last executing test programs:

2.901684443s ago: executing program 3 (id=59):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170"], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
r7 = timerfd_create(0x0, 0x0)
r8 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r9=>0x0, &(0x7f0000000240)=<r10=>0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f00000001c0)=""/2, 0x2}], 0x2}, 0x1f00)
sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)
accept4(r11, 0x0, 0x0, 0x80800)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r7, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000480)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x17c1, 0x48, 0x0, @gue={{0x2, 0x0, 0x1, 0x5, 0x100, @val=0x80}, "957bc403cd7a39a54ae83e8f5cd142e2c6cda19954a722fca4cb4d8bd97b70dc73a2917fcdbf344d3c3f1fd705ff6e036853eda1e5f415a7"}}}}}}, 0x0)
io_uring_enter(r8, 0x1f82, 0x0, 0x0, 0x0, 0x0)
r13 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r14 = dup(r13)
ioctl$USBDEVFS_CONTROL(r14, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0xf, 0x0, 0x2, 0x0})

2.46139878s ago: executing program 4 (id=69):
r0 = syz_io_uring_setup(0x785b, &(0x7f0000000040)={0x0, 0x7d73, 0x10000, 0x0, 0x121}, &(0x7f0000000500), &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
msgsnd(0x0, 0x0, 0x2000, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12)
r8 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7)
get_mempolicy(0x0, &(0x7f0000000180), 0xc589, &(0x7f0000645000/0x2000)=nil, 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r9)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r12, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}]}, 0x3c}}, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002a53000000dbdf250300000006000800ffff000006000800a1aa000006000800feff0000060008000080000006000800ffff000006000800000000000500120006000000050012"], 0x54}, 0x1, 0x0, 0x0, 0x26000040}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/254, 0xfe}], &(0x7f00000004c0)=[0x9, 0xcdc, 0x4]}, 0x20)

2.380302482s ago: executing program 4 (id=71):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x401, 0xfffffeff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c0074"], 0x40, 0x40890}, 0x81)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000140))
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100000000000000000054"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.082989667s ago: executing program 4 (id=75):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r0, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0)

2.010748507s ago: executing program 3 (id=76):
r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0)

1.958837008s ago: executing program 4 (id=78):
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x10000000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f00000012c0)={'syztnl1\x00', <r1=>0x0, 0x4, 0x7f, 0x10, 0xfffffff0, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8000, 0x1, 0x175000, 0x80}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f00000000c0)=@l2tp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/196, 0xc4}, {&(0x7f0000001140)=""/121, 0x79}], 0x6}, 0x6}, {{&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/228, 0xe4}], 0x1, &(0x7f0000000cc0)=""/148, 0x94}}, {{&(0x7f0000000c00)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/53, 0x35}, {&(0x7f0000000e40)=""/106, 0x6a}, {&(0x7f0000000ec0)=""/186, 0xba}, {&(0x7f0000000f80)=""/110, 0x6e}], 0x5}, 0xe}], 0x3, 0x40, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0xab42)
r4 = accept4(r3, 0x0, &(0x7f0000000180), 0x80000)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@local, @multicast1, <r5=>0x0}, &(0x7f00000002c0)=0xc)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r5, 0x1, 0x6}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={<r6=>0x0, <r7=>0x0})
futimesat(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000c80)={{}, {r6, r7/1000+10000}})

1.958188658s ago: executing program 3 (id=79):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005200010004bd70d8c232728cc2815100"], 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000"], 0x50)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000004c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)={0x18, 0x4e, 0x1, 0x0, 0x0, {0x0, 0x3}, [@generic="bb"]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0)

1.525924495s ago: executing program 1 (id=80):
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x4000043, 0x2, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)

1.419868747s ago: executing program 1 (id=81):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x4000043, 0x2, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)

1.412882357s ago: executing program 3 (id=82):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d240600fc03080000000000000c2402020101060800009e000c24020000000300feff000009240600060102022009240356db6bc00500092406050001"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
socket(0x80000000000000a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d})
fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x8000, 0x7})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000140)=0x10, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0x160, 0x160, 0x160, 0x0, 0x0, 0x230, 0x280, 0x280, 0x230, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x160}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x200000000008006})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10)

1.372815478s ago: executing program 1 (id=83):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async, rerun: 64)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
read(r1, &(0x7f0000000180)=""/255, 0xff)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f0000000280)={@broadcast, @random="15cba141192f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "bad5870571c628666e3d68b5d1a17cf449af91c7d305ebd643387fd0b013e42113ddc0181e94542f509ee8cbe165da8a37cabe466a0bbfd0d0d193f9e0"}}}}}}, 0x0) (async)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000000200)=""/168, 0xa8}], 0x4}, 0x60012002)

1.222592971s ago: executing program 4 (id=85):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)

1.148505892s ago: executing program 2 (id=86):
syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
setrlimit(0x9, &(0x7f0000000140)={0x1, 0x6})

1.059945473s ago: executing program 2 (id=87):
r0 = syz_io_uring_setup(0x785b, &(0x7f0000000040)={0x0, 0x7d73, 0x10000, 0x0, 0x121}, &(0x7f0000000500), &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
msgsnd(0x0, 0x0, 0x2000, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12)
r8 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7)
get_mempolicy(0x0, &(0x7f0000000180), 0xc589, &(0x7f0000645000/0x2000)=nil, 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r9)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r11, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}]}, 0x3c}}, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x26000040}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/254, 0xfe}], &(0x7f00000004c0)=[0x9, 0xcdc, 0x4]}, 0x20)

