last executing test programs:

9m43.030936346s ago: executing program 32 (id=393):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x9, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9m38.569058218s ago: executing program 33 (id=576):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xc}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

9m13.881176061s ago: executing program 34 (id=984):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x400}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

8m44.118358605s ago: executing program 35 (id=1552):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r1, 0x0, 0x0, 0x40000122, 0x0, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

8m4.28277336s ago: executing program 36 (id=2226):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)

7m52.419624107s ago: executing program 37 (id=2405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x11, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800)

7m24.775631094s ago: executing program 38 (id=2881):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18a0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)

7m23.381327759s ago: executing program 39 (id=2904):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000)
unshare(0x2c020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

6m46.051981013s ago: executing program 40 (id=3433):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

6m29.602514235s ago: executing program 41 (id=3447):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

6m19.36877003s ago: executing program 4 (id=3778):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140), 0x2, 0x475, &(0x7f00000009c0)="$eJzs3M1vFOUfAPDvzLblx2v7Q6OCqFVibHxpaUHl4EWjiQeMJnrAm7UthFCooTURQqQagxcTQ6Jn9WjiX+DNi1FPJl71bkiIcgE91czsTNldutsWtruF/XySYZ9n5pl9nm/n7Zl5ZgmgZw1n/yQROyLi94gYrGbrCwxXP65fPT/1z9XzU0ksLb35V5KXu3b1/FRZtFxve5EZSSPST5KiknrzZ8+dnJydnTlT5McWTr03Nn/23DMnTk0enzk+c3ri8OFDB8eff27i2bbEmcV1be+Hc/v2vPr2pdemjl569+fvsvbuKJbXxtFgS8Pnmg1ngf+9lFuemVY/Hl93BJvbzpp00tfFhrAulYjINld/fvwPRiVubLzBeOXjrjYO2FDZtanFhW1xCbiLJdHtFgDdUV7os/vfcupQ12NTuPJi9QYoi/t6MVWX9JW36vm90c4Nqn84Io4u/vtVNkXr5xAAAG3x2dSXR+Lplfp/adxXU25XMYYyFBH/j4jdEXFPMSiSRCxmZe6PiAdWrzKtzTQODd3c/0kv32psa5H1/14oxrbq+3/LzRyqFLmdefz9ybETszMHir/JSPRvyfLjLer44eXfPm+2rLb/l01Z/WVfsGjH5b6GB3TTkwuTeae0Da58FLG3b6X4k+WRgCQi9kTE3vV99a4yceLJb/c1K7R6/C20YZxp6ZuIJ6rbfzEa4i8lrccnx/4XszMHxsq94ma//HrxjWb131b8bZBt/231+39jkaGkdrx2fv11XPzj06b3NLe6/w8kb+XrDhTzPphcWDgzHjGQHMnzdfMnbqxb5svyWfwj+1c+/ncX62TxPxgR2U78UEQ8HBGPFG1/NCIei4j9LeL/6aXmy+rj37qjG9t/uuH8tzVfsrz/N2z/9ScqJ3/8fuXav35nbdv/UJ4aKebk579VrLWBt/nnAwAAgDtCmr8Dn6Sjy+k0HR2tvsN/b2xLZ+fmF546Nvf+6enqu/JD0Z+WT7oGa56HjieLxTdW8xPFs+Jy+cHiufEXla15fnRqbna6y7FDr9ve5PjP/FnpduuADbfSONrEQBcaAnRc4/Gf1mcvvN7JxgAd1fQ9mm2dbQfQeau8R5d2qh1A5/n/WqB3rXT8X2jIGwuAu5PrP/Quxz/0rr5wEoBe5dCHnrTaj+Qrt/nbf4k7LpGsrXCk3W/q5kj0R0RbvnBgU4RTJLp9ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiP/wIAAP//mRbqfg==")
socket$netlink(0x10, 0x3, 0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x7fffdfff, 0x1)
getdents64(r0, 0x0, 0x0)

6m19.104377069s ago: executing program 4 (id=3780):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@orlov}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0xa2a41b4}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000004c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)

6m18.700528721s ago: executing program 4 (id=3783):
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x2, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff, 0x0, 0x2, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}, 0x24000008)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010)
setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8)

6m17.725114783s ago: executing program 4 (id=3791):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

6m17.472052421s ago: executing program 4 (id=3797):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0x0, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0)

6m16.677046466s ago: executing program 4 (id=3807):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={r3, 0xffa1}, &(0x7f00000004c0)=0x8)

6m5.717236824s ago: executing program 3 (id=3896):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m5.51928583s ago: executing program 3 (id=3899):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2224, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15)

6m5.322640616s ago: executing program 3 (id=3901):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m5.266736258s ago: executing program 3 (id=3902):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@nogrpid}, {@orlov}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$nvram(0xffffffffffffff9c, 0x0, 0xae582, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)

6m4.992838317s ago: executing program 3 (id=3903):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$eJzs2s9rXFUUB/DzaiUxNZ2Iv2hBvOhC3TyauHXRIC2IAUUboQrSV/OiQ54zIW8IjIidlW79E1yLS3eCdOkmG/8CF+4CkmUF8YmZMc0MI6H4Y0L7+WzmMOd+Z87lzgx3MfuvfPnx1madbxa9OJNlkV2OQdzJYinOxF8G8dIL13945u3r776+urZ25a2Urq5eW15JKZ1/9vv3Pv3mudu9c+98e/67udhben//YOXnvaf2Luz/fu2jdp3adep0e6lIN7vdXnGzKtNGu97KU3qzKou6TO1OXe6M9Ter7vZ2PxWdjcWF7Z2yrlPR6aetsp963dTb6afiw6LdSXmep8WF4J9Y//pO08RB8/CNaJrmka/i3O1Y/ClakT2WsscvZ0/eyJ4eZBcOmqY161H5Tzj/B9uxH/X5iOqL3fXd9eHjsL+6Ge2oooxL0Yrf4s+Pyciwvvra2pVL6dBSfF7dGuVv7a4/NJ5fjlYsTc8vD/NpPD8XC8fzK9GKJyIbjT2WX5man48Xnz+Wz6MVP34Q3ahi4/AF7uY/W07p1TfWJvIXD9cBANxv8nRk6v0tz/+uP8zfw/1w4n51Ni6ene3eiaj7n2wVVVXunFTMx8lrFIqTivmIOAVjHBW/jL4IE625f+MtYhBx9MzLj56WLU8UvzZNM214HgB3D33WkwAAAAAAAAAAAHAv/o8/GM56jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn2RwAAAP//lu3JvA==")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x28541, 0x140)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xfd, 0x1c7, &(0x7f0000000640)="$eJzs2z9rE3EYB/DnapqmdUgGJ3G40Sk0fQUNUkEMCEoGBUGxDUhPChYCOthuDr4BR1+Mg6u+EscOwklzadKEVNJgEmg+nyUPd/fN70+4JE8gr+69O9w/Ou687PyISpLE2m6kcZZELdbiwmkAADfJWZ7H7zzP843T2PwWeZ4ve0YAwLz5/AeA1fPs+YvHzVZr72maViKyz912t108FuebnXgbWRzEdlTjT5x/Qegr6oePWnvbaU8tvmQn/fxJt31rNN+IatQm5xtFPh3Nr8fW5fxOVOPO5PzOxHw57pcH+fWIqMavN3EUWezHeXaY/9RI0wdPWmP5273rAAAA4CaopwO9/r0co/17vT56ftgfF/lmMvXvA2P9dSnulpa7dgBYVccfPh6+zrKD9zMUlf5zzBifrvi5VQwyxyH+U3GxpYMju4vYn+sW5cszHCs25zzV0viR0ryXnETEzPHkyo2aqvgeEddIbfzrmsrsqxi8uNPf1L1iCW9GwEIN7/5lzwQAAAAAAAAAAAAAALjKIv5zNnHgrwtfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr5G8AAAD//2/sgCc=")
openat$dir(0xffffffffffffff9c, 0x0, 0x109000, 0x9b)

6m3.93202842s ago: executing program 3 (id=3905):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000900000022bf000000000004", @ANYRES32, @ANYBLOB="02"], 0x50)
io_uring_enter(r0, 0xa7b, 0xcc80, 0x16, 0x0, 0x0)

6m3.868790092s ago: executing program 42 (id=3905):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000900000022bf000000000004", @ANYRES32, @ANYBLOB="02"], 0x50)
io_uring_enter(r0, 0xa7b, 0xcc80, 0x16, 0x0, 0x0)

6m1.596329374s ago: executing program 43 (id=3807):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={r3, 0xffa1}, &(0x7f00000004c0)=0x8)

5m57.773480376s ago: executing program 1 (id=3968):
close(0x3)
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970adf4acdadd04357bdd44bc926d0adef887b2e25c2f435", 0xe7}], 0x1}}], 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
close(0x4)

5m57.722723347s ago: executing program 1 (id=3970):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
shutdown(r0, 0x0)
connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000001c0)="00632833018fdc6c5150b91caaad3a4345e4f2100c3c912697b8b1db058c42a5730c5ece71c37dcd2f6016ea845d75b31a6fa18692426ae30a0fbc", 0xffffffffffffff11, 0x2400e884, 0x0, 0x0)

5m57.64419892s ago: executing program 1 (id=3972):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)

5m57.606899661s ago: executing program 1 (id=3974):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

5m57.501625794s ago: executing program 1 (id=3975):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0xf15, 0x4)

5m57.287070952s ago: executing program 1 (id=3977):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x3c, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {0x7, 0xf}, {0x0, 0xe}}, [{0x8, 0xb, 0xe437}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40031}, 0x98)

5m57.236408733s ago: executing program 44 (id=3977):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x3c, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {0x7, 0xf}, {0x0, 0xe}}, [{0x8, 0xb, 0xe437}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40031}, 0x98)

5m32.491804288s ago: executing program 9 (id=4262):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x9, 0x7)
fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x17, "d4ff638a9b88"}, 0x8, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

5m32.281384805s ago: executing program 9 (id=4269):
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x10000)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x16, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)

5m32.157873559s ago: executing program 9 (id=4272):
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r2})
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m32.012532994s ago: executing program 9 (id=4273):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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")
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002600)='blkio.bfq.time\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)

5m31.547181418s ago: executing program 9 (id=4280):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x4}}, 0x2e)

5m30.86206026s ago: executing program 9 (id=4294):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4)

5m30.825128111s ago: executing program 45 (id=4294):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4)

4m43.821092753s ago: executing program 8 (id=5104):
r0 = timerfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x20000}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timerfd_settime(r0, 0x3, &(0x7f0000000640)={{0x0, 0x3938700}}, 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0xa00000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x1ff, 0x0, 0x3})

4m43.746953495s ago: executing program 8 (id=5106):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x9, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20084)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8})

4m43.173329984s ago: executing program 8 (id=5113):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x7, 0x5dd1}, 0xc)

4m43.106376546s ago: executing program 8 (id=5114):
mkdir(&(0x7f0000000080)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41)

4m43.009412199s ago: executing program 8 (id=5116):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1003f}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m42.517040304s ago: executing program 8 (id=5126):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x31, 0xffffffff, 0x5, 0x7}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14)

4m42.508484645s ago: executing program 46 (id=5126):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x31, 0xffffffff, 0x5, 0x7}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14)

3.429734471s ago: executing program 0 (id=7902):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054)

3.087275162s ago: executing program 7 (id=7904):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x5, 0x476, &(0x7f00000006c0)="$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")
syz_open_procfs(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="dc0000001a00010000000000000000001c000000000000000000000084001300000004000000040000040f000000010000000000000000000000000000000200"/73, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0xdc}}, 0x0)

