last executing test programs:

12.562692959s ago: executing program 1 (id=554):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
bind$phonet(r0, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10)
r4 = shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0)
syz_open_procfs(0x0, 0x0)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0x80da61, 0x1, 0x20000000, 0x40000337}, &(0x7f0000000240), &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4082, 0xfffffffffffffe2d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000740)=""/2, 0x52}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/238, 0xf3}, {&(0x7f0000000640)=""/47, 0x2f}], 0x6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getrlimit(0x0, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

12.206394881s ago: executing program 1 (id=556):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=0x0], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000900)={{}, {0x77359400}}, &(0x7f0000000940))
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x18)
r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r4, r4, 0x800022)
wait4(r4, 0x0, 0x40000000, 0x0)
r5 = fcntl$getown(r0, 0x9)
syz_clone3(&(0x7f0000000700)={0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/219, 0xdb, &(0x7f0000000580)=""/214, &(0x7f00000006c0)=[r4, 0x0, 0x0, r5], 0x4}, 0x58)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000170000000800001a2800000005"], 0x48)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)

10.087400947s ago: executing program 1 (id=568):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$phonet(r0, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10)
r2 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4082, 0xfffffffffffffe2d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000740)=""/2, 0x52}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/238, 0xf3}, {&(0x7f0000000640)=""/47, 0x2f}], 0x6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

9.72984601s ago: executing program 1 (id=574):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kmem_cache_free\x00'}, 0x18)
r5 = msgget$private(0x0, 0x480)
msgsnd(r5, &(0x7f0000000040)={0x2, "ff7f1c823e695237825488d5e047d09602c1017642c6ca17e11ecf866b5b33b179d065bdcb1b5e01481dfb6a2c73cc623a60ca094f1a550aba92acd8a69444d52f86e5db83b032f4c6cbfcd0c084237048eefc30d84c82b62811c1ed61c0d1cc88dbb7e55311885b8c03a47e40dc0a477e793c06fe89f41fe664acdf6434e5cf7eca1eed5afb2f9e91e889b97755d343257d850a78e658f2d1f1b4ff08fd506422d93d3b8b9ee5580b0eb7f573bd411b8a27de0a2d011cf5bf2940dfc6dd679d19b42d2caa34c32fa898432365273970a5082329e61912d4eef4f24b9268e601579fc8f0fa2a3c2af89591ffce34b75eebb33b8156902d50adc2bcdb24763d29716bfd0626e59496e492fc385c150cf7e89132f467ebaa62301278af495c0e9bc64c588aa6e815255b85c7d90fe5c01aa73969671fd0e29b206006309aeb4615a4b5b0d066b3fa6bce7be06c51410e3ea7e031e6a8edd63d3c44f5ddd104222c649edb056ece9ce94e7a1d115f79b4f2d26a1d29f3213f0d647cafbbb8ef825c1226ed716bfb0d187df7463bc949b8281cd1e5343f1f2d37f5690a5557262a2053e34484be6267897bcba5f709a52ae5a6255c58ef0f46632e05c2ccfe33e8258daf59413151812ebddc6b4293ca132b3612b1cf78b5f83285393979c5d07c3a01db4aba7bf8bca1705673b1a6f218fc971ebfc5ef5accc6fea12d0c0369d290bd9684eab10b88cad97cb10ea58ffc615c54212574874ee72289b96f8f3f00be319ebf72ddfeb45e36b9055f042dad6a290a01101452c3d0e2dd43ea4779f62bee347f05eb191b877dad4c5bdabfd0210b6a39fc8a93e0c2efab44426a3c9e0dbdc4626f4ffa245992c519d624a29b25ed65151ecc38e67d071e01886d922b2ec23728e8445223882b60e6dc2f8551bcbddc2f3d8bc106c8aa2ad0edcf0d1ee8af02ad69e57114f302f13acbda7b97730f4f141cd041198f9a3cb806b7db72b2c05e0aaf6a786bd367d38402a9087b669ec9b557ca2571689369bbd076789a91f655ff0bcaa853891b0ef2b0cf9914a2b886e6c3a0d3eb8d9225557baff7573bd6d45a4b64d4b3d8d5b596a0c944845cb79ca0b1eccd0048f3195b77ec0d2d16158a80cb5937b6f78066ad1e97c8afa5c654c8a68befd2a253280497c7ea2e0409f1fbfc3b507dbb6574dd111ffed8e2de29b5d696196ac949398971d217e9418c08715fe11e29c454ece4a0577633879ef0b8c95bfa5c556b0a746332333e617146f0bb06e15d4102cef7106e2dadd3682c9e47b827ee43e9319181c7759bf6726dac95f0852dd5448b96222edd4bc6c8e0e85656bcaf5137f8ce0cd0fca7fb12eb5582eb6d2a680ab74e18806ccd441cdd87fed1a985cf4f178e3cf12b658d8d8c3b2153d73eee5fd9a585192fa1b763db8a3f2bf7df48f3"}, 0x401, 0x0)
msgsnd(r5, &(0x7f0000000a00)={0x1, "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"}, 0x401, 0x0)
msgctl$IPC_RMID(r5, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='./file1\x00', 0x16000f57)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r7, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)

9.548742097s ago: executing program 1 (id=578):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x18)
nanosleep(&(0x7f0000000240), 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/188, &(0x7f0000000040)=0xbc)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = signalfd(r5, &(0x7f0000000400)={[0x3]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES32=r5, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_sysctl=0x12, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r8, 0x400, 0x1)
fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r9 = socket$key(0xf, 0x3, 0x2)
r10 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="a8da49f7da022c5709d240eca9511a1912c29f442b69e8d9af11114f6c6175bc8eaf224aeae09cdc566e81f8da91317f7cd9260ff31a143e84532680c6f39908e024e44db1f851df3f1df31f8a800cefd6e9a3858ec614ded3e69dcef142f9766b30b85b74830b4b6ebe87", 0x6b, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000280)='user\x00', &(0x7f0000000300)=@secondary)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="020300031f000000fe06000000000000130009008004000053bb7b0725c8ad7b4d244baf54eb8eeb3f9ff1065db5728900533789e23f6edd9cde66701ba7740cabe364d26af6846aa8c8ebcb17564070fe6d1de80cbef5f34b3975baa3f8ece6982dfbb21ef36c4e696337fa7eb370ac52931835c296fbafe356669ff8df50518c66b0c43f2488535be310c6ab5d92f344bb29e62027d43d651475ca85865ea6bc039f9b9f7f05000600000000000a004e2400000008fe8000000000000000000000000000bb0180ffff00000000d6e93f684e9002000107000000000000000d00000000030005000000000002000000ac14140000000000"], 0xf8}, 0x1, 0x7}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f80)=ANY=[@ANYBLOB], 0x60}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

9.268720813s ago: executing program 1 (id=584):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$phonet(r0, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10)
r2 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4082, 0xfffffffffffffe2d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000740)=""/2, 0x52}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/238, 0xf3}, {&(0x7f0000000640)=""/47, 0x2f}], 0x6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

9.253046984s ago: executing program 32 (id=584):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$phonet(r0, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10)
r2 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4082, 0xfffffffffffffe2d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000740)=""/2, 0x52}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/238, 0xf3}, {&(0x7f0000000640)=""/47, 0x2f}], 0x6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

7.550978392s ago: executing program 3 (id=592):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)
fcntl$setlease(r0, 0x400, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="095ea6cc22dae5ee2fdd29d9d956785b763e4b12d111089c1a9c00dd201ea80c10466d8f02f143bcd20875bec6222cd680373f55060c5ad80f7fc0392a229a964602c002c985ad93c8f4675d8e47bc8b85e22eb35f86de731db187dcc40eb9a1e773989f7382a707ec9c7176c70534224f68331d", @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x39)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@cswp={0x58, 0x114, 0x7, {{0x400, 0x8}, &(0x7f0000000400)=0x5, &(0x7f00000004c0)=0x7, 0x4, 0x3, 0x80f, 0x9, 0x14}}], 0x58, 0x8004}, 0x0)
creat(&(0x7f0000000640)='./file0\x00', 0xecf86c37d53049cc)
r2 = inotify_init1(0x0)
r3 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0xa4000021)
read(r2, 0x0, 0x20)
close(r2)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="025258756b4c8d81ddab6258ec42b7905fcec8db7399"], 0x9, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001b40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94)
socket(0x10, 0x2, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16=r3], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xa}, 0xff85)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002cbd720000dc00000100000000007a3300000000080041bf3e0096dbc1540073000000140033006c6f00000000000000000000090000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf250900020073797a30080000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x3, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.550483552s ago: executing program 4 (id=593):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x3, &(0x7f00000002c0)=[{0x2, 0xe, 0x10}, {0x0, 0x2a, 0x1, 0x80}, {0x9, 0xff, 0x0, 0x2d}]})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]})
lchown(0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5)
syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
splice(r1, 0x0, r4, 0x0, 0xc, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, &(0x7f0000000280)})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)="b1e9fd7db421c72ec26a7bc399a2e0ff7f77c29117619cc64a1f73f0fa85", &(0x7f00000002c0)="3414c95cc72fec2053ca15ea086b81ecf5349866f8d819ab", 0x2, r3, 0x4}, 0x38)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x18)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

5.985622167s ago: executing program 0 (id=594):
syz_emit_ethernet(0x25a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x1, 0x24c, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x93, 0x0, [], "2105f1c4604a522f119d7d9ec074c93611a0cf75ef7f586642d66880789013e0992256dd4ccdc940b9e0e5a68f087ce2306ce17302190001a67e6aec43dd5f9ca4d8e23907314b191f4b3d449e62d6ef6b8bde041f63e71f1b6e92afffd71f0291e10b4bf4bb1c9cab69a496dfdf3dff2f5838f3eca817fd43eddb676001678f50dacd3ebf332fb33ff2d7153932bbafe51119"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "822cc985f57074720dfb4b40762b5476e47fdb3a47cededc3c2ed6d7446a85c3f163ec78d945988a0b9f12253bb4a6d3f9cbb23af9b2958a3e177a46a179354f95f5cc664c26054c87d5551c229bcfc9bf50e1fe4c292ef7392dfcc87034646899a8f038ee8bbe0bc455ccf1e67e67bbed077bb5b262c455b6c94c49163ee61379f46885bbab4ba45676eecb8f6b7dba68042246344c7ef10df5b0526fd03767adabdf6e039b84e5a1bf067c298c2063a33d32d2ef086602a1b8a9818e246b24701d2424776bf4f2098e0022af8f5420542d2af10af4078a513a2d"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0xc041, 0x101], "d790b2f6814c4df08f38751d741bf3b4ee24ce3df0062751dd8a6f847135cfb2441f9f9c14db260966b5586896237db9868e9616d14f608a441a7b3a677b8930a6fca8782360cbbb74c8cd8f3c4f9229754bea66eb105fdf0a5a8838f34c274c6dcebe885bb5ad1ed4063a2d19f71caec765"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0xe, 0x2, 0x1, 0x3, 0x3, 0x5}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x5, 0x0, 0x0, 0x3, 0x7, 0x8}, 0x2, {0x4, 0x1, 0x1, 0x19, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "323a0668bc050e63f3e1"}}}}}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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")
mount$9p_fd(0x0, &(0x7f0000002400)='./file0\x00', 0x0, 0x4800, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000001740), r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000740)='./file2\x00', 0x10542, &(0x7f0000000b80)=ANY=[], 0xf8, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

5.984884147s ago: executing program 3 (id=596):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000600"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="180000002d0e666735aa566600000000000000005206c1c1c0d0f488a817a4eb811d4b9ec2a58a99ec551c03ec289f55db730fed1019ce3e294aaaa5d00f4f23f511ea0f542fa5d1618c434ed81cc9e349b639c5442595d4684b60c4b85435c500c4749118ef286cd70de979400bf04988a4147f90fb06bd7d5837fa1291f0b65f618939b3fb6fc0b7ef85005ee5fdd8d7a6c67d2865737e9585021b27b900e878f500c0b67c726e075e7c8407c8c322bb85b7dc02802f39fdcfee4da344a63ad3fe0e5ef3e40965f5d044cfe9c42ad11a0f68ebaba372ea0021000000000000631f4366", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20)
lsm_set_self_attr(0x66, 0x0, 0x43, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x391cc40fecd11fba)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818413, &(0x7f0000000080)={[{@data_journal}]}, 0xfd, 0x5bb, &(0x7f0000000740)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fdatasync(r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8540, 0x0)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, 0x0)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, 0x0, 0x0)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.073964791s ago: executing program 0 (id=597):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00')
write$cgroup_subtree(r1, 0x0, 0x4c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r3 = socket(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="725bf64baf179c5118f9ee53ba50c88cf2b403b8c0d23f8c4635c8a652bc3a"], 0x48)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, 0x40)
r7 = accept$nfc_llcp(r1, &(0x7f0000000000), 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x8, &(0x7f0000000240)=[{0x2, 0x7}, {0xd, 0x7, 0x1, 0x40}, {0x28, 0x1, 0x1, 0x7f}, {0x7, 0x8, 0x2a, 0x9afe}, {0x101, 0x5, 0xfd, 0x8}, {0x3, 0x80, 0x4, 0x6}, {0x4, 0x3, 0x3, 0x83}, {0x4, 0x8, 0x6, 0x7}]})
quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, 0xffffffffffffffff, &(0x7f00000000c0))

5.072500611s ago: executing program 2 (id=598):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0x1}, 0x18)
nanosleep(0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0xfffffff9, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18)
syz_usbip_server_init(0x2)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0)
bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14)
sendto$inet6(r8, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))