1.058838483s ago: executing program 4 (id=88):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000002000000000000000000085000000360000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x100a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x335, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x38d, 0x7}, 0x8000, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xc, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7ffff000)

978.868725ms ago: executing program 2 (id=90):
unshare(0x2c020400)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340))

943.862285ms ago: executing program 2 (id=91):
unshare(0x2c020400)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340))

915.111485ms ago: executing program 2 (id=92):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005200010004bd70d8c232728cc2815100"], 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000"], 0x50)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000004c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)={0x18, 0x4e, 0x1, 0x0, 0x0, {0x0, 0x3}, [@generic="bb"]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c6173740000000004000280140000001000010000000000000000000084000a30cd2714684bc6c9a4499a8d3eae8ca7a98d181c0ca6a34372363f29a5342354f99caf0a1c8fd333e8bc71546f97300aa3e11146c3469f7014ff4c61c546b5894e5642dca7c64b79e4c6cef625e4863e150675801ff7fb20fcdb650f40af480f6d5aac6b571845d63e26e4a776daf3b42986629f69878ce67fcad0e1a8c61c2ddaab5f076f45efe11eaf96a92611bfd1228c517af4ccb2e01b17b57d84ad658a6aad908de57e5675b903d131ba5fc225fe97909b6724da4a01686e2548f39945ca17a10e438a1d5be02c505398d09bdd5a22674e75125c725670063e3da060"], 0x104}}, 0x0)

737.069398ms ago: executing program 3 (id=96):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20c442, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
kexec_load(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x10, 0xfa0, 0x2, r2}, &(0x7f0000000140)=0x10)

687.60976ms ago: executing program 3 (id=97):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000002000000000000000000085000000360000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x100a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x335, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x38d, 0x7}, 0x8000, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xc, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)

