last executing test programs:

18.282450811s ago: executing program 1 (id=97):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0)

18.061703401s ago: executing program 1 (id=98):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vxcan0\x00'})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x845, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffdfff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x3, 0x7, 0x4, 0x200}, 0x9, 0x1, 0x6, 0x2, 0x3, 0x19, 0x9, 0x18, 0x1, 0xfff, {0x0, 0xffffff80, 0x2, 0x9, 0x2e571574, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x54}}, 0x24040084)

18.043640351s ago: executing program 1 (id=99):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0xffffffffffffffff, 0x6}}]}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20018804}, 0x0)

17.982605104s ago: executing program 1 (id=100):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]})
clock_settime(0xfffffffb, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})

17.916830847s ago: executing program 1 (id=101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x80010, 0xffffffffffffffff, 0x180000000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xffff, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})

17.676183217s ago: executing program 1 (id=106):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r4=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

17.660311988s ago: executing program 32 (id=106):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r4=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

7.165147484s ago: executing program 5 (id=231):
socket$kcm(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.082406381s ago: executing program 5 (id=246):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x8)
write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x8)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x41000000}, 0x2}}, 0x10, 0x0}, 0x10)

5.197629499s ago: executing program 5 (id=260):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x2)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

3.849466366s ago: executing program 4 (id=275):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2)
setregid(0xffffffffffffffff, r1)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x9, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)

3.599667656s ago: executing program 4 (id=277):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_emit_ethernet(0x4a, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2db7b000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)

3.331383058s ago: executing program 2 (id=279):
socket$kcm(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.519267302s ago: executing program 4 (id=282):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)

2.485408804s ago: executing program 4 (id=283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0)

2.250665714s ago: executing program 0 (id=284):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlockall(0x3)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0xffff, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)="8a", 0x1}], 0x1, 0x6)
sendmmsg$unix(r4, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1, 0x0, 0x0, 0x24004080}}], 0x1, 0x4000)

2.138538159s ago: executing program 4 (id=285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.137726598s ago: executing program 3 (id=297):
gettid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=@newlink={0x70, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2fa39, 0x9894}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x3c, 0x16, 0x0, 0x1, [{0x4}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x8}}]}, {0x4}, {0x4}, {0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x44)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x6})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
syz_emit_ethernet(0x46, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r2, 0xa75)

2.074855991s ago: executing program 2 (id=286):
r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r1, 0x1)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.608225151s ago: executing program 5 (id=287):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x1f, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = io_uring_setup(0x1fc1, &(0x7f00000002c0)={0x0, 0xfc95, 0x0, 0x0, 0x157})
r2 = socket$inet(0x2, 0x2, 0x0)
io_uring_enter(r1, 0x67a7, 0x49ce, 0x8, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0xfffffffffffffea5, 0x0}, 0x92}], 0x1, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_read_part_table(0x5e4, &(0x7f0000001580)="$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")
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_bp={0x0, 0xd}, 0x420c, 0x10000, 0x33f7, 0x1, 0x8, 0x20009, 0xb, 0x0, 0xfffffffd, 0x0, 0x100000004}, 0x0, 0xffffffffffffffff, r0, 0x2)

1.491040456s ago: executing program 3 (id=288):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

1.267672926s ago: executing program 3 (id=289):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xe, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, <r3=>r2, {0xe}}, './file0/file0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000d80)={'bridge0\x00', @remote})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x8000}, 0x18)
acct(&(0x7f0000000d00)='./file0\x00')

1.245075837s ago: executing program 5 (id=290):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
sendto$inet6(r0, &(0x7f0000000100)="b5", 0x1, 0x8000, 0x0, 0x0)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004)

1.16288838s ago: executing program 2 (id=291):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1080, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)

967.711058ms ago: executing program 2 (id=294):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2)
setregid(0xffffffffffffffff, r1)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x9, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)

966.646869ms ago: executing program 3 (id=305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

920.97729ms ago: executing program 4 (id=295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

915.025081ms ago: executing program 3 (id=307):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1c})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
listen(r0, 0x100101)
accept4(r0, 0x0, 0x0, 0x80800)

914.117381ms ago: executing program 5 (id=296):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000080000000e00000000000083ee9973b019e18d222b45211266da49b066", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc", 0xf)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

889.814782ms ago: executing program 2 (id=298):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}}, 0x4010)

779.828017ms ago: executing program 0 (id=299):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

588.827245ms ago: executing program 2 (id=300):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)

510.651178ms ago: executing program 0 (id=301):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x404}, 0x18)
r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0)
listen(0xffffffffffffffff, 0x9)
r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r1, r1, r5, 0x0)

465.44373ms ago: executing program 0 (id=302):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0)
getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

300.410877ms ago: executing program 0 (id=303):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000)

27.474188ms ago: executing program 3 (id=304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x14, 0x31, 0x3d}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

0s ago: executing program 0 (id=306):
socket(0x40000000015, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x9, 0x43a1bd76, 0x7, 0x9, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000)

kernel console output (not intermixed with test programs):