5.071341482s ago: executing program 3 (id=599):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000001f)
fcntl$setown(r0, 0x8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000007c0)={0x6, 0xffffffc3, 0xffffdffc, 0xfffffffc}, 0x10)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a0001000600000003dcdf250220200000f6"], 0x2c}}, 0x4040000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
r11 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000540)={0x0, "38a33a5be89147caef0244c7049e598deaa1b7488268784c41f30842380bb1b24213ba215cafe9774435422be5667f7ded1a32c86110d8f6dde948d85b80387e", 0x12}, 0x48, r11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r13, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0)

5.070820842s ago: executing program 4 (id=600):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18)
write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17)
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

4.049967976s ago: executing program 0 (id=601):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, &(0x7f0000000580)=r8}, 0x20)
inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r4, 0x0, 0x20)
r9 = open(0x0, 0x40, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
close(0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94)
r10 = openat(r9, &(0x7f0000000040)='./file1\x00', 0x28040, 0x2)
fcntl$setlease(r10, 0x400, 0x0)

4.048080846s ago: executing program 2 (id=602):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, 0x0, 0x40002061)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4)
fsetxattr$system_posix_acl(r1, &(0x7f0000000ec0)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x7}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x7}], {}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x7, r4}, {0x8, 0x0, 0xee00}], {0x10, 0x6}, {0x20, 0x1}}, 0x5c, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0x7ffc0002}]})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r6 = syz_io_uring_setup(0x6dbb, &(0x7f0000000d00)={0x0, 0x6715, 0x0, 0x1, 0x327}, &(0x7f0000000d80), &(0x7f0000000dc0))
io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r7 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
writev(r9, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0xc6a}], 0x1)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r7, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

4.041930967s ago: executing program 3 (id=603):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0xfa1d45b35cf714cd, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
r3 = socket$netlink(0x10, 0x3, 0xf)
r4 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101, 0x6000, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x20000004)
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@random="373573c22a98", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "94f4dc5bede8c459"}}}}, 0x0)

4.035868527s ago: executing program 4 (id=604):
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0xbc2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
semget$private(0x0, 0x4000000009, 0x228)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.928077429s ago: executing program 0 (id=605):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0002, 0xf0, 0xffffff87, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket(0x10, 0x3, 0x0)
connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x18)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0xffff888237c0a080, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

2.92655792s ago: executing program 2 (id=606):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x100}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
exit(0x7)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r9, 0x0)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r10=>0x0})
sendto$packet(r8, &(0x7f00000002c0)="05031c08d3fc140820824788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
mkdir(&(0x7f0000000100)='./file0\x00', 0x124)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f00000005c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x24}}, 0x80, 0x0}, 0xc0400c0)

2.92491688s ago: executing program 3 (id=607):
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$eJzs3V1v29Ydx/GfbDnWvCEYtiEIgjycJhvgAKlDyY0Co1ccdSSzlUiBpAv7qggWuTAid0PSAYtv5twELba9hQF9Ebvdm9l1sesN2DTwyZMfJDmxayfF92O0PBYPz/kfRuA/h+GDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKl7LceoVdf1gY9NM5rWisDdlfdne/UOLKf1KlfQ/1Wq6nn90/Rf/X30t/d9d3cx/u6lauqhp78fXfvrxz6tz5fZTAnoDeut2Xrzce/ZkOBw8P2X96jlF/K7o2MCPQ7/ndqzx49CsNZvOw/V2bNp+18ZbcWJ7xousm4SRWfbum/ra2qqxK1vhRtBpuV1bfvj4w4bjNM0nK33rRnEYPPxkJfbW/W7XDzpZnXR1Wudx+kX81E9MYt2eMds7w8HqrCDTSvWifPQPYH+8UmNWSw2n0ahXJTUfXSm+qI1Gvd5o1JuP1h49dpyqc8iCo8WjNca+tJ1/5W284U7H++28Dt3Amc0V+V9d+Qq0oU2ZE388tRQpVG/C+kKZ/3/10E7tdzz/l1n+evijcvUNZfn/dv7b7Un5X0aLE+K5mJ8Xeqk9PdMTDTXUQM9Ps9WViWvmyvFf5phMunP3T1ezI6tAvmKF8tWTm31i5KumUEZraqopR59rXW3FMmrLV1dWsbYUK5HNvlGeIlm5ShQqktGyPN2XUZZttSojqxVtKdSGAnXUkpu1sq2dbL+vTonxoFL9NJUaUypl+X88mR/7wDni+Cbn9ZdWvK/O9wAOnMGozP8AAAAAAOAHq5KdfU/n/wu6lZXaftc6lx0WAAAAAAA4R1+3s+vrK+n8X9ItVSbO//eLEwUAAAAAAOA9U8nusUun9Uu6k5fKO6EOTgLMXW6IAAAAAADgjLJ/0L+dLpbS0h1Vjs//j8uefla7sCABAAAAAMCZJF8XhYnP2I/7i5W//1NRtFB51d/8ZWXXTeu5u/P5dvPHWmzf0GgxL2dtNatFk569WSmefnnwEMzv8kVVo9H0OCpTA6geDqBytdj6cAD6sz5Ia/xDHzzN6z4t1+S9LLX9rl3xwu7Hdbnu1bnEbia//3LnD8qG/03QS4PcGQ5WfvPb4dMslldpK692i/sijt0eMSWWr8rzJ7dOHvFCdiNG0e9SRds7w4EzPv7isoxjV2dM6fO17uZ17i7ly6XD46+lfdZXJo0+j2JBZxz5a93L69xbvpcvToiiMSOKQWM8irfaF6eIYnVWFKtnjAIALst29tSfE7NQeUg/mnff4ii3PetNPtOz+yl7ea3lvM7yjezAWr1xwhHdmXVEd/qbZWbOs9uVqdlN+9LJR/SDdyBNyrFpv3856Leejf7bP0r6tsyqx4YfdxuVdBfOf7X7O1178XLvw53dJ18Mvhh82WisNp2PHOdRQwvZMIoFuQcAcILZ79iZWaPyUT6rVjar/s8oN5bxflZcUlCeFRjqqR5kdxtIWlRNi4da/dNf05n42GUID47OWqsaz6ijMln+ezQaPZgxq8vbLZ2mbv56GQAAfkjulnn4zqz8X9Q7If8/KE8FTJh3H87lR98QPKlufULE33A7IgAAZ2Sj7/5bzNj7n9fX1upusm5NFHqfmshvdazxg8RG3robdKzpR2ESeuF8WvjMb9nYxBv9fhglph1Gph/G/mb25ndTvPo9tj03SHwv7netG1vjhUHieolp+bFn+hu/7vrxuo2yjeO+9fy277mJHwYmDjciz64YE1s7VtFv2SDx235aDEw/8ntutGU+C7sbPWtaNvYiv5+EeYNlX37QDqNe2uyVy97XAAC8K1683Hv2ZDgcPP8eC5c9RgAAcNibZGmuGAMAAAAAAAAAAAAAAAAAAAAA4HJMvm9vXhdwa2BR+NtPpIvqa3JhQdLl9f7GhQW9E2FQOFPh6jk3WNM5NTjryLF/MQcoAN+b/wUAAP//4SNc/Q==")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061)
read(r1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x9}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000)
r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242)
poll(&(0x7f0000000040)=[{r7, 0x1}], 0x1, 0x101)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2.92440885s ago: executing program 4 (id=608):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0087f52ed5a07bc68aed71dfd93c24ce56cd5f937b8ed81d723f"], 0x1, 0x530, &(0x7f0000000600)="$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")
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x412000, 0x0)
syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_create(r1, &(0x7f00000001c0)=@access={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'unconfined', 0x20, 0x1ff}, 0x45)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inlinecrypt}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r3, 0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000140)=[{0x7, 0x1, 0x1, 0x49}, {0x200, 0x8, 0xf, 0x8}, {0xf, 0xf, 0xef, 0x6}, {0x8, 0x21, 0x81, 0x6}, {0x81, 0x6, 0x1, 0x2}, {0x3, 0x7, 0x8, 0x8}]})

1.694937033s ago: executing program 0 (id=609):
syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00800000000000000000000020000000000000c70beb495edb3a5cd508a3bd59f9b16cccf52f45542411c41552073e5d879252a93b5dc297dcb1511cbc24ed898571d5649f625292cec78697ddaaa67730893820b3fa94a8d8fb5bcc97cc7fb239246cba5121edde4e573b4a8564bb5aea4c2c8f32f1225a94bd4350e529b4f2b0d06ed750d7ec6ebcb18e746c4dc6d955c07876f2e95fda1a385018f3a3d57e9b27b075f77b9386230fc25b13d5d442c07b05eb622b4ca29d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @loopback, @remote}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r3}, 0x18)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440)
syz_usb_disconnect(r4)
syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x41015500, &(0x7f0000000500)=0x81000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40)

1.688985094s ago: executing program 2 (id=610):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0)
write$vga_arbiter(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='tryl'], 0xd)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r2}, 0x18)
socket(0x8000000010, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r3, @ANYRES32=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000700)='0', 0x1}], 0x1, 0x2, 0xffffffcd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r6}, 0x18)
r8 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r10, 0x0, 0x2}, 0x18)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4002}, 0x50)
bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r11, 0x40089413, &(0x7f0000000680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

1.687526194s ago: executing program 3 (id=611):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x4}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2})
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f00000003c0)='syzkaller\x00', 0x4e, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x34, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
socket$inet(0x2, 0x5, 0x7fffffff)
r9 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000)
syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)

1.686344264s ago: executing program 4 (id=612):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x8, 0x5, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x7ebd, @mcast1, 0x7}], 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000800000000000100100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x2, 0x10007}, 0x2, 0x10000, 0xba, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000700)="5c00000014006b05c84e21000ab16d6e230675f81100001fbc0002005817d30461bc24eeb556f08c7eb1e208521505ea16018051f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00000000000000000000000095198fe404689c1491da48134b2ba5d1070c", 0x72}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810)
pipe(&(0x7f00000006c0))
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)

381.564635ms ago: executing program 0 (id=613):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000040)=0x7, 0x0, 0x4)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYRES32=r1], 0x4c}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0)
r7 = gettid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_emit_ethernet(0xf6, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc0, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0xf, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x67, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cf"}, @ra, @generic, @padn]}]}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)

379.739905ms ago: executing program 2 (id=614):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x1075}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/175, 0xaf}], 0x1, &(0x7f0000000700)=""/245, 0xf5}, 0x50aa075d}], 0x1, 0x40, &(0x7f0000000440)={0x0, 0x989680})
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0)
syz_clone3(0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x200800)
write$9p(r4, &(0x7f0000000340)="86f1dfd3850f15c37a90a0f4cdf4475ba9b7c9f1b1400cf1cd089264f51e1cc9532d2f68f7decbbb4e76096d4a1c1697fe9000f6", 0x34)
getitimer(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7001000000000400000000000000146b0edbb41cf03ecf03141f15edd9fba39d00"], 0x28}, 0x1, 0xff07}, 0x2000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000000007000fbdbdf2504000000"], 0x14}}, 0x800)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/8, 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x30, r10, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x90)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000400)=0x20020, 0x4)
bind$xdp(r9, &(0x7f0000000240)={0x2c, 0x8}, 0x10)
sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xd9, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x6, [0x7, 0x0]}, @generic={0x88, 0x6, 'c1[f'}, @noop]}}}], 0x38}}], 0x2, 0x10)
fsync(r1)

379.058895ms ago: executing program 4 (id=615):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x100000001}, 0x18)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800d4}, 0x800)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
r7 = socket(0xa, 0x5, 0x0)
listen(r7, 0x8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001140)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20184d10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x40000)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

0s ago: executing program 2 (id=616):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
bind$phonet(r0, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10)
r4 = shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0)
syz_open_procfs(0x0, 0x0)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0x80da61, 0x1, 0x20000000, 0x40000337}, &(0x7f0000000240), &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4082, 0xfffffffffffffe2d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000740)=""/2, 0x52}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/238, 0xf3}, {&(0x7f0000000640)=""/47, 0x2f}], 0x6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getrlimit(0x0, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

kernel console output (not intermixed with test programs):