509.874592ms ago: executing program 2 (id=98):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x240000, 0xc0)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000240)={0x964, 0x1, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x2}, 0x5, 0x40, 0x7, 0x2, 0x17, 'syz1\x00', "b8b6fbb86969be81620892df1b1c80f6bf3bae0115527662b2f4cc9c469b9251", "536c45f45017e5e692170d02c96e7480e3d185d23e31739f43df0d1a6b380047", [{0x8, 0x9, {0x3, 0x9}}, {0x8, 0x9, {0x3, 0x1}}, {0x3, 0xcc46, {0x2, 0x5}}, {0x100, 0x6, {0x3, 0x4}}, {0x0, 0xf805, {0x1, 0x9}}, {0x5, 0x7fff, {0x1, 0xfffffffd}}, {0x7ff, 0x3, {0x3, 0xc264}}, {0x0, 0x101, {0x1, 0x2}}, {0xe7a, 0xa, {0x3, 0x7}}, {0x3, 0x8001, {0x2, 0x6}}, {0x1000, 0x7, {0x0, 0x1}}, {0xfff, 0x7, {0x3, 0x9}}, {0x4, 0x7, {0x1, 0x7ff}}, {0x6, 0x7, {0x0, 0x9}}, {0x4, 0x3, {0x1, 0x7}}, {0xff81, 0x0, {0x3, 0x5}}, {0x7, 0x6, {0x3, 0x9}}, {0x2, 0x3ff, {0x1, 0x6}}, {0x3, 0x4c, {0x2, 0xee}}, {0x6, 0x5, {0x0, 0x6e8}}, {0x7c, 0xebe, {0x0, 0xe}}, {0x101, 0x1ff, {0x2, 0x8000}}, {0x2, 0x6d, {0x2, 0x7fffffff}}, {0x2, 0x1, {0x2, 0xbb0}}, {0x400, 0x5, {0x3}}, {0x7}, {0xfff, 0x461e, {0x0, 0x2}}, {0xc82, 0x6, {0x1, 0x3}}, {0xffff, 0x9, {0x2, 0x3}}, {0x1, 0xad, {0x1, 0x40000000}}, {0x8, 0x8001, {0x1, 0xc854}}, {0x5fb6, 0xbc2f, {0x1}}, {0x6, 0x3ff, {0x0, 0xfffffffd}}, {0x4, 0x9, {0x3, 0x1ff}}, {0x60, 0x1000, {0x1, 0x1}}, {0x401, 0x0, {0x0, 0xa}}, {0x8001, 0x80, {0x2, 0x1}}, {0x3, 0x3, {0x2, 0xfffffffb}}, {0x6, 0x2, {0x1, 0x4}}, {0xe1, 0x42, {0x2, 0x80000000}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x20, 0x33, 0xc, 0x0, 0x1, 'syz0\x00', "7717dc9774fa9c5ac7dc2222c8a15315cf87f430d278476c47809bc0f1ca0823", "9ff66b7fdbec7f483fc231b3628bf36bd389258991ecfc5b8f452cd66d66c2f0", [{0x200, 0x3, {0x2, 0x3}}, {0x2, 0x6, {0x3, 0x4}}, {0xfff8, 0x7f, {0x2, 0x401}}, {0xfff8, 0x4, {0x0, 0xcb}}, {0x6e35, 0x7f, {0x1, 0x38c}}, {0x9, 0x77a, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x8000}}, {0x1, 0x9, {0x0, 0x8}}, {0xc9a, 0xfff3, {0x2, 0x8000}}, {0x616, 0xae}, {0xd1, 0x8, {0x2, 0xd}}, {0x6, 0x6, {0x1, 0xb60}}, {0xd9, 0x5, {0x2, 0x4}}, {0x0, 0x0, {0x1, 0x4}}, {0x0, 0x5, {0x2, 0xa5}}, {0x2, 0xe, {0x2, 0x81}}, {0x1, 0x10, {0x1, 0x9}}, {0x2, 0x1, {0x2, 0xffffffff}}, {0x1, 0x1, {0x3, 0x9}}, {0x4, 0x40, {0x3, 0x7}}, {0xfffd, 0x7, {0x3}}, {0x7, 0x0, {0x1, 0x550c}}, {0x401, 0x447, {0x3, 0x7ff}}, {0x116, 0x5, {0x0, 0x9}}, {0xffff, 0x8, {0x2, 0x6}}, {0xfcb, 0x9, {0x2, 0x5}}, {0x3ff, 0x9, {0x3, 0x1770}}, {0x40, 0xe, {0x1, 0x4}}, {0x8, 0x9, {0x0, 0x52}}, {0x8, 0xf74, {0x3, 0xfffffffd}}, {0x2, 0x100, {0x1, 0xc}}, {0x8000, 0x1, {0x1, 0x400}}, {0x7, 0x1, {0x3, 0x200}}, {0x74, 0x235d, {0x0, 0xbb5}}, {0x7, 0x8, {0x3, 0xa9}}, {0xa, 0x81}, {0x8, 0x1ff, {0x1, 0x9}}, {0x6c7, 0x29b, {0x2, 0x4}}, {0xfffb, 0xf008, {0x3, 0x7}}, {0x4, 0x62, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x3, 0x5, 0x6, 0xac53, 0x15, 'syz0\x00', "5bf411834dcf4fc5aa47e23467e4a3c1bd572ced5e258cc7d18ea68d2bb45b33", "d5d7851e6e29af447561877b65702e37fa3672efd874c5e29f11dd7729812672", [{0x401, 0x1, {0x0, 0x9}}, {0x0, 0x9000, {0x3, 0x40}}, {0x3, 0x0, {0x0, 0xffffff49}}, {0x8001, 0x5, {0x3, 0x100}}, {0x3, 0x8, {0x0, 0x5}}, {0x4, 0x2, {0x0, 0x2}}, {0x0, 0x4, {0x2, 0x1}}, {0xffff, 0x9, {0x2, 0x7}}, {0x8, 0x800, {0x3, 0xfffffff9}}, {0x1000, 0xc9a, {0x2, 0x5}}, {0x7, 0x5, {0x0, 0x1}}, {0x1800, 0xc, {0x0, 0x6}}, {0x6, 0x4, {0x3, 0x3}}, {0xc, 0x0, {0x3, 0x6}}, {0x81, 0x0, {0x1, 0xc6}}, {0x8c61, 0x7, {0x3, 0x8001}}, {0x1070, 0x3, {0x1, 0x1}}, {0xb5cf, 0x1, {0x3, 0x7ff}}, {0x0, 0x100, {0x2, 0x9}}, {0xd, 0xffff, {0x2, 0x3}}, {0x7204, 0x6, {0x1, 0x10000}}, {0x1, 0xff, {0x0, 0x80}}, {0x3, 0x8, {0x0, 0x33}}, {0x200, 0x7, {0x1, 0x4eb4}}, {0x9, 0x8000, {0x0, 0x5}}, {0x80, 0x6, {0x0, 0x8}}, {0x8001, 0x9, {0x1, 0x930}}, {0x4, 0x2, {0x0, 0x80}}, {0x3295, 0x66c, {0x0, 0x8}}, {0x1, 0xf2, {0x0, 0x5}}, {0x40, 0xfffa, {0x1, 0xc4}}, {0x2, 0xfffe, {0x0, 0x4}}, {0x4, 0x0, {0x3, 0x3}}, {0x101, 0x400, {0x3, 0x5}}, {0x5, 0x1, {0x3, 0x5}}, {0x4, 0x7ff, {0x2, 0x10001}}, {0x5, 0x7, {0x0, 0xfffffff7}}, {0xfeff, 0x600, {0x3, 0x1}}, {0x9, 0xb, {0x3, 0xc}}, {0x8, 0x40, {0x3, 0xe062}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0x0, 0x10, 0x5, 0xc54, 0x11, 'syz1\x00', "b929385ba66fb96e6fecf53458dac36bfd2905aabe339be9bb5a99b3196db7c0", "f59abbe1a13a80430e869372ca1a3622647e453bacdf35cfb3a921b036210739", [{0x1, 0x8, {0x0, 0xd20}}, {0x6, 0x10, {0x1, 0x2}}, {0x2, 0x8, {0x3, 0x2}}, {0x7ff, 0x6c, {0x2, 0xffffffff}}, {0x2, 0x8, {0x0, 0x8}}, {0x15, 0x3, {0xcfa66fa3f5b0096c, 0x6}}, {0x400, 0x5, {0x0, 0x2}}, {0x4, 0x4253, {0x3, 0x1ff}}, {0x0, 0x401, {0x3, 0x6}}, {0x0, 0x8, {0x0, 0x1}}, {0x6, 0x8, {0x3, 0x2}}, {0x7, 0x0, {0x0, 0x6ff6}}, {0x0, 0x4, {0x0, 0x1}}, {0x2, 0xd65, {0x525737cf4c8513a4, 0x7}}, {0x9, 0xff, {0x1, 0x400}}, {0x80, 0x4, {0x0, 0x10001}}, {0xfff, 0x4a, {0x2, 0xc5f}}, {0x9, 0xff98, {0x1, 0xffffff52}}, {0xfffb, 0x5, {0x2, 0x1}}, {0x3d, 0x4, {0x0, 0x7ff}}, {0x1, 0x1, {0x0, 0x8}}, {0x8, 0x6, {0x1, 0x3e}}, {0x7c32, 0x6, {0x0, 0x6}}, {0xa43, 0x9, {0x1}}, {0x1, 0x8000, {0x2, 0x2}}, {0x1, 0x8, {0x0, 0x1}}, {0x180, 0x1, {0x2, 0x9}}, {0x8, 0x7, {0x0, 0x101}}, {0x518, 0x8, {0x2, 0x2}}, {0x8, 0x0, {0x2, 0x1}}, {0x8, 0x9, {0x3, 0xb4}}, {0x3, 0x81, {0x0, 0xfffffffc}}, {0x5, 0x0, {0x7, 0x7b53f1ab}}, {0xff01, 0x3c, {0x2, 0xa}}, {0x1, 0x8, {0x2, 0x75}}, {0x93, 0x4, {0x0, 0x9}}, {0x1, 0x6, {0x0, 0x34b}}, {0xce9, 0xfff9, {0x3, 0x5}}, {0x100, 0x400, {0x2, 0x3}}, {0x10, 0x8, {0x2, 0x1}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