3.086627732s ago: executing program 6 (id=7905):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x128a, &(0x7f0000000340)="$eJzs3U1rJEUYAOB3ksnnmkzUdXUXxEIvijBucvDkJcguiAElmgX11GsmOmTyQWYIzCLuePIk+DNEPXoTxD+QixfPgiCSi8c9iC3JTNYkk2QnJpPA8jyXLqrrrapOdRpq6JfefuPrleWlenkpa8RAoRDF9aEoPkiRYiAGo60Vr9z59bfn3/vgw7dn5+Zuzad0e/b96ddTSpMv/PTRZ9+/+HPjyp0fJn8cia2pge2/Zn7furZ1ffuf76JaT9V6Wl1rpCzdXVtrZHdrlbRYrS+XU3q3VsnqlVRdrVc2Dpxfqq2trzdTtro4Mb6+UanXU7baTMuVZmoUUmOjmbJPsupqKpfLaWI8OIuFbx/keR6R50MxHHme52MxHlfiiZiIySjFVDwZT8XTcTWeiWvxbDwX13dbXfa8AQAAAAAAAAAAAAAAAAAA4PHyiPz/gvx/AAAAAAAAAAAAAAAAAAAA6L/D+f/FCN//BwAAAAAAAAAAAAAAAAAAgAv2iO//H8r/f1X+PwAAAAAAAAAAAAAAAAAAAPTDaPswn9JoxMqXmwubC+1ju352KapRi0rcjFL8HbvZ/23t8u235m7dTLum4rWV+534+5sLgwfjp4dKMVU4Mn56LCJSSgfjR2J8f/xMlOLq0ePPtMc/FD8aL7+0E/9FO74cpfjl41iLWixGFDpXvxv/+XRKb74zN3Yw/sZOu2MN9nlZAAAA4DyV00MP9++tvf17q9PoyP19+1Rnf546LQsn/D5waH9ejBvFy7pq9tSb95azWq2y8T8Lw8f3M3y2nrsKhYjIYn/N5Pgf8zuD99jP3u12TvPZVxg87w5PLAyd3OYMaxrFnv+YPU6199XpTL51uCYvRZx29D+/2VczeurwsxUGOrdZVmv1fLNFK8/7OrGuf8ax5r3lkZOijn9mFPr8TOLi/Lfolz0TAAAAAAAAAAAATuPIt//GIqLrfcBPu2r2Xg8/GN7d8/Gjf3UBVwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAvO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//8gJcpa")
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)

2.728806264s ago: executing program 0 (id=7907):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe)

2.728643864s ago: executing program 7 (id=7908):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0x10000000001, 0x10, 0xffffffffffffffff})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

2.637943316s ago: executing program 5 (id=7909):
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fcntl$getown(0xffffffffffffffff, 0x9)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x20040084)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
timerfd_create(0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x20004000)

2.570482169s ago: executing program 5 (id=7910):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.555345389s ago: executing program 7 (id=7911):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

2.144185512s ago: executing program 2 (id=7912):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x58, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x800)
mkdirat(0xffffffffffffff9c, 0x0, 0x22)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="580100001000130428bd700040000000ffffffff000000000000000000000000e0000001000000000000000000000000462000084e2300040a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d43200000000000000000000000000ffff7f00000100080000000800007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002002000000000000000000000000000fd2100020000000004000000010000000100000000000000f6000000040000000800000000000000ff3400000200047f330000000000000067001200726663343330392863636d2861657329290000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.862561981s ago: executing program 0 (id=7913):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x28)
ptrace(0x10, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
ptrace$cont(0x20, 0x0, 0x5, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x42c40, 0x9a)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")

1.862313521s ago: executing program 5 (id=7914):
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00'})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0xd0, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r1 = syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9a007a, 0x0, 0x3, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
readlinkat(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)=""/155, 0x9b)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"})

1.851837821s ago: executing program 2 (id=7915):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20)

1.677548657s ago: executing program 2 (id=7916):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$sock(r0, 0x0, 0x2004c040)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1.642841358s ago: executing program 0 (id=7917):
ioperm(0x6, 0x9, 0x824)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)

1.642103718s ago: executing program 6 (id=7918):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
syz_open_dev$sg(0x0, 0x508d48d4, 0x40902)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c757365667265652c646f74732c64656275672c646f74732c636865636b3d7374726963742c6e66732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c666c7573682c6e6f646f74732c6e6f64268e732c646f74732c666c7573682c646f74732c64656275672c6e6f646f74732c646f74732c73686f77657865632c646f74732c6e6f646f74732c646f74732c00"], 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1.615980199s ago: executing program 7 (id=7919):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054)

1.597857999s ago: executing program 5 (id=7920):
socket(0x1f, 0x800, 0x80000001)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0xc0c0128e, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000000000004, 0x1, 0x0, 0x6, 0x1d, 0x8, "faf98315e5a114998dfc8d0000000000000004503dc3bd3fe37db1ead4e1307aa633000000000000c8b534464c516bdd8a0f350000d35abd02000040f900", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "07000000fd40f7222239c0340200c7e4162e43ac00", [0x8, 0x8ca9]}})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000720000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

1.545266711s ago: executing program 6 (id=7921):
r0 = syz_open_procfs(0x0, 0x0)
renameat(r0, 0x0, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x2, 0x0, 0x80fd})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)

1.407856045s ago: executing program 6 (id=7922):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0)
creat(&(0x7f0000000840)='./file0\x00', 0x40)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10)
write(r1, &(0x7f0000000040)="2000000012005f0214f9f4070000fbe40a009a9fe8e4f6e68acdf1fe41060000", 0x20)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x65)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, 0x0)

1.351747477s ago: executing program 2 (id=7923):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
fadvise64(r1, 0x2000000001000, 0xd1a6, 0x1)
r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==")
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1400000000000000}, {0xffffffff, 0x0, 0x9, 0xa}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r5 = fcntl$dupfd(r0, 0x0, r2)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8)

1.056541037s ago: executing program 2 (id=7924):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe)

1.055698357s ago: executing program 6 (id=7925):
sched_setscheduler(0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfc, 0x1, 0x0, @remote, @broadcast}, @redirect={0x8, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873720000000008"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xf, r3, 0x20000000002, 0x0)

1.055517437s ago: executing program 7 (id=7926):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x58, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x800)
mkdirat(0xffffffffffffff9c, 0x0, 0x22)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="580100001000130428bd700040000000ffffffff000000000000000000000000e0000001000000000000000000000000462000084e2300040a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d43200000000000000000000000000ffff7f00000100080000000800007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002002000000000000000000000000000fd2100020000000004000000010000000100000000000000f6000000040000000800000000000000ff3400000200047f330000000000000067001200726663343330392863636d2861657329290000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

972.414229ms ago: executing program 7 (id=7927):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x128a, &(0x7f0000000340)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)

700.827578ms ago: executing program 0 (id=7928):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20)

700.455708ms ago: executing program 5 (id=7929):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
gettid()
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000080)={0x38, 0x4, 0x400})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x7, 0x3c, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0xc, [{@private=0xa010101, 0x5}, {@local, 0xa}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe83}}}}}}, 0x0)

699.551288ms ago: executing program 6 (id=7938):
socket(0x1f, 0x800, 0x80000001)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0xc0c0128e, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000000000004, 0x1, 0x0, 0x6, 0x1d, 0x8, "faf98315e5a114998dfc8d0000000000000004503dc3bd3fe37db1ead4e1307aa633000000000000c8b534464c516bdd8a0f350000d35abd02000040f900", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "07000000fd40f7222239c0340200c7e4162e43ac00", [0x8, 0x8ca9]}})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000720000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

587.581211ms ago: executing program 0 (id=7930):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

230.98µs ago: executing program 2 (id=7931):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f00000001c0)=r2, 0xa1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 5 (id=7932):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x7fff)
syz_emit_ethernet(0xbe, 0x0, 0x0)

kernel console output (not intermixed with test programs):

4" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x0
[  502.971583][T24978] loop2: detected capacity change from 0 to 128
[  503.003704][T24978] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  503.024185][T24978] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  503.065407][T21872] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  503.325616][T24986] loop2: detected capacity change from 0 to 128
[  503.334647][T24986] EXT4-fs: Ignoring removed nobh option
[  503.346307][T24986] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  503.359368][T24986] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  503.393785][   T28] audit: type=1400 audit(1781826985.711:3407): avc:  denied  { write } for  pid=24985 comm="syz.2.6679" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  503.497743][   T28] audit: type=1400 audit(1781826985.821:3408): avc:  denied  { getattr } for  pid=24990 comm="syz.0.6680" path="socket:[82023]" dev="sockfs" ino=82023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  503.670746][T21872] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  503.727271][   T28] audit: type=1326 audit(1781826986.051:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25000 comm="syz.2.6685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  503.785889][   T28] audit: type=1326 audit(1781826986.051:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25000 comm="syz.2.6685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  503.819860][   T28] audit: type=1326 audit(1781826986.081:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25000 comm="syz.2.6685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  503.849538][   T28] audit: type=1326 audit(1781826986.081:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25000 comm="syz.2.6685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  503.929553][T25006] netlink: 'syz.2.6686': attribute type 1 has an invalid length.
[  503.955800][T25006] 8021q: adding VLAN 0 to HW filter on device bond4
[  504.159901][T25006] bond4: (slave veth0_to_bond): making interface the new active one
[  504.232225][T25006] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  504.275746][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  504.275763][   T28] audit: type=1326 audit(1781826986.601:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.349278][   T28] audit: type=1326 audit(1781826986.631:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.390596][   T28] audit: type=1326 audit(1781826986.631:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.439120][   T28] audit: type=1326 audit(1781826986.641:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.523780][   T28] audit: type=1326 audit(1781826986.641:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.561278][T25020] veth19: entered promiscuous mode
[  504.569093][   T28] audit: type=1326 audit(1781826986.641:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.569136][   T28] audit: type=1326 audit(1781826986.651:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.569174][   T28] audit: type=1326 audit(1781826986.651:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.569268][   T28] audit: type=1326 audit(1781826986.651:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  504.569304][   T28] audit: type=1326 audit(1781826986.651:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25010 comm="syz.6.6690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82bd73d68e code=0x7ffc0000
[  505.176325][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'.
[  505.452153][T25040] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  505.588348][T25045] loop5: detected capacity change from 0 to 128
[  506.690761][T25064] loop5: detected capacity change from 0 to 2048
[  506.765649][T25064] Alternate GPT is invalid, using primary GPT.
[  506.805530][T25064]  loop5: p1 p2 p3
[  507.288773][T17761] IPVS: starting estimator thread 0...
[  507.384610][T25070] IPVS: using max 2256 ests per chain, 112800 per kthread
[  507.786975][T25083] tipc: Failed to remove unknown binding: 66,0,0/2886997007:246858908/246858909
[  508.172024][T25067] Process accounting resumed
[  508.945371][T25165] loop5: detected capacity change from 0 to 512
[  509.031954][T25165] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  509.066974][T25169] netlink: 125768 bytes leftover after parsing attributes in process `syz.7.6725'.
[  509.084105][T25165] EXT4-fs (loop5): orphan cleanup on readonly fs
[  509.098763][T25165] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  509.149635][T25165] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  509.160899][T25165] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #16: comm syz.5.6724: inode has both inline data and extents flags
[  509.182436][T25165] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  509.182645][T25165] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6724: couldn't read orphan inode 16 (err -117)
[  509.194440][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  509.194466][    C0] EXT4-fs (loop5): initial error at time 1781826991: ext4_orphan_get:1399: inode 16
[  509.194501][    C0] EXT4-fs (loop5): last error at time 1781826991: ext4_orphan_get:1399: inode 16
[  509.250150][T25165] loop5: lost filesystem error report for type 5 error -117
[  509.250827][T25165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  510.701857][T20574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.775572][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  510.775592][   T28] audit: type=1400 audit(1781826993.101:3471): avc:  denied  { setopt } for  pid=25180 comm="syz.5.6730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  510.860430][T25190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.904573][T25190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.916873][T25190] netlink: 'syz.5.6735': attribute type 4 has an invalid length.
[  511.007480][T25195] netlink: 'syz.5.6735': attribute type 4 has an invalid length.
[  511.017783][T25194] tipc: Failed to remove unknown binding: 66,0,0/4:927829643/927829645
[  511.039829][T25194] tipc: Failed to remove unknown binding: 66,0,0/4:927829643/927829644
[  511.067789][T25194] tipc: Failed to remove unknown binding: 66,0,0/4:927829643/927829645
[  511.087443][T25194] tipc: Failed to remove unknown binding: 66,0,0/4:927829643/927829644
[  511.956181][T25218] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6742'.
[  511.993906][T25218] bond0: (slave bond_slave_0): Releasing backup interface
[  512.038336][T25218] bond_slave_0: entered promiscuous mode
[  512.053926][T25218] bond_slave_0: entered allmulticast mode
[  512.062428][T25223] netlink: 'syz.6.6743': attribute type 4 has an invalid length.
[  512.137932][T17509] bond8: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  512.184490][T17509] bond8: (slave veth0_to_bond): making interface the new active one
[  512.223776][T17509] bond8: active interface up!
[  512.272144][T25226] bond4: entered allmulticast mode
[  512.307579][T25228] ip6gretap1: entered promiscuous mode
[  512.318026][T25228] ip6gretap1: entered allmulticast mode
[  512.328522][T25228] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  512.341131][T25234] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  512.394643][T25234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.466432][T25240] tipc: Failed to remove unknown binding: 66,0,0/0:3127809733/3127809734
[  512.492664][T25240] tipc: Failed to remove unknown binding: 66,0,0/0:3127809733/3127809734
[  512.542470][T25242] netlink: 'syz.0.6750': attribute type 10 has an invalid length.
[  512.553600][T25242] ipvlan1: entered allmulticast mode
[  512.560337][T25242] veth0_vlan: entered allmulticast mode
[  512.569730][T25244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6751'.
[  512.587165][T25242] team0: Device ipvlan1 failed to register rx_handler
[  512.624109][T25244] bond12: entered promiscuous mode
[  512.667544][T25244] 8021q: adding VLAN 0 to HW filter on device bond12
[  512.726663][T25253] No such timeout policy "syz1"
[  512.763446][T25255] 8021q: adding VLAN 0 to HW filter on device bond12
[  512.777392][T25255] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[  512.795491][T25244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  512.803926][T25244] IPv6: NLM_F_CREATE should be set when creating new route
[  512.814116][T25244] IPv6: NLM_F_CREATE should be set when creating new route
[  512.845364][T25244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  512.857237][T25255] bond12: (slave wireguard0): Error -95 calling set_mac_address
[  512.920253][T25264] loop5: detected capacity change from 0 to 256
[  512.949651][   T28] audit: type=1400 audit(1781826995.271:3472): avc:  denied  { write } for  pid=25238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.980862][T25244] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[  513.006455][T25244] bond12: (slave wireguard0): Error -95 calling set_mac_address
[  513.060437][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6755'.
[  513.209035][   T28] audit: type=1400 audit(1781826995.521:3473): avc:  denied  { write } for  pid=25270 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  513.489698][T25276] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  513.539471][T25283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6759'.
[  513.566787][T25276] bond5 (unregistering): Released all slaves
[  513.591907][T25283] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  513.601123][T25283] netlink: 'syz.5.6759': attribute type 30 has an invalid length.
[  513.850038][   T28] audit: type=1400 audit(1781826996.171:3474): avc:  denied  { write } for  pid=25290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  513.917324][   T28] audit: type=1400 audit(1781826996.241:3475): avc:  denied  { write } for  pid=25308 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  514.137451][T25320] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6768'.
[  514.168541][T25320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  514.265221][T25325] netlink: 'syz.6.6771': attribute type 11 has an invalid length.
[  514.315813][T25323] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6770'.
[  514.382736][T25331] netlink: 'syz.2.6772': attribute type 21 has an invalid length.
[  514.413267][T25331] IPv6: NLM_F_CREATE should be specified when creating new route
[  514.439344][T25331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  514.449422][T25331] IPv6: NLM_F_CREATE should be set when creating new route
[  514.460400][T25331] IPv6: NLM_F_CREATE should be set when creating new route
[  514.464878][T25332] netlink: 'syz.2.6772': attribute type 21 has an invalid length.
[  514.471614][T25331] IPv6: NLM_F_CREATE should be set when creating new route
[  514.521177][T25332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  514.614447][T25339] gretap0: left allmulticast mode
[  514.619906][T25339] gretap0: left promiscuous mode
[  514.653768][T25339] bridge0: port 3(gretap0) entered disabled state
[  514.675378][T25339] bridge_slave_0: left allmulticast mode
[  514.683214][T25339] bridge_slave_0: left promiscuous mode
[  514.690962][T25339] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.702889][T25339] bridge_slave_1: left allmulticast mode
[  514.709366][T25339] bridge_slave_1: left promiscuous mode
[  514.716939][T25339] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.732964][T25339] bond8: (slave veth0_to_bond): Releasing active interface
[  514.748213][T25339] bond0: (slave bond_slave_1): Releasing backup interface
[  514.757815][T25339] team0: Port device team_slave_0 removed
[  514.765192][T25339] team0: Port device team_slave_1 removed
[  514.771310][T25339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.779881][T25339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.789159][T25339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  514.828652][T25331] vlan2: entered promiscuous mode
[  514.835599][T25331] bridge0: entered promiscuous mode
[  514.847992][T25342] team0: Port device xfrm0 added
[  514.861420][T25343] tipc: Started in network mode
[  514.878552][T25343] tipc: Node identity 5e4a4c6c9c7f, cluster identity 4711
[  514.905140][T25343] tipc: Enabled bearer <eth:team0>, priority 0
[  514.929222][T25351] netlink: 'syz.2.6779': attribute type 1 has an invalid length.
[  514.988280][T25345] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.003726][T25345] 8021q: adding VLAN 0 to HW filter on device team0
[  515.015466][T25358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6779'.
[  515.047936][T25345] batman_adv: batadv0: Interface activated: dummy0
[  515.081278][T25345] batadv0: mtu less than device minimum
[  515.099650][T25345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  515.111494][T25345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  515.125073][T25345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  515.138093][T25345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  515.150194][T25345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  515.162243][T25345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  515.200819][T25345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.262214][T25378] netlink: 'syz.7.6785': attribute type 7 has an invalid length.
[  515.272786][T25345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.310287][   T28] audit: type=1400 audit(1781826997.621:3476): avc:  denied  { write } for  pid=25354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  515.336070][   T28] audit: type=1326 audit(1781826997.621:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25369 comm="syz.5.6784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  515.363412][T25345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.399420][   T28] audit: type=1326 audit(1781826997.631:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25369 comm="syz.5.6784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  515.439667][   T28] audit: type=1326 audit(1781826997.631:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25369 comm="syz.5.6784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  515.455698][T25345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  515.489647][T25345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  515.500027][   T28] audit: type=1326 audit(1781826997.631:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25369 comm="syz.5.6784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  515.553131][T25345] veth1_vlan: left promiscuous mode
[  515.567295][T25345] veth0_vlan: left promiscuous mode
[  515.573422][T25345] veth0_vlan: entered promiscuous mode
[  515.583086][T25345] veth1_vlan: entered promiscuous mode
[  515.613802][T25345] veth1_macvtap: left promiscuous mode
[  515.623237][T25345] veth0_macvtap: left promiscuous mode
[  515.640145][T25345] veth0_macvtap: entered promiscuous mode
[  515.678247][T25345] veth1_macvtap: entered promiscuous mode
[  515.791884][T25345] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.818573][T25345] 8021q: adding VLAN 0 to HW filter on device eth0
[  515.841382][T25345] 8021q: adding VLAN 0 to HW filter on device eth1
[  515.858475][T25345] 8021q: adding VLAN 0 to HW filter on device eth2
[  515.886437][T25345] 8021q: adding VLAN 0 to HW filter on device eth3
[  515.965563][T17496] bond4: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  515.982937][T17496] bond4: (slave veth11): making interface the new active one
[  516.015007][T17496] bond4: active interface up!
[  516.036372][T17496] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  516.056861][T17496] bond3: (slave veth0_to_bond): making interface the new active one
[  516.078768][T17496] bond3: active interface up!
[  516.121328][T25346] veth0_virt_wifi: left promiscuous mode
[  516.180703][T25351] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  516.229533][T25378] netlink: 'syz.7.6785': attribute type 7 has an invalid length.
[  516.253591][T17493] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.263345][T17493] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.284789][T11466] tipc: Node number set to 3258272876
[  516.311763][T25403] bond2: (slave dummy0): Releasing active interface
[  516.327802][T25403] bond2: (slave veth3): making interface the new active one
[  516.366459][T25403] bridge_slave_0: left allmulticast mode
[  516.409467][   T28] kauditd_printk_skb: 37 callbacks suppressed
[  516.409531][   T28] audit: type=1400 audit(1781826998.731:3518): avc:  denied  { write } for  pid=25404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  516.447975][T25406] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  516.461309][T25403] bridge_slave_0: left promiscuous mode