[   23.171670][   T29] audit: type=1400 audit(1765017085.856:62): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.193659][   T29] audit: type=1400 audit(1765017085.856:63): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.216527][   T29] audit: type=1400 audit(1765017085.856:64): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.239466][   T29] audit: type=1400 audit(1765017085.856:65): avc:  denied  { search } for  pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.262490][   T29] audit: type=1400 audit(1765017085.856:66): avc:  denied  { read open } for  pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
[   29.914247][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   29.914265][   T29] audit: type=1400 audit(1765017092.596:70): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   29.943302][   T29] audit: type=1400 audit(1765017092.626:71): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.944281][ T3303] cgroup: Unknown subsys name 'net'
[   29.971046][   T29] audit: type=1400 audit(1765017092.656:72): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.088466][ T3303] cgroup: Unknown subsys name 'cpuset'
[   30.094681][ T3303] cgroup: Unknown subsys name 'rlimit'
[   30.206156][   T29] audit: type=1400 audit(1765017092.886:73): avc:  denied  { setattr } for  pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   30.236236][   T29] audit: type=1400 audit(1765017092.886:74): avc:  denied  { create } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.256804][   T29] audit: type=1400 audit(1765017092.886:75): avc:  denied  { write } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.277246][   T29] audit: type=1400 audit(1765017092.896:76): avc:  denied  { read } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.297523][   T29] audit: type=1400 audit(1765017092.906:77): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   30.322487][   T29] audit: type=1400 audit(1765017092.906:78): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   30.345748][   T29] audit: type=1400 audit(1765017092.916:79): avc:  denied  { read } for  pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   30.353566][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   30.432390][ T3303] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   32.493759][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   32.543566][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   32.571774][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   32.587640][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   32.606181][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   32.684607][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.691758][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.698956][ T3313] bridge_slave_0: entered allmulticast mode
[   32.705486][ T3313] bridge_slave_0: entered promiscuous mode
[   32.714621][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.721867][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.729063][ T3313] bridge_slave_1: entered allmulticast mode
[   32.735418][ T3313] bridge_slave_1: entered promiscuous mode
[   32.744510][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.751615][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.758812][ T3318] bridge_slave_0: entered allmulticast mode
[   32.765257][ T3318] bridge_slave_0: entered promiscuous mode
[   32.784417][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.791521][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.798674][ T3318] bridge_slave_1: entered allmulticast mode
[   32.805102][ T3318] bridge_slave_1: entered promiscuous mode
[   32.845381][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.864349][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.871465][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.878770][ T3317] bridge_slave_0: entered allmulticast mode
[   32.885208][ T3317] bridge_slave_0: entered promiscuous mode
[   32.891803][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.898917][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.906069][ T3321] bridge_slave_0: entered allmulticast mode
[   32.912522][ T3321] bridge_slave_0: entered promiscuous mode
[   32.920371][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.935979][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.945228][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.952382][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.959698][ T3317] bridge_slave_1: entered allmulticast mode
[   32.966303][ T3317] bridge_slave_1: entered promiscuous mode
[   32.972930][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.980079][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.987176][ T3321] bridge_slave_1: entered allmulticast mode
[   32.993811][ T3321] bridge_slave_1: entered promiscuous mode
[   33.004963][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.012050][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.019160][ T3314] bridge_slave_0: entered allmulticast mode
[   33.025603][ T3314] bridge_slave_0: entered promiscuous mode
[   33.033283][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.057330][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.064459][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.071666][ T3314] bridge_slave_1: entered allmulticast mode
[   33.078268][ T3314] bridge_slave_1: entered promiscuous mode
[   33.100148][ T3313] team0: Port device team_slave_0 added
[   33.117745][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.128082][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.138385][ T3313] team0: Port device team_slave_1 added
[   33.149962][ T3318] team0: Port device team_slave_0 added
[   33.156643][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.166789][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.187738][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.197888][ T3318] team0: Port device team_slave_1 added
[   33.219905][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.239388][ T3321] team0: Port device team_slave_0 added
[   33.245284][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.252254][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.278161][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.299800][ T3317] team0: Port device team_slave_0 added
[   33.306150][ T3321] team0: Port device team_slave_1 added
[   33.312053][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.319138][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.345090][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.361040][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.368079][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.394157][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.405788][ T3317] team0: Port device team_slave_1 added
[   33.420166][ T3314] team0: Port device team_slave_0 added
[   33.426722][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.433854][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.459831][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.481390][ T3314] team0: Port device team_slave_1 added
[   33.487286][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.494380][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.520368][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.551658][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.558751][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.584826][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.601462][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.608442][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.634415][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.658456][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.665475][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.691385][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.702521][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.709519][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.735425][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.749653][ T3313] hsr_slave_0: entered promiscuous mode
[   33.755611][ T3313] hsr_slave_1: entered promiscuous mode
[   33.769195][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.776171][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.802109][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.822666][ T3318] hsr_slave_0: entered promiscuous mode
[   33.828718][ T3318] hsr_slave_1: entered promiscuous mode
[   33.834540][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   33.840329][ T3318] Cannot create hsr debugfs directory
[   33.874288][ T3321] hsr_slave_0: entered promiscuous mode
[   33.880248][ T3321] hsr_slave_1: entered promiscuous mode
[   33.886148][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   33.891915][ T3321] Cannot create hsr debugfs directory
[   33.921779][ T3317] hsr_slave_0: entered promiscuous mode
[   33.928097][ T3317] hsr_slave_1: entered promiscuous mode
[   33.934082][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   33.939878][ T3317] Cannot create hsr debugfs directory
[   33.967202][ T3314] hsr_slave_0: entered promiscuous mode
[   33.973323][ T3314] hsr_slave_1: entered promiscuous mode
[   33.979343][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   33.985077][ T3314] Cannot create hsr debugfs directory
