889][   T29] audit: type=1400 audit(274.404:37033): avc:  denied  { prog_load } for  pid=23659 comm="syz.4.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  288.953306][   T29] audit: type=1400 audit(274.451:37034): avc:  denied  { create } for  pid=23659 comm="syz.4.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  288.973618][   T29] audit: type=1400 audit(274.451:37035): avc:  denied  { create } for  pid=23659 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  289.004911][   T29] audit: type=1400 audit(274.507:37036): avc:  denied  { read write } for  pid=3323 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  289.049746][T23665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3535'.
[  289.060730][T23665] 0: reclassify loop, rule prio 0, protocol 800
[  289.095715][   T29] audit: type=1400 audit(274.507:37037): avc:  denied  { read write } for  pid=23662 comm="syz.0.3534" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  289.119337][   T29] audit: type=1400 audit(274.507:37038): avc:  denied  { create } for  pid=23662 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=0
[  289.139038][   T29] audit: type=1400 audit(274.507:37039): avc:  denied  { create } for  pid=23662 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=0
[  289.158599][   T29] audit: type=1400 audit(274.507:37040): avc:  denied  { create } for  pid=23662 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=0
[  289.319593][T23724] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  289.326690][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3540'.
[  289.357647][T23724] netlink: 'syz.0.3539': attribute type 10 has an invalid length.
[  289.365505][T23724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3539'.
[  289.376526][T23724] veth1_vlan: left promiscuous mode
[  289.383157][T23724] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  289.470826][T23747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.491190][T23752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'.
[  289.657227][T23763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  289.663835][T23763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  289.671589][T23763] vhci_hcd vhci_hcd.0: Device attached
[  289.692591][T23770] vhci_hcd: connection closed
[  289.693300][ T3838] vhci_hcd: stop threads
[  289.702214][ T3838] vhci_hcd: release socket
[  289.706646][ T3838] vhci_hcd: disconnect device
[  290.097947][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  290.097947][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  290.111462][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  290.365711][T23802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.393349][T23802] netlink: 'syz.5.3558': attribute type 13 has an invalid length.
[  290.418929][T23806] ip6gre1: entered promiscuous mode
[  290.424169][T23806] ip6gre1: entered allmulticast mode
[  290.460708][T23776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  290.724695][T23853] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  290.736166][T23853] __nla_validate_parse: 2 callbacks suppressed
[  290.736180][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'.
[  290.755981][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'.
[  290.782552][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'.
[  290.791860][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'.
[  291.220521][ T3785] erspan0: left promiscuous mode
[  291.328200][T23870] netlink: 'syz.3.3572': attribute type 7 has an invalid length.
[  291.335938][T23870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'.
[  291.381226][ T3814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  291.387442][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'.
[  291.388851][ T3814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  291.420243][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  291.455275][T23880] xt_connbytes: Forcing CT accounting to be enabled
[  291.462061][T23880] set match dimension is over the limit!
[  291.605106][T23891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3580'.
[  291.614105][T23891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3580'.
[  292.419069][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.492626][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.547630][T23981] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  292.914491][T23992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3601'.
[  293.200077][T23997] netlink: 'syz.4.3602': attribute type 10 has an invalid length.
[  293.210584][T23997] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3602'.
[  293.353892][T24003] netlink: 'syz.5.3605': attribute type 2 has an invalid length.
[  294.153612][   T29] kauditd_printk_skb: 5887 callbacks suppressed
[  294.153695][   T29] audit: type=1400 audit(279.325:42859): avc:  denied  { allowed } for  pid=24045 comm="syz.3.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  294.188854][   T29] audit: type=1400 audit(279.353:42860): avc:  denied  { read write } for  pid=3323 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  294.217597][   T29] audit: type=1400 audit(279.353:42861): avc:  denied  { create } for  pid=24043 comm="syz.5.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0
[  294.236617][   T29] audit: type=1400 audit(279.381:42862): avc:  denied  { create } for  pid=24048 comm="syz.0.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  294.256738][   T29] audit: type=1400 audit(279.381:42863): avc:  denied  { create } for  pid=24048 comm="syz.0.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  294.276846][   T29] audit: type=1400 audit(279.381:42864): avc:  denied  { create } for  pid=24048 comm="syz.0.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[  294.295958][   T29] audit: type=1400 audit(279.381:42865): avc:  denied  { create } for  pid=24048 comm="syz.0.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  294.316158][   T29] audit: type=1400 audit(279.409:42866): avc:  denied  { prog_load } for  pid=24043 comm="syz.5.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  294.334777][   T29] audit: type=1400 audit(279.409:42867): avc:  denied  { prog_load } for  pid=24043 comm="syz.5.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  294.353374][   T29] audit: type=1400 audit(279.427:42868): avc:  denied  { module_request } for  pid=24051 comm="syz.4.3621" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  294.422911][T24064] netlink: 'syz.5.3624': attribute type 1 has an invalid length.
[  295.141869][T24153] team0 (unregistering): Port device team_slave_0 removed
[  295.167640][T24153] team0 (unregistering): Port device team_slave_1 removed
[  295.314953][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  295.487014][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  295.487014][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  295.500562][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  295.532400][T24207] netlink: 'syz.4.3635': attribute type 39 has an invalid length.
[  295.681977][T24214] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  296.019120][T24222] netlink: 'syz.1.3640': attribute type 12 has an invalid length.
[  296.126261][T24224] bridge0: port 2(gretap0) entered disabled state
[  296.330531][T24224] $H�: left promiscuous mode
[  296.335394][T24224] bond_slave_0: left promiscuous mode
[  296.340867][T24224] bond_slave_1: left promiscuous mode
[  296.346397][T24224] bridge_slave_1: left promiscuous mode
[  296.465765][T24224] wg2: left promiscuous mode
[  296.470420][T24224] wg2: left allmulticast mode
[  296.764817][T24239] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  296.773613][T24239] __nla_validate_parse: 5 callbacks suppressed
[  296.773624][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.789598][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.811959][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.821098][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.832988][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.842104][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.875859][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  296.951377][T24242] xt_CT: You must specify a L4 protocol and not use inversions on it
[  297.457968][T24279] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  297.695494][T24306] netlink: 'syz.5.3657': attribute type 21 has an invalid length.
[  297.703430][T24306] netlink: 'syz.5.3657': attribute type 1 has an invalid length.
[  297.711242][T24306] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3657'.
[  297.749122][T24310] gretap0: left allmulticast mode
[  297.754311][T24310] gretap0: left promiscuous mode
[  297.759426][T24310] ��
: port 1(gretap0) entered disabled state
[  297.768069][T24310] bond3: (slave bond0): Releasing backup interface
[  297.783721][T24310] bridge_slave_0: left allmulticast mode
[  297.789469][T24310] bridge_slave_0: left promiscuous mode
[  297.795241][T24310] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.803512][T24310] bridge_slave_1: left allmulticast mode
[  297.809193][T24310] bridge_slave_1: left promiscuous mode
[  297.814893][T24310] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.824542][T24310] bond0: (slave bond_slave_0): Releasing backup interface
[  297.837804][T24310] bond0: (slave bond_slave_1): Releasing backup interface
[  297.845851][T24310] veth0_to_team: left allmulticast mode
[  297.851493][T24310] veth0_to_team: left promiscuous mode
[  297.857131][T24310] ��
: port 2(veth0_to_team) entered disabled state
[  297.865798][T24310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  297.920289][T24317] xt_hashlimit: max too large, truncated to 1048576
[  298.099833][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'.