[   20.044607][   T29] audit: type=1400 audit(1766834419.129:62): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   20.066774][   T29] audit: type=1400 audit(1766834419.129:63): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   20.089542][   T29] audit: type=1400 audit(1766834419.129:64): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   20.112654][   T29] audit: type=1400 audit(1766834419.129:65): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   20.136088][   T29] audit: type=1400 audit(1766834419.129:66): avc:  denied  { read open } for  pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts.
[   25.052805][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   25.052824][   T29] audit: type=1400 audit(1766834424.139:70): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.082454][   T29] audit: type=1400 audit(1766834424.169:71): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.083171][ T3301] cgroup: Unknown subsys name 'net'
[   25.110286][   T29] audit: type=1400 audit(1766834424.199:72): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.232022][ T3301] cgroup: Unknown subsys name 'cpuset'
[   25.238183][ T3301] cgroup: Unknown subsys name 'rlimit'
[   25.348681][   T29] audit: type=1400 audit(1766834424.429:73): avc:  denied  { setattr } for  pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.372327][   T29] audit: type=1400 audit(1766834424.429:74): avc:  denied  { create } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.392970][   T29] audit: type=1400 audit(1766834424.429:75): avc:  denied  { write } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.413345][   T29] audit: type=1400 audit(1766834424.429:76): avc:  denied  { read } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.434120][   T29] audit: type=1400 audit(1766834424.439:77): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   25.441778][ T3305] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.455257][   T29] audit: type=1400 audit(1766834424.439:78): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   25.489229][   T29] audit: type=1400 audit(1766834424.439:79): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.528263][ T3301] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.608183][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   26.686514][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.693626][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.700906][ T3319] bridge_slave_0: entered allmulticast mode
[   26.707658][ T3319] bridge_slave_0: entered promiscuous mode
[   26.718135][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.725538][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.732936][ T3319] bridge_slave_1: entered allmulticast mode
[   26.739481][ T3319] bridge_slave_1: entered promiscuous mode
[   26.772989][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   26.787703][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.817241][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.878653][ T3319] team0: Port device team_slave_0 added
[   26.884513][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   26.893176][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   26.906839][ T3319] team0: Port device team_slave_1 added
[   26.927539][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.934726][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.942334][ T3312] bridge_slave_0: entered allmulticast mode
[   26.948676][ T3312] bridge_slave_0: entered promiscuous mode
[   26.959676][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   26.976022][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.983214][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.990305][ T3312] bridge_slave_1: entered allmulticast mode
[   26.996794][ T3312] bridge_slave_1: entered promiscuous mode
[   27.028976][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.036178][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.062920][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.080018][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.087172][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.094569][ T3317] bridge_slave_0: entered allmulticast mode
[   27.101113][ T3317] bridge_slave_0: entered promiscuous mode
[   27.116332][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.123495][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.149922][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.165115][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.172416][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.179919][ T3317] bridge_slave_1: entered allmulticast mode
[   27.186539][ T3317] bridge_slave_1: entered promiscuous mode
[   27.194295][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.219223][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.258537][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.265742][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.272992][ T3316] bridge_slave_0: entered allmulticast mode
[   27.279269][ T3316] bridge_slave_0: entered promiscuous mode
[   27.287061][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.297465][ T3312] team0: Port device team_slave_0 added
[   27.312370][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.319522][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.326926][ T3316] bridge_slave_1: entered allmulticast mode
[   27.333313][ T3316] bridge_slave_1: entered promiscuous mode
[   27.340454][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.350573][ T3312] team0: Port device team_slave_1 added
[   27.361129][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.368290][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.375902][ T3313] bridge_slave_0: entered allmulticast mode
[   27.382468][ T3313] bridge_slave_0: entered promiscuous mode
[   27.404126][ T3319] hsr_slave_0: entered promiscuous mode
[   27.410344][ T3319] hsr_slave_1: entered promiscuous mode
[   27.416770][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.423885][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.431381][ T3313] bridge_slave_1: entered allmulticast mode
[   27.437932][ T3313] bridge_slave_1: entered promiscuous mode
[   27.458037][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.465035][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.491135][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.507433][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.517526][ T3317] team0: Port device team_slave_0 added
[   27.523728][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.530845][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.557188][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.574004][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.589536][ T3317] team0: Port device team_slave_1 added
[   27.606696][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.636003][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.659879][ T3312] hsr_slave_0: entered promiscuous mode
[   27.665828][ T3312] hsr_slave_1: entered promiscuous mode
[   27.671839][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   27.677574][ T3312] Cannot create hsr debugfs directory
[   27.688083][ T3316] team0: Port device team_slave_0 added
[   27.694147][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.701221][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.727737][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.749353][ T3316] team0: Port device team_slave_1 added
[   27.756025][ T3313] team0: Port device team_slave_0 added
[   27.761981][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.769099][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.795471][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.814032][ T3313] team0: Port device team_slave_1 added
[   27.842733][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.849857][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.876290][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.899095][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.906230][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.932644][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.943731][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.950849][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.977646][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.002130][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.009173][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.035559][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.061945][ T3317] hsr_slave_0: entered promiscuous mode
[   28.068027][ T3317] hsr_slave_1: entered promiscuous mode
[   28.073955][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   28.079692][ T3317] Cannot create hsr debugfs directory
[   28.108526][ T3316] hsr_slave_0: entered promiscuous mode
[   28.114712][ T3316] hsr_slave_1: entered promiscuous mode
[   28.120480][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   28.126360][ T3316] Cannot create hsr debugfs directory
[   28.154292][ T3313] hsr_slave_0: entered promiscuous mode
[   28.160371][ T3313] hsr_slave_1: entered promiscuous mode
[   28.166752][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   28.172506][ T3313] Cannot create hsr debugfs directory
[   28.263100][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   28.281868][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   28.300811][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   28.321342][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   28.363839][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   28.373925][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   28.383799][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   28.393702][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   28.423921][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   28.433726][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   28.444428][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   28.458549][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   28.480694][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   28.489776][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   28.499565][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   28.513160][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   28.549670][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.560434][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.569370][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.582131][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   28.608119][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.623872][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.648138][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   28.660898][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   28.671927][  T922] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.679114][  T922] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.690474][  T922] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.697672][  T922] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.706627][  T922] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.713793][  T922] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.732717][  T922] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.740020][  T922] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.768011][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.800732][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   28.816242][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.828754][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.836182][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.862072][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.869225][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.884411][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.914797][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   28.928101][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   28.944843][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.952136][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.973309][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.981974][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.000195][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.008654][  T354] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.015937][  T354] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.025828][  T354] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.032984][  T354] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.058159][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.084276][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.205179][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.251432][ T3319] veth0_vlan: entered promiscuous mode
[   29.271481][ T3319] veth1_vlan: entered promiscuous mode
[   29.294785][ T3312] veth0_vlan: entered promiscuous mode
[   29.322601][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.342429][ T3319] veth0_macvtap: entered promiscuous mode
[   29.353740][ T3312] veth1_vlan: entered promiscuous mode
[   29.364277][ T3319] veth1_macvtap: entered promiscuous mode
[   29.381903][ T3317] veth0_vlan: entered promiscuous mode
[   29.404755][ T3317] veth1_vlan: entered promiscuous mode
[   29.413050][ T3313] veth0_vlan: entered promiscuous mode
[   29.422944][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.431780][ T3313] veth1_vlan: entered promiscuous mode
[   29.455764][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.468126][  T922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.479562][ T3312] veth0_macvtap: entered promiscuous mode
[   29.488661][  T922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.499918][  T922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.515174][  T354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.530744][ T3313] veth0_macvtap: entered promiscuous mode
[   29.538349][ T3312] veth1_macvtap: entered promiscuous mode
[   29.545783][ T3313] veth1_macvtap: entered promiscuous mode
[   29.564100][ T3316] veth0_vlan: entered promiscuous mode
[   29.574562][ T3317] veth0_macvtap: entered promiscuous mode
[   29.584959][ T3317] veth1_macvtap: entered promiscuous mode
[   29.593706][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   29.593951][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.617958][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.629414][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.640668][ T3316] veth1_vlan: entered promiscuous mode
[   29.648689][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.668866][  T354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.685486][  T354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.696677][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.707937][  T354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.721992][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.732139][  T354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.746242][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'.
[   29.759395][  T354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.772222][  T354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.787882][ T3316] veth0_macvtap: entered promiscuous mode
[   29.796477][  T354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.813943][  T354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.826294][ T3486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.843760][  T354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.862886][ T3316] veth1_macvtap: entered promiscuous mode
[   29.904514][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.923416][  T354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.942645][  T354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.955154][ T3497] x_tables: duplicate underflow at hook 1
[   29.964523][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.073222][  T354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.085211][ T3503] loop0: detected capacity change from 0 to 512
[   30.104000][ T3503] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1'.
[   30.119115][ T3497] sch_fq: defrate 0 ignored.
[   30.151084][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   30.151111][   T29] audit: type=1400 audit(1766834429.219:125): avc:  denied  { create } for  pid=3502 comm="syz.0.1" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   30.162839][ T3495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   30.178913][   T29] audit: type=1400 audit(1766834429.219:126): avc:  denied  { lock } for  pid=3502 comm="syz.0.1" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   30.225893][ T3503] loop0: detected capacity change from 0 to 4096
[   30.241511][  T354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.252261][  T354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.261362][ T3503] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   30.678018][  T354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.757338][ T3486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.765418][ T3510] netlink: 'syz.2.7': attribute type 3 has an invalid length.