[  516.468475][T25403] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.487743][   T28] audit: type=1400 audit(1781826998.801:3519): avc:  denied  { write } for  pid=25418 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  516.516314][   T28] audit: type=1400 audit(1781826998.811:3520): avc:  denied  { relabelto } for  pid=25405 comm="syz.0.6794" name="585" dev="tmpfs" ino=3019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  516.546695][   T28] audit: type=1400 audit(1781826998.811:3521): avc:  denied  { associate } for  pid=25405 comm="syz.0.6794" name="585" dev="tmpfs" ino=3019 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  516.580274][T25403] bridge_slave_1: left allmulticast mode
[  516.587167][T25403] bridge_slave_1: left promiscuous mode
[  516.594280][T25403] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.649631][T25403] bond4: (slave veth0_to_bond): Releasing active interface
[  516.661254][T25427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6796'.
[  516.698019][T25403] bond0: (slave bond_slave_0): Releasing backup interface
[  516.722760][T25403] bond0: (slave bond_slave_1): Releasing backup interface
[  516.747946][T25403] team0: Port device team_slave_0 removed
[  516.765594][T25430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25430 comm=syz.0.6796
[  516.785585][T25403] team0: Port device team_slave_1 removed
[  516.806338][T25403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.825287][T25403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.841518][T25403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.849664][T25403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.875997][T17493] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.891477][T17493] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.947229][T25408] team0: Port device xfrm0 added
[  516.970395][T25422] tipc: Started in network mode
[  516.978695][T25422] tipc: Node identity 32f54e97722b, cluster identity 4711
[  516.988383][T25422] tipc: Enabled bearer <eth:team0>, priority 0
[  517.031244][T17493] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  517.046157][T17493] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  517.067355][T17493] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  517.119422][T17493] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  517.160080][T25432] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6798'.
[  517.825609][T17497] net_ratelimit: 58 callbacks suppressed
[  517.825645][T17497] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  518.105030][ T3381] tipc: Node number set to 1088310935
[  518.338693][T25477] loop2: detected capacity change from 0 to 512
[  518.385619][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  518.406435][T25477] EXT4-fs (loop2): 1 orphan inode deleted
[  518.425861][T25477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.445617][T17497] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  518.447361][T25477] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.635260][T17497] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:37: Failed to release dquot type 1
[  518.934486][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  519.048405][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.475147][T17497] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  519.544624][T17764] page_pool_release_retry() stalled pool shutdown: id 349, 1 inflight 60 sec
[  519.842401][T25509] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  520.014491][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  520.135333][T25493] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  520.289474][T25518] batman_adv: batadv0: Adding interface: macvtap1
[  520.325163][T25518] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  520.544539][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  520.751506][T25532] loop5: detected capacity change from 0 to 1024
[  520.787009][T25532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  520.845151][T25532] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  520.899362][T25532] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  520.915204][T25532] EXT4-fs (loop5): orphan cleanup on readonly fs
[  520.935952][T25532] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.6831: Freeing blocks not in datazone - block = 0, count = 4096
[  520.955887][T25532] loop5: lost filesystem error report for type 5 error -117
[  520.958276][T25532] EXT4-fs (loop5): 1 orphan inode deleted
[  520.968223][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  520.968242][    C0] EXT4-fs (loop5): initial error at time 1781827003: ext4_free_blocks:6718
[  520.968280][    C0] EXT4-fs (loop5): last error at time 1781827003: ext4_free_blocks:6718
[  521.012245][T25532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  521.041031][   T28] audit: type=1400 audit(1781827003.351:3522): avc:  denied  { listen } for  pid=25531 comm="syz.5.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  521.084541][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  521.207486][T20574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.239411][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6835'.
[  521.279414][T25546] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  521.289799][T25546] tipc: Enabled bearer <udp:syz0>, priority 10
[  521.341848][T25553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6838'.
[  521.386058][T25553] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  521.396581][T17489] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  521.411915][T17489] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  521.425175][T25553] bond5 (unregistering): (slave geneve3): Releasing backup interface
[  521.451972][T25553] bond5 (unregistering): Released all slaves
[  521.465787][T17489] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  521.479726][T17489] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  521.553661][   T28] audit: type=1400 audit(1781827003.871:3523): avc:  denied  { create } for  pid=25557 comm="syz.2.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  521.614597][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  522.146004][T17497] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  522.601754][T25589] bridge0: port 1(vlan3) entered blocking state
[  522.644762][T25589] bridge0: port 1(vlan3) entered disabled state
[  522.684841][T25589] vlan3: entered allmulticast mode
[  522.705926][T25589] dummy0: entered allmulticast mode
[  522.714518][T17497] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  522.734268][T25589] vlan3: entered promiscuous mode
[  522.765010][T25589] dummy0: entered promiscuous mode
[  522.990486][   T28] audit: type=1326 audit(1781827005.311:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25591 comm="syz.2.6851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda1114ce59 code=0x0
[  523.284531][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  523.620831][T25606] bridge_slave_0 (unregistering): left allmulticast mode
[  523.634676][T25606] bridge_slave_0 (unregistering): left promiscuous mode
[  523.642638][T25606] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.829512][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  524.247511][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6857'.
[  524.444506][T17497] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  524.485374][T25610] veth5: entered allmulticast mode
[  524.726157][T25621] loop2: detected capacity change from 0 to 2048
[  524.801702][T25621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.844638][T25621] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  524.860443][T25621] veth0_macvtap: left promiscuous mode
[  524.860450][   T28] audit: type=1400 audit(1781827007.181:3525): avc:  denied  { write } for  pid=25620 comm="syz.2.6861" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  524.995655][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  525.083077][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.108876][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6866'.
[  525.154232][T25640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6866'.
[  525.171242][T25640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6866'.
[  525.190742][T25635] loop5: detected capacity change from 0 to 8192
[  525.387570][T25658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6869'.
[  525.413572][   T28] audit: type=1400 audit(1781827007.731:3526): avc:  denied  { write } for  pid=25639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  525.463416][T25658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25658 comm=syz.6.6869
[  525.507049][ T3020] veth0_macvtap: entered promiscuous mode
[  525.528007][   T28] audit: type=1400 audit(1781827007.781:3527): avc:  denied  { write } for  pid=25662 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  525.557758][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  525.578377][T25658] veth21: entered allmulticast mode
[  525.619966][T25658] bond13: (slave veth21): Enslaving as an active interface with an up link
[  525.769062][T25669] loop5: detected capacity change from 0 to 512
[  525.785434][T25669] EXT4-fs: test_dummy_encryption option not supported
[  525.963367][   T28] audit: type=1400 audit(1781827008.281:3528): avc:  denied  { write } for  pid=25668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  526.051374][   T28] audit: type=1400 audit(1781827008.361:3529): avc:  denied  { write } for  pid=25690 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  526.124560][T17497] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  526.678888][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  526.911725][   T28] audit: type=1400 audit(1781827009.221:3530): avc:  denied  { write } for  pid=25710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  527.014933][   T28] audit: type=1400 audit(1781827009.331:3531): avc:  denied  { write } for  pid=25727 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  527.204794][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  528.294641][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  528.349362][T25748] syzkaller0: entered promiscuous mode
[  528.375943][T25748] syzkaller0: entered allmulticast mode
[  528.437010][T25752] syzkaller0: entered promiscuous mode
[  528.457964][T25752] syzkaller0: entered allmulticast mode
[  528.930416][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  529.454520][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  530.005135][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  530.179224][T25785] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6902'.
[  530.589520][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  530.900588][T25797] netlink: 'syz.2.6907': attribute type 1 has an invalid length.
[  530.941885][T25797] 8021q: adding VLAN 0 to HW filter on device bond6
[  530.998708][T25797] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  531.026116][T25797] bond6: entered promiscuous mode
[  531.040791][T25797] bond6: entered allmulticast mode
[  531.082272][T25797] macvlan2: entered promiscuous mode
[  531.101748][T25797] macvlan2: entered allmulticast mode
[  531.119659][T25797] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  531.154510][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  531.674956][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  531.794757][   T28] audit: type=1326 audit(1781827014.111:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  531.999493][T25837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6920'.
[  532.018285][   T28] audit: type=1326 audit(1781827014.111:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.047011][   T28] audit: type=1326 audit(1781827014.111:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.095649][   T28] audit: type=1326 audit(1781827014.121:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.155319][   T28] audit: type=1326 audit(1781827014.121:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.206664][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  532.220666][   T28] audit: type=1326 audit(1781827014.121:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.271257][   T28] audit: type=1326 audit(1781827014.121:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.317098][   T28] audit: type=1326 audit(1781827014.121:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.369235][   T28] audit: type=1326 audit(1781827014.121:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.425178][   T28] audit: type=1326 audit(1781827014.121:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.490011][   T28] audit: type=1326 audit(1781827014.121:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25827 comm="syz.0.6917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa221fdce59 code=0x7ffc0000
[  532.778404][T25859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6928'.
[  532.789864][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6929'.
[  532.804922][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  532.917330][T25859] 8021q: adding VLAN 0 to HW filter on device bond14
[  533.313339][T25859] macvlan6: entered promiscuous mode
[  533.364595][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  533.401458][T25859] macvlan6: entered allmulticast mode
[  533.457162][T25859] bond14: entered promiscuous mode
[  533.462926][T25859] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  533.527791][T25859] bond14: left promiscuous mode
[  533.558121][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6933'.
[  533.663966][T25874] bond6: entered promiscuous mode
[  533.672856][T25874] bond6: entered allmulticast mode
[  533.909252][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6940'.
[  533.964487][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  534.244027][T25916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6949'.
[  534.514573][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  534.650361][T25928] netlink: 'syz.5.6955': attribute type 1 has an invalid length.
[  535.055105][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  535.584630][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  535.912723][T25967] loop2: detected capacity change from 0 to 512
[  535.974909][T25967] EXT4-fs: Mount option(s) incompatible with ext2
[  536.152969][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  536.899354][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  537.242978][T25979] loop2: detected capacity change from 0 to 512
[  537.307855][T25979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  537.447426][T25979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.474959][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  537.553151][T25979] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  537.565857][T25986] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[  537.727850][T25986] EXT4-fs (loop2): Remounting filesystem read-only
[  537.852315][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.871566][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  537.871623][   T28] audit: type=1400 audit(1781827020.191:3571): avc:  denied  { write } for  pid=25975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  538.016238][   T28] audit: type=1400 audit(1781827020.341:3572): avc:  denied  { write } for  pid=25997 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  538.095047][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  538.282875][T26016] loop2: detected capacity change from 0 to 256
[  538.306578][T26016] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  538.321170][   T28] audit: type=1326 audit(1781827020.641:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.388165][T26016] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  538.425211][   T28] audit: type=1326 audit(1781827020.681:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.503496][   T28] audit: type=1326 audit(1781827020.681:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.610425][   T28] audit: type=1326 audit(1781827020.681:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.649952][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  538.720195][   T28] audit: type=1326 audit(1781827020.681:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.734758][T26025] netlink: 'syz.0.6983': attribute type 11 has an invalid length.