[  298.177665][T24388] netlink: 'syz.3.3670': attribute type 13 has an invalid length.
[  298.208045][ T3820] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.232258][ T3820] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.360690][ T3820] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.389718][ T3820] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.395683][T24395] binfmt_misc: register: failed to install interpreter file ./file2
[  298.432512][T24399] gretap0: left allmulticast mode
[  298.437715][T24399] gretap0: left promiscuous mode
[  298.442778][T24399] bridge0: port 2(gretap0) entered disabled state
[  298.450166][T24399] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  299.520279][   T29] kauditd_printk_skb: 920 callbacks suppressed
[  299.520317][   T29] audit: type=1400 audit(540.344:43789): avc:  denied  { create } for  pid=24431 comm="syz.4.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  299.581648][   T29] audit: type=1400 audit(540.372:43790): avc:  denied  { map_create } for  pid=24431 comm="syz.4.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  299.600518][   T29] audit: type=1400 audit(540.372:43791): avc:  denied  { prog_load } for  pid=24431 comm="syz.4.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  299.619135][   T29] audit: type=1400 audit(540.372:43792): avc:  denied  { prog_load } for  pid=24431 comm="syz.4.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  299.637792][   T29] audit: type=1400 audit(540.372:43793): avc:  denied  { prog_load } for  pid=24431 comm="syz.4.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  299.656385][   T29] audit: type=1400 audit(540.372:43794): avc:  denied  { prog_load } for  pid=24431 comm="syz.4.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  299.674981][   T29] audit: type=1326 audit(540.372:43795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24431 comm="syz.4.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  299.698050][   T29] audit: type=1326 audit(540.372:43796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24431 comm="syz.4.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  299.721008][   T29] audit: type=1326 audit(540.372:43797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24431 comm="syz.4.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  299.743996][   T29] audit: type=1326 audit(540.372:43798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24431 comm="syz.4.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  300.391024][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3706'.
[  300.436004][T24504] netlink: 'syz.5.3706': attribute type 10 has an invalid length.
[  300.454116][T24504] netlink: 'syz.5.3706': attribute type 10 has an invalid length.
[  300.473757][T24504] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  300.879362][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  300.879362][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  300.892920][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  301.315757][T24593] netlink: 'syz.0.3712': attribute type 4 has an invalid length.
[  301.369465][T24593] netlink: 'syz.0.3712': attribute type 4 has an invalid length.
[  301.918320][T24618] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  302.028333][T24630] Cannot find add_set index 0 as target
[  302.693021][T24653] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  302.788823][T24664] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  303.012156][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  303.067334][T24702] netlink: 'syz.5.3743': attribute type 30 has an invalid length.
[  303.197347][T24715] __nla_validate_parse: 1 callbacks suppressed
[  303.197361][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'.
[  303.258979][T24721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3750'.
[  303.268050][T24721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3750'.
[  303.278311][T24721] xt_hashlimit: max too large, truncated to 1048576
[  303.525319][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  303.757421][T24734] netlink: 'syz.1.3755': attribute type 30 has an invalid length.
[  303.765390][T24734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3755'.
[  303.797983][T24734] bond0: option arp_missed_max: invalid value (0)
[  303.804437][T24734] bond0: option arp_missed_max: allowed values 1 - 255
[  303.835314][T24734] bond0 (unregistering): Released all slaves
[  303.846520][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  303.866622][T24768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3755'.
[  303.988435][T24824] $H�: renamed from .`
[  303.993915][T24824] $H�: entered promiscuous mode
[  304.062215][T24838] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  304.068734][T24838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  304.076140][T24838] vhci_hcd vhci_hcd.0: Device attached
[  304.102707][T24838] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5)
[  304.109222][T24838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  304.116790][T24838] vhci_hcd vhci_hcd.0: Device attached
[  304.133860][T24838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  304.144065][T24838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  304.156624][T24838] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11)
[  304.163254][T24838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  304.170941][T24838] vhci_hcd vhci_hcd.0: Device attached
[  304.186984][T24838] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13)
[  304.193598][T24838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  304.201200][T24838] vhci_hcd vhci_hcd.0: Device attached
[  304.221421][T24844] vhci_hcd: connection closed
[  304.221725][ T3789] vhci_hcd: stop threads
[  304.222721][T24847] vhci_hcd: connection closed
[  304.226395][ T3789] vhci_hcd: release socket
[  304.226410][ T3789] vhci_hcd: disconnect device
[  304.245544][T24841] vhci_hcd: connection closed
[  304.248684][T24839] vhci_hcd: connection closed
[  304.255459][ T3789] vhci_hcd: stop threads
[  304.264377][ T3789] vhci_hcd: release socket
[  304.268779][ T3789] vhci_hcd: disconnect device
[  304.273644][ T3410] vhci_hcd: vhci_device speed not set
[  304.279662][ T3789] vhci_hcd: stop threads
[  304.283969][ T3789] vhci_hcd: release socket
[  304.288422][ T3789] vhci_hcd: disconnect device
[  304.293446][ T3789] vhci_hcd: stop threads
[  304.297722][ T3789] vhci_hcd: release socket
[  304.302132][ T3789] vhci_hcd: disconnect device
[  304.337771][ T3410] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[  304.345305][ T3410] usb 3-1: enqueue for inactive port 0
[  304.350909][ T3410] usb 3-1: enqueue for inactive port 0
[  304.356623][ T3410] usb 3-1: enqueue for inactive port 0
[  304.434041][ T3410] vhci_hcd: vhci_device speed not set
[  304.872995][   T29] kauditd_printk_skb: 1671 callbacks suppressed
[  304.873008][   T29] audit: type=1400 audit(545.358:45470): avc:  denied  { bpf } for  pid=24890 comm="syz.1.3771" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  304.919006][T12134] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  304.930834][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'.
[  304.963442][   T29] audit: type=1400 audit(545.386:45471): avc:  denied  { map_create } for  pid=24890 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  304.982225][   T29] audit: type=1400 audit(545.386:45472): avc:  denied  { prog_load } for  pid=24890 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  305.000878][   T29] audit: type=1400 audit(545.386:45473): avc:  denied  { map_create } for  pid=24890 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  305.019586][   T29] audit: type=1400 audit(545.386:45474): avc:  denied  { prog_load } for  pid=24890 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  305.038199][   T29] audit: type=1326 audit(545.386:45475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.1.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  305.061202][   T29] audit: type=1326 audit(545.386:45476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.1.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  305.084299][   T29] audit: type=1326 audit(545.386:45477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.1.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  305.107235][   T29] audit: type=1326 audit(545.386:45478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24890 comm="syz.1.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f776483f749 code=0x7ffc0000
[  305.130106][   T29] audit: type=1400 audit(545.386:45479): avc:  denied  { create } for  pid=24890 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0
[  305.160443][T24888] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3770'.
[  305.621717][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'.
[  305.631364][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'.
[  305.640801][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'.