[   30.775580][   T29] audit: type=1400 audit(1766834429.309:127): avc:  denied  { read write } for  pid=3502 comm="syz.0.1" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.799650][   T29] audit: type=1400 audit(1766834429.309:128): avc:  denied  { open } for  pid=3502 comm="syz.0.1" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.813836][ T3503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.823398][   T29] audit: type=1400 audit(1766834429.309:129): avc:  denied  { ioctl } for  pid=3502 comm="syz.0.1" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.852825][ T3495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   30.861018][   T29] audit: type=1400 audit(1766834429.439:130): avc:  denied  { create } for  pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   30.889356][   T29] audit: type=1400 audit(1766834429.639:131): avc:  denied  { allowed } for  pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   30.908750][   T29] audit: type=1326 audit(1766834429.839:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3509 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   30.932458][   T29] audit: type=1326 audit(1766834429.839:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3509 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   30.932727][ T3495] loop1: detected capacity change from 0 to 512
[   30.955827][   T29] audit: type=1326 audit(1766834429.839:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3509 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   31.021323][ T3495] ------------[ cut here ]------------
[   31.027107][ T3495] EA inode 11 i_nlink=0
[   31.027145][ T3495] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.1.2/3495
[   31.042184][ T3495] Modules linked in:
[   31.046226][ T3495] CPU: 1 UID: 0 PID: 3495 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   31.055846][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   31.065969][ T3495] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320
[   31.072718][ T3495] Code: 71 e2 9c ff 4c 8d 2d 0a f1 20 05 49 8d 7e 40 e8 71 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 85 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 4c ad ba 03 66 66 66 2e 0f 1f 84
[   31.092529][ T3495] RSP: 0018:ffffc9000214f778 EFLAGS: 00010246
[   31.098614][ T3495] RAX: ffff88811af64c90 RBX: ffff888105f71c18 RCX: ffffffff81bb1cab
[   31.106716][ T3495] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff86dc0da0
[   31.114822][ T3495] RBP: 000000000000000b R08: 0001888105f71bcb R09: 0000000000000000
[   31.122855][ T3495] R10: ffffc9000214f6a8 R11: 0001c9000214f6a8 R12: ffff888105f71bc8
[   31.130839][ T3495] R13: ffffffff86dc0da0 R14: ffff888105f71b80 R15: 0000000000000001
[   31.138854][ T3495] FS:  00007fbba3a7f6c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000
[   31.147831][ T3495] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   31.154460][ T3495] CR2: 00007f9aeb0bf990 CR3: 000000011b278000 CR4: 00000000003506f0
[   31.162501][ T3495] Call Trace:
[   31.165969][ T3495]  <TASK>
[   31.168901][ T3495]  ext4_xattr_inode_dec_ref_all+0x57c/0x870
[   31.174914][ T3495]  ? errseq_check+0x2c/0x50
[   31.179460][ T3495]  ext4_xattr_delete_inode+0x6b7/0x790
[   31.185045][ T3495]  ext4_evict_inode+0xa20/0xd40
[   31.190042][ T3495]  ? __pfx_ext4_evict_inode+0x10/0x10
[   31.195493][ T3495]  evict+0x2af/0x510
[   31.199509][ T3495]  ? __dquot_initialize+0x146/0x7c0
[   31.204815][ T3495]  iput+0x4bd/0x650
[   31.208726][ T3495]  ext4_process_orphan+0x1a9/0x1c0
[   31.214005][ T3495]  ext4_orphan_cleanup+0x6a8/0xa00
[   31.219161][ T3495]  ext4_fill_super+0x3411/0x37a0
[   31.224157][ T3495]  ? set_blocksize+0x1a8/0x310
[   31.229119][ T3495]  ? sb_set_blocksize+0xfc/0x170
[   31.234212][ T3495]  ? setup_bdev_super+0x30e/0x370
[   31.239317][ T3495]  ? __pfx_ext4_fill_super+0x10/0x10
[   31.244680][ T3495]  get_tree_bdev_flags+0x291/0x300
[   31.249822][ T3495]  ? __pfx_ext4_fill_super+0x10/0x10
[   31.255183][ T3495]  get_tree_bdev+0x1f/0x30
[   31.259715][ T3495]  ext4_get_tree+0x1c/0x30
[   31.264253][ T3495]  vfs_get_tree+0x57/0x1d0
[   31.268786][ T3495]  do_new_mount+0x24d/0x6a0
[   31.273337][ T3495]  path_mount+0x4ab/0xb80
[   31.277771][ T3495]  ? user_path_at+0xbf/0x130
[   31.282514][ T3495]  __se_sys_mount+0x28c/0x2e0
[   31.287234][ T3495]  __x64_sys_mount+0x67/0x80
[   31.291937][ T3495]  x64_sys_call+0x2cca/0x3000
[   31.296623][ T3495]  do_syscall_64+0xca/0x2b0
[   31.301216][ T3495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.307216][ T3495] RIP: 0033:0x7fbba5020eea
[   31.311768][ T3495] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.331453][ T3495] RSP: 002b:00007fbba3a7ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   31.339994][ T3495] RAX: ffffffffffffffda RBX: 00007fbba3a7eef0 RCX: 00007fbba5020eea
[   31.348133][ T3495] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fbba3a7eeb0
[   31.356273][ T3495] RBP: 0000200000000180 R08: 00007fbba3a7eef0 R09: 0000000000800700
[   31.364397][ T3495] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[   31.372521][ T3495] R13: 00007fbba3a7eeb0 R14: 0000000000000478 R15: 000000000000002c
[   31.380628][ T3495]  </TASK>
[   31.383727][ T3495] ---[ end trace 0000000000000000 ]---
[   31.395209][ T3495] EXT4-fs (loop1): 1 orphan inode deleted
[   31.401883][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.414166][ T3495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.426425][  T354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.493002][ T3495] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.2: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   31.513238][ T3495] EXT4-fs (loop1): Remounting filesystem read-only
[   31.543250][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.752724][ T3546] sctp: [Deprecated]: syz.0.16 (pid 3546) Use of int in max_burst socket option deprecated.
[   31.752724][ T3546] Use struct sctp_assoc_value instead
[   31.775213][ T3486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   31.798962][ T3546] netlink: 'syz.0.16': attribute type 39 has an invalid length.
[   31.832859][ T3543] loop1: detected capacity change from 0 to 128
[   31.842891][ T3543] FAT-fs (loop1): bogus logical sector size 65535
[   31.849614][ T3543] FAT-fs (loop1): Can't find a valid FAT filesystem
[   31.869269][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'.
[   32.098863][ T3556] loop1: detected capacity change from 0 to 128
[   32.107302][ T3556] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   32.119758][ T3556] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.597047][ T3541] SELinux:  Context È is not valid (left unmapped).
[   32.627910][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   32.693453][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   32.716029][ T3560] loop2: detected capacity change from 0 to 128
[   32.764920][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[   33.082911][ T3569] loop4: detected capacity change from 0 to 1024
[   33.166579][ T3570] serio: Serial port ptm2
[   33.188451][ T3569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[   33.288107][ T3567] loop0: detected capacity change from 0 to 512
[   33.298517][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   33.320580][ T3567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.338309][ T3576] loop4: detected capacity change from 0 to 512
[   33.340432][ T3567] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.345140][ T3576] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   33.382354][ T3576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.383626][ T3567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.391417][ T3576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.484369][ T3486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.537326][   T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.548704][   T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.560558][   T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.577861][   T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.648500][ T3582] loop2: detected capacity change from 0 to 4096
[   33.661985][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.691350][ T3582] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   33.722674][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.806354][ T3588] ext4: Unknown parameter 'obj_role'
[   33.813769][ T3588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'.
[   33.981124][  T354] Bluetooth: hci1: Frame reassembly failed (-84)
[   33.991443][    C1] hrtimer: interrupt took 35283 ns
[   34.799133][ T3611] hsr0: entered promiscuous mode
[   34.806304][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'.
[   34.808215][ T3608] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   34.816141][ T3526] Bluetooth: hci0: command 0x1003 tx timeout
[   34.823893][ T3608] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   34.831228][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   34.844525][ T3611] hsr_slave_0: left promiscuous mode
[   34.853002][ T3611] hsr_slave_1: left promiscuous mode
[   34.864457][ T3611] hsr0 (unregistering): left promiscuous mode
[   34.871250][ T3608] =======================================================
[   34.871250][ T3608] WARNING: The mand mount option has been deprecated and
[   34.871250][ T3608]          and is ignored by this kernel. Remove the mand
[   34.871250][ T3608]          option from the mount to silence this warning.
[   34.871250][ T3608] =======================================================
[   34.882059][ T3612] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.30: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   34.926262][ T3612] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.30: Bad quota inode: 3, type: 0
[   34.937579][ T3612] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   34.952992][ T3612] EXT4-fs (loop3): mount failed
[   34.981175][ T3608] EXT4-fs: inline encryption not supported
[   34.993121][ T3608] EXT4-fs: Ignoring removed mblk_io_submit option
[   35.003089][ T3608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.096364][ T3608] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure
[   35.117535][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.159005][ T3621] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[   35.169131][   T29] kauditd_printk_skb: 1435 callbacks suppressed
[   35.169146][   T29] audit: type=1400 audit(1766834434.249:1570): avc:  denied  { relabelto } for  pid=3620 comm="syz.2.32" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[   35.203992][   T29] audit: type=1400 audit(1766834434.249:1571): avc:  denied  { associate } for  pid=3620 comm="syz.2.32" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0"
[   35.233049][   T29] audit: type=1326 audit(1766834434.249:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.257150][   T29] audit: type=1326 audit(1766834434.249:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.280723][   T29] audit: type=1326 audit(1766834434.249:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.304533][   T29] audit: type=1326 audit(1766834434.249:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.328288][   T29] audit: type=1326 audit(1766834434.249:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.351732][   T29] audit: type=1326 audit(1766834434.249:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.375610][   T29] audit: type=1326 audit(1766834434.249:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.378359][ T3626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'.
[   35.399570][   T29] audit: type=1326 audit(1766834434.249:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3620 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[   35.400437][ T3627] set_capacity_and_notify: 4 callbacks suppressed
[   35.400493][ T3627] loop4: detected capacity change from 0 to 512
[   35.449760][ T3627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   35.482885][ T3627] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.31: invalid indirect mapped block 4294967295 (level 1)
[   35.498618][ T3632] loop1: detected capacity change from 0 to 1024
[   35.510242][ T3627] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.31: invalid indirect mapped block 4294967295 (level 1)
[   35.556909][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.569653][ T3627] EXT4-fs (loop4): 2 truncates cleaned up
[   35.586302][ T3627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.609594][ T3619] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.31: path /6/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[   35.951068][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.011191][   T44] Bluetooth: hci1: command 0x1003 tx timeout
[   36.042471][ T3563] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   36.170878][ T3628] Set syz1 is full, maxelem 65536 reached
[   36.177639][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.346239][ T3651] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET)
[   36.346900][ T3651] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   36.346921][ T3651] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   36.349772][ T3651] 9p: Bad value for 'wfdno'
[   36.350279][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.350299][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.350565][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.350778][ T3650] netlink: 'syz.4.40': attribute type 10 has an invalid length.
[   36.351090][ T3651] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   36.352318][ T3651] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   36.354831][ T3650] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   36.356817][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.357163][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.357546][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.357838][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.358241][ T3651] wg1 speed is unknown, defaulting to 1000
[   36.376599][ T3651] loop1: detected capacity change from 0 to 512
[   36.386015][ T3651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.386284][ T3651] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.400241][ T3651] EXT4-fs error (device loop1): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.1.38: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   36.400521][ T3651] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: comm syz.1.38: directory missing '.'
[   36.712319][ T3661] loop0: detected capacity change from 0 to 128
[   36.713645][ T3661] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   36.773637][ T3663] loop0: detected capacity change from 0 to 1024
[   37.137726][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.184337][ T3667] wg1 speed is unknown, defaulting to 1000
[   37.350916][ T3675] loop4: detected capacity change from 0 to 512
[   37.361192][ T3675] ext4: Unknown parameter 'obj_user'
[   37.470053][ T3675] bridge0: entered promiscuous mode
[   37.473057][ T3679] loop1: detected capacity change from 0 to 512
[   37.509599][ T3675] macsec1: entered promiscuous mode
[   37.574414][ T3679] EXT4-fs (loop1): can't read group descriptor 0
[   37.634410][ T3682] loop4: detected capacity change from 0 to 2048
[   37.641018][ T3683] lo speed is unknown, defaulting to 1000
[   37.641047][ T3683] lo speed is unknown, defaulting to 1000
[   37.641273][ T3683] lo speed is unknown, defaulting to 1000
[   37.642181][ T3683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   37.648677][ T3683] lo speed is unknown, defaulting to 1000
[   37.649132][ T3683] lo speed is unknown, defaulting to 1000
[   37.649446][ T3683] lo speed is unknown, defaulting to 1000
[   37.649901][ T3683] lo speed is unknown, defaulting to 1000
[   37.650228][ T3683] lo speed is unknown, defaulting to 1000
[   37.658121][ T3682] EXT4-fs (loop4): failed to initialize system zone (-117)
[   37.658201][ T3682] EXT4-fs (loop4): mount failed
[   37.723409][ T3690] sd 0:0:1:0: device reset
[   37.865112][ T3420] hid-generic 0000:0008:0008.0001: unknown main item tag 0x0
[   37.865715][ T3420] hid-generic 0000:0008:0008.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   37.880891][ T3690] loop4: detected capacity change from 0 to 2048
[   37.911802][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.212076][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.283866][ T3732] wg1 speed is unknown, defaulting to 1000
[   38.420099][ T3732] lo speed is unknown, defaulting to 1000
[   38.536929][ T3756] 
@0Ù: renamed from bond_slave_1 (while UP)
[   38.606183][ T3770] mmap: syz.4.52 (3770) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   39.053011][ T3794] loop4: detected capacity change from 0 to 128
[   39.147244][ T3794] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.181602][ T3794] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   39.455757][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.506772][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.518199][ T3810] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[   39.568952][ T3816] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.587143][ T3816] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.595082][ T3816]  loop5: unable to read partition table
[   39.610873][ T3514] IPVS: starting estimator thread 0...
[   39.627404][ T3816] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   39.627404][ T3816] 
) failed (rc=-5)