[  538.786653][   T28] audit: type=1326 audit(1781827020.681:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.846274][   T28] audit: type=1326 audit(1781827020.731:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  538.885631][   T28] audit: type=1326 audit(1781827020.731:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.5.6979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x7ffc0000
[  539.069349][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6988'.
[  539.135612][T26054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6992'.
[  539.193637][T26056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6993'.
[  539.204585][T17491] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  539.724530][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  539.937102][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7002'.
[  539.995122][T26081] veth21: entered allmulticast mode
[  540.006660][T26081] bond9: (slave veth21): Enslaving as an active interface with an up link
[  540.016707][T26083] : port 1(ip6gretap0) entered blocking state
[  540.033706][T26083] : port 1(ip6gretap0) entered disabled state
[  540.040177][T26083] ip6gretap0: entered allmulticast mode
[  540.049154][T26083] ip6gretap0: entered promiscuous mode
[  540.059748][T26089] ip6gretap0: left allmulticast mode
[  540.067576][T26089] ip6gretap0: left promiscuous mode
[  540.074136][T26089] : port 1(ip6gretap0) entered disabled state
[  540.089322][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7005'.
[  540.268078][T17491] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  540.324066][T26097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7009'.
[  540.335773][T26097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7009'.
[  540.488257][T26106] ip_vti0: left promiscuous mode
[  540.549654][T26106] sit0: left promiscuous mode
[  540.580518][T26106] sit0: left allmulticast mode
[  540.615949][T26106] bond7: left allmulticast mode
[  540.628074][T26106] ip6gretap0: left allmulticast mode
[  540.664956][T26106] ip6gretap0: left promiscuous mode
[  540.749833][T26106] vlan1: left allmulticast mode
[  540.777042][T26106] bond11: left allmulticast mode
[  540.829269][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  540.872396][T26106] veth21: left allmulticast mode
[  541.331448][T17493] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  541.354523][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  541.389958][T17493] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  541.455540][T17493] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  541.545458][T17493] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.070618][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  542.594511][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  543.150001][T17496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  543.444315][T26184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7025'.
[  543.453543][T26184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7025'.
[  543.463852][T26184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7025'.
[  543.523530][T26184] bond1: left promiscuous mode
[  543.545644][T26184] vlan2: left promiscuous mode
[  543.551375][T26184] bridge0: left promiscuous mode
[  543.558418][T26184] bond6: left promiscuous mode
[  543.704607][T17517] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  544.295070][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  544.329770][T26188] __nla_validate_parse: 165 callbacks suppressed
[  544.329834][T26188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7026'.
[  544.842748][   T28] kauditd_printk_skb: 67 callbacks suppressed
[  544.842768][   T28] audit: type=1107 audit(1781827027.161:3648): pid=26196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  544.874818][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  545.425872][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  545.985331][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  546.005075][T26245] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1
[  546.018554][T26245] ref_ctr increment failed for inode: 0x1d5b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888115a09c00
[  546.068652][T26247] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1
[  546.108835][T26247] ref_ctr decrement failed for inode: 0x1d5b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888115a09c00
[  546.157995][T26247] uprobe: syz.6.7035:26247 failed to unregister, leaking uprobe
[  546.524573][T17524] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  546.786216][T26249] netlink: 'syz.6.7036': attribute type 1 has an invalid length.
[  546.886856][T26249] bond15: (slave bridge5): Enslaving as a backup interface with an up link
[  546.967058][T26249] macvlan6: entered promiscuous mode
[  546.999685][T26249] macvlan6: entered allmulticast mode
[  547.019674][T26249] bond15: entered promiscuous mode
[  547.045703][T26249] bridge5: entered promiscuous mode
[  547.069550][T26249] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  547.076736][T17524] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  547.139744][T26249] bond15: left promiscuous mode
[  547.144866][T26249] bridge5: left promiscuous mode
[  547.487785][   T28] audit: type=1400 audit(1781827029.801:3649): avc:  denied  { write } for  pid=26265 comm="syz.2.7042" path="socket:[86980]" dev="sockfs" ino=86980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  547.614488][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  547.699106][T26273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7043'.
[  547.711994][   T28] audit: type=1326 audit(1781827030.031:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.0.7032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fa221fd6bd7 code=0x0
[  547.778086][T26273] bridge3: port 1(veth7) entered blocking state
[  547.793012][T26273] bridge3: port 1(veth7) entered disabled state
[  547.807201][T26273] veth7: entered allmulticast mode
[  547.823117][T26273] veth7: entered promiscuous mode
[  547.844076][T26274] bond6: (slave veth0_to_bond): Releasing active interface
[  547.887224][T26274] bridge3: port 2(veth0_to_bond) entered blocking state
[  547.905935][T26274] bridge3: port 2(veth0_to_bond) entered disabled state
[  547.923922][T26274] veth0_to_bond: entered promiscuous mode
[  548.039471][T26278] IPVS: persistence engine module ip_vs_pe_€ not found
[  548.134797][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  548.724641][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  549.276441][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  549.482708][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7058'.
[  549.518359][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7058'.
[  549.795064][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  550.447885][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  551.074545][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  551.791936][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  551.842326][T26351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7068'.
[  552.059409][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7071'.
[  552.116389][T26357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.124947][T26357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.164771][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7070'.
[  552.374706][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  552.509645][T26368] tipc: Bearer <eth:batadv0>: already 2 bearers with priority 10
[  552.528356][T26368] tipc: Bearer <eth:batadv0>: trying with adjusted priority
[  552.566941][T26368] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  552.831363][T26390] loop2: detected capacity change from 0 to 256
[  552.860789][T26390] FAT-fs (loop2): Directory bread(block 64) failed
[  552.877209][T26390] FAT-fs (loop2): Directory bread(block 65) failed
[  552.891196][T26390] FAT-fs (loop2): Directory bread(block 66) failed
[  552.914660][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  552.929952][T26390] FAT-fs (loop2): Directory bread(block 67) failed
[  552.936535][T26390] FAT-fs (loop2): Directory bread(block 68) failed
[  552.953699][T26390] FAT-fs (loop2): Directory bread(block 69) failed
[  552.965522][T26390] FAT-fs (loop2): Directory bread(block 70) failed
[  552.973554][T26390] FAT-fs (loop2): Directory bread(block 71) failed
[  552.981577][T26390] FAT-fs (loop2): Directory bread(block 72) failed
[  552.989537][T26390] FAT-fs (loop2): Directory bread(block 73) failed
[  553.454504][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  553.661390][T26418] netlink: 'syz.6.7095': attribute type 12 has an invalid length.
[  553.679320][T26418] netlink: 'syz.6.7095': attribute type 29 has an invalid length.
[  553.696504][T26418] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7095'.
[  553.723399][T26418] netlink: 59 bytes leftover after parsing attributes in process `syz.6.7095'.
[  554.000923][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  554.564467][T17519] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  555.141820][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  555.390558][T26477] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7114'.
[  555.737275][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  556.546656][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  556.782365][T26492] netlink: 22 bytes leftover after parsing attributes in process `syz.5.7120'.
[  557.076701][T26495] A link change request failed with some changes committed already. Interface 
2
6±ÿ]×0¢ÊÞª may have been left with an inconsistent configuration, please check.
[  557.127941][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  557.690090][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  558.224519][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  558.888982][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  559.424549][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  559.995277][T17507] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  560.050923][T26552] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7141'.
[  560.303200][T26559] netlink: 165 bytes leftover after parsing attributes in process `syz.7.7144'.
[  560.322728][   T28] audit: type=1400 audit(1781827042.631:3651): avc:  denied  { create } for  pid=26561 comm="syz.2.7145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  560.540378][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  560.585738][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7151'.
[  560.619478][T26573] SELinux: failed to load policy
[  560.760980][T26584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7154'.
[  561.075313][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  561.604511][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  562.181154][   T28] audit: type=1326 audit(1781827044.501:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26605 comm="syz.5.7160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46ffece59 code=0x0
[  562.254650][T17489] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  562.864577][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  563.524896][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  564.039547][   T28] audit: type=1400 audit(1781827046.361:3653): avc:  denied  { connect } for  pid=26650 comm="syz.0.7176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  564.156131][T17508] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  564.237112][T26660] veth1_to_bond: invalid flags given to default FDB implementation
[  564.467193][T17509] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.480496][T17509] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  564.524712][T17509] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.561347][T17509] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  564.592378][T17509] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.619844][T17509] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  564.648259][T17509] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.673533][T17509] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  564.744437][T17509] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  565.274445][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  565.713444][T26692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7190'.
[  565.776541][T26692] team0: Port device team_slave_0 removed
[  565.817191][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  565.847531][T26699] netlink: 'syz.2.7193': attribute type 49 has an invalid length.
[  566.099825][T26699] ip6gretap0: entered promiscuous mode
[  566.107875][T26699] ip6gretap0: entered allmulticast mode
[  566.344536][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  566.434098][   T28] audit: type=1400 audit(1781827048.751:3654): avc:  denied  { write } for  pid=26725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  566.519962][   T28] audit: type=1400 audit(1781827048.841:3655): avc:  denied  { write } for  pid=26743 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  566.878083][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  567.375495][T26758] netlink: 'syz.0.7207': attribute type 1 has an invalid length.
[  567.768518][T17493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  567.871210][T26764] netlink: 'syz.0.7207': attribute type 10 has an invalid length.
[  567.879189][T26764] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7207'.
[  567.901361][T26758] 8021q: adding VLAN 0 to HW filter on device bond5
[  567.924887][T26759] bond5: (slave veth15): Enslaving as an active interface with a down link
[  567.934622][T26761] batman_adv: batadv0: Interface deactivated: dummy0
[  567.942814][T26761] batman_adv: batadv0: Removing interface: dummy0
[  567.960087][T26761] bond5: (slave dummy0): making interface the new active one
[  567.980370][T26761] dummy0: entered promiscuous mode
[  567.986326][T26761] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  568.057533][T26764] bond5: (slave dummy0): Releasing active interface
[  568.936724][T26780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7216'.
[  568.963023][T26780] hsr_slave_0: left promiscuous mode
[  568.991445][T26780] hsr_slave_1: left promiscuous mode
[  569.245173][T26782] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  569.403853][T26813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7229'.
[  569.417711][T26814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7228'.
[  569.443027][T26813] bond6: entered promiscuous mode
[  569.448200][T26813] bond6: entered allmulticast mode
[  569.453547][T26813] 8021q: adding VLAN 0 to HW filter on device bond6
[  569.475257][T26813] erspan1: entered allmulticast mode
[  569.483400][T26813] erspan1: entered promiscuous mode
[  569.489525][T26813] bond6: (slave erspan1): Enslaving as an active interface with an up link
[  569.520057][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7229'.
[  569.595924][T26813] bond6 (unregistering): (slave erspan1): Releasing backup interface
[  569.617175][T26813] erspan1: left promiscuous mode
[  569.630125][T26813] bond6 (unregistering): Released all slaves
[  569.688190][T26825] netlink: 'syz.6.7233': attribute type 1 has an invalid length.
[  569.763648][T26825] 8021q: adding VLAN 0 to HW filter on device bond16
[  569.920942][T26843] tipc: Failed to remove unknown binding: 66,0,0/4:3150724647/3150724649
[  569.930597][T26830] bond16: (slave veth25): Enslaving as an active interface with a down link
[  569.947752][T26843] tipc: Failed to remove unknown binding: 66,0,0/4:3150724647/3150724648
[  569.969815][T26825] vlan3: entered allmulticast mode
[  569.987617][T26825] veth0_to_bond: entered allmulticast mode
[  570.007682][T26825] bond16: (slave vlan3): Opening slave failed
[  570.055200][T26847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7239'.
[  570.211475][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.224902][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.237673][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.250528][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.263342][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.277322][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.289907][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.302734][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.315352][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.328156][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.6.7245
[  570.666299][T26868] netlink: 'syz.5.7247': attribute type 6 has an invalid length.
[  571.943950][T26889] veth9: entered promiscuous mode
[  572.572412][   T28] audit: type=1326 audit(1781827054.891:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26923 comm="syz.5.7265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff46ffece59 code=0x0