[  305.655592][T24910] bridge0: port 1(macsec0) entered blocking state
[  305.662059][T24910] bridge0: port 1(macsec0) entered disabled state
[  305.668775][T24910] macsec0: entered allmulticast mode
[  305.674082][T24910] bridge0: entered allmulticast mode
[  305.679976][T24910] macsec0: left allmulticast mode
[  305.685099][T24910] bridge0: left allmulticast mode
[  305.929466][T24928] futex_wake_op: syz.3.3785 tries to shift op by -1; fix this program
[  306.130834][T24974] bridge7: entered promiscuous mode
[  306.136099][T24974] bridge7: entered allmulticast mode
[  306.262275][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  306.262275][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  306.275905][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  306.521346][T25038] netlink: 'syz.5.3807': attribute type 39 has an invalid length.
[  306.699707][T25071] netlink: 'syz.3.3811': attribute type 13 has an invalid length.
[  306.714201][T25071] 8021q: adding VLAN 0 to HW filter on device .`
[  306.722697][T25071] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  306.996632][T25090] netlink: 'syz.4.3821': attribute type 12 has an invalid length.
[  307.074930][T25093] wireguard0: entered promiscuous mode
[  307.080408][T25093] wireguard0: entered allmulticast mode
[  307.275142][T25130] bond5: entered allmulticast mode
[  307.300189][T25130] 8021q: adding VLAN 0 to HW filter on device bond5
[  307.653046][T25200] xt_hashlimit: max too large, truncated to 1048576
[  308.079247][T25237] netlink: 'syz.4.3847': attribute type 10 has an invalid length.
[  308.087126][T25237] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  308.434235][T25253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25253 comm=syz.5.3854
[  308.964581][T25300] Cannot find set identified by id 0 to match
[  309.154547][T25308] __nla_validate_parse: 7 callbacks suppressed
[  309.154560][T25308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'.
[  309.197085][T25333] netlink: 'syz.4.3877': attribute type 21 has an invalid length.
[  309.205064][T25333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3877'.
[  309.215177][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'.
[  309.224490][T25333] 8021q: VLANs not supported on ip6_vti0
[  309.755649][T25371] netlink: 'syz.4.3891': attribute type 12 has an invalid length.
[  310.522903][   T29] kauditd_printk_skb: 2597 callbacks suppressed
[  310.522918][   T29] audit: type=1400 audit(550.633:48077): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  310.564631][   T29] audit: type=1400 audit(550.652:48078): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  310.588295][   T29] audit: type=1400 audit(550.661:48079): avc:  denied  { read write } for  pid=25415 comm="syz.3.3900" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  310.611854][   T29] audit: type=1400 audit(550.661:48080): avc:  denied  { create } for  pid=25417 comm="syz.1.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  310.632061][   T29] audit: type=1400 audit(550.671:48081): avc:  denied  { map_create } for  pid=25415 comm="syz.3.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  310.650853][   T29] audit: type=1400 audit(550.727:48082): avc:  denied  { create } for  pid=25417 comm="syz.1.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  310.660075][T25418] audit: audit_backlog=65 > audit_backlog_limit=64
[  310.670847][   T29] audit: type=1400 audit(550.727:48083): avc:  denied  { create } for  pid=25417 comm="syz.1.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  310.677352][T25418] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64
[  310.697328][   T29] audit: type=1400 audit(550.727:48084): avc:  denied  { create } for  pid=25417 comm="syz.1.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  310.795287][T25419] netlink: 'syz.3.3900': attribute type 30 has an invalid length.
[  311.212979][T25445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25445 comm=syz.3.3908
[  311.481568][T25471] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  311.536523][T25477] ip6t_srh: unknown srh match flags  4000
[  311.581242][T25481] IPVS: set_ctl: invalid protocol: 43 172.20.20.25:20004
[  311.609325][T25483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  311.654071][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  311.654071][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  311.667582][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  311.794182][T25524] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  311.800712][T25524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  311.808459][T25524] vhci_hcd vhci_hcd.0: Device attached
[  311.821291][T25528] vhci_hcd: connection closed
[  311.821481][ T3789] vhci_hcd: stop threads
[  311.830419][ T3789] vhci_hcd: release socket
[  311.834875][ T3789] vhci_hcd: disconnect device
[  311.852751][T25531] bond0 (unregistering): Released all slaves
[  312.179008][T25620] netlink: 'syz.4.3945': attribute type 10 has an invalid length.
[  312.337303][T25632] netlink: 'syz.3.3951': attribute type 21 has an invalid length.
[  312.345768][T25632] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3951'.
[  313.030192][T25655] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3960'.
[  313.039267][T25655] hsr_slave_0: left promiscuous mode
[  313.044983][T25655] hsr_slave_1: left promiscuous mode
[  313.084607][T25655] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3960'.
[  313.263634][T25669] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  313.270157][T25669] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  313.277852][T25669] vhci_hcd vhci_hcd.0: Device attached
[  313.286331][T25671] vhci_hcd: connection closed
[  313.286617][ T3814] vhci_hcd: stop threads
[  313.295582][ T3814] vhci_hcd: release socket
[  313.300053][ T3814] vhci_hcd: disconnect device
[  313.447840][T25690] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3974'.
[  313.463055][T25692] netlink: 'syz.4.3975': attribute type 13 has an invalid length.
[  313.745230][T25743] netlink: 'syz.4.3978': attribute type 12 has an invalid length.
[  314.326083][T25776] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  314.335353][T25776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'.
[  314.345006][T25776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'.
[  314.354053][T25776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'.
[  314.826294][T25799] gre1: entered promiscuous mode
[  315.516707][T25840] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  315.526408][T25840] __nla_validate_parse: 2 callbacks suppressed
[  315.526419][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4003'.
[  315.633646][T25847] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4007'.
[  315.712824][T25852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  315.739283][T25857] team0 (unregistering): Port device team_slave_0 removed
[  315.747037][T25857] team0 (unregistering): Port device team_slave_1 removed
[  315.758093][T25852] netlink: 'syz.0.4018': attribute type 13 has an invalid length.
[  315.807394][T25895] bond4: (slave erspan0): Releasing active interface
[  315.833626][T25895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  315.873085][   T29] kauditd_printk_skb: 2736 callbacks suppressed
[  315.873099][   T29] audit: type=1400 audit(555.647:50820): avc:  denied  { map_create } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  315.898613][   T29] audit: type=1400 audit(555.647:50821): avc:  denied  { prog_load } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  315.917245][   T29] audit: type=1400 audit(555.666:50822): avc:  denied  { prog_load } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  315.935830][   T29] audit: type=1400 audit(555.666:50823): avc:  denied  { map_create } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  315.954507][   T29] audit: type=1400 audit(555.666:50824): avc:  denied  { map_create } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  315.981803][   T29] audit: type=1400 audit(555.666:50825): avc:  denied  { open } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  316.000671][   T29] audit: type=1326 audit(555.666:50826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x7ffc0000
[  316.023643][   T29] audit: type=1326 audit(555.666:50827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff80af749 code=0x7ffc0000
[  316.029824][T25901] binfmt_misc: register: failed to install interpreter file ./file2
[  316.046576][   T29] audit: type=1326 audit(555.666:50828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ff80af749 code=0x7ffc0000
[  316.077502][   T29] audit: type=1400 audit(555.666:50829): avc:  denied  { prog_load } for  pid=25900 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  316.110485][T25908] erspan0: left allmulticast mode
[  316.119528][T25908] .`: left promiscuous mode
[  316.125631][T25908] 0�X���: left allmulticast mode
[  316.132556][T25908] ipvlan0: left allmulticast mode
[  316.137584][T25908] veth0_vlan: left allmulticast mode
[  316.143116][T25908] veth2: left promiscuous mode
[  316.147864][T25908] veth2: left allmulticast mode
[  316.153558][T25908] veth4: left promiscuous mode
[  316.158316][T25908] veth4: left allmulticast mode
[  316.164736][T25908] gretap1: left promiscuous mode
[  316.170212][T25908] veth13: left promiscuous mode
[  316.184679][T25912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4017'.