[   34.170403][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   34.180778][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   34.193109][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   34.202234][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   34.225241][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   34.238962][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   34.247987][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   34.257319][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   34.279069][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   34.289983][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   34.302191][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   34.316846][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   34.361680][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   34.372655][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   34.386589][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   34.395887][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   34.405161][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   34.414771][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   34.427090][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   34.439527][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   34.466025][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.502517][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   34.520076][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.527145][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.540184][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.547281][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.566783][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.592299][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.620791][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   34.629162][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.642304][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   34.658622][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.665760][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.677484][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.684585][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.699401][  T899] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.706530][  T899] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.721924][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.731939][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.743576][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.750799][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.774195][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   34.795905][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.803089][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.814678][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   34.824369][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.836790][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.843864][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.858030][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.865089][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.881108][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.888238][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.936793][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   35.020298][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.089553][ T3313] veth0_vlan: entered promiscuous mode
[   35.100573][ T3313] veth1_vlan: entered promiscuous mode
[   35.109870][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.125219][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.139415][ T3313] veth0_macvtap: entered promiscuous mode
[   35.149287][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.176095][ T3313] veth1_macvtap: entered promiscuous mode
[   35.219527][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.236819][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.264241][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.275954][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.286141][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.295564][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.311013][ T3317] veth0_vlan: entered promiscuous mode
[   35.327833][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   35.327867][   T29] audit: type=1400 audit(1765017098.006:90): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.4idnv4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   35.328649][ T3317] veth1_vlan: entered promiscuous mode
[   35.334006][   T29] audit: type=1400 audit(1765017098.006:91): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   35.334034][   T29] audit: type=1400 audit(1765017098.006:92): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.4idnv4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   35.370161][ T3317] veth0_macvtap: entered promiscuous mode
[   35.386037][   T29] audit: type=1400 audit(1765017098.006:93): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   35.438714][   T29] audit: type=1400 audit(1765017098.006:94): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.4idnv4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   35.465455][   T29] audit: type=1400 audit(1765017098.006:95): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.4idnv4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   35.479143][ T3317] veth1_macvtap: entered promiscuous mode
[   35.497953][   T29] audit: type=1400 audit(1765017098.046:96): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   35.529153][   T29] audit: type=1400 audit(1765017098.196:97): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   35.547319][ T3314] veth0_vlan: entered promiscuous mode
[   35.551985][   T29] audit: type=1400 audit(1765017098.196:98): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   35.573622][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.590136][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.604239][ T3314] veth1_vlan: entered promiscuous mode
[   35.619524][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.638663][ T3318] veth0_vlan: entered promiscuous mode
[   35.655969][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.665002][ T3318] veth1_vlan: entered promiscuous mode
[   35.671180][   T29] audit: type=1400 audit(1765017098.326:99): avc:  denied  { read write } for  pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.698504][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.707359][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.733859][ T3321] veth0_vlan: entered promiscuous mode
[   35.743058][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.764944][ T3318] veth0_macvtap: entered promiscuous mode
[   35.782222][ T3314] veth0_macvtap: entered promiscuous mode
[   35.800405][ T3321] veth1_vlan: entered promiscuous mode
[   35.821043][ T3318] veth1_macvtap: entered promiscuous mode
[   35.832704][ T3314] veth1_macvtap: entered promiscuous mode
[   35.862360][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.967014][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.983411][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.005267][  T850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.017441][ T3321] veth0_macvtap: entered promiscuous mode
[   36.029592][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.044338][  T850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.054026][ T3321] veth1_macvtap: entered promiscuous mode
[   36.085566][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.096522][  T850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.127619][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.149949][  T850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.167531][  T850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.205262][  T850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.224940][  T850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.254811][  T850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.286210][  T850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.317513][  T850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.336951][  T850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.356184][  T850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.369980][ T3505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.411118][ T3509] loop1: detected capacity change from 0 to 2048
[   36.649423][ T3514] tipc: Started in network mode
[   36.654362][ T3514] tipc: Node identity 06d5797c2487, cluster identity 4711
[   36.661844][ T3514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   36.685740][ T3505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.851012][ T3515] tipc: Disabling bearer <eth:syzkaller0>
[   37.756876][ T3530] loop2: detected capacity change from 0 to 128
[   37.804001][ T3533] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13'.
[   37.831693][ T3530] syz.2.14: attempt to access beyond end of device
[   37.831693][ T3530] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128
[   37.856408][ T3533] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13'.
[   37.906887][ T3535] loop1: detected capacity change from 0 to 256