[  573.020575][T26934] bridge_slave_0 (unregistering): left allmulticast mode
[  573.031413][T26934] bridge_slave_0 (unregistering): left promiscuous mode
[  573.047133][T26934] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.723265][   T28] audit: type=1326 audit(1781827056.041:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26943 comm="syz.6.7281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82bd77ce59 code=0x0
[  575.506738][T27002] loop2: detected capacity change from 0 to 1024
[  575.518595][T27002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  575.558648][T27002] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  575.595648][T27002] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  575.618155][T27002] EXT4-fs (loop2): orphan cleanup on readonly fs
[  575.624673][T27002] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.7289: Freeing blocks not in datazone - block = 0, count = 4096
[  575.663413][T27002] loop2: lost filesystem error report for type 5 error -117
[  575.664409][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  575.679074][    C0] EXT4-fs (loop2): initial error at time 1781827057: ext4_free_blocks:6718
[  575.688288][    C0] EXT4-fs (loop2): last error at time 1781827057: ext4_free_blocks:6718
[  575.702025][T27002] EXT4-fs (loop2): 1 orphan inode deleted
[  575.713197][T27002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  575.912913][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.994538][T27014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7291'.
[  576.038106][T27014] bond7: entered promiscuous mode
[  576.052453][T27014] bond7: entered allmulticast mode
[  576.292148][T27032] loop2: detected capacity change from 0 to 8192
[  576.381866][T27035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  576.396608][T27035] FAT-fs (loop2): Filesystem has been set read-only
[  576.770300][T27051] loop2: detected capacity change from 0 to 1024
[  576.797455][T27051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  576.810492][T27051] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  576.828078][T27051] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  576.839690][T27051] EXT4-fs (loop2): orphan cleanup on readonly fs
[  576.847295][T27051] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.7303: Freeing blocks not in datazone - block = 0, count = 4096
[  576.861647][T27051] loop2: lost filesystem error report for type 5 error -117
[  576.862603][T27051] EXT4-fs (loop2): 1 orphan inode deleted
[  576.870070][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  576.870133][    C1] EXT4-fs (loop2): initial error at time 1781827059: ext4_free_blocks:6718
[  576.870183][    C1] EXT4-fs (loop2): last error at time 1781827059: ext4_free_blocks:6718
[  576.901760][T27051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  577.163221][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.151337][T27084] netlink: 'syz.2.7307': attribute type 1 has an invalid length.
[  578.184281][T27084] 8021q: adding VLAN 0 to HW filter on device bond8
[  578.231561][T27084] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  578.244773][T27084] bond8: entered allmulticast mode
[  578.350751][   T28] audit: type=1400 audit(1781827060.671:3658): avc:  denied  { write } for  pid=27085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  578.403823][   T28] audit: type=1400 audit(1781827060.721:3659): avc:  denied  { write } for  pid=27099 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  578.745615][   T28] audit: type=1400 audit(1781827061.071:3660): avc:  denied  { write } for  pid=27102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  578.796183][   T28] audit: type=1400 audit(1781827061.121:3661): avc:  denied  { write } for  pid=27113 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  579.208593][T27126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7316'.
[  579.295630][T27126] selinux_netlink_send: 73 callbacks suppressed
[  579.295723][T27126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27126 comm=syz.7.7316
[  579.361948][T27126] veth23: entered allmulticast mode
[  579.373163][T27126] bond10: (slave veth23): Enslaving as an active interface with an up link
[  579.913025][T27142] loop2: detected capacity change from 0 to 512
[  579.926204][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7320'.
[  579.932371][T27142] EXT4-fs: test_dummy_encryption option not supported
[  579.963735][T27143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7320'.
[  579.986397][T27143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7320'.
[  580.165724][T27147] loop2: detected capacity change from 0 to 1024
[  580.185324][T27147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  580.195574][T27147] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  580.214857][T27147] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  580.233251][T27147] EXT4-fs (loop2): orphan cleanup on readonly fs
[  580.240801][T27147] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.7323: Freeing blocks not in datazone - block = 0, count = 4096
[  580.255033][T27147] loop2: lost filesystem error report for type 5 error -117
[  580.256450][T27147] EXT4-fs (loop2): 1 orphan inode deleted
[  580.270223][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  580.270300][    C1] EXT4-fs (loop2): initial error at time 1781827062: ext4_free_blocks:6718
[  580.270349][    C1] EXT4-fs (loop2): last error at time 1781827062: ext4_free_blocks:6718
[  580.296709][T27147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  580.466695][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.486270][T27160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7339'.
[  580.511713][T27160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27160 comm=syz.0.7339
[  581.820582][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7335'.
[  583.589361][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7347'.
[  583.621887][T27220] tipc: Started in network mode
[  583.634075][   T28] audit: type=1107 audit(1781827065.951:3662): pid=27217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶ÊÝ…Ü‘Ø‚bCŒ+fx:£Rê¾h|'
[  583.639894][T27220] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  583.651208][T27218] loop0: detected capacity change from 512 to 511
[  583.694837][T27220] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  583.760003][T27214] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  584.209757][T27225] batman_adv: batadv0: Adding interface: macvtap0
[  584.226384][T27225] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.290991][T27225] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  584.320610][T27228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7361'.
[  584.352764][T27228] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  584.531947][T27235] loop2: detected capacity change from 0 to 8192
[  586.140434][T27262] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  586.425447][T27278] batman_adv: batadv0: Adding interface: macvtap1
[  586.432338][T27278] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  586.497342][T27290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7369'.
[  586.519779][T27290] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  588.445496][   T28] audit: type=1400 audit(1781827070.761:3663): avc:  denied  { unmount } for  pid=27317 comm="syz.0.7391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  588.679606][T27318] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  589.154951][T27368] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7405'.
[  590.200666][T27415] loop2: detected capacity change from 0 to 512
[  590.379258][T27415] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  590.809142][T27415] EXT4-fs (loop2): orphan cleanup on readonly fs
[  590.972617][T27415] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  591.184939][T27415] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  591.246484][T27415] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7393: Failed to acquire dquot type 1
[  591.259930][T27415] loop2: lost filesystem error report for type 5 error -5
[  591.268629][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  591.283091][    C0] EXT4-fs (loop2): initial error at time 1781827073: ext4_acquire_dquot:7041
[  591.292546][    C0] EXT4-fs (loop2): last error at time 1781827073: ext4_acquire_dquot:7041
[  591.338907][T27415] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7393: bg 0: block 40: padding at end of block bitmap is not set
[  591.356900][T27415] loop2: lost filesystem error report for type 5 error -117
[  591.368176][T27415] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  591.395209][T27415] loop2: lost filesystem error report for type 5 error -117
[  591.438247][T27415] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.7393: data will be lost
[  591.478738][T27415] EXT4-fs (loop2): 1 truncate cleaned up
[  591.484821][T27415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  591.585205][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.676288][T27471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7406'.
[  591.717971][T27471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7406'.
[  591.771863][T27471] syzkaller0: entered promiscuous mode
[  591.808146][T27471] syzkaller0: entered allmulticast mode
[  591.891312][T27494] netlink: 'syz.0.7409': attribute type 10 has an invalid length.
[  591.901505][T27494] team0: Device veth0_macvtap is up. Set it down before adding it as a team port
[  591.916812][T27492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7408'.
[  594.000258][T27557] netlink: 'syz.7.7430': attribute type 1 has an invalid length.
[  594.016018][T27557] 8021q: adding VLAN 0 to HW filter on device bond11
[  594.036880][T27557] bond11: (slave veth0_to_bond): making interface the new active one
[  594.055072][T27557] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  594.098357][T27557] bond11: entered promiscuous mode
[  594.105272][T27557] veth0_to_bond: entered promiscuous mode
[  594.124680][T27557] bond11: entered allmulticast mode
[  594.157458][T27557] veth0_to_bond: entered allmulticast mode
[  594.194081][T27567] macvlan2: entered promiscuous mode
[  594.248576][T27567] macvlan2: entered allmulticast mode
[  594.261201][T27567] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  594.291136][T27567] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  594.306503][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7435'.
[  594.363595][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7435'.
[  594.428508][T27582] 9p: Bad value for 'rfdno'
[  596.239856][   T28] audit: type=1326 audit(1781827078.551:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.294207][   T28] audit: type=1326 audit(1781827078.551:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.393803][   T28] audit: type=1326 audit(1781827078.561:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.460495][   T28] audit: type=1326 audit(1781827078.561:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.536327][   T28] audit: type=1326 audit(1781827078.561:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.614838][   T28] audit: type=1326 audit(1781827078.561:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.669041][   T28] audit: type=1326 audit(1781827078.561:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.727905][   T28] audit: type=1326 audit(1781827078.561:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.771700][   T28] audit: type=1326 audit(1781827078.561:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  596.799289][   T28] audit: type=1326 audit(1781827078.561:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27620 comm="syz.7.7446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668b74ce59 code=0x7ffc0000
[  597.066902][T27635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7451'.
[  597.596874][T17517] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.607733][T17517] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.661637][T17517] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.674574][T17517] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.770073][T17517] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.785527][T17517] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.848483][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7464'.
[  597.886338][T27667] bond9: entered promiscuous mode
[  597.892759][T27667] bond9: entered allmulticast mode
[  597.907128][T17517] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.924868][T17517] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.105158][T27686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7473'.
[  598.137929][T27684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7471'.
[  598.278262][T27684] 8021q: adding VLAN 0 to HW filter on device bond10
[  598.460909][T27692] macvlan2: entered promiscuous mode
[  598.549117][T27692] macvlan2: entered allmulticast mode
[  598.628998][T27692] bond10: entered promiscuous mode
[  598.642707][T27692] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  598.652298][T27692] bond10: left promiscuous mode
[  599.026913][T27714] loop2: detected capacity change from 0 to 512
[  599.054412][T27714] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  599.072857][T27713] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7479'.
[  599.148065][T27714] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  599.192329][T27714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7488: bg 0: block 248: padding at end of block bitmap is not set
[  599.192424][T17517] bond3 (unregistering): (slave vti0): Releasing backup interface
[  599.210370][T27714] loop2: lost filesystem error report for type 5 error -117
[  599.214973][T27714] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7488: Failed to acquire dquot type 1
[  599.215288][T17517] vti0 (unregistering): left promiscuous mode
[  599.224670][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  599.248244][    C0] EXT4-fs (loop2): last error at time 1781827081: ext4_validate_block_bitmap:441
[  599.259223][T27714] loop2: lost filesystem error report for type 5 error -28
[  599.260214][T27714] EXT4-fs (loop2): 1 truncate cleaned up
[  599.284003][T17517] bond4 (unregistering): (slave erspan1): Releasing active interface
[  599.286096][T27714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  599.296403][T17517] erspan1 (unregistering): left promiscuous mode
[  599.342803][T17517] bond1 (unregistering): Released all slaves
[  599.372715][T17517] bond2 (unregistering): (slave veth0_virt_wifi): Releasing active interface
[  599.389837][T17517] bond2 (unregistering): Released all slaves
[  599.410033][T17517] bond3 (unregistering): Released all slaves
[  599.430205][T17517] bond4 (unregistering): Released all slaves
[  599.453562][T27714] netlink: 'syz.2.7488': attribute type 1 has an invalid length.
[  599.514129][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  599.611981][T17517] hsr_slave_0: left promiscuous mode
[  599.633055][T17517] hsr_slave_1: left promiscuous mode
[  599.657864][T17517] veth1_macvtap: left promiscuous mode
[  599.669549][T17517] veth0_macvtap: left promiscuous mode
[  599.676734][T17517] veth1_vlan: left promiscuous mode
[  599.699962][T17517] veth0_vlan: left promiscuous mode
[  599.982754][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1
[  600.217861][T17517] IPVS: stop unused estimator thread 0...
[  600.563485][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2
[  601.008545][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3
[  601.299481][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  601.299497][   T28] audit: type=1400 audit(1781827083.621:3708): avc:  denied  { write } for  pid=27842 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  601.353382][T27844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  601.395414][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4
[  601.803172][T27854] syzkaller0: entered promiscuous mode
[  601.817331][T27854] syzkaller0: entered allmulticast mode
[  602.033225][T27869] netlink: 'syz.5.7515': attribute type 11 has an invalid length.
[  602.148656][T27875] syzkaller0: entered promiscuous mode
[  602.163166][T27875] syzkaller0: entered allmulticast mode
[  602.192927][T27875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  602.223467][T27874] tipc: Resetting bearer <eth:syzkaller0>
[  602.261463][T27874] tipc: Disabling bearer <eth:syzkaller0>
[  602.478613][T27894] unsupported nla_type 210