447.013143ms ago: executing program 1 (id=99):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)

373.640914ms ago: executing program 1 (id=100):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x147842, 0x184)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

342.058235ms ago: executing program 0 (id=101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0xb24}, 0x18)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

274.684246ms ago: executing program 0 (id=102):
unshare(0x2c020400)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340))

234.935847ms ago: executing program 0 (id=103):
unshare(0x2c020400)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340))

187.930427ms ago: executing program 0 (id=104):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
msgsnd(0x0, 0x0, 0x2000, 0x0)

134.080398ms ago: executing program 0 (id=105):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x147842, 0x184)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

127.207719ms ago: executing program 1 (id=106):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170"], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
r7 = timerfd_create(0x0, 0x0)
r8 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r9=>0x0, &(0x7f0000000240)=<r10=>0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f00000001c0)=""/2, 0x2}], 0x2}, 0x1f00)
sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)
accept4(r11, 0x0, 0x0, 0x80800)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r7, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000480)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x17c1, 0x48, 0x0, @gue={{0x2, 0x0, 0x1, 0x5, 0x100, @val=0x80}, "957bc403cd7a39a54ae83e8f5cd142e2c6cda19954a722fca4cb4d8bd97b70dc73a2917fcdbf344d3c3f1fd705ff6e036853eda1e5f415a7"}}}}}}, 0x0)
io_uring_enter(r8, 0x1f82, 0x0, 0x0, 0x0, 0x0)
r13 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r14 = dup(r13)
ioctl$USBDEVFS_CONTROL(r14, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0xf, 0x0, 0x2, 0x0})