[   37.913591][ T3530] syz.2.14: attempt to access beyond end of device
[   37.913591][ T3530] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128
[   37.926902][ T3530] Buffer I/O error on dev loop2, logical block 79, lost async page write
[   37.947222][ T3535] =======================================================
[   37.947222][ T3535] WARNING: The mand mount option has been deprecated and
[   37.947222][ T3535]          and is ignored by this kernel. Remove the mand
[   37.947222][ T3535]          option from the mount to silence this warning.
[   37.947222][ T3535] =======================================================
[   38.045354][ T3505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.088706][ T3530] syz.2.14: attempt to access beyond end of device
[   38.088706][ T3530] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[   38.101996][ T3530] Buffer I/O error on dev loop2, logical block 80, lost async page write
[   38.135399][ T3530] syz.2.14: attempt to access beyond end of device
[   38.135399][ T3530] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128
[   38.230631][ T3530] syz.2.14: attempt to access beyond end of device
[   38.230631][ T3530] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128
[   38.244034][ T3530] Buffer I/O error on dev loop2, logical block 83, lost async page write
[   38.253367][ T3530] syz.2.14: attempt to access beyond end of device
[   38.253367][ T3530] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[   38.266686][ T3530] Buffer I/O error on dev loop2, logical block 84, lost async page write
[   38.346367][ T3530] syz.2.14: attempt to access beyond end of device
[   38.346367][ T3530] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128
[   38.391319][ T3530] syz.2.14: attempt to access beyond end of device
[   38.391319][ T3530] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128
[   38.404671][ T3530] Buffer I/O error on dev loop2, logical block 95, lost async page write
[   38.460713][ T3530] syz.2.14: attempt to access beyond end of device
[   38.460713][ T3530] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128
[   38.474033][ T3530] Buffer I/O error on dev loop2, logical block 96, lost async page write
[   38.501217][ T3541] netlink: 8 bytes leftover after parsing attributes in process `wޣ�'.
[   38.533487][ T3530] syz.2.14: attempt to access beyond end of device
[   38.533487][ T3530] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128
[   38.578501][ T3530] Buffer I/O error on dev loop2, logical block 99, lost async page write
[   38.597162][ T3530] Buffer I/O error on dev loop2, logical block 100, lost async page write
[   38.626912][ T3530] Buffer I/O error on dev loop2, logical block 111, lost async page write
[   38.645932][ T3530] Buffer I/O error on dev loop2, logical block 112, lost async page write
[   38.656899][ T3541] wޣ� (3541) used greatest stack depth: 10192 bytes left
[   38.800898][ T3545] loop3: detected capacity change from 0 to 128
[   38.830183][ T3545] 9pnet_fd: Insufficient options for proto=fd
[   38.926918][ T3551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'.
[   39.307620][ T3505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.318948][ T3551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'.
[   39.429966][ T3565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   39.436554][ T3565] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   39.444100][ T3565] vhci_hcd vhci_hcd.0: Device attached
[   39.450505][  T899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.471817][ T3568] vhci_hcd: connection closed
[   39.472102][  T899] vhci_hcd: stop threads
[   39.481151][  T899] vhci_hcd: release socket
[   39.485590][  T899] vhci_hcd: disconnect device
[   39.491546][  T850] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.491641][    C0] hrtimer: interrupt took 38349 ns
[   39.508284][  T850] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.516560][  T850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.539288][ T3572] netlink: 'syz.2.26': attribute type 1 has an invalid length.
[   39.548917][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   39.570793][ T3570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   39.624152][ T3574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.673452][ T3577] loop1: detected capacity change from 0 to 128
[   39.692015][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   39.693017][ T3577] vfat: Unknown parameter 'E��[OjA��p���wuni_xlate'
[   39.706654][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   39.818271][ T3585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'.
[   39.844364][ T3585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3585 comm=syz.0.33
[   40.083958][ T3589] loop2: detected capacity change from 0 to 2048
[   40.263674][ T3589] Alternate GPT is invalid, using primary GPT.
[   40.286091][ T3589]  loop2: p2 p3 p7
[   40.337637][ T3613] loop3: detected capacity change from 0 to 1024
[   40.350035][ T3613] ext4: Unknown parameter 'noacl'
[   40.355467][   T29] kauditd_printk_skb: 167 callbacks suppressed
[   40.355544][   T29] audit: type=1400 audit(1765017103.036:267): avc:  denied  { block_suspend } for  pid=3603 comm="syz.0.40" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   40.473051][ T3613] loop3: detected capacity change from 0 to 4096
[   40.523621][ T3613] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.553630][   T29] audit: type=1326 audit(1765017103.236:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451481f749 code=0x7ffc0000
[   40.708201][ T3005] Alternate GPT is invalid, using primary GPT.
[   40.714780][ T3005]  loop2: p2 p3 p7
[   40.724612][ T3613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.751909][   T29] audit: type=1400 audit(1765017103.436:269): avc:  denied  { mount } for  pid=3612 comm="syz.3.44" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.853325][   T29] audit: type=1400 audit(1765017103.466:270): avc:  denied  { add_name } for  pid=3612 comm="syz.3.44" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.874008][   T29] audit: type=1400 audit(1765017103.466:271): avc:  denied  { create } for  pid=3612 comm="syz.3.44" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.894037][   T29] audit: type=1400 audit(1765017103.466:272): avc:  denied  { append } for  pid=3612 comm="syz.3.44" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   40.916048][   T29] audit: type=1400 audit(1765017103.466:273): avc:  denied  { open } for  pid=3612 comm="syz.3.44" path="/6/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   40.938749][   T29] audit: type=1326 audit(1765017103.486:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451481f749 code=0x7ffc0000
[   40.941908][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   40.961906][   T29] audit: type=1400 audit(1765017103.506:275): avc:  denied  { create } for  pid=3627 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.961940][   T29] audit: type=1400 audit(1765017103.506:276): avc:  denied  { bind } for  pid=3627 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   41.076994][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   41.079502][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   41.118663][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   41.250732][ T3650] loop0: detected capacity change from 0 to 256
[   41.412860][ T3664] loop0: detected capacity change from 0 to 256
[   41.450797][ T3664] FAT-fs (loop0): Directory bread(block 64) failed
[   41.481312][ T3664] FAT-fs (loop0): Directory bread(block 65) failed
[   41.501626][ T3664] FAT-fs (loop0): Directory bread(block 66) failed
[   41.517915][ T3664] FAT-fs (loop0): Directory bread(block 67) failed
[   41.534896][ T3664] FAT-fs (loop0): Directory bread(block 68) failed
[   41.548568][ T3664] FAT-fs (loop0): Directory bread(block 69) failed
[   41.559589][ T3664] FAT-fs (loop0): Directory bread(block 70) failed
[   41.595449][ T3664] FAT-fs (loop0): Directory bread(block 71) failed
[   41.614434][ T3664] FAT-fs (loop0): Directory bread(block 72) failed
[   41.615389][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.622790][ T3664] FAT-fs (loop0): Directory bread(block 73) failed
[   41.670150][ T3671] Zero length message leads to an empty skb
[   41.810983][ T3682] loop3: detected capacity change from 0 to 512
[   41.818464][ T3682] FAT-fs (loop3): Directory bread(block 199916) failed
[   41.825409][ T3682] FAT-fs (loop3): Directory bread(block 199917) failed
[   41.832803][ T3682] FAT-fs (loop3): Directory bread(block 199918) failed
[   41.840192][ T3682] FAT-fs (loop3): Directory bread(block 199919) failed
[   41.847163][ T3682] FAT-fs (loop3): Directory bread(block 199920) failed
[   41.854121][ T3682] FAT-fs (loop3): Directory bread(block 199921) failed
[   41.861032][ T3682] FAT-fs (loop3): Directory bread(block 199922) failed
[   41.868083][ T3682] FAT-fs (loop3): Directory bread(block 199923) failed
[   41.877033][ T3682] FAT-fs (loop3): Directory bread(block 199916) failed
[   41.883985][ T3682] FAT-fs (loop3): Directory bread(block 199917) failed
[   41.931601][ T3686] loop3: detected capacity change from 0 to 512
[   41.939706][ T3686] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.953297][ T3686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   41.972041][ T3686] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.985367][ T3686] EXT4-fs (loop3): 1 truncate cleaned up