[  602.508969][   T28] audit: type=1400 audit(1781827084.831:3709): avc:  denied  { nlmsg_read } for  pid=27892 comm="syz.6.7525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  605.145437][T27953] netlink: 'syz.6.7543': attribute type 11 has an invalid length.
[  605.275673][T27960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7545'.
[  605.528884][   T28] audit: type=1400 audit(1781827087.851:3710): avc:  denied  { write } for  pid=27972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  605.610516][   T28] audit: type=1400 audit(1781827087.931:3711): avc:  denied  { write } for  pid=27984 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  605.783387][T28000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7556'.
[  605.998156][   T28] audit: type=1326 audit(1781827088.321:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.023274][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7560'.
[  606.070718][   T28] audit: type=1326 audit(1781827088.341:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.109580][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7561'.
[  606.137128][   T28] audit: type=1326 audit(1781827088.341:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.198750][   T28] audit: type=1326 audit(1781827088.341:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.260698][   T28] audit: type=1326 audit(1781827088.341:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.325011][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7564'.
[  606.334034][   T28] audit: type=1326 audit(1781827088.341:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.427430][   T28] audit: type=1326 audit(1781827088.421:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.477873][   T28] audit: type=1326 audit(1781827088.421:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.503734][   T28] audit: type=1326 audit(1781827088.421:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.529568][   T28] audit: type=1326 audit(1781827088.431:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.555852][T28023] veth21: entered allmulticast mode
[  606.568720][T28023] bond6: (slave veth21): Enslaving as an active interface with an up link
[  606.595895][   T28] audit: type=1326 audit(1781827088.431:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x7ffc0000
[  606.656460][   T28] audit: type=1326 audit(1781827088.431:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda1110d68e code=0x7ffc0000
[  606.723847][   T28] audit: type=1326 audit(1781827088.431:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda1110d68e code=0x7ffc0000
[  606.765455][T28027] : port 1(ip6gretap0) entered blocking state
[  606.765779][   T28] audit: type=1326 audit(1781827088.431:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda1110d68e code=0x7ffc0000
[  606.792803][T28027] : port 1(ip6gretap0) entered disabled state
[  606.831936][T28027] ip6gretap0: entered allmulticast mode
[  606.839108][   T28] audit: type=1326 audit(1781827088.431:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda1110d68e code=0x7ffc0000
[  606.859214][T28027] ip6gretap0: entered promiscuous mode
[  606.907648][T28028] ip6gretap0: left allmulticast mode
[  606.920838][T28028] ip6gretap0: left promiscuous mode
[  606.947197][T28028] : port 1(ip6gretap0) entered disabled state
[  607.343862][T28046] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7572'.
[  607.441572][T28046] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7572'.
[  608.249942][T28052] tipc: Resetting bearer <eth:team0>
[  610.614069][T28052] bond6: left allmulticast mode
[  610.651681][T28052] veth9: left promiscuous mode
[  610.664571][T28052] bond7: left promiscuous mode
[  610.676257][T28052] bond7: left allmulticast mode
[  610.684671][T28052] bond8: left allmulticast mode
[  610.691290][T28052] bond9: left promiscuous mode
[  610.696262][T28052] bond9: left allmulticast mode
[  610.728614][T17519] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.754137][T17519] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.782976][T17519] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.823908][T17519] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.904855][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7588'.
[  611.359708][   T28] kauditd_printk_skb: 62 callbacks suppressed
[  611.359723][   T28] audit: type=1400 audit(1781827093.681:3789): avc:  denied  { write } for  pid=28141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  611.455527][   T28] audit: type=1400 audit(1781827093.781:3790): avc:  denied  { write } for  pid=28172 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  611.693611][   T28] audit: type=1400 audit(1781827094.011:3791): avc:  denied  { write } for  pid=28176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  611.785409][   T28] audit: type=1400 audit(1781827094.101:3792): avc:  denied  { write } for  pid=28203 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  611.981633][T28201] netlink: 'syz.6.7599': attribute type 1 has an invalid length.
[  612.360075][T28252] netlink: 'syz.2.7613': attribute type 1 has an invalid length.
[  612.413371][T28252] bond11: (slave bridge6): Enslaving as a backup interface with an up link
[  612.473477][T28252] macvlan2: entered promiscuous mode
[  612.483992][T28252] macvlan2: entered allmulticast mode
[  612.495857][T28252] bond11: entered promiscuous mode
[  612.508464][T28252] bridge6: entered promiscuous mode
[  612.519472][T28252] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  612.553371][T28252] bond11: left promiscuous mode
[  612.558553][T28252] bridge6: left promiscuous mode
[  612.746519][T28293] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1
[  612.771180][T28293] ref_ctr increment failed for inode: 0x809 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888119fde200
[  612.807084][T28293] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1
[  612.833193][T28293] ref_ctr decrement failed for inode: 0x809 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888119fde200
[  612.846434][T28293] uprobe: syz.2.7603:28293 failed to unregister, leaking uprobe
[  612.870164][   T28] audit: type=1400 audit(1781827095.191:3793): avc:  denied  { write } for  pid=28276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.020394][   T28] audit: type=1400 audit(1781827095.341:3794): avc:  denied  { write } for  pid=28311 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.194198][   T28] audit: type=1400 audit(1781827095.511:3795): avc:  denied  { write } for  pid=28322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.263940][   T28] audit: type=1400 audit(1781827095.581:3796): avc:  denied  { write } for  pid=28336 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  614.510531][   T28] audit: type=1107 audit(1781827095.931:3797): pid=28341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  614.524033][   T28] audit: type=1400 audit(1781827096.551:3798): avc:  denied  { write } for  pid=28354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.484981][T28391] netlink: 'syz.7.7617': attribute type 1 has an invalid length.
[  615.600697][T28389] loop2: detected capacity change from 0 to 512
[  615.685357][T28389] EXT4-fs: Ignoring removed nobh option
[  615.797010][T28389] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.7629: corrupted inode contents
[  615.821954][T28389] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  615.824525][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  615.844286][    C1] EXT4-fs (loop2): initial error at time 1781827098: ext4_do_update_inode:5742: inode 3
[  615.854785][    C1] EXT4-fs (loop2): last error at time 1781827098: ext4_do_update_inode:5742: inode 3
[  615.960042][T28389] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #3: comm syz.2.7629: mark_inode_dirty error
[  615.985718][T28389] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  615.994229][T28389] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.7629: corrupted inode contents
[  616.043204][T28389] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  616.044185][T28389] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.7629: mark_inode_dirty error
[  616.084570][T28389] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  616.086880][T28389] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7629: Failed to acquire dquot type 0
[  616.123828][T28389] loop2: lost filesystem error report for type 5 error -117
[  616.140766][T28389] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.7629: corrupted inode contents
[  616.165671][T28389] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.167208][T28389] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.7629: mark_inode_dirty error
[  616.205068][T28389] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.209643][T28389] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.7629: corrupted inode contents
[  616.233850][T28389] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.235798][T28389] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.7629: mark_inode_dirty error
[  616.265218][T28389] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.267622][T28389] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.7629: corrupted inode contents
[  616.290721][T28389] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.291888][T28389] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  616.325718][T28400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7619'.
[  616.325766][T28389] loop2: lost filesystem error report for type 5 error -117
[  616.338257][T28389] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.7629: corrupted inode contents
[  616.363370][T28389] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.364928][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7620'.
[  616.368156][T28389] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.7629: mark_inode_dirty error
[  616.401204][T28389] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  616.412730][T28389] loop2: lost filesystem error report for type 5 error -117
[  616.432179][T28389] EXT4-fs (loop2): 1 truncate cleaned up
[  616.454044][T28404] bridge5: port 1(veth25) entered blocking state
[  616.461295][T28404] bridge5: port 1(veth25) entered disabled state
[  616.470298][T28404] veth25: entered allmulticast mode
[  616.472066][T28389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.483782][T28404] veth25: entered promiscuous mode
[  616.517596][T28403] bond11: (slave veth0_to_bond): Releasing active interface
[  616.518052][T28389] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.535454][T28403] veth0_to_bond: left promiscuous mode
[  616.555552][T28403] veth0_to_bond: left allmulticast mode
[  616.572521][T28403] bridge5: port 2(veth0_to_bond) entered blocking state
[  616.573927][T28389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.580504][T28403] bridge5: port 2(veth0_to_bond) entered disabled state
[  616.608569][T28403] veth0_to_bond: entered allmulticast mode
[  616.620989][T28403] veth0_to_bond: entered promiscuous mode
[  616.827648][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  616.827663][   T28] audit: type=1400 audit(1781827099.151:3802): avc:  denied  { write } for  pid=28407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  616.911595][   T28] audit: type=1400 audit(1781827099.231:3803): avc:  denied  { write } for  pid=28426 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.147732][   T28] audit: type=1400 audit(1781827099.471:3804): avc:  denied  { write } for  pid=28428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.226902][   T28] audit: type=1400 audit(1781827099.541:3805): avc:  denied  { write } for  pid=28441 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.553896][   T28] audit: type=1400 audit(1781827099.871:3806): avc:  denied  { write } for  pid=28443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.602856][   T28] audit: type=1400 audit(1781827099.921:3807): avc:  denied  { write } for  pid=28460 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  618.296527][   T28] audit: type=1326 audit(1781827100.621:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28405 comm="syz.5.7621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ff46ffe6bd7 code=0x0
[  621.198251][T28529] veth1_to_bond: invalid flags given to default FDB implementation
[  624.495423][T28568] veth1_to_bond: invalid flags given to default FDB implementation
[  624.761193][T28580] dummy0: left promiscuous mode
[  624.826365][T28580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  624.839389][T28580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  624.884815][T28580] ipvlan1: left allmulticast mode
[  624.895441][T28580] veth0_vlan: left allmulticast mode
[  625.150778][T28580] bond1: left allmulticast mode
[  625.303822][T28580] erspan1: left allmulticast mode
[  625.342691][T28580] veth21: left allmulticast mode
[  625.362823][T17517] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.373873][T17517] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.412882][T17517] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.462617][T17517] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.917025][T28597] loop2: detected capacity change from 0 to 512
[  625.941581][T28602] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7687'.
[  625.964279][T28597] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.7686: bad orphan inode 13
[  625.991861][T28597] loop2: lost filesystem error report for type 5 error -117
[  625.994470][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  626.010444][    C0] EXT4-fs (loop2): initial error at time 1781827108: ext4_orphan_get:1425
[  626.019021][    C0] EXT4-fs (loop2): last error at time 1781827108: ext4_orphan_get:1425
[  626.026305][T28597] ext4_test_bit(bit=12, block=4) = 1
[  626.042985][T28597] is_bad_inode(inode)=0
[  626.050287][T28597] NEXT_ORPHAN(inode)=0
[  626.059713][T28597] max_ino=32
[  626.063332][T28597] i_nlink=1
[  626.075770][T28597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.146559][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.433784][T28619] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7678'.
[  626.473707][T28627] veth1_to_bond: invalid flags given to default FDB implementation
[  626.536355][T28621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7677'.
[  626.585373][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7683'.
[  626.859035][T28645] netlink: 'syz.5.7684': attribute type 11 has an invalid length.
[  627.951704][T28661] 8021q: adding VLAN 0 to HW filter on device bond0
[  627.972351][T28661] 8021q: adding VLAN 0 to HW filter on device team0
[  627.991024][T28661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.046252][T28661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  628.079821][T28661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  628.115036][T28661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  628.148466][T28661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  628.175222][T28661] veth1_vlan: left promiscuous mode
[  628.189203][T28661] veth0_vlan: left promiscuous mode
[  628.207598][T28661] veth0_vlan: entered promiscuous mode
[  628.225480][T28661] veth1_vlan: entered promiscuous mode
[  628.249670][T28661] veth1_macvtap: left promiscuous mode
[  628.263902][T28661] veth0_macvtap: left promiscuous mode
[  628.277667][T28661] veth0_macvtap: entered promiscuous mode
[  628.289427][T28661] veth1_macvtap: entered promiscuous mode
[  628.308124][T28661] 8021q: adding VLAN 0 to HW filter on device bond1
[  628.319954][T28661] 8021q: adding VLAN 0 to HW filter on device eth0
[  628.329110][T28661] 8021q: adding VLAN 0 to HW filter on device eth1
[  628.337954][T28661] 8021q: adding VLAN 0 to HW filter on device eth2
[  628.347607][T28661] 8021q: adding VLAN 0 to HW filter on device eth3
[  628.356857][T28661] 8021q: adding VLAN 0 to HW filter on device bond2
[  628.368954][T28661] 8021q: adding VLAN 0 to HW filter on device bond3
[  628.378063][T28661] 8021q: adding VLAN 0 to HW filter on device bond4
[  628.389466][T28661] gretap0: entered promiscuous mode
[  628.395926][T28661] batman_adv: batadv0: Interface activated: macvtap1
[  628.405310][T28661] 8021q: adding VLAN 0 to HW filter on device bond5
[  628.420177][T28661] 8021q: adding VLAN 0 to HW filter on device bond6
[  628.435511][T28660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  628.528918][T17518] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  628.539666][T17518] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  628.553019][T17511] ip6_tunnel: p xmit: Local address not yet configured!
[  628.570042][T17511] ip6_tunnel: p xmit: Local address not yet configured!