0s ago: executing program 0 (id=107):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x147842, 0x184)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[   21.876667][   T29] audit: type=1400 audit(1743880080.183:81): avc:  denied  { read } for  pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts.
[   26.915004][   T29] audit: type=1400 audit(1743880085.223:82): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.916050][ T3292] cgroup: Unknown subsys name 'net'
[   26.937735][   T29] audit: type=1400 audit(1743880085.223:83): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.965114][   T29] audit: type=1400 audit(1743880085.243:84): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.065564][ T3292] cgroup: Unknown subsys name 'cpuset'
[   27.071889][ T3292] cgroup: Unknown subsys name 'rlimit'
[   27.203221][   T29] audit: type=1400 audit(1743880085.503:85): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.226597][   T29] audit: type=1400 audit(1743880085.503:86): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.247140][   T29] audit: type=1400 audit(1743880085.503:87): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.256761][ T3296] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.267495][   T29] audit: type=1400 audit(1743880085.503:88): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.296303][   T29] audit: type=1400 audit(1743880085.503:89): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.301474][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.321070][   T29] audit: type=1400 audit(1743880085.503:90): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.353795][   T29] audit: type=1400 audit(1743880085.583:91): avc:  denied  { relabelto } for  pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.133694][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   29.163494][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   29.178018][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   29.288931][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.296053][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.303213][ T3304] bridge_slave_0: entered allmulticast mode
[   29.309721][ T3304] bridge_slave_0: entered promiscuous mode
[   29.316413][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.323463][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.330727][ T3308] bridge_slave_0: entered allmulticast mode
[   29.337469][ T3308] bridge_slave_0: entered promiscuous mode
[   29.360710][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.367871][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.375030][ T3304] bridge_slave_1: entered allmulticast mode
[   29.381342][ T3304] bridge_slave_1: entered promiscuous mode
[   29.392187][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.399562][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.406731][ T3308] bridge_slave_1: entered allmulticast mode
[   29.413098][ T3308] bridge_slave_1: entered promiscuous mode
[   29.419371][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   29.432971][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.440095][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.447260][ T3312] bridge_slave_0: entered allmulticast mode
[   29.453664][ T3312] bridge_slave_0: entered promiscuous mode
[   29.474340][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.483556][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.490665][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.497868][ T3312] bridge_slave_1: entered allmulticast mode
[   29.504260][ T3312] bridge_slave_1: entered promiscuous mode
[   29.516158][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.528570][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.538597][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.547716][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   29.579288][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.603357][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.621887][ T3304] team0: Port device team_slave_0 added
[   29.628375][ T3304] team0: Port device team_slave_1 added
[   29.634988][ T3308] team0: Port device team_slave_0 added
[   29.655263][ T3308] team0: Port device team_slave_1 added
[   29.686379][ T3312] team0: Port device team_slave_0 added
[   29.702189][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.709331][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.716545][ T3303] bridge_slave_0: entered allmulticast mode
[   29.722974][ T3303] bridge_slave_0: entered promiscuous mode
[   29.729991][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.736964][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.762895][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.773957][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.780988][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.806905][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.818290][ T3312] team0: Port device team_slave_1 added
[   29.828851][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.835993][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.843104][ T3302] bridge_slave_0: entered allmulticast mode
[   29.849717][ T3302] bridge_slave_0: entered promiscuous mode
[   29.856150][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.863212][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.870445][ T3303] bridge_slave_1: entered allmulticast mode
[   29.876964][ T3303] bridge_slave_1: entered promiscuous mode
[   29.883484][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.890486][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.916590][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.930202][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.937296][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.963278][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.979408][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.986634][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.993890][ T3302] bridge_slave_1: entered allmulticast mode
[   30.000515][ T3302] bridge_slave_1: entered promiscuous mode
[   30.017875][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.030290][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.055159][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.075178][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.082140][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.108095][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.124054][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.138973][ T3303] team0: Port device team_slave_0 added
[   30.145813][ T3303] team0: Port device team_slave_1 added
[   30.151833][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.158822][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.184864][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.229527][ T3304] hsr_slave_0: entered promiscuous mode
[   30.235814][ T3304] hsr_slave_1: entered promiscuous mode
[   30.247925][ T3302] team0: Port device team_slave_0 added
[   30.256228][ T3308] hsr_slave_0: entered promiscuous mode
[   30.262226][ T3308] hsr_slave_1: entered promiscuous mode
[   30.268049][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.275735][ T3308] Cannot create hsr debugfs directory
[   30.282369][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.289415][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.315445][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.326653][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.333600][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.359647][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.371106][ T3302] team0: Port device team_slave_1 added
[   30.419999][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.427100][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.453083][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.470202][ T3312] hsr_slave_0: entered promiscuous mode
[   30.476598][ T3312] hsr_slave_1: entered promiscuous mode
[   30.482456][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.490059][ T3312] Cannot create hsr debugfs directory
[   30.507840][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.514897][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.540909][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.558630][ T3303] hsr_slave_0: entered promiscuous mode
[   30.564642][ T3303] hsr_slave_1: entered promiscuous mode
[   30.570342][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.578000][ T3303] Cannot create hsr debugfs directory
[   30.644320][ T3302] hsr_slave_0: entered promiscuous mode
[   30.650376][ T3302] hsr_slave_1: entered promiscuous mode
[   30.656290][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.663844][ T3302] Cannot create hsr debugfs directory