[   41.991625][ T3686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.018564][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.077630][ T3692] syzkaller0: entered promiscuous mode
[   42.083237][ T3692] syzkaller0: entered allmulticast mode
[   42.205398][ T3697] dummy0: entered promiscuous mode
[   42.210868][ T3697] macsec1: entered allmulticast mode
[   42.216171][ T3697] dummy0: entered allmulticast mode
[   42.223165][ T3697] dummy0: left allmulticast mode
[   42.228155][ T3697] dummy0: left promiscuous mode
[   42.476465][ T3714] loop0: detected capacity change from 0 to 512
[   42.484794][ T3714] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   42.608436][ T3716] bond0: (slave bond_slave_1): Releasing backup interface
[   43.185023][ T3714] Set syz1 is full, maxelem 65536 reached
[   43.228356][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   43.234412][ T3488] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   43.570451][ T3739] loop1: detected capacity change from 0 to 2048
[   43.573664][ T3741] loop2: detected capacity change from 0 to 128
[   43.604005][ T3741] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   43.614056][ T3739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.661252][ T3739] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.688014][ T3739] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   43.708273][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.746089][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.753697][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.863041][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.894086][ T3747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.945633][ T3756] geneve2: entered promiscuous mode
[   43.960125][ T3760] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.984830][  T899] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.993356][  T899] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0
[   44.003110][  T899] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.011563][  T899] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0
[   44.023752][  T899] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.032344][  T899] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0
[   44.404970][ T3778] loop1: detected capacity change from 0 to 512
[   44.412184][ T3778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   44.423809][ T3778] EXT4-fs (loop1): 1 truncate cleaned up
[   44.430250][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.464560][ T3314] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[   44.479878][ T3314] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   44.492308][ T3314] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   44.529576][ T3747] syz.0.87 (3747) used greatest stack depth: 9832 bytes left
[   44.555096][ T3783] __nla_validate_parse: 8 callbacks suppressed
[   44.555116][ T3783] netlink: 64 bytes leftover after parsing attributes in process `syz.3.102'.
[   44.593800][ T3785] netlink: 'syz.3.103': attribute type 10 has an invalid length.
[   44.606692][ T3785] team0: Port device dummy0 added
[   44.615117][ T3785] netlink: 'syz.3.103': attribute type 10 has an invalid length.
[   44.628390][ T3785] team0: Port device dummy0 removed
[   44.636022][ T3785] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   44.689196][ T3781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.927016][ T3793] chnl_net:caif_netlink_parms(): no params data found
[   44.971549][ T3793] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.978758][ T3793] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.980297][ T3808] ip6t_rpfilter: unknown options
[   44.986815][ T3793] bridge_slave_0: entered allmulticast mode
[   44.997835][ T3793] bridge_slave_0: entered promiscuous mode
[   45.004705][ T3793] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.011874][ T3793] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.019100][ T3793] bridge_slave_1: entered allmulticast mode
[   45.025762][ T3793] bridge_slave_1: entered promiscuous mode
[   45.051360][ T3793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.062488][ T3793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.091053][ T3793] team0: Port device team_slave_0 added
[   45.098174][ T3793] team0: Port device team_slave_1 added
[   45.117935][ T3793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.124960][ T3793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   45.151204][ T3793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.168577][ T3793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.175718][ T3793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   45.201941][ T3793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.233774][ T3793] hsr_slave_0: entered promiscuous mode
[   45.239982][ T3793] hsr_slave_1: entered promiscuous mode
[   45.245980][ T3793] debugfs: 'hsr0' already exists in 'hsr'
[   45.251849][ T3793] Cannot create hsr debugfs directory
[   45.331494][ T3793] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   45.341557][ T3793] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   45.350599][ T3793] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   45.359569][ T3793] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   45.398788][ T3793] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.413570][ T3793] 8021q: adding VLAN 0 to HW filter on device team0
[   45.424178][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.431490][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.465255][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.472398][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.481584][   T29] kauditd_printk_skb: 134 callbacks suppressed
[   45.481601][   T29] audit: type=1326 audit(1765017364.167:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.514665][ T3823] process 'syz.2.110' launched '/dev/fd/7' with NULL argv: empty string added
[   45.597167][ T3793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.688415][ T3760] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[   45.764538][   T29] audit: type=1326 audit(1765017364.207:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.788206][   T29] audit: type=1326 audit(1765017364.207:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.811519][   T29] audit: type=1326 audit(1765017364.207:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.834773][   T29] audit: type=1326 audit(1765017364.207:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.858057][   T29] audit: type=1326 audit(1765017364.207:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.881313][   T29] audit: type=1326 audit(1765017364.207:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.904567][   T29] audit: type=1326 audit(1765017364.207:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.928026][   T29] audit: type=1326 audit(1765017364.207:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   45.951249][   T29] audit: type=1326 audit(1765017364.207:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed84f749 code=0x7ffc0000
[   46.068286][ T3760] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[   46.489111][ T3760] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[   46.688625][ T3847] netlink: 'syz.4.114': attribute type 12 has an invalid length.
[   46.712883][  T899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.794095][  T295] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[   46.813810][  T899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.835562][  T295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[   46.858370][ T3793] veth0_vlan: entered promiscuous mode
[   46.884179][  T295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[   46.910496][  T899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.032019][ T3858] loop4: detected capacity change from 0 to 128
[   47.038753][  T295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[   47.061667][ T3793] veth1_vlan: entered promiscuous mode
[   47.154754][ T3858] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   47.162673][ T3858] FAT-fs (loop4): Filesystem has been set read-only
[   47.169731][ T3858] bio_check_eod: 8 callbacks suppressed
[   47.169748][ T3858] syz.4.119: attempt to access beyond end of device
[   47.169748][ T3858] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   47.199594][ T3858] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   47.207598][ T3858] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   47.292076][  T899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.293702][ T3858] syz.4.119: attempt to access beyond end of device
[   47.293702][ T3858] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.315999][ T3858] syz.4.119: attempt to access beyond end of device
[   47.315999][ T3858] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.410184][ T3793] veth0_macvtap: entered promiscuous mode
[   47.418727][ T3793] veth1_macvtap: entered promiscuous mode
[   47.491078][  T899] bridge_slave_1: left allmulticast mode
[   47.496780][  T899] bridge_slave_1: left promiscuous mode