[   39.628572][ T3687] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.664277][ T3822] wg1 speed is unknown, defaulting to 1000
[   39.670819][ T3822] lo speed is unknown, defaulting to 1000
[   39.671020][ T3687] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.701049][ T3820] IPVS: using max 2400 ests per chain, 120000 per kthread
[   39.713491][ T3827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34320 sclass=netlink_route_socket pid=3827 comm=syz.3.56
[   39.715601][ T3687] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.727495][ T3816] xt_recent: Unsupported userspace flags (000000b1)
[   39.776364][ T3687] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.802290][ T3687] Buffer I/O error on dev loop5, logical block 0, async page read
[   39.985383][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[   40.016371][ T3842] wg1 speed is unknown, defaulting to 1000
[   40.049200][ T3842] lo speed is unknown, defaulting to 1000
[   40.180939][   T29] kauditd_printk_skb: 335 callbacks suppressed
[   40.187238][   T29] audit: type=1326 audit(1766834439.259:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.282995][   T29] audit: type=1326 audit(1766834439.299:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.306451][   T29] audit: type=1326 audit(1766834439.309:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.329914][   T29] audit: type=1326 audit(1766834439.319:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.353454][   T29] audit: type=1326 audit(1766834439.329:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.376905][   T29] audit: type=1326 audit(1766834439.339:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.400477][   T29] audit: type=1326 audit(1766834439.349:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.424114][   T29] audit: type=1326 audit(1766834439.359:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.447497][   T29] audit: type=1326 audit(1766834439.369:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.473939][   T29] audit: type=1326 audit(1766834439.419:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b34a6f749 code=0x7ffc0000
[   40.530797][ T3885] 9pnet_fd: Insufficient options for proto=fd
[   40.751885][ T3863] syz.2.59 (3863) used greatest stack depth: 10064 bytes left
[   40.802049][ T3892] set_capacity_and_notify: 2 callbacks suppressed
[   40.802069][ T3892] loop2: detected capacity change from 0 to 4096
[   40.852358][ T3892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.932451][ T3895] netlink: 14 bytes leftover after parsing attributes in process `syz.2.62'.
[   40.945457][ T3895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   40.956492][ T3895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   40.966335][ T3895] bond0 (unregistering): Released all slaves
[   41.012783][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.081255][ T3899] loop1: detected capacity change from 0 to 512
[   41.088817][ T3899] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   41.117454][ T3897] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   41.125707][ T3899] EXT4-fs (loop1): failed to open journal device unknown-block(1,255) -6
[   41.174371][ T3899] devpts: Bad value for 'uid'
[   41.179188][ T3899] devpts: Bad value for 'uid'
[   41.253817][ T3897] loop2: detected capacity change from 0 to 512
[   41.269980][ T3897] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.284670][ T3897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.317158][ T3897] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.333601][ T3897] EXT4-fs (loop2): 1 truncate cleaned up
[   41.351897][ T3906] netlink: 'syz.1.65': attribute type 2 has an invalid length.
[   41.352051][ T3897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.428669][ T3912] loop1: detected capacity change from 0 to 128
[   41.570476][ T3912] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   41.582899][ T3912] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.583900][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.697250][ T3906] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.1.65: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[   41.717457][ T3906] EXT4-fs (loop1): Remounting filesystem read-only
[   41.750718][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.799144][ T3927] netlink: 56 bytes leftover after parsing attributes in process `syz.1.69'.
[   41.802586][ T3929] netlink: 'syz.4.66': attribute type 6 has an invalid length.
[   41.844041][ T3929] netlink: 'syz.4.66': attribute type 6 has an invalid length.
[   41.854365][ T3929] Zero length message leads to an empty skb
[   41.862696][ T3932] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0
[   41.880798][ T3931] netlink: 260 bytes leftover after parsing attributes in process `syz.1.70'.
[   41.934358][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.011620][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   42.013087][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   42.037483][ T3937] netlink: 'syz.2.71': attribute type 10 has an invalid length.
[   42.045471][ T3937] netlink: 156 bytes leftover after parsing attributes in process `syz.2.71'.
[   42.295009][ T3945] sctp: [Deprecated]: syz.2.73 (pid 3945) Use of int in maxseg socket option.
[   42.295009][ T3945] Use struct sctp_assoc_value instead
[   42.325400][ T3945] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   42.343282][ T3945] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   42.371061][ T3939] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   42.377797][ T3939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   42.385717][ T3939] vhci_hcd vhci_hcd.0: Device attached
[   42.395961][ T3948] vhci_hcd: connection closed
[   42.396697][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   42.406681][ T1003] vhci_hcd vhci_hcd.0: release socket
[   42.412110][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   42.856677][ T3958] wg1 speed is unknown, defaulting to 1000
[   42.863394][ T3958] lo speed is unknown, defaulting to 1000
[   43.206288][ T3961] loop0: detected capacity change from 0 to 512
[   43.242893][ T3961] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   43.264803][ T3962] loop1: detected capacity change from 0 to 4096
[   43.322380][ T3962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.340815][ T3966] wg1 speed is unknown, defaulting to 1000
[   43.348631][ T3966] lo speed is unknown, defaulting to 1000
[   43.368803][ T3961] EXT4-fs (loop0): failed to open journal device unknown-block(1,255) -6
[   43.417219][ T3961] devpts: Bad value for 'uid'
[   43.422190][ T3961] devpts: Bad value for 'uid'
[   43.441273][ T3970] netlink: 14 bytes leftover after parsing attributes in process `syz.1.77'.
[   43.560239][ T3976] xt_CT: You must specify a L4 protocol and not use inversions on it
[   43.583789][ T3970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.605560][ T3976] loop4: detected capacity change from 0 to 128
[   43.615260][ T3970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.644879][ T3970] bond0 (unregistering): Released all slaves
[   43.722378][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.890555][ T3979] infiniband !yz!: set active
[   43.895705][ T3979] infiniband !yz!: added team_slave_0
[   43.904140][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   43.944337][ T3991] team0 (unregistering): Port device team_slave_0 removed
[   43.963538][ T3991] team0 (unregistering): Port device team_slave_1 removed
[   44.004059][ T3992] netlink: 164 bytes leftover after parsing attributes in process `syz.0.85'.
[   44.234709][ T3998] netlink: 'syz.4.80': attribute type 10 has an invalid length.
[   44.242524][ T3998] netlink: 156 bytes leftover after parsing attributes in process `syz.4.80'.
[   44.268802][ T3979] RDS/IB: !yz!: added
[   44.339643][ T3996] wg1 speed is unknown, defaulting to 1000
[   44.346248][ T3996] lo speed is unknown, defaulting to 1000
[   44.653019][ T3979] smc: adding ib device !yz! with port count 1
[   44.659325][ T3979] smc:    ib device !yz! port 1 has no pnetid
[   44.687950][ T4000] loop2: detected capacity change from 0 to 4096
[   44.711827][ T4006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'.
[   44.721850][ T4008] loop4: detected capacity change from 0 to 1764
[   44.738633][ T4008] grow_buffers: requested out-of-range block 18446744071681881834 for device loop4
[   44.748149][ T4008] isofs_fill_super: bread failed, dev=loop4, iso_blknum=1133648757, block=-2027669782
[   44.748894][ T4000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.772272][ T4010] sctp: [Deprecated]: syz.1.89 (pid 4010) Use of int in maxseg socket option.
[   44.772272][ T4010] Use struct sctp_assoc_value instead
[   44.822410][ T4006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'.
[   44.834740][ T4013] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   44.887310][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.957309][ T4008] SELinux: failed to load policy
[   44.971779][ T4020] loop2: detected capacity change from 0 to 512
[   45.037202][ T4022] IPVS: dh: FWM 3 0x00000003 - no destination available
[   45.044352][    C0] IPVS: dh: FWM 3 0x00000003 - no destination available
[   45.052754][ T3420] IPVS: starting estimator thread 0...
[   45.059634][ T4022] tmpfs: Unsupported parameter 'huge'
[   45.078728][ T4020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.121590][ T4020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.151138][ T4023] IPVS: using max 2496 ests per chain, 124800 per kthread
[   45.181024][   T29] kauditd_printk_skb: 417 callbacks suppressed
[   45.181043][   T29] audit: type=1326 audit(1766834444.259:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb1767f749 code=0x7ffc0000
[   45.230826][   T29] audit: type=1400 audit(1766834444.269:2343): avc:  denied  { create } for  pid=4019 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   45.250420][   T29] audit: type=1400 audit(1766834444.309:2344): avc:  denied  { map_create } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   45.269762][   T29] audit: type=1400 audit(1766834444.309:2345): avc:  denied  { allowed } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   45.289031][   T29] audit: type=1400 audit(1766834444.309:2346): avc:  denied  { create } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0
[   45.308556][   T29] audit: type=1400 audit(1766834444.309:2347): avc:  denied  { prog_load } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   45.328097][   T29] audit: type=1400 audit(1766834444.309:2348): avc:  denied  { read write } for  pid=4029 comm="syz.4.93" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   45.428388][   T29] audit: type=1400 audit(1766834444.309:2349): avc:  denied  { create } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0
[   45.447867][   T29] audit: type=1400 audit(1766834444.309:2350): avc:  denied  { map_create } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   45.466954][   T29] audit: type=1400 audit(1766834444.309:2351): avc:  denied  { map_create } for  pid=4029 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   45.707380][ T4042] netlink: 'syz.1.96': attribute type 10 has an invalid length.
[   45.915338][ T4037] wg1 speed is unknown, defaulting to 1000
[   45.961686][ T4037] lo speed is unknown, defaulting to 1000
[   46.182803][ T4046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   46.189381][ T4046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   46.196830][ T4046] vhci_hcd vhci_hcd.0: Device attached
[   46.263991][ T4053] vhci_hcd: connection closed
[   46.264173][   T12] vhci_hcd vhci_hcd.1: stop threads
[   46.274276][   T12] vhci_hcd vhci_hcd.1: release socket
[   46.279806][   T12] vhci_hcd vhci_hcd.1: disconnect device
[   46.327701][ T4051] wg1 speed is unknown, defaulting to 1000
[   46.369045][ T4051] lo speed is unknown, defaulting to 1000
[   46.388872][ T4059] __nla_validate_parse: 2 callbacks suppressed
[   46.388890][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'.
[   46.429558][ T4057] wg1 speed is unknown, defaulting to 1000
[   46.462920][ T4057] lo speed is unknown, defaulting to 1000
[   46.549149][ T4067] xt_CT: No such helper "pptp"
[   46.555813][ T4067] IPv6: Can't replace route, no match found
[   46.761092][ T4078] netlink: 14 bytes leftover after parsing attributes in process `syz.4.102'.
[   46.794097][ T4078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   46.957938][ T4078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   46.968525][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   47.086763][ T4078] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   47.096702][ T4078] bond0 (unregistering): Released all slaves
[   47.208104][ T4090] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   47.266157][ T4090] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.427346][ T4099] bridge0: port 3(gretap0) entered blocking state
[   47.434026][ T4099] bridge0: port 3(gretap0) entered disabled state
[   47.513353][ T4099] gretap0: entered allmulticast mode
[   47.537768][ T4099] gretap0: entered promiscuous mode
[   47.557031][ T4099] bridge0: port 3(gretap0) entered blocking state
[   47.563793][ T4099] bridge0: port 3(gretap0) entered forwarding state
[   48.012667][ T4110] wg1 speed is unknown, defaulting to 1000
[   48.036662][ T4111] 
@0Ù: renamed from bond_slave_1 (while UP)
[   48.064565][ T4110] lo speed is unknown, defaulting to 1000
[   48.084104][ T4106] wg1 speed is unknown, defaulting to 1000
[   48.121106][ T4106] lo speed is unknown, defaulting to 1000
[   48.494483][ T4115] xt_CT: No such helper "pptp"
[   48.512285][ T4115] IPv6: Can't replace route, no match found
[   49.446303][ T4139] xt_CT: You must specify a L4 protocol and not use inversions on it
[   49.550696][ T4140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.121'.
[   49.843274][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[   49.890193][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'.
[   49.897007][ T4153] xt_CT: No such helper "pptp"
[   49.943205][ T4153] IPv6: Can't replace route, no match found
[   50.098318][ T4162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4162 comm=syz.1.131
[   50.208350][   T29] kauditd_printk_skb: 4042 callbacks suppressed
[   50.208394][   T29] audit: type=1400 audit(1766834449.289:6388): avc:  denied  { prog_load } for  pid=4166 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   50.264435][   T29] audit: type=1400 audit(1766834449.329:6389): avc:  denied  { read } for  pid=4166 comm="syz.1.133" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0
[   50.288832][   T29] audit: type=1400 audit(1766834449.329:6390): avc:  denied  { execmem } for  pid=4166 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   50.386896][ T4171] wg1 speed is unknown, defaulting to 1000
[   50.398271][ T4172] netlink: 144 bytes leftover after parsing attributes in process `syz.2.129'.
[   50.415603][ T4171] lo speed is unknown, defaulting to 1000
[   50.442578][   T29] audit: type=1400 audit(1766834449.459:6391): avc:  denied  { prog_load } for  pid=4166 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   50.461960][   T29] audit: type=1400 audit(1766834449.489:6392): avc:  denied  { prog_load } for  pid=4155 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   50.481149][   T29] audit: type=1400 audit(1766834449.489:6393): avc:  denied  { open } for  pid=4155 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[   50.500385][   T29] audit: type=1400 audit(1766834449.489:6394): avc:  denied  { module_request } for  pid=4155 comm="syz.2.129" kmod="fs-rootfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[   50.550410][   T29] audit: type=1400 audit(1766834449.609:6395): avc:  denied  { create } for  pid=4165 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   50.777615][   T29] audit: type=1400 audit(1766834449.849:6396): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   50.891047][   T29] audit: type=1400 audit(1766834449.969:6397): avc:  denied  { read write } for  pid=4174 comm="syz.2.134" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   51.000334][ T4176] netlink: 14 bytes leftover after parsing attributes in process `syz.2.134'.
[   51.218730][ T4183] wg1 speed is unknown, defaulting to 1000
[   51.241991][ T4183] lo speed is unknown, defaulting to 1000
[   51.434606][ T4192] netlink: 14 bytes leftover after parsing attributes in process `syz.2.139'.
[   51.692333][ T4204] netlink: 14 bytes leftover after parsing attributes in process `syz.1.141'.
[   51.711994][ T4205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'.
[   51.720901][ T4205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'.
[   51.770816][ T4205] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   51.812308][ T4210] ip6erspan0: entered allmulticast mode
[   51.831060][ T4205] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   52.329254][ T4228] netlink: 14 bytes leftover after parsing attributes in process `syz.0.150'.
[   52.384738][ T4231] futex_wake_op: syz.4.154 tries to shift op by 32; fix this program
[   52.410079][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.443228][ T4228] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[   52.458268][ T4232] netlink: 14 bytes leftover after parsing attributes in process `syz.1.152'.
[   52.478074][ T4228] bond0 (unregistering): Released all slaves