[   30.796213][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.810010][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.818732][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.829361][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.842882][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.851867][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.864810][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.876041][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.898604][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.913238][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.922053][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.931342][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.980398][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.989141][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.999125][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.009181][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.027060][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.061231][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   31.074010][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.083583][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.092574][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.102159][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.113061][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.120133][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.139532][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.146672][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.163308][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.179330][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.207272][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.214342][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.228524][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.235606][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.245588][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.268106][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   31.279941][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.292915][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.300103][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.315113][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.322224][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.348732][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   31.371129][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.401454][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.408586][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.417930][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.425017][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.451172][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.465061][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.483474][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.520323][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   31.545276][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.552392][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.561474][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.568563][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.585364][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.643564][ T3304] veth0_vlan: entered promiscuous mode
[   31.665076][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.681795][ T3304] veth1_vlan: entered promiscuous mode
[   31.720019][ T3303] veth0_vlan: entered promiscuous mode
[   31.734783][ T3304] veth0_macvtap: entered promiscuous mode
[   31.748455][ T3303] veth1_vlan: entered promiscuous mode
[   31.755975][ T3304] veth1_macvtap: entered promiscuous mode
[   31.763579][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.796923][ T3308] veth0_vlan: entered promiscuous mode
[   31.805933][ T3303] veth0_macvtap: entered promiscuous mode
[   31.814015][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.827843][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.836432][ T3308] veth1_vlan: entered promiscuous mode
[   31.848045][ T3303] veth1_macvtap: entered promiscuous mode
[   31.859455][ T3312] veth0_vlan: entered promiscuous mode
[   31.871446][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.881994][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.892639][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.901913][ T3312] veth1_vlan: entered promiscuous mode
[   31.909151][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.917999][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.926721][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.935453][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.948990][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.959540][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.972188][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.985718][ T3308] veth0_macvtap: entered promiscuous mode
[   31.998667][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.007581][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.016337][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.025108][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.039560][ T3308] veth1_macvtap: entered promiscuous mode
[   32.059760][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   32.059775][   T29] audit: type=1400 audit(1743880090.363:110): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Dmn0Ul/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   32.060992][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.071011][   T29] audit: type=1400 audit(1743880090.373:111): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.090368][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.100824][   T29] audit: type=1400 audit(1743880090.373:112): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Dmn0Ul/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   32.122772][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.122791][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.132595][   T29] audit: type=1400 audit(1743880090.373:113): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   32.132622][   T29] audit: type=1400 audit(1743880090.373:114): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Dmn0Ul/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   32.132649][   T29] audit: type=1400 audit(1743880090.373:115): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Dmn0Ul/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   32.159673][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.168273][   T29] audit: type=1400 audit(1743880090.373:116): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.179336][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.291530][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.301430][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.312063][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.326140][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.334983][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.335904][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.343699][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.367034][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.374390][   T29] audit: type=1400 audit(1743880090.593:117): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   32.375914][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.398564][   T29] audit: type=1400 audit(1743880090.593:118): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=4323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   32.432324][ T3302] veth0_vlan: entered promiscuous mode
[   32.453027][ T3302] veth1_vlan: entered promiscuous mode
[   32.458603][   T29] audit: type=1400 audit(1743880090.763:119): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.497856][ T3312] veth0_macvtap: entered promiscuous mode
[   32.516433][ T3312] veth1_macvtap: entered promiscuous mode
[   32.527540][ T3446] Illegal XDP return value 4294967274 on prog  (id 1) dev syz_tun, expect packet loss!
[   32.539179][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.549842][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.559694][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.570171][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.580010][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.590468][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.601269][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.609677][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.620179][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.630076][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.640703][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.644805][ T3447] loop0: detected capacity change from 0 to 2048