[   47.502507][  T899] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.517568][ T3871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.123'.
[   47.532823][  T899] bridge_slave_0: left allmulticast mode
[   47.538557][  T899] bridge_slave_0: left promiscuous mode
[   47.544283][  T899] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.660568][  T899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.673428][  T899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.683478][  T899] bond0 (unregistering): Released all slaves
[   47.703947][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'.
[   47.704716][ T3793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.727499][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'.
[   47.743922][ T3793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.765389][ T3863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.791134][ T3878] vlan2: entered allmulticast mode
[   47.797127][ T3879] netlink: 332 bytes leftover after parsing attributes in process `syz.0.126'.
[   47.801799][ T3878] dummy0: entered allmulticast mode
[   47.821421][ T3863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.839914][  T899] hsr_slave_0: left promiscuous mode
[   47.846014][  T899] hsr_slave_1: left promiscuous mode
[   47.852566][ T3883] netlink: 'syz.3.127': attribute type 1 has an invalid length.
[   47.858656][  T899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.860279][ T3883] netlink: 'syz.3.127': attribute type 4 has an invalid length.
[   47.867773][  T899] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.875334][ T3883] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.127'.
[   47.892584][  T899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.900083][  T899] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.911189][ T3883] netlink: 'syz.3.127': attribute type 1 has an invalid length.
[   47.919022][ T3883] netlink: 'syz.3.127': attribute type 4 has an invalid length.
[   47.926667][ T3883] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.127'.
[   47.944564][  T899] veth1_macvtap: left promiscuous mode
[   47.952205][  T899] veth0_macvtap: left promiscuous mode
[   47.968717][  T899] veth1_vlan: left promiscuous mode
[   47.978540][ T3890] loop3: detected capacity change from 0 to 512
[   47.984444][  T899] veth0_vlan: left promiscuous mode
[   48.008375][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.021379][ T3890] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.117446][  T899] team0 (unregistering): Port device team_slave_1 removed
[   48.128249][  T899] team0 (unregistering): Port device team_slave_0 removed
[   48.175288][ T3863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.184805][ T3863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.212756][ T3888] netlink: 128 bytes leftover after parsing attributes in process `syz.4.130'.
[   48.221776][ T3888] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   48.383226][ T3909] mmap: syz.4.134 (3909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   48.529596][ T3890] Set syz1 is full, maxelem 65536 reached
[   48.637502][ T3924] loop4: detected capacity change from 0 to 512
[   48.664763][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.697031][ T3924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.761303][ T3924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.781514][ T3930] infiniband syz0: set active
[   48.786227][ T3930] infiniband syz0: added bond_slave_0
[   48.823779][ T3930] RDS/IB: syz0: added
[   48.883617][ T3930] smc: adding ib device syz0 with port count 1
[   48.902639][ T3930] smc:    ib device syz0 port 1 has no pnetid
[   48.930198][ T3924] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.971717][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.449816][ T3962] Set syz1 is full, maxelem 65536 reached
[   50.568235][   T29] kauditd_printk_skb: 58 callbacks suppressed
[   50.568251][   T29] audit: type=1400 audit(1765017369.257:479): avc:  denied  { unlink } for  pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   50.630078][ T4021] Driver unsupported XDP return value 0 on prog  (id 115) dev N/A, expect packet loss!
[   50.643787][   T29] audit: type=1400 audit(1765017369.307:480): avc:  denied  { module_request } for  pid=4020 comm="syz.0.155" kmod="crypto-ccm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   50.755278][ T4035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4035 comm=syz.5.157
[   50.799756][   T29] audit: type=1400 audit(1765017369.487:481): avc:  denied  { setopt } for  pid=4040 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.819933][   T29] audit: type=1400 audit(1765017369.507:482): avc:  denied  { write } for  pid=4040 comm="" path="socket:[7364]" dev="sockfs" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.843276][ T4035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.157'.
[   50.934891][   T29] audit: type=1400 audit(1765017369.617:483): avc:  denied  { create } for  pid=4046 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.032237][   T29] audit: type=1400 audit(1765017369.647:484): avc:  denied  { setopt } for  pid=4046 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.051526][   T29] audit: type=1400 audit(1765017369.677:485): avc:  denied  { mount } for  pid=4048 comm="syz.5.163" name="/" dev="ramfs" ino=7378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   51.069897][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'.
[   51.073639][   T29] audit: type=1326 audit(1765017369.687:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.4.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f119d0cf749 code=0x0
[   51.100208][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'.
[   51.115521][ T4047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.148808][   T29] audit: type=1400 audit(1765017369.837:487): avc:  denied  { bind } for  pid=4046 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.150417][ T1038] kernel write not supported for file bpf-prog (pid: 1038 comm: kworker/0:2)
[   51.215571][   T29] audit: type=1400 audit(1765017369.837:488): avc:  denied  { mounton } for  pid=4046 comm="syz.0.162" path="/32/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   51.328394][ T4072] loop5: detected capacity change from 0 to 512
[   51.356365][ T4072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.393199][ T4078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'.
[   51.422924][ T4072] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.448207][ T4072] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.172: corrupted xattr block 6: invalid header
[   51.489558][ T4072] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[   51.499591][ T4072] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.172: corrupted xattr block 6: invalid header
[   51.512923][ T4072] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[   51.522263][ T4072] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.172: corrupted xattr block 6: invalid header
[   51.536828][ T4072] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[   51.546132][ T4072] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.172: corrupted xattr block 6: invalid header
[   51.564239][ T4072] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[   51.583969][ T4072] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.172: corrupted xattr block 6: invalid header
[   51.585730][ T4081] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   51.606226][ T4072] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=12
[   51.636918][ T4072] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.172: corrupted xattr block 6: invalid header
[   51.683364][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.983512][ T4124] netlink: 'syz.3.190': attribute type 10 has an invalid length.
[   51.995936][ T4124] 8021q: adding VLAN 0 to HW filter on device team0
[   52.005755][ T4124] bond0: (slave team0): Enslaving as an active interface with an up link
[   52.021412][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   52.276414][ T4127] infiniband syz!: set active
[   52.281222][ T4127] infiniband syz!: added team_slave_0
[   52.346992][ T4127] RDS/IB: syz!: added
[   52.353409][ T4127] smc: adding ib device syz! with port count 1
[   52.359918][ T4127] smc:    ib device syz! port 1 has no pnetid
[   52.366343][ T4141] capability: warning: `syz.3.196' uses deprecated v2 capabilities in a way that may be insecure
[   53.624959][ T4181] IPv6: Can't replace route, no match found
[   54.203815][ T4198] loop3: detected capacity change from 0 to 2048
[   54.219511][ T4198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   54.352453][ T4204] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   54.387863][ T4204] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 570 with error 28
[   54.400283][ T4204] EXT4-fs (loop3): This should not happen!! Data will be lost
[   54.400283][ T4204] 
[   54.410032][ T4204] EXT4-fs (loop3): Total free blocks count 0
[   54.416078][ T4204] EXT4-fs (loop3): Free/Dirty block details
[   54.421998][ T4204] EXT4-fs (loop3): free_blocks=2415919104
[   54.428314][ T4204] EXT4-fs (loop3): dirty_blocks=576
[   54.433527][ T4204] EXT4-fs (loop3): Block reservation details
[   54.439555][ T4204] EXT4-fs (loop3): i_reserved_data_blocks=36
[   54.491237][ T4208] geneve2: entered promiscuous mode