[   52.503272][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[   52.575216][  T922] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.602418][ T4238] wg1 speed is unknown, defaulting to 1000
[   52.628031][ T4238] lo speed is unknown, defaulting to 1000
[   53.288716][ T4254] netlink: 'syz.2.162': attribute type 7 has an invalid length.
[   53.296527][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'.
[   53.596353][ T4264] wg1 speed is unknown, defaulting to 1000
[   53.606529][ T4264] lo speed is unknown, defaulting to 1000
[   53.647962][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   53.754270][ T4271] netlink: 2 bytes leftover after parsing attributes in process `syz.1.167'.
[   54.297737][ T4280] wg1 speed is unknown, defaulting to 1000
[   54.310891][ T4280] lo speed is unknown, defaulting to 1000
[   54.596112][ T4293] wg1 speed is unknown, defaulting to 1000
[   54.611524][ T4293] lo speed is unknown, defaulting to 1000
[   54.652081][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   54.658395][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   55.190664][ T4321] wg1 speed is unknown, defaulting to 1000
[   55.219785][   T29] kauditd_printk_skb: 1122 callbacks suppressed
[   55.219803][   T29] audit: type=1326 audit(1766834454.299:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1767f749 code=0x7ffc0000
[   55.268083][ T4321] lo speed is unknown, defaulting to 1000
[   55.311083][   T29] audit: type=1400 audit(1766834454.329:7521): avc:  denied  { read write } for  pid=4320 comm="syz.1.186" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   55.335158][   T29] audit: type=1326 audit(1766834454.329:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1767f749 code=0x7ffc0000
[   55.358655][   T29] audit: type=1400 audit(1766834454.339:7523): avc:  denied  { name_bind } for  pid=4320 comm="syz.1.186" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0
[   55.380438][   T29] audit: type=1400 audit(1766834454.339:7524): avc:  denied  { create } for  pid=4320 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   55.401380][   T29] audit: type=1400 audit(1766834454.339:7525): avc:  denied  { create } for  pid=4320 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   55.422338][   T29] audit: type=1400 audit(1766834454.339:7526): avc:  denied  { read } for  pid=4324 comm="syz.2.187" dev="nsfs" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[   55.444120][   T29] audit: type=1326 audit(1766834454.359:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ffb1767f749 code=0x7ffc0000
[   55.467877][   T29] audit: type=1400 audit(1766834454.369:7528): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   55.492386][   T29] audit: type=1400 audit(1766834454.379:7529): avc:  denied  { open } for  pid=4328 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[   55.705394][ T1003] Bluetooth: hci0: Frame reassembly failed (-84)
[   55.729267][ T4342] wg1 speed is unknown, defaulting to 1000
[   55.773778][ T4342] lo speed is unknown, defaulting to 1000
[   55.976766][ T4355] wg1 speed is unknown, defaulting to 1000
[   56.000934][ T4355] lo speed is unknown, defaulting to 1000
[   56.051248][ T3400] Process accounting resumed
[   56.662243][ T4381] wg1 speed is unknown, defaulting to 1000
[   56.677399][ T4381] lo speed is unknown, defaulting to 1000
[   56.832107][ T4385] __nla_validate_parse: 15 callbacks suppressed
[   56.832124][ T4385] netlink: 14 bytes leftover after parsing attributes in process `syz.4.208'.
[   57.211900][ T4398] xt_hashlimit: max too large, truncated to 1048576
[   57.352510][ T4402] netlink: 14 bytes leftover after parsing attributes in process `syz.3.212'.
[   57.428305][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.446329][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[   57.457034][ T4402] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[   57.482696][ T4402] bond0 (unregistering): Released all slaves
[   57.657909][ T4422] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   57.681064][ T4420] netlink: 14 bytes leftover after parsing attributes in process `syz.2.220'.
[   57.691192][ T4422] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   57.759089][ T4426] xt_CT: You must specify a L4 protocol and not use inversions on it
[   57.776082][ T3563] Bluetooth: hci0: command 0x1003 tx timeout
[   57.781106][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   58.237609][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'.
[   58.459173][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[   58.491666][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'.
[   58.714082][ T4448] netlink: 14 bytes leftover after parsing attributes in process `syz.2.232'.
[   59.127006][ T4466] gretap0: left allmulticast mode
[   59.132262][ T4466] gretap0: left promiscuous mode
[   59.137465][ T4466] bridge0: port 3(gretap0) entered disabled state
[   59.173187][ T4466] bridge_slave_0: left allmulticast mode
[   59.179335][ T4466] bridge_slave_0: left promiscuous mode
[   59.185040][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.210590][ T4466] bridge_slave_1: left allmulticast mode
[   59.216326][ T4466] bridge_slave_1: left promiscuous mode
[   59.222205][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.237632][ T4466] team0: Port device team_slave_0 removed
[   59.247589][ T4466] team0: Port device team_slave_1 removed
[   59.255226][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.262848][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.272587][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.280103][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.294038][ T4466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.419649][ T4474] ip6erspan0: entered allmulticast mode
[   59.430325][ T4478] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   59.514416][ T4481] wireguard0: entered promiscuous mode
[   59.520507][ T4481] wireguard0: entered allmulticast mode
[   59.550397][ T4485] bridge_slave_0: left allmulticast mode
[   59.556220][ T4485] bridge_slave_0: left promiscuous mode
[   59.562088][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.579058][ T4485] bridge_slave_1: left allmulticast mode
[   59.585027][ T4485] bridge_slave_1: left promiscuous mode
[   59.590838][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.603210][ T4485] team0: Port device team_slave_0 removed
[   59.613186][ T4485] team0: Port device team_slave_1 removed
[   59.620217][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.627848][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.637098][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.644563][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.654865][ T4485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.671200][ T3478] wg1 speed is unknown, defaulting to 1000
[   59.784916][ T4494] netlink: 'syz.4.247': attribute type 10 has an invalid length.
[   60.044108][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.072231][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.119429][ T4520] wg1 speed is unknown, defaulting to 1000
[   60.126332][ T4520] lo speed is unknown, defaulting to 1000
[   60.260572][   T29] kauditd_printk_skb: 1638 callbacks suppressed
[   60.260637][   T29] audit: type=1400 audit(1766834459.339:9168): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   60.332490][   T29] audit: type=1400 audit(1766834459.339:9169): avc:  denied  { create } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[   60.353200][   T29] audit: type=1400 audit(1766834459.339:9170): avc:  denied  { prog_load } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.372380][   T29] audit: type=1400 audit(1766834459.339:9171): avc:  denied  { create } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   60.393241][   T29] audit: type=1400 audit(1766834459.339:9172): avc:  denied  { read } for  pid=4525 comm="syz.0.261" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0
[   60.414581][ T4533] netlink: 'syz.0.264': attribute type 10 has an invalid length.
[   60.416674][   T29] audit: type=1400 audit(1766834459.359:9173): avc:  denied  { map_create } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.443681][   T29] audit: type=1400 audit(1766834459.359:9174): avc:  denied  { prog_load } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.463292][   T29] audit: type=1400 audit(1766834459.359:9175): avc:  denied  { prog_load } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.482657][   T29] audit: type=1400 audit(1766834459.359:9176): avc:  denied  { prog_load } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.501814][   T29] audit: type=1400 audit(1766834459.359:9177): avc:  denied  { prog_load } for  pid=4525 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   60.522066][ T4533] batman_adv: batadv0: Adding interface: veth1_vlan
[   60.528688][ T4533] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.557569][ T4533] batman_adv: batadv0: Interface activated: veth1_vlan
[   60.668539][ T4540] wg1 speed is unknown, defaulting to 1000
[   60.695205][ T4540] lo speed is unknown, defaulting to 1000
[   61.294375][ T4565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   61.297516][ T4566] ipvlan2: entered promiscuous mode
[   61.672212][ T4570] wg1 speed is unknown, defaulting to 1000
[   61.678573][ T4570] lo speed is unknown, defaulting to 1000
[   61.781693][ T4574] wg1 speed is unknown, defaulting to 1000
[   61.788091][ T4574] lo speed is unknown, defaulting to 1000
[   61.983142][ T4580] __nla_validate_parse: 20 callbacks suppressed
[   61.983159][ T4580] netlink: 14 bytes leftover after parsing attributes in process `syz.3.280'.
[   62.102471][ T4584] netlink: 14 bytes leftover after parsing attributes in process `syz.2.282'.
[   62.224553][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[   62.334901][ T4598] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   62.341479][ T4598] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   62.349034][ T4598] vhci_hcd vhci_hcd.0: Device attached
[   62.364265][ T4597] serio: Serial port ptm0
[   62.365266][ T4590] netlink: 14 bytes leftover after parsing attributes in process `syz.1.284'.
[   62.462726][ T4599] vhci_hcd: connection closed
[   62.462855][  T922] vhci_hcd vhci_hcd.3: stop threads
[   62.472990][  T922] vhci_hcd vhci_hcd.3: release socket
[   62.478385][  T922] vhci_hcd vhci_hcd.3: disconnect device
[   62.521175][ T3603] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   62.628534][ T4607] wg1 speed is unknown, defaulting to 1000
[   62.638639][ T4607] lo speed is unknown, defaulting to 1000
[   63.235208][ T4621] netlink: 14 bytes leftover after parsing attributes in process `syz.3.293'.
[   63.244140][ T4617] netlink: 14 bytes leftover after parsing attributes in process `syz.1.291'.
[   63.371094][ T3563] Bluetooth: hci0: command 0x1003 tx timeout
[   63.377193][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   63.504916][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.295'.
[   63.602097][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'.
[   63.706958][ T4632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.297'.
[   63.716219][ T4632] netlink: 11 bytes leftover after parsing attributes in process `syz.3.297'.
[   63.946239][ T4636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   64.084926][ T4640] wg1 speed is unknown, defaulting to 1000
[   64.092368][ T4640] lo speed is unknown, defaulting to 1000
[   64.524284][ T4658] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   65.262138][   T29] kauditd_printk_skb: 875 callbacks suppressed
[   65.262160][   T29] audit: type=1326 audit(1766834464.349:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.336028][   T29] audit: type=1326 audit(1766834464.349:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.359637][   T29] audit: type=1326 audit(1766834464.349:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.383298][   T29] audit: type=1326 audit(1766834464.389:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.406655][   T29] audit: type=1326 audit(1766834464.389:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.430336][   T29] audit: type=1326 audit(1766834464.389:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.454127][   T29] audit: type=1326 audit(1766834464.389:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.477795][   T29] audit: type=1400 audit(1766834464.389:10060): avc:  denied  { prog_load } for  pid=4672 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   65.497045][   T29] audit: type=1326 audit(1766834464.389:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.520587][   T29] audit: type=1326 audit(1766834464.389:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba501f749 code=0x7ffc0000
[   65.637339][ T4682] wg1 speed is unknown, defaulting to 1000
[   65.650414][ T4682] lo speed is unknown, defaulting to 1000
[   65.907837][ T4696] bridge0: port 3(gretap0) entered blocking state
[   65.914608][ T4696] bridge0: port 3(gretap0) entered disabled state
[   65.924652][ T4696] gretap0: entered allmulticast mode
[   65.943367][ T4696] gretap0: entered promiscuous mode
[   65.963155][ T4696] bridge0: port 3(gretap0) entered blocking state
[   65.969869][ T4696] bridge0: port 3(gretap0) entered forwarding state
[   66.446653][ T3421] Process accounting resumed
[   67.053059][ T4725] __nla_validate_parse: 15 callbacks suppressed
[   67.053078][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'.
[   67.181348][ T4727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4727 comm=syz.1.330
[   67.221216][ T4729] netlink: 'syz.3.331': attribute type 21 has an invalid length.
[   67.229124][ T4729] netlink: 128 bytes leftover after parsing attributes in process `syz.3.331'.
[   67.311556][ T4729] netlink: 'syz.3.331': attribute type 5 has an invalid length.
[   67.319322][ T4729] netlink: 3 bytes leftover after parsing attributes in process `syz.3.331'.
[   67.337155][ T4733] netlink: 14 bytes leftover after parsing attributes in process `syz.1.332'.
[   67.437990][ T4737] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   67.542910][ T4742] netlink: 72 bytes leftover after parsing attributes in process `syz.1.336'.
[   67.698414][ T4746] can0: slcan on ttyS3.
[   67.727569][ T4747] netlink: 14 bytes leftover after parsing attributes in process `syz.2.333'.
[   67.753502][ T4746] can0 (unregistered): slcan off ttyS3.
[   67.788043][ T4746] can0: slcan on ttyS3.
[   67.871641][ T4751] netlink: 14 bytes leftover after parsing attributes in process `syz.2.338'.
[   68.389442][ T3421] IPVS: starting estimator thread 0...
[   68.396386][ T4759] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   68.501984][ T4761] IPVS: using max 2400 ests per chain, 120000 per kthread
[   68.621310][ T4743] can0 (unregistered): slcan off ttyS3.
[   68.677070][ T4763] wg1 speed is unknown, defaulting to 1000
[   68.725705][ T4763] lo speed is unknown, defaulting to 1000
[   68.765275][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[   69.282393][ T4782] netlink: 14 bytes leftover after parsing attributes in process `syz.2.347'.
[   69.665542][ T4786] netlink: 14 bytes leftover after parsing attributes in process `syz.2.348'.
[   70.072008][ T4797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   70.078575][ T4797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.086133][ T4797] vhci_hcd vhci_hcd.0: Device attached
[   70.142065][ T4800] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[   70.148714][ T4800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.156347][ T4800] vhci_hcd vhci_hcd.0: Device attached
[   70.212267][ T4795] wg1 speed is unknown, defaulting to 1000
[   70.230480][ T4797] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9)
[   70.237140][ T4797] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   70.244887][ T4797] vhci_hcd vhci_hcd.0: Device attached
[   70.269189][ T4795] lo speed is unknown, defaulting to 1000
[   70.275019][   T29] kauditd_printk_skb: 8930 callbacks suppressed
[   70.275032][   T29] audit: type=1400 audit(1766834469.359:18993): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.280465][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   70.281343][   T29] audit: type=1400 audit(1766834469.359:18994): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.303138][ T3043] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[   70.309654][   T29] audit: type=1400 audit(1766834469.359:18995): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.331091][ T3043] audit: backlog limit exceeded
[   70.338862][   T29] audit: type=1400 audit(1766834469.359:18996): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.386632][   T29] audit: type=1400 audit(1766834469.359:18997): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.408314][   T29] audit: type=1400 audit(1766834469.359:18998): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.416876][ T3603] usb 3-1: new low-speed USB device number 2 using vhci_hcd
[   70.429569][   T29] audit: type=1400 audit(1766834469.359:18999): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   70.501001][ T4797] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13)
[   70.507649][ T4797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.515243][ T4797] vhci_hcd vhci_hcd.0: Device attached
[   70.516509][ T4800] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[   70.527471][ T4800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.535165][ T4800] vhci_hcd vhci_hcd.0: Device attached