[   32.650535][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.667328][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.679386][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.699209][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.708128][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.716919][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.725701][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.742336][ T3302] veth0_macvtap: entered promiscuous mode
[   32.748779][ T3447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.770894][ T3446] binfmt_misc: register: failed to install interpreter file ./file0
[   32.784253][ T3302] veth1_macvtap: entered promiscuous mode
[   32.858504][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.869064][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.879295][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.889909][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.899872][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.910355][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.920236][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.930756][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.986083][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.004153][ T3458] bridge: RTM_NEWNEIGH with invalid ether address
[   33.034440][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.044945][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.054867][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.065435][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.075283][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.085803][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.095683][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.106305][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.120076][ T3459] mmap: syz.4.5 (3459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   33.166057][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.195370][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.204223][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.213037][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.221843][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.387834][ T3476] loop2: detected capacity change from 0 to 164
[   33.402814][ T3476] iso9660: Bad value for 'check'
[   33.521753][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.565115][ T3485] dummy0: entered promiscuous mode
[   33.573184][ T3485] macsec1: entered allmulticast mode
[   33.601218][ T3485] dummy0: entered allmulticast mode
[   33.608728][ T3487] loop0: detected capacity change from 0 to 2048
[   33.625824][ T3485] dummy0: left allmulticast mode
[   33.630810][ T3485] dummy0: left promiscuous mode
[   33.693281][ T3487] GPT:first_usable_lbas don't match.
[   33.698732][ T3487] GPT:34 != 290
[   33.702222][ T3487] GPT: Use GNU Parted to correct GPT errors.
[   33.708465][ T3487]  loop0: p1 p2 p3
[   33.712877][ T3493] loop3: detected capacity change from 0 to 512
[   33.726876][ T3493] =======================================================
[   33.726876][ T3493] WARNING: The mand mount option has been deprecated and
[   33.726876][ T3493]          and is ignored by this kernel. Remove the mand
[   33.726876][ T3493]          option from the mount to silence this warning.
[   33.726876][ T3493] =======================================================
[   33.763450][ T3485] syz.2.14 (3485) used greatest stack depth: 10472 bytes left
[   33.784621][ T3004] GPT:first_usable_lbas don't match.
[   33.789958][ T3004] GPT:34 != 290
[   33.793501][ T3004] GPT: Use GNU Parted to correct GPT errors.
[   33.799776][ T3004]  loop0: p1 p2 p3
[   33.807756][ T3493] EXT4-fs (loop3): orphan cleanup on readonly fs
[   33.832014][ T3493] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.17: bg 0: block 248: padding at end of block bitmap is not set
[   33.849590][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   33.859615][ T3493] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.17: Failed to acquire dquot type 1
[   33.861153][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   33.883377][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   33.894601][ T3493] EXT4-fs (loop3): 1 truncate cleaned up
[   33.910985][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   33.967282][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   33.970956][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   33.978718][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   33.995828][    C0] hrtimer: interrupt took 47868 ns
[   34.094537][ T3507] vlan2: entered allmulticast mode
[   34.225635][ T3515] SELinux: ebitmap: truncated map
[   34.240238][ T3497] vlan2: entered allmulticast mode
[   34.248608][ T3515] SELinux: failed to load policy
[   34.283145][ T3502] vlan2: entered allmulticast mode
[   34.317253][ T3493] gtp (3493) used greatest stack depth: 9224 bytes left
[   34.345712][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.368623][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.390519][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.467758][ T3518] vlan2: entered allmulticast mode
[   34.495525][ T3526] netlink: 'syz.4.26': attribute type 27 has an invalid length.
[   34.588430][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.595733][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.646336][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.665965][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.713479][ T3526] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.722591][ T3526] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.731675][ T3526] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.740854][ T3526] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.766249][ T3528] dummy0: entered promiscuous mode
[   34.771418][ T3528] macsec1: entered allmulticast mode
[   34.784863][ T3528] dummy0: entered allmulticast mode
[   34.792189][ T3528] dummy0: left allmulticast mode
[   34.797304][ T3528] dummy0: left promiscuous mode
[   34.925431][ T3539] loop2: detected capacity change from 0 to 2048
[   34.935064][ T3534] SELinux: ebitmap: truncated map
[   34.942610][ T3541] bridge: RTM_NEWNEIGH with invalid ether address
[   34.950316][ T3534] SELinux: failed to load policy
[   34.959782][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.991912][ T3539] binfmt_misc: register: failed to install interpreter file ./file0
[   35.090535][ T3551] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.106305][ T3556] loop3: detected capacity change from 0 to 512
[   35.158732][ T3547] vlan2: entered allmulticast mode
[   35.165464][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.210043][ T3556] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.276545][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.342278][ T3563] loop1: detected capacity change from 0 to 164
[   35.351068][ T3563] iso9660: Bad value for 'check'
[   35.422525][ T3567] loop3: detected capacity change from 0 to 2048
[   35.439241][ T3571] loop1: detected capacity change from 0 to 512
[   35.457266][ T3573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'.
[   35.466110][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   35.477168][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.490606][ T3571] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.502844][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.527727][ T3567] binfmt_misc: register: failed to install interpreter file ./file0
[   35.576171][ T3581] vhci_hcd: invalid port number 15
[   35.581325][ T3581] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[   35.604624][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.977600][ T3585] vlan2: entered allmulticast mode
[   36.230421][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.393437][ T3590] SELinux: ebitmap: truncated map
[   36.406854][ T3590] SELinux: failed to load policy
[   36.423431][ T3598] loop1: detected capacity change from 0 to 512
[   36.456303][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.471944][ T3598] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.485925][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.537196][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.566702][ T3609] rdma_op ffff888119154180 conn xmit_rdma 0000000000000000
[   36.609196][ T3608] loop4: detected capacity change from 0 to 2048
[   36.653634][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.692990][ T3622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.59'.
[   36.701891][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'.
[   36.722341][ T3621] loop1: detected capacity change from 0 to 8192
[   36.724474][ T3608] binfmt_misc: register: failed to install interpreter file ./file0
[   36.812759][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.853975][ T3628] vhci_hcd: invalid port number 15