[   54.496484][ T4208] geneve2: entered allmulticast mode
[   54.638285][ T3862] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[   54.757268][ T4193] syz.4.219 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   54.768444][ T4193] CPU: 0 UID: 0 PID: 4193 Comm: syz.4.219 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   54.768479][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   54.768534][ T4193] Call Trace:
[   54.768544][ T4193]  <TASK>
[   54.768552][ T4193]  __dump_stack+0x1d/0x30
[   54.768581][ T4193]  dump_stack_lvl+0xe8/0x140
[   54.768604][ T4193]  dump_stack+0x15/0x1b
[   54.768629][ T4193]  dump_header+0x81/0x240
[   54.768650][ T4193]  oom_kill_process+0x295/0x350
[   54.768678][ T4193]  out_of_memory+0x979/0xb80
[   54.768702][ T4193]  try_charge_memcg+0x610/0xa10
[   54.768812][ T4193]  charge_memcg+0x51/0xc0
[   54.768853][ T4193]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   54.768934][ T4193]  __read_swap_cache_async+0x17b/0x2d0
[   54.769039][ T4193]  swap_cluster_readahead+0x262/0x3c0
[   54.769170][ T4193]  swapin_readahead+0xde/0x820
[   54.769203][ T4193]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   54.769231][ T4193]  ? lruvec_stat_mod_folio+0xd6/0x120
[   54.769392][ T4193]  ? __rcu_read_unlock+0x4f/0x70
[   54.769419][ T4193]  ? swap_cache_get_folio+0x277/0x280
[   54.769529][ T4193]  do_swap_page+0x2b4/0x21e0
[   54.769571][ T4193]  ? css_rstat_updated+0xb7/0x240
[   54.769697][ T4193]  ? __pfx_default_wake_function+0x10/0x10
[   54.769745][ T4193]  handle_mm_fault+0x9d8/0x2c60
[   54.769878][ T4193]  do_user_addr_fault+0x630/0x1080
[   54.769920][ T4193]  exc_page_fault+0x62/0xa0
[   54.769956][ T4193]  asm_exc_page_fault+0x26/0x30
[   54.769995][ T4193] RIP: 0033:0x7f119cfa59ec
[   54.770021][ T4193] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   54.770044][ T4193] RSP: 002b:00007ffcae6ddc80 EFLAGS: 00010206
[   54.770107][ T4193] RAX: 0000000000000000 RBX: 00007f119d325fa0 RCX: 0000000000000000
[   54.770123][ T4193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555657b3808
[   54.770139][ T4193] RBP: 00007f119d327da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   54.770223][ T4193] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000d574
[   54.770235][ T4193] R13: 00007ffcae6ddd70 R14: ffffffffffffffff R15: 00007ffcae6ddd90
[   54.770254][ T4193]  </TASK>
[   54.770268][ T4193] memory: usage 307200kB, limit 307200kB, failcnt 178
[   54.991105][ T4193] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[   54.999072][ T4193] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[   55.006360][ T4193] Memory cgroup stats for /syz4:
[   55.009992][ T4227] bridge0: port 3(gretap0) entered blocking state
[   55.021433][ T4227] bridge0: port 3(gretap0) entered disabled state
[   55.030886][ T4193] cache 0
[   55.033844][ T4193] rss 0
[   55.036679][ T4193] shmem 0
[   55.039648][ T4193] mapped_file 0
[   55.043171][ T4193] dirty 0
[   55.046124][ T4193] writeback 4096
[   55.049780][ T4193] workingset_refault_anon 1
[   55.054285][ T4193] workingset_refault_file 0
[   55.058810][ T4193] swap 176128
[   55.062097][ T4193] swapcached 8192
[   55.065732][ T4193] pgpgin 7395
[   55.069061][ T4193] pgpgout 7393
[   55.072557][ T4193] pgfault 9585
[   55.075979][ T4193] pgmajfault 2
[   55.079418][ T4193] inactive_anon 8192
[   55.083323][ T4193] active_anon 0
[   55.086797][ T4193] inactive_file 0
[   55.090458][ T4193] active_file 0
[   55.093936][ T4193] unevictable 0
[   55.097403][ T4193] hierarchical_memory_limit 314572800
[   55.102803][ T4193] hierarchical_memsw_limit 9223372036854771712
[   55.109004][ T4193] total_cache 0
[   55.112472][ T4193] total_rss 0
[   55.115768][ T4193] total_shmem 0
[   55.119356][ T4193] total_mapped_file 0
[   55.123379][ T4193] total_dirty 0
[   55.124350][ T4227] gretap0: entered allmulticast mode
[   55.126830][ T4193] total_writeback 4096
[   55.126842][ T4193] total_workingset_refault_anon 1
[   55.126855][ T4193] total_workingset_refault_file 0
[   55.126865][ T4193] total_swap 176128
[   55.133930][ T4227] gretap0: entered promiscuous mode
[   55.136240][ T4193] total_swapcached 8192
[   55.136252][ T4193] total_pgpgin 7395
[   55.136262][ T4193] total_pgpgout 7393
[   55.136269][ T4193] total_pgfault 9585
[   55.136277][ T4193] total_pgmajfault 2
[   55.142519][ T4227] bridge0: port 3(gretap0) entered blocking state
[   55.146371][ T4193] total_inactive_anon 8192
[   55.146383][ T4193] total_active_anon 0
[   55.146394][ T4193] total_inactive_file 0
[   55.146404][ T4193] total_active_file 0
[   55.150288][ T4227] bridge0: port 3(gretap0) entered forwarding state
[   55.155419][ T4193] total_unevictable 0
[   55.155432][ T4193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.219,pid=4193,uid=0
[   55.223342][ T4193] Memory cgroup out of memory: Killed process 4193 (syz.4.219) total-vm:95884kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   55.325456][ T4239] loop3: detected capacity change from 0 to 512
[   55.370644][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.397888][ T4239] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.498549][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.557811][ T4194] syz.4.219 (4194) used greatest stack depth: 7448 bytes left
[   55.595844][ T4256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.237'.
[   55.643520][   T29] kauditd_printk_skb: 164 callbacks suppressed
[   55.643538][   T29] audit: type=1400 audit(1765017374.327:653): avc:  denied  { read } for  pid=4260 comm="syz.0.238" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   55.673137][   T29] audit: type=1400 audit(1765017374.327:654): avc:  denied  { open } for  pid=4260 comm="syz.0.238" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   55.730739][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   55.738406][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   55.757800][ T3377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   55.866527][ T3377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   55.889558][   T29] audit: type=1400 audit(1765017374.517:655): avc:  denied  { write } for  pid=4266 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   55.935848][   T29] audit: type=1400 audit(1765017374.617:656): avc:  denied  { create } for  pid=4272 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   55.977793][   T29] audit: type=1400 audit(1765017374.647:657): avc:  denied  { read } for  pid=4272 comm="syz.3.242" path="socket:[8268]" dev="sockfs" ino=8268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   56.097987][ T4277] netlink: 'syz.0.244': attribute type 1 has an invalid length.
[   56.130694][ T4277] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.144096][ T4277] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   56.154084][ T4277] bond1: entered allmulticast mode
[   56.165557][ T4277] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   56.174664][ T3495] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   56.394511][   T29] audit: type=1400 audit(1765017375.077:658): avc:  denied  { write } for  pid=4292 comm="syz.3.249" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   56.448455][ T4293] loop3: detected capacity change from 0 to 512
[   56.465157][ T4293] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   56.484464][ T4293] EXT4-fs (loop3): orphan cleanup on readonly fs
[   56.513375][ T4293] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.249: corrupted inode contents
[   56.588853][ T4293] EXT4-fs (loop3): Remounting filesystem read-only
[   56.595605][ T4293] EXT4-fs (loop3): 1 truncate cleaned up
[   56.601496][ T3863] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.612073][ T3863] Quota error (device loop3): write_blk: dquota write failed
[   56.619524][ T3863] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[   56.629552][ T3863] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.640127][ T3863] Quota error (device loop3): write_blk: dquota write failed
[   56.647682][ T3863] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[   56.657838][ T3863] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   56.690473][ T4293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.754868][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.821109][ T4265] syz.4.239 (4265) used greatest stack depth: 7352 bytes left
[   57.005723][ T4324] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[   57.029902][ T4324] team0: Port device dummy0 added
[   57.039099][ T4324] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[   57.050202][ T4324] team0: Port device dummy0 removed
[   57.066663][ T4324] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   57.672061][ T4353] loop0: detected capacity change from 0 to 2048
[   57.683471][ T4345] loop4: detected capacity change from 0 to 512
[   57.699380][ T4353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   57.724599][ T4345] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   57.738030][ T4345] EXT4-fs (loop4): orphan cleanup on readonly fs
[   57.745377][ T4352] netlink: 'syz.3.264': attribute type 1 has an invalid length.
[   57.765066][ T4345] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.263: corrupted inode contents
[   57.790329][ T4345] EXT4-fs (loop4): Remounting filesystem read-only