[  316.207372][T25912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25912 comm=syz.1.4017
[  316.211859][T25928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25928 comm=syz.0.4020
[  316.802544][T25963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  316.886713][T25968] netlink: 'syz.5.4035': attribute type 13 has an invalid length.
[  316.926485][T25971] netlink: 'syz.5.4037': attribute type 10 has an invalid length.
[  316.935006][T25971] bond0: (slave dummy0): Releasing backup interface
[  316.985907][T25980] gre1: entered promiscuous mode
[  317.008778][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4052'.
[  317.020706][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4052'.
[  317.038327][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  317.038327][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  317.051916][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  317.090683][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'.
[  317.118154][T25997] netlink: 'syz.3.4046': attribute type 1 has an invalid length.
[  317.132227][T25997] 8021q: adding VLAN 0 to HW filter on device bond5
[  317.150358][T25997] bond5: (slave bridge7): making interface the new active one
[  317.159010][T25997] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  317.173120][T25997] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  317.274833][T26042] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  318.143785][T26083] 8021q: adding VLAN 0 to HW filter on device .`
[  318.155250][T26083] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  318.183924][T26083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'.
[  318.197040][T26087] can0: slcan on ptm0.
[  318.235695][T26087] can0 (unregistered): slcan off ptm0.
[  318.341661][T26107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4059'.
[  318.581452][T26125] netlink: 'syz.5.4066': attribute type 13 has an invalid length.
[  318.621202][T26127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26127 comm=syz.5.4067
[  318.792174][T26141] netlink: 'syz.0.4071': attribute type 10 has an invalid length.
[  319.141788][T26199] netlink: 'syz.5.4085': attribute type 4 has an invalid length.
[  319.215619][T26213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26213 comm=syz.5.4091
[  320.057881][T26249] netlink: 'syz.5.4101': attribute type 5 has an invalid length.
[  320.060737][T26248] netlink: 'syz.3.4102': attribute type 4 has an invalid length.
[  320.065657][T26249] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4101'.
[  320.103004][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4106'.
[  320.108858][T26248] netlink: 'syz.3.4102': attribute type 4 has an invalid length.
[  320.260563][ T3785] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.269162][ T3785] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.279929][ T3785] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.288106][ T3785] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.302855][   T29] kauditd_printk_skb: 3105 callbacks suppressed
[  321.302869][   T29] audit: type=1326 audit(560.717:53935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.3.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d70acf749 code=0x7ffc0000
[  321.332134][   T29] audit: type=1326 audit(560.717:53936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.3.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d70acf749 code=0x7ffc0000
[  321.400146][   T29] audit: type=1326 audit(560.801:53937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.3.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d70acf749 code=0x7ffc0000
[  321.423147][   T29] audit: type=1326 audit(560.801:53938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.3.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d70acf749 code=0x7ffc0000
[  321.446076][   T29] audit: type=1326 audit(560.801:53939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.3.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d70acf749 code=0x7ffc0000
[  321.662387][   T29] audit: type=1400 audit(561.054:53940): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  321.697857][T26370] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  321.708440][   T29] audit: type=1400 audit(561.082:53941): avc:  denied  { map_create } for  pid=26369 comm="syz.5.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  321.727154][   T29] audit: type=1400 audit(561.082:53942): avc:  denied  { create } for  pid=26369 comm="syz.5.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  321.746281][   T29] audit: type=1400 audit(561.082:53943): avc:  denied  { open } for  pid=26369 comm="syz.5.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  321.765044][   T29] audit: type=1400 audit(561.082:53944): avc:  denied  { setcheckreqprot } for  pid=26369 comm="syz.5.4135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0
[  322.437462][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  322.437462][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  322.450995][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  322.683281][T26390] netlink: 'syz.3.4151': attribute type 4 has an invalid length.
[  322.998153][T26395] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  323.077288][T26418] netlink: 'syz.5.4153': attribute type 4 has an invalid length.
[  323.113680][T26421] netlink: 'syz.4.4154': attribute type 30 has an invalid length.
[  323.212702][T26431] bond1: (slave gretap1): Releasing active interface
[  323.232870][T26435] serio: Serial port ptm0
[  323.252284][T26431] netlink: 'syz.5.4158': attribute type 10 has an invalid length.
[  323.260238][T26431] __nla_validate_parse: 2 callbacks suppressed
[  323.260307][T26431] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4158'.
[  323.286532][T26431] veth1_vlan: left promiscuous mode
[  323.303323][T26431] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  323.627753][T26464] netlink: 'syz.0.4167': attribute type 4 has an invalid length.
[  323.710465][ T3814] Bluetooth: hci0: Frame reassembly failed (-84)
[  323.724830][T26480] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  323.731362][T26480] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  323.738825][T26480] vhci_hcd vhci_hcd.0: Device attached
[  323.747857][T26480] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5)
[  323.754381][T26480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  323.762583][T26480] vhci_hcd vhci_hcd.0: Device attached
[  323.768959][T26480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  323.777911][T26480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  323.813020][T26480] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11)
[  323.819641][T26480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  323.827342][T26480] vhci_hcd vhci_hcd.0: Device attached
[  323.848148][T26480] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13)
[  323.854766][T26480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  323.862392][T26480] vhci_hcd vhci_hcd.0: Device attached
[  323.869180][T26535] vhci_hcd: connection closed
[  323.869355][ T3814] vhci_hcd: stop threads
[  323.869388][T26515] vhci_hcd: connection closed
[  323.874071][ T3814] vhci_hcd: release socket
[  323.874079][ T3814] vhci_hcd: disconnect device
[  323.878903][T26494] vhci_hcd: connection closed
[  323.892415][T26483] vhci_hcd: connection closed
[  323.893510][ T3814] vhci_hcd: stop threads
[  323.906016][ T3814] vhci_hcd: release socket
[  323.910412][ T3814] vhci_hcd: disconnect device
[  323.932140][ T3814] vhci_hcd: stop threads
[  323.936499][ T3814] vhci_hcd: release socket
[  323.940913][ T3814] vhci_hcd: disconnect device
[  323.944339][ T3410] vhci_hcd: vhci_device speed not set
[  323.950572][ T3814] vhci_hcd: stop threads
[  323.955186][ T3814] vhci_hcd: release socket
[  323.959622][ T3814] vhci_hcd: disconnect device
[  324.008662][ T3410] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  324.016185][ T3410] usb 11-1: enqueue for inactive port 0
[  324.029207][ T3410] usb 11-1: enqueue for inactive port 0
[  324.034959][ T3410] usb 11-1: enqueue for inactive port 0
[  324.115409][ T3410] vhci_hcd: vhci_device speed not set
[  324.123244][T26549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4182'.
[  324.140898][T26549] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.150075][T26549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'.
[  324.161263][T26549] bond0 (unregistering): Released all slaves
[  324.524321][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'.
[  324.532955][T26639] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  324.534287][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'.
[  324.550734][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'.
[  324.560070][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'.
[  324.569082][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'.