[   70.612329][ T4797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   70.612567][ T4812] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(15)
[   70.627381][ T4812] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   70.635068][ T4812] vhci_hcd vhci_hcd.0: Device attached
[   70.652880][ T4797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   70.693252][ T4797] vhci_hcd vhci_hcd.0: port 0 already used
[   70.720712][ T4813] vhci_hcd: connection closed
[   70.720804][ T4806] vhci_hcd: connection closed
[   70.720807][ T4808] vhci_hcd: connection closed
[   70.720901][ T4804] vhci_hcd: connection closed
[   70.725724][  T922] vhci_hcd vhci_hcd.1: stop threads
[   70.745081][  T922] vhci_hcd vhci_hcd.1: release socket
[   70.750605][  T922] vhci_hcd vhci_hcd.1: disconnect device
[   70.801435][ T4801] vhci_hcd: connection closed
[   70.801630][ T4798] vhci_hcd: connection reset by peer
[   70.825498][  T922] vhci_hcd vhci_hcd.1: stop threads
[   70.830933][  T922] vhci_hcd vhci_hcd.1: release socket
[   70.836659][  T922] vhci_hcd vhci_hcd.1: disconnect device
[   70.883779][  T922] vhci_hcd vhci_hcd.1: stop threads
[   70.889560][  T922] vhci_hcd vhci_hcd.1: release socket
[   70.895177][  T922] vhci_hcd vhci_hcd.1: disconnect device
[   70.906839][ T4825] xt_CT: No such helper "pptp"
[   70.913688][ T4825] IPv6: Can't replace route, no match found
[   70.923876][  T922] vhci_hcd vhci_hcd.1: stop threads
[   70.929143][  T922] vhci_hcd vhci_hcd.1: release socket
[   70.934627][  T922] vhci_hcd vhci_hcd.1: disconnect device
[   70.979890][  T922] vhci_hcd vhci_hcd.1: stop threads
[   70.985211][  T922] vhci_hcd vhci_hcd.1: release socket
[   70.991057][  T922] vhci_hcd vhci_hcd.1: disconnect device
[   71.019493][  T922] vhci_hcd vhci_hcd.1: stop threads
[   71.024887][  T922] vhci_hcd vhci_hcd.1: release socket
[   71.030376][  T922] vhci_hcd vhci_hcd.1: disconnect device
[   71.419602][ T4829] wg1 speed is unknown, defaulting to 1000
[   71.526232][ T4829] lo speed is unknown, defaulting to 1000
[   71.974591][ T4854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4854 comm=syz.0.365
[   72.127995][ T4858] __nla_validate_parse: 4 callbacks suppressed
[   72.128013][ T4858] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.367'.
[   72.249003][ T4861] xt_CT: No such helper "pptp"
[   72.287086][ T4861] IPv6: Can't replace route, no match found
[   72.525331][ T4868] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   72.631368][ T4872] netlink: 14 bytes leftover after parsing attributes in process `syz.3.373'.
[   72.714996][ T4876] netlink: 72 bytes leftover after parsing attributes in process `syz.3.375'.
[   72.743636][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.076137][ T4883] wg1 speed is unknown, defaulting to 1000
[   73.096727][ T4883] lo speed is unknown, defaulting to 1000
[   73.625814][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'.
[   73.677975][ T4900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4900 comm=syz.4.385
[   73.683540][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'.
[   73.710352][ T4900] wg1 speed is unknown, defaulting to 1000
[   73.717947][ T4900] lo speed is unknown, defaulting to 1000
[   73.872347][ T4906] wg1 speed is unknown, defaulting to 1000
[   73.897748][ T4906] lo speed is unknown, defaulting to 1000
[   74.144021][ T4915] capability: warning: `syz.3.389' uses 32-bit capabilities (legacy support in use)
[   74.430402][ T4920] wg1 speed is unknown, defaulting to 1000
[   74.481428][ T4920] lo speed is unknown, defaulting to 1000
[   74.745479][ T4926] netlink: 'syz.4.393': attribute type 13 has an invalid length.
[   74.756090][ T4924] xt_hashlimit: max too large, truncated to 1048576
[   75.281171][   T29] kauditd_printk_skb: 22379 callbacks suppressed
[   75.281227][   T29] audit: type=1400 audit(1766834474.369:32211): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   75.318460][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   75.325278][ T3043] audit: audit_lost=3060 audit_rate_limit=0 audit_backlog_limit=64
[   75.333380][ T3043] audit: backlog limit exceeded
[   75.346953][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64
[   75.353697][ T3319] audit: audit_lost=3061 audit_rate_limit=0 audit_backlog_limit=64
[   75.361745][ T3319] audit: backlog limit exceeded
[   75.389431][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   75.396038][ T3043] audit: audit_lost=3062 audit_rate_limit=0 audit_backlog_limit=64
[   75.404190][ T3043] audit: backlog limit exceeded
[   75.421640][ T4931] netlink: 'syz.1.394': attribute type 4 has an invalid length.
[   75.471633][ T4002] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.484936][  T922] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.505888][  T922] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.528411][  T922] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.611391][ T3603] usb 3-1: enqueue for inactive port 0
[   75.616931][ T3603] usb 3-1: enqueue for inactive port 0
[   75.656949][ T4933] wg1 speed is unknown, defaulting to 1000
[   75.711330][ T3603] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   75.712849][ T4933] lo speed is unknown, defaulting to 1000
[   76.994077][ T4959] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length.
[   77.025676][ T4961] netlink: 14 bytes leftover after parsing attributes in process `syz.3.400'.
[   77.122220][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.129464][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.373272][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.458211][ T4959] ip6erspan0: left allmulticast mode
[   77.473203][ T3421] lo speed is unknown, defaulting to 1000
[   77.479066][ T3421] syz2: Port: 1 Link DOWN
[   77.489338][  T922] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.530077][ T4962] wg1 speed is unknown, defaulting to 1000
[   77.572831][  T922] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.582135][ T4962] lo speed is unknown, defaulting to 1000
[   77.610311][  T922] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.645172][  T922] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.709701][ T4967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4967 comm=syz.2.404
[   77.725179][ T4969] netlink: 104 bytes leftover after parsing attributes in process `syz.3.403'.
[   77.764909][ T4967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4967 comm=syz.2.404
[   77.794171][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'.
[   78.166421][ T4989] netlink: 14 bytes leftover after parsing attributes in process `syz.0.412'.
[   78.305615][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[   78.494341][ T4999] wg1 speed is unknown, defaulting to 1000
[   78.543363][ T4998] wg1 speed is unknown, defaulting to 1000
[   78.549668][ T4999] lo speed is unknown, defaulting to 1000
[   78.583851][ T4998] lo speed is unknown, defaulting to 1000
[   78.738365][ T5003] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   78.755908][  T354] Bluetooth: hci0: Frame reassembly failed (-84)
[   80.213106][ T5027] wg1 speed is unknown, defaulting to 1000
[   80.232977][ T5027] lo speed is unknown, defaulting to 1000
[   80.291042][   T29] kauditd_printk_skb: 21343 callbacks suppressed
[   80.291060][   T29] audit: type=1400 audit(1766834479.379:46892): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.309286][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   80.325214][ T3043] audit: audit_lost=5284 audit_rate_limit=0 audit_backlog_limit=64
[   80.333422][ T3043] audit: backlog limit exceeded
[   80.432531][   T29] audit: type=1400 audit(1766834479.379:46893): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.454204][   T29] audit: type=1400 audit(1766834479.379:46894): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.475718][   T29] audit: type=1400 audit(1766834479.379:46895): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.496969][   T29] audit: type=1400 audit(1766834479.379:46896): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.501608][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   80.518505][   T29] audit: type=1400 audit(1766834479.379:46897): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.812096][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.932323][ T5033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.425'.
[   81.014352][ T5039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'.
[   81.215935][ T5050] wg1 speed is unknown, defaulting to 1000
[   81.231879][ T5050] lo speed is unknown, defaulting to 1000
[   81.450474][ T5054] bridge_slave_0: left allmulticast mode
[   81.456337][ T5054] bridge_slave_0: left promiscuous mode
[   81.462200][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.544529][ T5054] bridge_slave_1: left allmulticast mode
[   81.550320][ T5054] bridge_slave_1: left promiscuous mode
[   81.556097][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.673313][ T5054] team0: Port device team_slave_0 removed
[   81.731613][ T5054] team0: Port device team_slave_1 removed
[   81.766976][ T5054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.775092][ T5054] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.828444][ T5054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.835945][ T5054] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.967579][ T3421] !yz!: Port: 1 Link DOWN
[   81.995869][ T5057] wg1 speed is unknown, defaulting to 1000
[   82.022481][ T5057] lo speed is unknown, defaulting to 1000
[   82.274815][ T5063] netlink: 14 bytes leftover after parsing attributes in process `syz.0.436'.
[   82.537216][ T5069] wg1 speed is unknown, defaulting to 1000
[   82.596148][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   82.618414][ T5069] lo speed is unknown, defaulting to 1000
[   82.729540][ T5071] netlink: 14 bytes leftover after parsing attributes in process `syz.3.439'.
[   83.152386][ T5101] netlink: 14 bytes leftover after parsing attributes in process `syz.3.443'.
[   83.213254][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'.
[   83.348848][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[   83.390553][ T5109] netlink: 14 bytes leftover after parsing attributes in process `syz.0.453'.
[   83.423460][ T5121] netlink: 176 bytes leftover after parsing attributes in process `syz.1.458'.
[   83.698464][ T5144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.465'.
[   83.722932][ T5141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.465'.
[   83.849015][ T5149] netlink: 14 bytes leftover after parsing attributes in process `syz.3.466'.
[   83.942382][ T5151] wg1 speed is unknown, defaulting to 1000
[   84.021630][ T5151] lo speed is unknown, defaulting to 1000
[   84.174794][ T5156] netlink: 14 bytes leftover after parsing attributes in process `syz.3.470'.
[   84.357008][ T5169] ªªªªªª: renamed from vlan0 (while UP)
[   84.448600][ T5170] netlink: 14 bytes leftover after parsing attributes in process `syz.0.473'.
[   84.639353][ T5177] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   84.646091][ T5177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.653795][ T5177] vhci_hcd vhci_hcd.0: Device attached
[   84.660063][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   84.661029][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   84.684521][ T5177] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8)
[   84.691215][ T5177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.698881][ T5177] vhci_hcd vhci_hcd.0: Device attached
[   84.725662][ T5177] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10)
[   84.732362][ T5177] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   84.740126][ T5177] vhci_hcd vhci_hcd.0: Device attached
[   84.747503][ T5177] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12)
[   84.754148][ T5177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.761788][ T5177] vhci_hcd vhci_hcd.0: Device attached
[   84.775340][ T5177] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14)
[   84.781987][ T5177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.789714][ T5177] vhci_hcd vhci_hcd.0: Device attached
[   84.807735][ T5177] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16)
[   84.814819][ T5177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   84.822759][ T5177] vhci_hcd vhci_hcd.0: Device attached
[   84.838321][ T5177] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   84.851974][ T5177] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   84.875967][ T5177] vhci_hcd vhci_hcd.0: port 0 already used
[   84.891420][ T3603] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[   84.900696][ T5191] vhci_hcd: connection closed
[   84.900884][ T5189] vhci_hcd: connection closed
[   84.905799][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   84.915802][ T1003] vhci_hcd vhci_hcd.0: release socket
[   84.921352][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   84.927976][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   84.933478][ T1003] vhci_hcd vhci_hcd.0: release socket
[   84.939040][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   84.946124][ T5185] vhci_hcd: connection closed
[   84.946311][ T5187] vhci_hcd: connection closed
[   84.951283][ T5180] vhci_hcd: connection closed
[   84.956128][ T5178] vhci_hcd: connection reset by peer
[   84.966914][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   84.972231][ T1003] vhci_hcd vhci_hcd.0: release socket
[   84.977649][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   84.983839][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   84.989098][ T1003] vhci_hcd vhci_hcd.0: release socket
[   84.994580][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   85.007887][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   85.013285][ T1003] vhci_hcd vhci_hcd.0: release socket
[   85.018833][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   85.049167][ T1003] vhci_hcd vhci_hcd.0: stop threads
[   85.054973][ T1003] vhci_hcd vhci_hcd.0: release socket
[   85.060739][ T1003] vhci_hcd vhci_hcd.0: disconnect device
[   85.301033][   T29] kauditd_printk_skb: 22697 callbacks suppressed
[   85.301051][   T29] audit: type=1400 audit(1766834484.379:62327): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   85.340115][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   85.346969][ T3043] audit: audit_lost=7708 audit_rate_limit=0 audit_backlog_limit=64
[   85.355307][ T3043] audit: backlog limit exceeded
[   85.360875][   T29] audit: type=1400 audit(1766834484.399:62328): avc:  denied  { map_create } for  pid=5210 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   85.372323][ T5214] audit: audit_backlog=65 > audit_backlog_limit=64
[   85.380095][   T29] audit: type=1400 audit(1766834484.399:62329): avc:  denied  { prog_load } for  pid=5210 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   85.386798][ T5214] audit: audit_lost=7709 audit_rate_limit=0 audit_backlog_limit=64
[   85.406380][   T29] audit: type=1400 audit(1766834484.399:62330): avc:  denied  { prog_load } for  pid=5210 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   85.414431][ T5214] audit: backlog limit exceeded
[   85.450271][ T5216] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   85.525894][ T5213] xt_hashlimit: max too large, truncated to 1048576
[   85.541330][ T5221] xt_CT: No such helper "pptp"
[   85.552420][ T5221] IPv6: Can't replace route, no match found
[   85.672803][ T5227] wg1 speed is unknown, defaulting to 1000
[   85.679773][ T5227] lo speed is unknown, defaulting to 1000
[   86.254054][ T5249] xt_CT: No such helper "pptp"
[   86.276110][ T5249] IPv6: Can't replace route, no match found
[   86.298331][ T5251] bridge_slave_0: left allmulticast mode
[   86.304143][ T5251] bridge_slave_0: left promiscuous mode
[   86.309927][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.360341][ T5257] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   86.377407][ T5251] bridge_slave_1: left allmulticast mode
[   86.383191][ T5251] bridge_slave_1: left promiscuous mode
[   86.389173][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.495507][ T5251] team0: Port device team_slave_0 removed
[   86.529000][ T5251] team0: Port device team_slave_1 removed
[   86.547067][ T5251] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.581832][ T5251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   86.930745][ T5271] wg1 speed is unknown, defaulting to 1000
[   86.931202][ T5271] lo speed is unknown, defaulting to 1000
[   87.069781][ T5277] wg1 speed is unknown, defaulting to 1000
[   87.109827][ T5277] lo speed is unknown, defaulting to 1000
[   87.121852][ T5281] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.176218][ T5281] netlink: 'gtp': attribute type 39 has an invalid length.
[   87.333998][ T5288] xt_CT: No such helper "pptp"
[   88.493666][ T5313] __nla_validate_parse: 11 callbacks suppressed
[   88.493683][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'.
[   89.001879][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'.
[   89.066818][ T5321] wg1 speed is unknown, defaulting to 1000
[   89.097879][ T5321] lo speed is unknown, defaulting to 1000
[   89.428843][ T5325] wg1 speed is unknown, defaulting to 1000
[   89.478810][ T5325] lo speed is unknown, defaulting to 1000