[  628.577717][T17763] ip6_tunnel: p xmit: Local address not yet configured!
[  628.597208][T17518] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  628.608009][T17518] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  628.695232][T17511] bond5: (slave veth15): link status definitely up, 10000 Mbps full duplex
[  628.722219][T17511] bond5: (slave veth15): making interface the new active one
[  628.732862][T17511] bond5: active interface up!
[  628.843225][T28691] bond0: (slave team0): Releasing backup interface
[  628.881302][T28691] bond3: (slave veth0_to_bond): Releasing active interface
[  628.893988][T28691] bond0: (slave bond_slave_0): Releasing backup interface
[  628.929382][T28691] bond0: (slave bond_slave_1): Releasing backup interface
[  628.936097][T11466] ip6_tunnel: p xmit: Local address not yet configured!
[  628.950825][T28696] netlink: 'syz.2.7711': attribute type 1 has an invalid length.
[  628.971858][T28691] team0: Port device team_slave_1 removed
[  628.978494][T28691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.988493][T28691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.000697][T28691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.019320][T28691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.028626][T28691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  629.046654][T28694] team0: Mode changed to "random"
[  629.052063][T28701] tipc: Enabled bearer <eth:team0>, priority 0
[  629.061913][T28697] vlan0: entered promiscuous mode
[  629.068030][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7711'.
[  629.078129][T28697] team0: Port device vlan0 added
[  629.103678][T28700] bond12: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  629.122799][T11466] ip6_tunnel: p xmit: Local address not yet configured!
[  629.152630][T28702] bond12 (unregistering): (slave ip6gretap0): Releasing backup interface
[  629.163044][T28702] bond12 (unregistering): Released all slaves
[  629.225714][T28714] netlink: 'syz.0.7715': attribute type 13 has an invalid length.
[  629.237247][T28714] netlink: 'syz.0.7715': attribute type 17 has an invalid length.
[  629.289455][T28714] 8021q: adding VLAN 0 to HW filter on device team0
[  629.341646][T28714] vlan0: left promiscuous mode
[  629.494286][T28721] syzkaller0: entered promiscuous mode
[  629.500207][T17764] ip6_tunnel: p xmit: Local address not yet configured!
[  629.514431][T28721] syzkaller0: entered allmulticast mode
[  629.598826][T28729] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  629.636402][T28740] netlink: 'syz.2.7721': attribute type 1 has an invalid length.
[  629.693808][T28740] 8021q: adding VLAN 0 to HW filter on device bond12
[  629.730199][T28744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=28744 comm=syz.7.7722
[  629.743700][T28751] tmpfs: Bad value for 'nr_inodes'
[  629.786234][T28752] bond12: (slave veth11): Enslaving as an active interface with a down link
[  629.807382][T28751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7725'.
[  629.827417][T28740] 8021q: adding VLAN 0 to HW filter on device batadv1
[  629.872332][T28740] bond12: (slave batadv1): making interface the new active one
[  629.893548][T28740] batadv1: entered promiscuous mode
[  629.905927][T17764] ip6_tunnel: p xmit: Local address not yet configured!
[  629.914924][T28740] bond12: (slave batadv1): Enslaving as an active interface with an up link
[  629.961390][T28752] bond12 (unregistering): (slave veth11): Releasing active interface
[  630.014677][T28752] bond12 (unregistering): (slave batadv1): Releasing active interface
[  630.024164][T28752] bond12 (unregistering): Released all slaves
[  630.146565][T28769] loop2: detected capacity change from 0 to 128
[  630.171202][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7741'.
[  630.202389][T28769] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  630.238699][T28769] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  630.387270][T17518] ip6_tunnel: p xmit: Local address not yet configured!
[  630.394827][T17518] ip6_tunnel: p xmit: Local address not yet configured!
[  630.513648][T28774] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7733'.
[  630.532764][T28774] bond0 (unregistering): Released all slaves
[  630.585047][T28778] syzkaller0: entered promiscuous mode
[  630.590864][T28778] syzkaller0: entered allmulticast mode
[  630.794786][T28782] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7736'.
[  630.812156][T28782] gretap0: entered promiscuous mode
[  630.881274][T28782] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7736'.
[  630.969989][T28782] 0ªî{X¹¦: renamed from gretap0
[  631.045863][T28785] loop2: detected capacity change from 0 to 1024
[  631.110448][T28782] 0ªî{X¹¦: left promiscuous mode
[  631.185053][T28785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  631.265084][T28782] 0ªî{X¹¦: entered allmulticast mode
[  631.315703][T28785] System zones: 0-1, 3-36
[  631.342518][T17764] ip6_tunnel: p xmit: Local address not yet configured!
[  631.352214][T28782] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  631.386579][T28785] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.7736: bad orphan inode 134217728
[  631.397423][T28785] loop2: lost filesystem error report for type 5 error -117
[  631.399329][T28785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.467228][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.425407][T28805] IPVS: persistence engine module ip_vs_pe_€ not found
[  632.747343][T28812] loop2: detected capacity change from 0 to 8192
[  632.828112][   T28] audit: type=1326 audit(1781827115.151:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28811 comm="syz.2.7746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda1114ce59 code=0x0
[  633.283278][T28845] IPVS: persistence engine module ip_vs_pe_€ not found
[  633.436801][T28857] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7757'.
[  633.455752][T28856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  633.486489][T28855] syzkaller0: entered promiscuous mode
[  633.492148][T28855] syzkaller0: entered allmulticast mode
[  634.754498][    C1] ip6_tunnel: p xmit: Local address not yet configured!
[  635.338436][T28879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7767'.
[  635.364063][T28892] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  636.179529][T28922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7782'.
[  636.574737][T28928] veth3: entered promiscuous mode
[  636.879748][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7786'.
[  636.892649][T28942] hsr_slave_0: left promiscuous mode
[  636.908087][T28942] hsr_slave_1: left promiscuous mode
[  637.683205][T28960] 9p: Bad value for 'rfdno'
[  637.832389][T28965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7792'.
[  638.159660][T28971] IPVS: persistence engine module ip_vs_pe_€ not found
[  638.328519][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7812'.
[  639.428967][T29007] IPVS: persistence engine module ip_vs_pe_€ not found
[  640.587196][T29048] loop2: detected capacity change from 0 to 4096
[  640.614536][T29048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.719036][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.529688][T29035] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  641.646155][T29074] netlink: 'syz.7.7832': attribute type 10 has an invalid length.
[  641.654556][T29074] veth0_macvtap: left promiscuous mode
[  641.660584][T29074] team0: Device veth0_macvtap failed to register rx_handler
[  641.686558][T29075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7833'.
[  642.205179][T29091] netlink: 'syz.7.7840': attribute type 1 has an invalid length.
[  642.218506][T29098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7842'.
[  642.232276][T29091] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.260417][T29094] loop2: detected capacity change from 0 to 1024
[  642.281358][T29094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  642.293719][T29091] bond0: (slave veth27): Enslaving as an active interface with a down link
[  642.377675][T29102] netlink: 'syz.7.7840': attribute type 10 has an invalid length.
[  642.385820][T29102] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7840'.
[  642.400454][T29091] bond0: (slave dummy0): making interface the new active one
[  642.409770][T29091] dummy0: entered promiscuous mode
[  642.415691][T29091] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  642.429405][T29102] bond0: (slave dummy0): Releasing active interface
[  642.659975][T21872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.984441][    C1] ip6_tunnel: p xmit: Local address not yet configured!
[  643.937526][T29138] netlink: 'syz.6.7854': attribute type 1 has an invalid length.
[  643.956345][T29138] 8021q: adding VLAN 0 to HW filter on device bond17
[  644.009319][T29138] bond17: (slave veth27): Enslaving as an active interface with a down link
[  644.082933][T29138] netlink: 'syz.6.7854': attribute type 10 has an invalid length.
[  644.090839][T29138] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7854'.
[  646.740636][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.753502][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.766535][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.779390][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.792182][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.806658][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.819908][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.833214][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.845903][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  646.859038][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.0.7875
[  647.657248][T29253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  648.516711][T29291] loop2: detected capacity change from 0 to 2048
[  648.523660][T29291] EXT4-fs: quotafile must be on filesystem root
[  649.210408][T29360] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7898'.
[  649.540428][T29370] bridge0: port 1(vlan6) entered blocking state
[  649.642261][T29370] bridge0: port 1(vlan6) entered disabled state
[  649.775791][T29370] vlan6: entered allmulticast mode
[  650.007198][T29370] dummy0: entered allmulticast mode
[  650.039180][T29370] vlan6: entered promiscuous mode
[  650.051600][T29374] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  650.236349][T29393] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7904'.
[  651.560146][T29424] netlink: 'syz.2.7916': attribute type 1 has an invalid length.
[  651.594801][T29424] 8021q: adding VLAN 0 to HW filter on device bond12
[  651.646211][T29424] bond12: (slave veth13): Enslaving as an active interface with a down link
[  651.677895][T29424] bond12: (slave dummy0): making interface the new active one
[  651.688568][T29424] bond12: (slave dummy0): Enslaving as an active interface with an up link
[  651.712616][T29424] netlink: 'syz.2.7916': attribute type 10 has an invalid length.
[  651.739813][T29424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7916'.
[  651.781676][T29424] bond12: (slave dummy0): Releasing active interface
[  651.916696][T29440] loop2: detected capacity change from 0 to 512
[  651.936062][   T28] audit: type=1400 audit(1781827134.241:3810): avc:  denied  { mounton } for  pid=29439 comm="syz.2.7923" path="/441/file0" dev="tmpfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  651.972169][T29440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  652.028438][T29440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  652.042555][T29440] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  652.057857][T29440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  652.352071][T29434] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  653.409403][T29456] ==================================================================
[  653.417563][T29456] BUG: KCSAN: data-race in dentry_kill / fast_dput
[  653.424119][T29456] 
[  653.426470][T29456] write to 0xffff88811b1750d0 of 8 bytes by task 29455 on cpu 1:
[  653.434207][T29456]  dentry_kill+0x139/0x500
[  653.438666][T29456]  finish_dput+0x16/0x1d0
[  653.443028][T29456]  dput+0x48/0x50
[  653.446695][T29456]  path_openat+0xd29/0x2000
[  653.451247][T29456]  do_file_open+0x16c/0x290
[  653.455801][T29456]  do_sys_openat2+0xa0/0x130
[  653.460433][T29456]  __x64_sys_openat+0xf2/0x120
[  653.465230][T29456]  x64_sys_call+0x1e39/0x3020
[  653.469942][T29456]  do_syscall_64+0x136/0x3c0
[  653.474566][T29456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.480487][T29456] 
[  653.482837][T29456] read to 0xffff88811b1750d0 of 8 bytes by task 29456 on cpu 0:
[  653.490515][T29456]  fast_dput+0x64/0x2e0
[  653.494734][T29456]  dput+0x1f/0x50
[  653.498403][T29456]  vfs_mkdir+0xb4/0x3e0
[  653.502619][T29456]  filename_mkdirat+0x138/0x300
[  653.507531][T29456]  __se_sys_mkdir+0x31/0xf0
[  653.512166][T29456]  __x64_sys_mkdir+0x31/0x40
[  653.516802][T29456]  x64_sys_call+0x2eab/0x3020
[  653.521540][T29456]  do_syscall_64+0x136/0x3c0
[  653.526158][T29456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.532081][T29456] 
[  653.534465][T29456] value changed: 0xffff8882376f51a0 -> 0x0000000000000000
[  653.541591][T29456] 
[  653.543935][T29456] Reported by Kernel Concurrency Sanitizer on:
[  653.550112][T29456] CPU: 0 UID: 0 PID: 29456 Comm: syz.7.7927 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  653.561083][T29456] Tainted: [W]=WARN
[  653.564912][T29456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  653.574999][T29456] ==================================================================
[  653.962800][T29458] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  654.011656][ T4323] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.090666][ T4323] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.140020][ T4323] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.185889][ T4323] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.294589][ T4323] bridge_slave_1: left allmulticast mode
[  654.300458][ T4323] bridge_slave_1: left promiscuous mode
[  654.306564][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.316351][ T4323] bridge_slave_0: left allmulticast mode
[  654.326102][ T4323] bridge_slave_0: left promiscuous mode
[  654.331887][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.366288][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  654.376155][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  654.385789][ T4323] bond0 (unregistering): Released all slaves
[  654.393758][ T4323] bond1 (unregistering): Released all slaves
[  654.461036][ T4323] hsr_slave_0: left promiscuous mode
[  654.467210][ T4323] hsr_slave_1: left promiscuous mode
[  654.472951][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_0
[  654.484177][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_1
[  654.506678][   T28] audit: type=1400 audit(1781827136.831:3811): avc:  denied  { write } for  pid=29481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  654.544598][   T28] audit: type=1400 audit(1781827136.861:3812): avc:  denied  { write } for  pid=29492 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  654.567346][ T4323] team0 (unregistering): Port device team_slave_1 removed
[  654.579026][ T4323] team0 (unregistering): Port device team_slave_0 removed
[  654.615183][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17
[  654.704767][   T28] audit: type=1400 audit(1781827137.031:3813): avc:  denied  { write } for  pid=29495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  654.738974][   T28] audit: type=1400 audit(1781827137.061:3814): avc:  denied  { write } for  pid=29506 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  654.774011][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18
[  654.862483][   T28] audit: type=1400 audit(1781827137.181:3815): avc:  denied  { write } for  pid=29510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  654.881304][ T4323] IPVS: stop unused estimator thread 0...
[  654.905664][   T28] audit: type=1400 audit(1781827137.231:3816): avc:  denied  { write } for  pid=29521 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  654.939922][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19
[  655.023923][   T28] audit: type=1400 audit(1781827137.341:3817): avc:  denied  { write } for  pid=29524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  655.058279][   T28] audit: type=1400 audit(1781827137.381:3818): avc:  denied  { write } for  pid=29535 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  655.092931][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20
[  658.984477][    C1] ip6_tunnel: p xmit: Local address not yet configured!