[  324.588843][T26638] bridge0: port 1(macsec0) entered blocking state
[  324.595312][T26638] bridge0: port 1(macsec0) entered disabled state
[  324.601950][T26638] macsec0: entered allmulticast mode
[  324.607236][T26638] bridge0: entered allmulticast mode
[  324.612906][T26638] macsec0: left allmulticast mode
[  324.618028][T26638] bridge0: left allmulticast mode
[  324.737821][T26646] xt_hashlimit: max too large, truncated to 1048576
[  325.585121][T26651] netlink: 'syz.0.4205': attribute type 13 has an invalid length.
[  325.591314][T26649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4195'.
[  325.601941][T26649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4195'.
[  325.694214][T26656] 8021q: adding VLAN 0 to HW filter on device bond7
[  325.706635][T26656] bond7 (unregistering): Released all slaves
[  325.943488][ T3846] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  325.943502][ T8542] Bluetooth: hci0: command 0x1003 tx timeout
[  326.509361][T26732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  326.595032][T26739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26739 comm=syz.5.4202
[  326.670693][   T29] kauditd_printk_skb: 1796 callbacks suppressed
[  326.670707][   T29] audit: type=1400 audit(309.749:55741): avc:  denied  { create } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  326.671237][   T29] audit: type=1400 audit(309.749:55742): avc:  denied  { map_create } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.680528][   T29] audit: type=1400 audit(309.749:55743): avc:  denied  { prog_load } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.680561][   T29] audit: type=1400 audit(309.749:55744): avc:  denied  { map_create } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.680600][   T29] audit: type=1400 audit(309.749:55745): avc:  denied  { prog_load } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.680618][   T29] audit: type=1400 audit(309.749:55746): avc:  denied  { prog_load } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.680636][   T29] audit: type=1400 audit(309.749:55747): avc:  denied  { prog_load } for  pid=26741 comm="syz.4.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.688934][   T29] audit: type=1400 audit(309.758:55748): avc:  denied  { prog_load } for  pid=26743 comm="syz.4.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  326.691219][   T29] audit: type=1326 audit(309.758:55749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26743 comm="syz.4.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  326.691260][   T29] audit: type=1326 audit(309.758:55750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26743 comm="syz.4.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  326.992777][T26757] xt_hashlimit: max too large, truncated to 1048576
[  327.100007][T26764] x_tables: duplicate entry at hook 2
[  327.515536][T26770] netlink: 'syz.5.4218': attribute type 6 has an invalid length.
[  327.737651][T26799] xt_hashlimit: max too large, truncated to 1048576
[  327.814574][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  327.814574][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  327.828093][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  328.624188][T26826] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  328.721370][T26833] __nla_validate_parse: 9 callbacks suppressed
[  328.721384][T26833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4233'.
[  328.840776][T26838] netlink: 'syz.4.4235': attribute type 13 has an invalid length.
[  328.984389][T26842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  328.984411][T26842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  328.984504][T26842] vhci_hcd vhci_hcd.0: Device attached
[  329.033377][T26842] vhci_hcd vhci_hcd.0: port 0 already used
[  329.111165][T26845] vhci_hcd: connection closed
[  329.111464][ T3785] vhci_hcd: stop threads
[  329.111474][ T3785] vhci_hcd: release socket
[  329.111482][ T3785] vhci_hcd: disconnect device
[  329.793536][T26889] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4249'.
[  329.813256][T26889] 0��{X��: renamed from gretap0
[  329.820145][T26889] 0��{X��: entered allmulticast mode
[  329.826394][T26889] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  329.857397][T26889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26889 comm=syz.4.4249
[  329.857547][T26906] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  329.962609][T26915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26915 comm=syz.4.4253
[  329.985605][T26917] netlink: 'syz.1.4254': attribute type 21 has an invalid length.
[  329.993480][T26917] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4254'.
[  330.045312][T26915] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4253'.
[  330.287903][T26920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4253'.
[  330.326549][T26920] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4253'.
[  330.389452][T26925] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  330.395988][T26925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  330.404161][T26925] vhci_hcd vhci_hcd.0: Device attached
[  330.413323][T26925] vhci_hcd vhci_hcd.0: port 0 already used
[  330.439493][T26931] set match dimension is over the limit!
[  330.494830][T26926] vhci_hcd: connection closed
[  330.494934][ T3820] vhci_hcd: stop threads
[  330.503901][ T3820] vhci_hcd: release socket
[  330.508309][ T3820] vhci_hcd: disconnect device
[  330.557744][T26939] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4260'.
[  330.956418][T26967] netlink: 'syz.5.4268': attribute type 13 has an invalid length.
[  330.970986][T26967] gretap0: refused to change device tx_queue_len
[  330.977525][T26967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  330.993155][T26969] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  331.057576][T26976] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4275'.
[  331.322076][T27021] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4281'.
[  331.337836][T27021] 0��{X��: renamed from gretap0 (while UP)
[  331.353660][T27021] 0��{X��: entered allmulticast mode
[  331.359571][T27021] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  331.397937][T27021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27021 comm=syz.3.4281
[  331.911938][ T3814] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.924350][ T3814] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.951815][ T3814] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.965373][ T3814] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.995896][T27048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'.
[  332.024118][T27050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27050 comm=syz.1.4295
[  332.037957][   T29] kauditd_printk_skb: 1475 callbacks suppressed
[  332.037969][   T29] audit: type=1400 audit(314.763:57226): avc:  denied  { mounton } for  pid=27049 comm="syz.1.4295" path="/878" dev="tmpfs" ino=4624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  332.079264][   T29] audit: type=1400 audit(314.791:57227): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  332.104365][   T29] audit: type=1400 audit(314.791:57228): avc:  denied  { prog_load } for  pid=27052 comm="syz.1.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  332.123003][   T29] audit: type=1400 audit(314.828:57229): avc:  denied  { map_create } for  pid=27052 comm="syz.1.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  332.142159][   T29] audit: type=1400 audit(314.828:57230): avc:  denied  { map_create } for  pid=27052 comm="syz.1.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  332.160869][   T29] audit: type=1400 audit(314.856:57231): avc:  denied  { prog_load } for  pid=27052 comm="syz.1.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  332.184886][   T29] audit: type=1400 audit(314.856:57232): avc:  denied  { prog_load } for  pid=27052 comm="syz.1.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  332.203529][   T29] audit: type=1400 audit(314.856:57233): avc:  denied  { prog_load } for  pid=27052 comm="syz.1.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  332.222149][   T29] audit: type=1400 audit(314.856:57234): avc:  denied  { read write } for  pid=27052 comm="syz.1.4296" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0
[  332.245562][   T29] audit: type=1400 audit(314.856:57235): avc:  denied  { write } for  pid=27052 comm="syz.1.4296" name="pfkey" dev="proc" ino=4026532479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0
[  332.270028][T27057] ip6tnl0: Caught tx_queue_len zero misconfig
[  332.277247][T27058] sit0: Caught tx_queue_len zero misconfig
[  332.401588][T27092] macsec0: entered promiscuous mode
[  332.406864][T27092] bridge0: entered promiscuous mode
[  332.412699][T27092] bridge0: port 1(macsec0) entered blocking state
[  332.419288][T27092] bridge0: port 1(macsec0) entered disabled state
[  332.429241][T27092] macsec0: entered allmulticast mode
[  332.434629][T27092] bridge0: entered allmulticast mode
[  332.450450][T27092] macsec0: left allmulticast mode
[  332.455554][T27092] bridge0: left allmulticast mode
[  332.461967][T27092] bridge0: left promiscuous mode
[  332.658253][T27130] netlink: 'syz.4.4313': attribute type 6 has an invalid length.