[   89.600036][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'.
[   89.931017][ T3603] usb 1-1: enqueue for inactive port 0
[   89.961051][ T3603] usb 1-1: enqueue for inactive port 0
[   90.043413][ T3603] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   90.114463][ T5343] netlink: 14 bytes leftover after parsing attributes in process `syz.4.531'.
[   90.311062][   T29] kauditd_printk_skb: 14025 callbacks suppressed
[   90.311080][   T29] audit: type=1400 audit(1766834489.398:75774): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   90.336585][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   90.345690][ T3043] audit: audit_lost=7904 audit_rate_limit=0 audit_backlog_limit=64
[   90.353714][ T3043] audit: backlog limit exceeded
[   90.354686][ T3317] audit: audit_backlog=65 > audit_backlog_limit=64
[   90.365218][ T3317] audit: audit_lost=7905 audit_rate_limit=0 audit_backlog_limit=64
[   90.373636][ T3317] audit: backlog limit exceeded
[   90.405186][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   90.411764][ T3043] audit: audit_lost=7906 audit_rate_limit=0 audit_backlog_limit=64
[   90.419673][ T3043] audit: backlog limit exceeded
[   90.547205][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'.
[   90.571440][ T5347] netlink: 14 bytes leftover after parsing attributes in process `'.
[   90.601305][ T5347] hsr_slave_0: left promiscuous mode
[   90.619300][ T5347] hsr_slave_1: left promiscuous mode
[   90.862421][ T5354] wg1 speed is unknown, defaulting to 1000
[   90.897250][ T5354] lo speed is unknown, defaulting to 1000
[   91.278099][ T5367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=5367 comm=syz.3.541
[   91.329678][ T5368] wg1 speed is unknown, defaulting to 1000
[   91.460577][ T5368] lo speed is unknown, defaulting to 1000
[   91.656284][ T5372] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   93.032263][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[   93.289913][ T5389] wg1 speed is unknown, defaulting to 1000
[   93.339366][ T5389] lo speed is unknown, defaulting to 1000
[   94.133751][ T5399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.554'.
[   94.205320][ T5401] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.263909][ T5401] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.555'.
[   94.274703][ T1003] Bluetooth: hci0: Frame reassembly failed (-84)
[   94.666272][ T5407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'.
[   95.151700][ T5417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   95.325206][   T29] kauditd_printk_skb: 13423 callbacks suppressed
[   95.325228][   T29] audit: type=1400 audit(1766834494.398:88640): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.334804][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[   95.352948][   T29] audit: type=1400 audit(1766834494.398:88641): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.359544][ T3043] audit: audit_lost=8093 audit_rate_limit=0 audit_backlog_limit=64
[   95.380958][   T29] audit: type=1400 audit(1766834494.398:88642): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.381029][   T29] audit: type=1400 audit(1766834494.398:88643): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.381110][   T29] audit: type=1400 audit(1766834494.398:88644): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.389224][ T3043] audit: backlog limit exceeded
[   95.410679][   T29] audit: type=1400 audit(1766834494.398:88645): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.479884][   T29] audit: type=1400 audit(1766834494.398:88646): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.750719][ T5425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'.
[   96.199743][ T5436] macsec1: entered promiscuous mode
[   96.205319][ T5436] bridge0: entered promiscuous mode
[   96.244890][ T5437] netlink: 14 bytes leftover after parsing attributes in process `syz.3.566'.
[   96.286711][ T5436] bridge0: port 1(macsec1) entered blocking state
[   96.293325][ T5436] bridge0: port 1(macsec1) entered disabled state
[   96.330976][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   96.330995][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   96.351155][ T5436] macsec1: entered allmulticast mode
[   96.356707][ T5436] bridge0: entered allmulticast mode
[   96.368059][ T5436] macsec1: left allmulticast mode
[   96.373253][ T5436] bridge0: left allmulticast mode
[   96.424062][ T5436] bridge0: left promiscuous mode
[   96.560019][ T5445] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   96.629010][ T5449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.571'.
[   96.847501][ T5451] wg1 speed is unknown, defaulting to 1000
[   96.867374][ T5451] lo speed is unknown, defaulting to 1000
[   97.161809][ T5474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[   97.168567][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   97.176331][ T5474] vhci_hcd vhci_hcd.0: Device attached
[   97.263412][ T5475] vhci_hcd: connection closed
[   97.263697][ T4002] vhci_hcd vhci_hcd.4: stop threads
[   97.274010][ T4002] vhci_hcd vhci_hcd.4: release socket
[   97.279449][ T4002] vhci_hcd vhci_hcd.4: disconnect device
[   97.298656][ T5485] netlink: 14 bytes leftover after parsing attributes in process `syz.2.580'.
[   97.318740][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.405332][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.474740][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.553116][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.644737][ T5491] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   97.651397][ T5491] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   97.659146][ T5491] vhci_hcd vhci_hcd.0: Device attached
[   97.763711][   T12] bond0 (unregistering): Released all slaves
[   97.814480][   T12] IPVS: stopping master sync thread 3932 ...
[   97.831080][ T3488] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   97.835607][ T5492] vhci_hcd: connection closed
[   97.837868][  T354] vhci_hcd vhci_hcd.3: stop threads
[   97.847920][  T354] vhci_hcd vhci_hcd.3: release socket
[   97.853480][  T354] vhci_hcd vhci_hcd.3: disconnect device
[   97.874072][   T12] hsr_slave_0: left promiscuous mode
[   97.893080][   T12] hsr_slave_1: left promiscuous mode
[   97.901040][ T3488] usb 7-1: new full-speed USB device number 3 using vhci_hcd
[   97.909999][   T12] veth1_macvtap: left promiscuous mode
[   97.919071][ T3488] usb 7-1: enqueue for inactive port 0
[   97.924655][   T12] veth0_macvtap: left promiscuous mode
[   97.940554][ T3488] usb 7-1: enqueue for inactive port 0
[   97.946197][   T12] veth1_vlan: left promiscuous mode
[   97.951545][ T3488] usb 7-1: enqueue for inactive port 0
[   97.957109][   T12] veth0_vlan: left promiscuous mode
[   98.032599][ T3488] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   98.181278][ T3603] wg1 speed is unknown, defaulting to 1000
[   98.187169][ T3603] infiniband syz0: ib_query_port failed (-19)
[   98.968250][ T5515] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   98.968250][ T5515] The task syz.2.591 (5515) triggered the difference, watch for misbehavior.
[  100.331031][   T29] kauditd_printk_skb: 33806 callbacks suppressed
[  100.331048][   T29] audit: type=1400 audit(1766834499.408:119270): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  100.337988][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[  100.365462][ T3043] audit: audit_lost=9155 audit_rate_limit=0 audit_backlog_limit=64
[  100.373425][ T3043] audit: backlog limit exceeded
[  100.379194][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64
[  100.384789][   T29] audit: type=1400 audit(1766834499.418:119271): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  100.385726][ T3043] audit: audit_lost=9156 audit_rate_limit=0 audit_backlog_limit=64
[  100.406995][   T29] audit: type=1400 audit(1766834499.418:119272): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  100.414893][ T3043] audit: backlog limit exceeded
[  100.436293][   T29] audit: type=1400 audit(1766834499.418:119273): avc:  denied  { read } for  pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  100.559996][ T5527] lo speed is unknown, defaulting to 1000
[  101.399412][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'.
[  101.438679][ T5540] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  101.445327][ T5540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  101.453335][ T5540] vhci_hcd vhci_hcd.0: Device attached
[  101.460425][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'.
[  101.519008][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  101.623636][ T5541] vhci_hcd: connection closed
[  101.623749][ T4002] vhci_hcd vhci_hcd.2: stop threads
[  101.634141][ T4002] vhci_hcd vhci_hcd.2: release socket
[  101.639619][ T4002] vhci_hcd vhci_hcd.2: disconnect device
[  101.651034][ T1049] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  102.528858][ T5556] veth2: entered promiscuous mode
[  102.533996][ T5556] veth2: entered allmulticast mode
[  103.583519][ T5566] lo speed is unknown, defaulting to 1000
[  104.780429][ T5576] netlink: '+}[@': attribute type 10 has an invalid length.
[  104.789495][ T5580] netlink: 'syz.0.609': attribute type 4 has an invalid length.
[  104.800433][ T5576] team0: Port device dummy0 added
[  104.817676][ T5579] lo speed is unknown, defaulting to 1000
[  104.820201][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'.
[  104.824565][ T5579] lo speed is unknown, defaulting to 1000
[  104.839109][ T5576] +}[@ (5576) used greatest stack depth: 9888 bytes left
[  104.858264][ T5580] bridge0: port 3(gretap0) entered disabled state
[  104.899276][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.906588][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.946443][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.957847][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.974292][ T5580] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  104.996204][ T5579] lo speed is unknown, defaulting to 1000
[  105.001014][ T4002] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.011448][ T4002] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.027243][ T4002] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.037285][ T4002] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.050087][ T5579] infiniband s
z1: set down
[  105.054844][ T5579] infiniband s
z1: added lo
[  105.059500][ T1049] lo speed is unknown, defaulting to 1000
[  105.077093][ T5579] RDS/IB: s
z1: added
[  105.081632][ T5579] smc: adding ib device s
z1 with port count 1
[  105.088095][ T5579] smc:    ib device s
z1 port 1 has no pnetid
[  105.094668][ T1049] lo speed is unknown, defaulting to 1000
[  105.101027][ T5579] lo speed is unknown, defaulting to 1000
[  105.136592][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.148560][ T5579] lo speed is unknown, defaulting to 1000
[  105.155330][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.187919][ T5579] lo speed is unknown, defaulting to 1000
[  105.235785][ T5579] lo speed is unknown, defaulting to 1000
[  105.274385][ T5587] netlink: 19 bytes leftover after parsing attributes in process `syz.0.609'.
[  106.074317][   T29] kauditd_printk_skb: 36347 callbacks suppressed
[  106.074334][   T29] audit: type=1400 audit(1766834505.158:151667): avc:  denied  { execmem } for  pid=5648 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  106.108493][ T5652] loop0: detected capacity change from 0 to 512
[  106.137785][   T29] audit: type=1400 audit(1766834505.188:151668): avc:  denied  { create } for  pid=5651 comm="syz.0.613" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  106.142681][ T5654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.614'.
[  106.158834][   T29] audit: type=1400 audit(1766834505.208:151669): avc:  denied  { mounton } for  pid=5651 comm="gtp" path="/109/file0" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  106.171492][ T5652] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1)
[  106.190392][   T29] audit: type=1326 audit(1766834505.208:151670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.227786][   T29] audit: type=1326 audit(1766834505.208:151671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.248477][ T5652] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1)
[  106.251412][   T29] audit: type=1326 audit(1766834505.208:151672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.288523][   T29] audit: type=1326 audit(1766834505.208:151673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.312299][   T29] audit: type=1326 audit(1766834505.208:151674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.336393][   T29] audit: type=1326 audit(1766834505.208:151675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.360231][   T29] audit: type=1326 audit(1766834505.208:151676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c93f749 code=0x7ffc0000
[  106.385312][ T5652] EXT4-fs (loop0): 2 truncates cleaned up
[  106.392267][ T5653] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  106.400032][ T5652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.429629][ T5652] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.465790][ T5658] lo speed is unknown, defaulting to 1000
[  106.487706][ T5672] loop2: detected capacity change from 0 to 4096
[  106.535613][ T5653] loop4: detected capacity change from 0 to 512
[  106.543047][ T3004] ==================================================================
[  106.551395][ T3004] BUG: KCSAN: data-race in d_make_discardable / lookup_fast
[  106.558703][ T3004] 
[  106.561041][ T3004] write to 0xffff8881076fb780 of 4 bytes by task 3687 on cpu 1:
[  106.568813][ T3004]  d_make_discardable+0x4f/0xa0
[  106.573854][ T3004]  simple_unlink+0x68/0x80
[  106.578318][ T3004]  shmem_unlink+0x12d/0x140
[  106.582865][ T3004]  vfs_unlink+0x28b/0x440
[  106.587384][ T3004]  do_unlinkat+0x1cd/0x4b0
[  106.591828][ T3004]  __x64_sys_unlink+0x2e/0x40
[  106.596883][ T3004]  x64_sys_call+0x2f48/0x3000
[  106.597638][ T5653] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.601589][ T3004]  do_syscall_64+0xca/0x2b0
[  106.601631][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.601656][ T3004] 
[  106.601663][ T3004] read to 0xffff8881076fb780 of 4 bytes by task 3004 on cpu 0:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  106.601683][ T3004]  lookup_fast+0xf0/0x320
[  106.601710][ T3004]  path_lookupat+0x15c/0x500
[  106.601737][ T3004]  filename_lookup+0x147/0x340
[  106.601765][ T3004]  do_readlinkat+0x7d/0x320
[  106.601797][ T3004]  __x64_sys_readlink+0x47/0x60
[  106.601826][ T3004]  x64_sys_call+0x2af1/0x3000
[  106.601854][ T3004]  do_syscall_64+0xca/0x2b0
[  106.601886][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.601909][ T3004] 
[  106.601913][ T3004] value changed: 0x08300080 -> 0x00004080
[  106.601926][ T3004] 
[  106.601931][ T3004] Reported by Kernel Concurrency Sanitizer on:
[  106.601948][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  106.601982][ T3004] Tainted: [W]=WARN
[  106.601990][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  106.602004][ T3004] ==================================================================
[  106.604629][ T5672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.735120][ T5658] lo speed is unknown, defaulting to 1000
[  106.758576][ T5653] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  106.759234][ T5653] EXT4-fs: failed to create workqueue
[  106.775462][ T5653] EXT4-fs (loop4): mount failed
[  106.879169][ T4131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.589386][   T31] gretap0: left allmulticast mode
[  107.594492][   T31] gretap0: left promiscuous mode
[  107.599701][   T31] bridge0: port 3(gretap0) entered disabled state
[  107.607367][   T31] bridge_slave_1: left allmulticast mode
[  107.613120][   T31] bridge_slave_1: left promiscuous mode
[  107.618851][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.626728][   T31] bridge_slave_0: left allmulticast mode
[  107.632715][   T31] bridge_slave_0: left promiscuous mode
[  107.638591][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.084333][   T31] hsr_slave_0: left promiscuous mode
[  108.090413][   T31] hsr_slave_1: left promiscuous mode
[  108.096484][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.104253][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.112363][   T31] batman_adv: batadv0: Removing interface: veth1_vlan
[  108.184340][ T4002] smc: removing ib device s
z1
[  108.656525][   T31] IPVS: stop unused estimator thread 0...
[  108.663177][   T31] IPVS: stop unused estimator thread 0...
[  108.914136][   T31] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.953075][   T31] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.002847][   T31] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.052587][   T31] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.404743][   T31] hsr_slave_0: left promiscuous mode
[  109.410617][   T31] hsr_slave_1: left promiscuous mode
[  109.423801][   T31] veth1_macvtap: left promiscuous mode
[  109.429386][   T31] veth0_macvtap: left promiscuous mode
[  109.435197][   T31] veth1_vlan: left promiscuous mode
[  109.440677][   T31] veth0_vlan: left promiscuous mode
[  109.514737][   T31] team0 (unregistering): Port device dummy0 removed
[  109.554159][   T12] smc: removing ib device !yz!
[  110.067442][   T31] IPVS: stop unused estimator thread 0...