[   36.859178][ T3628] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[   36.879472][ T3625] SELinux: ebitmap: truncated map
[   36.894214][ T3625] SELinux: failed to load policy
[   36.963170][ T3630] SELinux: ebitmap: truncated map
[   36.988377][ T3630] SELinux: failed to load policy
[   36.993673][ T3632] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   37.003539][ T3632] SELinux: failed to load policy
[   37.037249][ T3636] Zero length message leads to an empty skb
[   37.080259][ T3638] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   37.086832][ T3638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   37.094463][ T3638] vhci_hcd vhci_hcd.0: Device attached
[   37.112451][ T3643] loop2: detected capacity change from 0 to 164
[   37.119379][ T3643] iso9660: Bad value for 'check'
[   37.130503][   T29] kauditd_printk_skb: 730 callbacks suppressed
[   37.130521][   T29] audit: type=1326 audit(1743880095.433:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.163635][ T3639] vhci_hcd: connection closed
[   37.163972][   T51] vhci_hcd: stop threads
[   37.173001][   T51] vhci_hcd: release socket
[   37.177469][   T51] vhci_hcd: disconnect device
[   37.194040][ T3650] bridge: RTM_NEWNEIGH with invalid ether address
[   37.209598][   T29] audit: type=1326 audit(1743880095.433:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.233041][   T29] audit: type=1326 audit(1743880095.433:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.256250][   T29] audit: type=1326 audit(1743880095.433:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.279553][   T29] audit: type=1326 audit(1743880095.433:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.302962][   T29] audit: type=1326 audit(1743880095.433:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.326254][   T29] audit: type=1326 audit(1743880095.433:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.350043][   T29] audit: type=1326 audit(1743880095.433:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.373297][   T29] audit: type=1326 audit(1743880095.433:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.396490][   T29] audit: type=1326 audit(1743880095.433:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7425a0d169 code=0x7ffc0000
[   37.396756][ T3659] loop2: detected capacity change from 0 to 2048
[   37.461295][ T3656] SELinux: ebitmap: truncated map
[   37.496847][ T3667] loop0: detected capacity change from 0 to 2048
[   37.503468][ T3656] SELinux: failed to load policy
[   37.508270][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.599136][ T3654] binfmt_misc: register: failed to install interpreter file ./file0
[   37.612004][ T3671] SELinux: ebitmap: truncated map
[   37.646062][ T3667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.687190][ T3671] SELinux: failed to load policy
[   37.706956][ T3667] binfmt_misc: register: failed to install interpreter file ./file0
[   37.848109][ T3677] bond1: entered promiscuous mode
[   37.854693][ T3677] bond1: entered allmulticast mode
[   37.863069][ T3677] 8021q: adding VLAN 0 to HW filter on device bond1
[   37.914589][ T3677] bond1 (unregistering): Released all slaves
[   37.974812][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'.
[   38.185826][ T3696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.206143][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.218427][ T3696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.356284][ T3703] loop2: detected capacity change from 0 to 8192
[   38.399297][ T3705] rdma_op ffff888101047d80 conn xmit_rdma 0000000000000000
[   38.424969][ T3707] netlink: 'syz.2.86': attribute type 33 has an invalid length.
[   38.432645][ T3707] netlink: 152 bytes leftover after parsing attributes in process `syz.2.86'.
[   38.502311][ T3711] loop4: detected capacity change from 0 to 2048
[   38.517791][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.536141][ T3711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.567617][ T3711] binfmt_misc: register: failed to install interpreter file ./file0
[   38.832850][ T3725] bond1: entered promiscuous mode
[   38.839309][ T3725] bond1: entered allmulticast mode
[   38.856004][ T3725] 8021q: adding VLAN 0 to HW filter on device bond1
[   38.893247][ T3725] bond1 (unregistering): Released all slaves
[   38.958126][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'.
[   38.971159][ T3738] loop3: detected capacity change from 0 to 2048
[   38.998838][ T3738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.057653][ T3737] binfmt_misc: register: failed to install interpreter file ./file0
[   39.087420][ T3745] rdma_op ffff8881193e4980 conn xmit_rdma 0000000000000000
[   39.189398][ T3748] loop1: detected capacity change from 0 to 512
[   39.232560][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.284608][ T3748] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.417496][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.447248][ T3760] loop0: detected capacity change from 0 to 512
[   39.471142][ T3760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.488702][ T3760] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.490880][ T3764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'.
[   39.508078][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'.
[   39.542257][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.562313][ T3738] ==================================================================
[   39.570451][ T3738] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[   39.577705][ T3738] 
[   39.580044][ T3738] write to 0xffff8881061f9d44 of 4 bytes by task 3737 on cpu 1:
[   39.587685][ T3738]  __xa_set_mark+0x192/0x1c0
[   39.592316][ T3738]  __folio_mark_dirty+0x3b8/0x4e0
[   39.597362][ T3738]  mark_buffer_dirty+0x134/0x230
[   39.602317][ T3738]  block_write_end+0x123/0x210
[   39.607097][ T3738]  ext4_write_end+0x148/0x770
[   39.611788][ T3738]  ext4_da_write_end+0x74/0x810
[   39.616653][ T3738]  generic_perform_write+0x31e/0x4b0
[   39.621944][ T3738]  ext4_buffered_write_iter+0x1ed/0x3c0
[   39.627498][ T3738]  ext4_file_write_iter+0x3b2/0xf80
[   39.632709][ T3738]  iter_file_splice_write+0x5f2/0x980
[   39.638096][ T3738]  direct_splice_actor+0x160/0x2c0
[   39.643222][ T3738]  splice_direct_to_actor+0x305/0x680
[   39.648618][ T3738]  do_splice_direct+0xd9/0x150
[   39.653405][ T3738]  do_sendfile+0x40a/0x690
[   39.657826][ T3738]  __x64_sys_sendfile64+0x113/0x160
[   39.663028][ T3738]  x64_sys_call+0xfc3/0x2e10
[   39.667629][ T3738]  do_syscall_64+0xc9/0x1c0
[   39.672239][ T3738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.678140][ T3738] 
[   39.680462][ T3738] read to 0xffff8881061f9d44 of 4 bytes by task 3738 on cpu 0:
[   39.688006][ T3738]  xas_find_marked+0x614/0x660
[   39.692785][ T3738]  find_get_entry+0x5d/0x370
[   39.697475][ T3738]  filemap_get_folios_tag+0xa0/0x220
[   39.702782][ T3738]  filemap_fdatawait_range+0x8c/0x200
[   39.708170][ T3738]  __writeback_single_inode+0xe8/0x850
[   39.713639][ T3738]  writeback_single_inode+0x16c/0x3f0
[   39.719017][ T3738]  sync_inode_metadata+0x60/0x90
[   39.723962][ T3738]  generic_buffers_fsync_noflush+0xd8/0x120
[   39.729871][ T3738]  ext4_sync_file+0x1c3/0x6c0
[   39.734558][ T3738]  vfs_fsync_range+0x116/0x130
[   39.739340][ T3738]  ext4_buffered_write_iter+0x358/0x3c0
[   39.744902][ T3738]  ext4_file_write_iter+0x3b2/0xf80
[   39.750107][ T3738]  iter_file_splice_write+0x5f2/0x980
[   39.755494][ T3738]  direct_splice_actor+0x160/0x2c0
[   39.760633][ T3738]  splice_direct_to_actor+0x305/0x680
[   39.766025][ T3738]  do_splice_direct+0xd9/0x150
[   39.770800][ T3738]  do_sendfile+0x40a/0x690
[   39.775221][ T3738]  __x64_sys_sendfile64+0x113/0x160
[   39.780422][ T3738]  x64_sys_call+0xfc3/0x2e10
[   39.785018][ T3738]  do_syscall_64+0xc9/0x1c0
[   39.789539][ T3738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.795436][ T3738] 
[   39.797757][ T3738] value changed: 0x00000021 -> 0x0a000021
[   39.803476][ T3738] 
[   39.805797][ T3738] Reported by Kernel Concurrency Sanitizer on:
[   39.811958][ T3738] CPU: 0 UID: 0 PID: 3738 Comm: syz.3.97 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(voluntary) 
[   39.823855][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   39.833917][ T3738] ==================================================================
[   39.876648][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.885043][ T3765] vhci_hcd: invalid port number 15
[   39.890741][ T3765] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[   39.921335][ T3767] loop0: detected capacity change from 0 to 512
[   39.940011][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.961281][ T3767] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.032357][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.043397][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.