[  332.968926][T27171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27171 comm=syz.0.4318
[  332.991707][T27171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27171 comm=syz.0.4318
[  333.209849][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  333.209849][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  333.223378][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  334.007369][T27258] veth20: entered promiscuous mode
[  334.012592][T27258] veth20: entered allmulticast mode
[  334.305111][T27294] netlink: 'syz.0.4353': attribute type 5 has an invalid length.
[  334.312959][T27294] __nla_validate_parse: 5 callbacks suppressed
[  334.312979][T27294] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4353'.
[  334.486087][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4356'.
[  334.625430][T27312] netlink: 'syz.5.4359': attribute type 10 has an invalid length.
[  334.633260][T27312] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4359'.
[  334.705041][T27323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  334.745686][T27328] netlink: 'syz.3.4366': attribute type 39 has an invalid length.
[  334.812396][T27339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27339 comm=syz.3.4371
[  334.818723][T27340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4367'.
[  334.886181][T27347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4374'.
[  334.895339][T27347] netem: change failed
[  334.995989][T27357] xt_hashlimit: max too large, truncated to 1048576
[  335.686210][T27467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4386'.
[  335.695208][T27467] netem: change failed
[  335.737134][T27470] Cannot find del_set index 2 as target
[  336.008968][T27506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4391'.
[  336.018078][T27506] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4391'.
[  336.044192][T27506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4391'.
[  336.065296][T27506] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4391'.
[  336.120074][T27515] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  336.140120][T27515] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  336.146748][T27515] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  336.154247][T27515] vhci_hcd vhci_hcd.0: Device attached
[  336.160839][T27516] usbip_core: unknown command
[  336.165522][T27516] vhci_hcd: unknown pdu 2844066640
[  336.170621][T27516] usbip_core: unknown command
[  336.206610][ T3820] vhci_hcd: stop threads
[  336.210944][ T3820] vhci_hcd: release socket
[  336.215366][ T3820] vhci_hcd: disconnect device
[  336.327778][T27519] netlink: 'syz.5.4395': attribute type 12 has an invalid length.
[  336.667734][T27524] netlink: 'syz.5.4398': attribute type 39 has an invalid length.
[  337.141677][T27546] Y�4��`ҘD�ʆ5�: renamed from lo
[  337.333008][T27552] netlink: 'syz.4.4409': attribute type 4 has an invalid length.
[  337.657546][   T29] kauditd_printk_skb: 4341 callbacks suppressed
[  337.657560][   T29] audit: type=1400 audit(320.010:61574): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  337.694030][   T29] audit: type=1400 audit(320.057:61575): avc:  denied  { prog_load } for  pid=27553 comm="syz.5.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  337.712868][   T29] audit: type=1400 audit(320.057:61576): avc:  denied  { create } for  pid=27553 comm="syz.5.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  337.732964][   T29] audit: type=1400 audit(320.057:61577): avc:  denied  { create } for  pid=27553 comm="syz.5.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  337.753040][   T29] audit: type=1400 audit(320.057:61578): avc:  denied  { bpf } for  pid=27553 comm="syz.5.4410" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  337.774250][   T29] audit: type=1326 audit(320.085:61579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  337.797245][   T29] audit: type=1326 audit(320.085:61580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc30278f749 code=0x7ffc0000
[  337.820200][   T29] audit: type=1326 audit(320.085:61581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc30278f783 code=0x7ffc0000
[  337.843038][   T29] audit: type=1326 audit(320.104:61582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc30278e1ff code=0x7ffc0000
[  337.869740][   T29] audit: type=1326 audit(320.141:61583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc30278f7d7 code=0x7ffc0000
[  338.483306][T27623] netlink: 'syz.4.4423': attribute type 10 has an invalid length.
[  338.491446][T27623] veth1_vlan: left promiscuous mode
[  338.497359][T27623] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  338.590505][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  338.590505][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  338.604018][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  339.580038][T27679] wireguard1: entered promiscuous mode
[  339.585589][T27679] wireguard1: entered allmulticast mode
[  339.682229][T27707] __nla_validate_parse: 7 callbacks suppressed
[  339.682241][T27707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'.
[  339.763726][T27709] netlink: 63 bytes leftover after parsing attributes in process `syz.4.4444'.
[  339.863252][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4446'.
[  339.922322][T27722] netlink: 'syz.3.4449': attribute type 30 has an invalid length.
[  340.003427][T27732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4451'.
[  340.166473][T27758] xt_TPROXY: Can be used only with -p tcp or -p udp
[  340.240323][T27778] xt_TCPMSS: Only works on TCP SYN packets
[  340.273352][T27780] netlink: 'syz.1.4465': attribute type 4 has an invalid length.
[  340.766877][T27806] netlink: 'syz.0.4473': attribute type 13 has an invalid length.
[  341.190116][T27819] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  341.307703][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4478'.
[  342.392965][T27898] xt_TCPMSS: Only works on TCP SYN packets
[  342.530081][T27923] netlink: 'syz.4.4506': attribute type 1 has an invalid length.
[  342.554908][T27923] 8021q: adding VLAN 0 to HW filter on device bond7
[  342.650183][T27978] netlink: 'syz.1.4509': attribute type 13 has an invalid length.
[  342.664931][T27981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4515'.
[  342.675813][T27978] erspan0: refused to change device tx_queue_len
[  342.682241][T27978] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  342.768674][T27992] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  343.006513][   T29] kauditd_printk_skb: 3348 callbacks suppressed
[  343.006526][   T29] audit: type=1400 audit(325.024:64932): avc:  denied  { prog_load } for  pid=28056 comm="syz.1.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  343.031429][   T29] audit: type=1400 audit(325.024:64933): avc:  denied  { create } for  pid=28056 comm="syz.1.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[  343.050735][   T29] audit: type=1400 audit(325.052:64934): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  343.074911][   T29] audit: type=1400 audit(325.061:64935): avc:  denied  { read write } for  pid=28065 comm="syz.1.4530" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  343.098565][   T29] audit: type=1400 audit(325.061:64936): avc:  denied  { prog_load } for  pid=28065 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  343.117176][   T29] audit: type=1400 audit(325.061:64937): avc:  denied  { prog_load } for  pid=28065 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  343.135863][   T29] audit: type=1400 audit(325.061:64938): avc:  denied  { prog_load } for  pid=28065 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  343.154465][   T29] audit: type=1400 audit(325.061:64939): avc:  denied  { nlmsg_write } for  pid=28065 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=0
[  343.174832][   T29] audit: type=1400 audit(325.061:64940): avc:  denied  { prog_load } for  pid=28065 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  343.193545][   T29] audit: type=1400 audit(325.061:64941): avc:  denied  { map_create } for  pid=28065 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  343.408165][T28092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4536'.
[  343.420366][T28092] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.429885][T28092] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.439224][T28092] $H� (unregistering): (slave bridge_slave_1): Releasing backup interface
[  343.448352][T28092] $H� (unregistering): Released all slaves
[  343.524576][T28129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4538'.
[  343.533790][T28129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4538'.
[  343.542779][T28129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4538'.
[  343.989326][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  343.989326][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  344.002871][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  344.448442][T28174] netlink: 'syz.3.4553': attribute type 4 has an invalid length.