[   57.797372][ T4345] EXT4-fs (loop4): 1 truncate cleaned up
[   57.804191][ T3863] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.814807][ T3863] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.837203][ T4352] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.855781][ T4358] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   57.872478][ T4361] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   57.892448][ T3863] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   57.902713][ T4358] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 354 with error 28
[   57.915185][ T4358] EXT4-fs (loop0): This should not happen!! Data will be lost
[   57.915185][ T4358] 
[   57.924847][ T4358] EXT4-fs (loop0): Total free blocks count 0
[   57.930875][ T4358] EXT4-fs (loop0): Free/Dirty block details
[   57.936782][ T4358] EXT4-fs (loop0): free_blocks=2415919104
[   57.942537][ T4358] EXT4-fs (loop0): dirty_blocks=368
[   57.947945][ T4358] EXT4-fs (loop0): Block reservation details
[   57.953965][ T4358] EXT4-fs (loop0): i_reserved_data_blocks=23
[   57.962606][ T4361] bond1: entered allmulticast mode
[   58.048263][ T3863] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[   58.089227][ T4345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   58.217465][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.262160][ T4375] netlink: 'syz.4.271': attribute type 10 has an invalid length.
[   58.279522][ T4375] team0: Port device dummy0 added
[   58.297496][ T4375] netlink: 'syz.4.271': attribute type 10 has an invalid length.
[   58.361525][ T4375] team0: Port device dummy0 removed
[   58.370183][ T4375] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   59.461545][ T4401] loop0: detected capacity change from 0 to 512
[   59.557876][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   59.588761][ T4401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.605616][ T4401] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.712088][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.918080][ T4409] netlink: 'syz.4.283': attribute type 1 has an invalid length.
[   59.943755][ T4412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.293'.
[   59.995920][ T4409] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.022587][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'.
[   60.040403][ T4409] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   60.088071][ T4409] bond1: entered allmulticast mode
[   60.131460][ T4415] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   60.322236][ T4420] loop3: detected capacity change from 0 to 128
[   60.481117][ T4435] loop4: detected capacity change from 0 to 2048
[   60.776467][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   60.842645][   T29] kauditd_printk_skb: 32 callbacks suppressed
[   60.842663][   T29] audit: type=1400 audit(1765017379.527:683): avc:  denied  { add_name } for  pid=4418 comm="syz.4.285" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.880773][ T4450] loop5: detected capacity change from 0 to 2048
[   60.917518][   T29] audit: type=1400 audit(1765017379.597:684): avc:  denied  { sqpoll } for  pid=4451 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   60.981887][ T4452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'.
[   60.991018][ T4452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'.
[   61.008322][   T29] audit: type=1400 audit(1765017379.677:685): avc:  denied  { read } for  pid=4446 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   61.017011][ T4449] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   61.046009][ T4449] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 248 with max blocks 1226 with error 28
[   61.058844][ T4449] EXT4-fs (loop4): This should not happen!! Data will be lost
[   61.058844][ T4449] 
[   61.068552][ T4449] EXT4-fs (loop4): Total free blocks count 0
[   61.074553][ T4449] EXT4-fs (loop4): Free/Dirty block details
[   61.080496][ T4449] EXT4-fs (loop4): free_blocks=2415919104
[   61.086239][ T4449] EXT4-fs (loop4): dirty_blocks=1488
[   61.091576][ T4449] EXT4-fs (loop4): Block reservation details
[   61.097580][ T4449] EXT4-fs (loop4): i_reserved_data_blocks=93
[   61.166996][   T29] audit: type=1326 audit(1765017379.847:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.231567][   T29] audit: type=1326 audit(1765017379.877:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.255005][   T29] audit: type=1326 audit(1765017379.887:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.278522][   T29] audit: type=1326 audit(1765017379.887:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.301796][   T29] audit: type=1326 audit(1765017379.887:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.325194][   T29] audit: type=1326 audit(1765017379.887:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.348367][   T29] audit: type=1326 audit(1765017379.887:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659b28f749 code=0x7ffc0000
[   61.465104][ T4458] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[   61.554241][ T4519] loop5: detected capacity change from 0 to 512
[   61.559308][ T4516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'.
[   61.608943][ T4516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4516 comm=syz.2.298
[   61.640526][ T4524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'.
[   61.660992][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[   61.678900][ T4519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.695339][ T4516] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   61.774456][ T4519] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.109576][ T4559] netlink: 'syz.0.303': attribute type 1 has an invalid length.
[   62.190216][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[   62.230996][ T4559] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.302564][ T4561] bond2 (unregistering): Released all slaves
[   62.378693][ T4570] netlink: 'syz.3.304': attribute type 3 has an invalid length.
[   62.416554][ T4570] netlink: 'syz.3.304': attribute type 3 has an invalid length.
[   62.482561][ T4545] ==================================================================
[   62.490726][ T4545] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   62.498703][ T4545] 
[   62.501049][ T4545] write to 0xffff888105d7ae9c of 4 bytes by task 4519 on cpu 1:
[   62.508740][ T4545]  xas_set_mark+0x12b/0x140
[   62.513282][ T4545]  __folio_start_writeback+0x155/0x340
[   62.518807][ T4545]  ext4_bio_write_folio+0x5ad/0x9f0
[   62.524032][ T4545]  mpage_process_page_bufs+0x4a1/0x620
[   62.529497][ T4545]  mpage_prepare_extent_to_map+0x7a3/0xc20
[   62.535315][ T4545]  ext4_do_writepages+0x6fe/0x27e0
[   62.540448][ T4545]  ext4_writepages+0x179/0x300
[   62.545391][ T4545]  do_writepages+0x1c6/0x310
[   62.549992][ T4545]  file_write_and_wait_range+0x156/0x2c0
[   62.555632][ T4545]  generic_buffers_fsync_noflush+0x45/0x130
[   62.561528][ T4545]  ext4_sync_file+0x1ab/0x690
[   62.566212][ T4545]  vfs_fsync_range+0x10d/0x130
[   62.570976][ T4545]  ext4_buffered_write_iter+0x34f/0x3c0
[   62.576543][ T4545]  ext4_file_write_iter+0x387/0xf60
[   62.581755][ T4545]  iter_file_splice_write+0x66b/0xa20
[   62.587134][ T4545]  direct_splice_actor+0x156/0x2a0
[   62.592249][ T4545]  splice_direct_to_actor+0x312/0x680
[   62.597623][ T4545]  do_splice_direct+0xda/0x150
[   62.602400][ T4545]  do_sendfile+0x380/0x650
[   62.606821][ T4545]  __x64_sys_sendfile64+0x105/0x150
[   62.612027][ T4545]  x64_sys_call+0x2db1/0x3000
[   62.616709][ T4545]  do_syscall_64+0xd8/0x2a0
[   62.621308][ T4545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.627199][ T4545] 
[   62.629517][ T4545] read to 0xffff888105d7ae9c of 4 bytes by task 4545 on cpu 0:
[   62.637064][ T4545]  __writeback_single_inode+0x201/0x7c0
[   62.642620][ T4545]  writeback_single_inode+0x16d/0x3f0
[   62.648088][ T4545]  sync_inode_metadata+0x5b/0x90
[   62.653034][ T4545]  generic_buffers_fsync_noflush+0xee/0x130
[   62.658929][ T4545]  ext4_sync_file+0x1ab/0x690
[   62.663621][ T4545]  vfs_fsync_range+0x10d/0x130
[   62.668386][ T4545]  ext4_buffered_write_iter+0x34f/0x3c0
[   62.673958][ T4545]  ext4_file_write_iter+0x387/0xf60
[   62.679176][ T4545]  iter_file_splice_write+0x66b/0xa20
[   62.684584][ T4545]  direct_splice_actor+0x156/0x2a0
[   62.689700][ T4545]  splice_direct_to_actor+0x312/0x680
[   62.695096][ T4545]  do_splice_direct+0xda/0x150
[   62.699862][ T4545]  do_sendfile+0x380/0x650
[   62.704291][ T4545]  __x64_sys_sendfile64+0x105/0x150
[   62.709519][ T4545]  x64_sys_call+0x2db1/0x3000
[   62.714220][ T4545]  do_syscall_64+0xd8/0x2a0
[   62.718738][ T4545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.724726][ T4545] 
[   62.727055][ T4545] value changed: 0x0a000021 -> 0x04000021
[   62.732760][ T4545] 
[   62.735074][ T4545] Reported by Kernel Concurrency Sanitizer on:
[   62.741305][ T4545] CPU: 0 UID: 0 PID: 4545 Comm: syz.5.296 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.750932][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.760983][ T4545] ==================================================================
[   63.180199][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.547753][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!