[  344.629877][T28191] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  344.758780][T28207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28207 comm=syz.5.4567
[  345.426419][T28300] ip6gretap0: entered allmulticast mode
[  345.629824][T28321] netlink: 'syz.4.4588': attribute type 13 has an invalid length.
[  345.650919][T28321] 0��{X��: left allmulticast mode
[  345.658193][T28321] erspan0: refused to change device tx_queue_len
[  345.664851][T28321] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  345.738529][T28328] sit0: entered promiscuous mode
[  345.743651][T28328] sit0: entered allmulticast mode
[  345.872813][T28351] __nla_validate_parse: 7 callbacks suppressed
[  345.872828][T28351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4594'.
[  346.032636][T28372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  346.071480][T28372] netlink: 'syz.3.4601': attribute type 10 has an invalid length.
[  346.079348][T28372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4601'.
[  346.098562][T28372] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  346.173163][T28382] macsec0: entered promiscuous mode
[  346.178384][T28382] bridge0: entered promiscuous mode
[  346.202472][T28382] bridge0: port 1(macsec0) entered blocking state
[  346.208938][T28382] bridge0: port 1(macsec0) entered disabled state
[  346.226536][T28382] macsec0: entered allmulticast mode
[  346.231912][T28382] bridge0: entered allmulticast mode
[  346.259140][T28382] macsec0: left allmulticast mode
[  346.264223][T28382] bridge0: left allmulticast mode
[  346.277643][T28382] bridge0: left promiscuous mode
[  346.517865][T28427] No such timeout policy "syz1"
[  347.667993][T28607] dummy0: entered promiscuous mode
[  347.673850][T28607] macsec0: entered promiscuous mode
[  347.687572][T28607] macsec0: entered allmulticast mode
[  347.694698][T28607] dummy0: entered allmulticast mode
[  347.701519][T28607] dummy0: left allmulticast mode
[  347.711001][T28607] dummy0: left promiscuous mode
[  347.738752][T28611] netlink: 'syz.0.4627': attribute type 30 has an invalid length.
[  347.780716][T28615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4630'.
[  348.362474][   T29] kauditd_printk_skb: 2778 callbacks suppressed
[  348.362489][   T29] audit: type=1326 audit(1099.033:67720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ff80e2005 code=0x7ffc0000
[  348.418235][   T29] audit: type=1326 audit(1099.061:67721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ff80e2005 code=0x7ffc0000
[  348.441305][   T29] audit: type=1326 audit(1099.061:67722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28628 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7764872005 code=0x7ffc0000
[  348.464432][   T29] audit: type=1326 audit(1099.061:67723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ff80e2005 code=0x7ffc0000
[  348.487492][   T29] audit: type=1326 audit(1099.061:67724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ff80e2005 code=0x7ffc0000
[  348.510632][   T29] audit: type=1326 audit(1099.061:67725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28628 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7764872005 code=0x7ffc0000
[  348.533783][   T29] audit: type=1326 audit(1099.061:67726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ff80e2005 code=0x7ffc0000
[  348.556843][   T29] audit: type=1326 audit(1099.061:67727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28628 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7764872005 code=0x7ffc0000
[  348.579941][   T29] audit: type=1326 audit(1099.061:67728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ff80e2005 code=0x7ffc0000
[  348.603008][   T29] audit: type=1326 audit(1099.061:67729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28628 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7764872005 code=0x7ffc0000
[  348.706253][T28668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3383 sclass=netlink_route_socket pid=28668 comm=syz.0.4638
[  348.731912][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4639'.
[  349.366626][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  349.366626][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  349.380147][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  349.583177][T28706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28706 comm=syz.1.4653
[  349.664816][T28734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'.
[  349.676985][T28710] macvtap1: entered allmulticast mode
[  349.682375][T28710] veth0_to_batadv: entered allmulticast mode
[  349.689172][T28710] veth0_to_batadv: left allmulticast mode
[  349.799653][T28744] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4657'.
[  349.891182][T28754] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4661'.
[  349.900396][T28754] hsr_slave_0: left promiscuous mode
[  349.916043][T28754] hsr_slave_1: left promiscuous mode
[  349.985837][ T3838] Bluetooth: hci0: Frame reassembly failed (-84)
[  350.048251][T28780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4669'.
[  350.696256][T28802] macsec1: entered promiscuous mode
[  350.701780][T28802] dummy0: entered promiscuous mode
[  350.707036][T28802] macsec1: entered allmulticast mode
[  350.712383][T28802] dummy0: entered allmulticast mode
[  350.718339][T28802] dummy0: left allmulticast mode
[  350.723378][T28802] dummy0: left promiscuous mode
[  350.840524][T28808] ip6t_srh: unknown srh match flags  4000
[  350.863385][T28810] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4675'.
[  350.950413][T28813] netlink: 'syz.4.4677': attribute type 10 has an invalid length.
[  350.963734][T28813] 8021q: adding VLAN 0 to HW filter on device bond6
[  350.976899][T28813] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  350.985727][T28813] bond6: (slave macvlan3): Enslaving as a backup interface with a down link
[  351.018024][T28824] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  352.188961][ T3846] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  352.814400][T28869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4693'.
[  353.293511][T28887] netlink: 'syz.3.4698': attribute type 21 has an invalid length.
[  353.301714][T28887] netlink: 'syz.3.4698': attribute type 1 has an invalid length.
[  353.309465][T28887] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4698'.
[  353.402510][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4700'.
[  353.411833][T28891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4700'.
[  353.447872][T28918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4702'.
[  353.734901][   T29] kauditd_printk_skb: 2249 callbacks suppressed
[  353.734914][   T29] audit: type=1400 audit(2129.052:69979): avc:  denied  { read write } for  pid=12838 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  353.768416][   T29] audit: type=1326 audit(2129.061:69980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28930 comm="syz.3.4707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8d70acf7d7 code=0x7ffc0000
[  353.791753][   T29] audit: type=1400 audit(2129.108:69981): avc:  denied  { map_create } for  pid=28934 comm="syz.5.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  353.816192][   T29] audit: type=1400 audit(2129.108:69982): avc:  denied  { prog_load } for  pid=28934 comm="syz.5.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  353.834927][   T29] audit: type=1400 audit(2129.108:69983): avc:  denied  { prog_load } for  pid=28934 comm="syz.5.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  353.853611][   T29] audit: type=1400 audit(2129.118:69984): avc:  denied  { map_create } for  pid=28934 comm="syz.5.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  353.872454][   T29] audit: type=1400 audit(2129.118:69985): avc:  denied  { prog_load } for  pid=28934 comm="syz.5.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  353.891143][   T29] audit: type=1400 audit(2129.118:69986): avc:  denied  { map_create } for  pid=28934 comm="syz.5.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  353.909956][   T29] audit: type=1400 audit(2129.118:69987): avc:  denied  { module_request } for  pid=28934 comm="syz.5.4708" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  353.931425][   T29] audit: type=1400 audit(2129.118:69988): avc:  denied  { mount } for  pid=28934 comm="syz.5.4708" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=0
[  354.260096][T28987] xt_recent: Unsupported userspace flags (000000b1)
[  354.438035][T29004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4716'.
[  354.593898][T29015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4720'.
[  354.603533][T29016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4717'.
[  354.754813][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  354.754813][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  354.768344][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  354.812178][T29025] macsec0: entered promiscuous mode
[  354.817440][T29025] bridge0: entered promiscuous mode
[  354.823120][T29025] bridge0: port 1(macsec0) entered blocking state
[  354.829652][T29025] bridge0: port 1(macsec0) entered disabled state
[  354.836345][T29025] macsec0: entered allmulticast mode
[  354.841680][T29025] bridge0: entered allmulticast mode
[  354.847517][T29025] macsec0: left allmulticast mode
[  354.852577][T29025] bridge0: left allmulticast mode
[  354.857922][T29025] bridge0: left promiscuous mode
[  355.351815][T29070] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  355.371484][T29070] netlink: 'syz.0.4728': attribute type 10 has an invalid length.
[  355.379416][T29070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4728'.
[  355.389550][T29070] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  355.522435][T29077] netlink: 'syz.0.4729': attribute type 10 has an invalid length.
[  355.558922][T29075] wireguard0: entered promiscuous mode
[  355.564431][T29075] wireguard0: entered allmulticast mode
[  356.174809][T29114] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  356.439739][T22835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.476075][ T8326] kmmpd-loop0: attempt to access beyond end of device
[  356.476075][ T8326] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64
[  356.489713][ T8326] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  356.994872][ T3814] ip6gretap0 (unregistering): left promiscuous mode
[  357.023699][ T3814] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  357.034716][ T3814] bond3 (unregistering): (slave gretap2): Releasing active interface
[  357.176858][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4739'.
[  357.214974][ T3814] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.224903][ T3814] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.234315][ T3814] .` (unregistering): Released all slaves
[  357.251239][ T3814] bond1 (unregistering): Released all slaves
[  357.270601][ T3814] bond2 (unregistering): Released all slaves
[  357.279442][ T3814] bond3 (unregistering): Released all slaves
[  357.334179][ T3814] tipc: Disabling bearer <udp:�>
[  357.339225][ T3814] tipc: Disabling bearer <eth:veth0_macvtap>
[  357.345645][ T3814] tipc: Left network mode
[  357.656783][T29176] xt_TPROXY: Can be used only with -p tcp or -p udp
[  358.217038][T29181] xt_hashlimit: max too large, truncated to 1048576
[  358.865202][T29193] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  359.634726][   T29] kauditd_printk_skb: 512 callbacks suppressed
[  359.634738][   T29] audit: type=1400 audit(2390.575:70501): avc:  denied  { prog_load } for  pid=29199 comm="syz.3.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  359.659675][   T29] audit: type=1400 audit(2390.575:70502): avc:  denied  { open } for  pid=29199 comm="syz.3.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  359.678551][   T29] audit: type=1400 audit(2390.575:70503): avc:  denied  { execmem } for  pid=29198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  359.681760][   T29] audit: type=1400 audit(2390.585:70504): avc:  denied  { prog_load } for  pid=29201 comm="syz.1.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  359.681782][   T29] audit: type=1400 audit(2390.585:70505): avc:  denied  { read write } for  pid=29201 comm="syz.1.4750" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0
[  359.681802][   T29] audit: type=1400 audit(2390.594:70506): avc:  denied  { read write } for  pid=29199 comm="syz.3.4752" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  359.683389][   T29] audit: type=1400 audit(2390.622:70507): avc:  denied  { prog_load } for  pid=29207 comm="syz.4.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  359.684431][   T29] audit: type=1326 audit(2390.622:70508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  359.684488][   T29] audit: type=1326 audit(2390.622:70509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  359.684837][   T29] audit: type=1326 audit(2390.622:70510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29207 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4252ef749 code=0x7ffc0000
[  360.503511][T29238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29238 comm=syz.3.4755
[  360.517124][T29240] xt_TPROXY: Can be used only with -p tcp or -p udp
[  361.495019][T29249] can0: slcan on ptm1.
[  361.506177][ T3820] ==================================================================
[  361.514260][ T3820] BUG: KCSAN: data-race in alloc_pid / copy_process
[  361.520836][ T3820] 
[  361.523140][ T3820] read-write to 0xffffffff8685ff98 of 4 bytes by task 3789 on cpu 1:
[  361.531182][ T3820]  alloc_pid+0x539/0x720
[  361.535405][ T3820]  copy_process+0xe25/0x2000
[  361.539980][ T3820]  kernel_clone+0x16c/0x5c0
[  361.544467][ T3820]  user_mode_thread+0x7d/0xb0
[  361.549129][ T3820]  call_usermodehelper_exec_work+0x41/0x160
[  361.555003][ T3820]  process_scheduled_works+0x4ce/0x9d0
[  361.560448][ T3820]  worker_thread+0x582/0x770
[  361.565012][ T3820]  kthread+0x489/0x510
[  361.569059][ T3820]  ret_from_fork+0x122/0x1b0
[  361.573627][ T3820]  ret_from_fork_asm+0x1a/0x30
[  361.578371][ T3820] 
[  361.580671][ T3820] read to 0xffffffff8685ff98 of 4 bytes by task 3820 on cpu 0:
[  361.588192][ T3820]  copy_process+0x17fc/0x2000
[  361.592857][ T3820]  kernel_clone+0x16c/0x5c0
[  361.597342][ T3820]  user_mode_thread+0x7d/0xb0
[  361.602002][ T3820]  call_usermodehelper_exec_work+0x41/0x160
[  361.607870][ T3820]  process_scheduled_works+0x4ce/0x9d0
[  361.613314][ T3820]  worker_thread+0x582/0x770
[  361.617882][ T3820]  kthread+0x489/0x510
[  361.621927][ T3820]  ret_from_fork+0x122/0x1b0
[  361.626497][ T3820]  ret_from_fork_asm+0x1a/0x30
[  361.631238][ T3820] 
[  361.633536][ T3820] value changed: 0x80000173 -> 0x80000174
[  361.639224][ T3820] 
[  361.641525][ T3820] Reported by Kernel Concurrency Sanitizer on:
[  361.647650][ T3820] CPU: 0 UID: 0 PID: 3820 Comm: kworker/u8:49 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  361.657605][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  361.667637][ T3820] Workqueue: events_unbound call_usermodehelper_exec_work
[  361.674728][ T3820] ==================================================================
[  361.810540][T29249] can0 (unregistered): slcan off ptm1.
[  361.816081][T29249] Falling back ldisc for ptm1.
[  362.816655][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.103462][ T3814] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  363.112385][ T3814] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  363.122838][ T3814] bond2 (unregistering): (slave ip6gretap2): Releasing active interface
[  363.140894][ T3814] bond0 (unregistering): (slave gretap1): Releasing active interface
[  363.153240][ T3814] bond3 (unregistering): (slave geneve2): Releasing active interface
[  363.511264][ T3814] bond5 (unregistering): (slave bridge7): Releasing active interface
[  363.554099][ T3814] .` (unregistering): Released all slaves
[  363.561685][ T3814] bond1 (unregistering): Released all slaves
[  363.569495][ T3814] bond2 (unregistering): Released all slaves
[  363.577084][ T3814] bond0 (unregistering): Released all slaves
[  363.584611][ T3814] bond3 (unregistering): Released all slaves
[  363.592631][ T3814] bond4 (unregistering): (slave veth13): Releasing active interface
[  363.601150][ T3814] bond4 (unregistering): Released all slaves
[  363.609264][ T3814] bond5 (unregistering): Released all slaves
[  363.652420][ T3814] tipc: Left network mode