last executing test programs:

1m54.301835115s ago: executing program 2 (id=369):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000020000000000000000000000071122e00000000d0f90d3f15a6834500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1m54.235718466s ago: executing program 2 (id=371):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = epoll_create1(0x0)
r6 = fcntl$dupfd(r3, 0x0, r5)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000010})
close(r5)
fchmod(r1, 0x14c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f0000000640)='./file0\x00')
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='nicvf0\x00')

1m54.165410308s ago: executing program 2 (id=379):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x2800883, &(0x7f0000000140)={[{@errors_remount}, {@noblock_validity}, {@mb_optimize_scan}]}, 0xff, 0x470, &(0x7f0000000680)="$eJzs3M1rXFUfB/DvTDJJ2j59kqdPn5e+abSKxZekSV/sQpCKggsFQRcVVzFNS23aSBPBlqLRRVxKwb24FPwL3Fg3oq4Et7oXoUg3Flcj85akSSbJNJOEdj4fuPSce0/uOb977+mcOffeCdCxBpMcSPKPJL8k6U9SWFpgsPbPnd4kt6+PF1Iuv/5HoVruz9vXxxtFG3+3q5Ypd61S79xbydjk5MSVen545tK7w9NXrz1z4dLY+YnzE5dHT506fuxQz8nRE22Jc3elrfs/mDq47+U3b7w6fubG2z98VajHnSVxtMtg9ahV9c8t2fZ4uyvbZrsXpQvd29gQWjKQpHK6StX+35+u7Jjf1p+XPt7WxgGbqlwulnvvXlValJ4tAw+wymge6ESND/rK99/GsoXDj21363Tm5zHu1Jfalu4U62VKm1j/YJIzs399XlmySfMQAACL3Tyd5Oll47/TS8v9szof3Def35Pk30n2JvlPkv8m+V+S/7dY/+CS/PLxT7m/xV22pDL+ey7JnWXjv8boLwNd9dzu6nx5qXDuwuTE0foxOZJSbyU/srDLZcPFb1/8+dNm9S8e/1WWSv2NsWC9Hb93L5mgOztWGtto3A23PqrdAFgef18at3Eq4+N9Sfa3sN9SdW6x5sKTXx5sVm7t+FfRhvtM5S+SJ2rnfzZ3xb9wF7TQ9P7kyLMnR08M92Vy4uhw46pY7sef5l5rVv+G4m+DWzfL2bni9T8f/0ChL5m+eu1i9X7tdOt1zP36SdPvNPd2/c+M9RTeqKZ76uveH5uZuTKS9BReWb5+dOFvG/lG+cr1f+Twyv1/TxaOxIEklYv4UJKHkjxcb/sjSR5NcniV+L9/4bF35hu07vh7V9lj+1TiP7vW+c/i8996ouvid183q3995/94NXWkvqZy/teKa70N3MixAwAAgPtFsfoMfKE4NJ8uFoeGas/w783O4uTU9MxT56beu3y29qz8QErFxkxX/6L50JH6s8SN/OiS/LEk/0ryWdeOan5ofGqylflEoP12Nen/Fb+t9gIP8GDwvhZ0Lv0fOpf+D51L/4fOpf9D51qp/3+4De0Att4an/87tqodwNYz/ofOpf9D52qh/89uZjuALdX03fjihl75l9iURCnJ6mW+6dnYbzWsP5Hidh+N+yjx/HpOSikrbupe949Z3EOikKR3xU3b/T8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe/wdAAD//12b48g=")

1m53.794604727s ago: executing program 2 (id=384):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x2)
getuid()
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x80, 0x0, 0x7, 0xb538, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ccd8, 0x1224, 0xffffffff, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x4041, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/ref_tracker\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/1000, 0x3e8)
r1 = openat(r0, &(0x7f0000000143), 0x0, 0x0)
read(r1, &(0x7f0000000580)=""/100, 0x64)

1m53.481773174s ago: executing program 2 (id=392):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f4b3dc"], 0x20)

1m53.007742744s ago: executing program 2 (id=400):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = epoll_create1(0x0)
r6 = fcntl$dupfd(r3, 0x0, r5)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000010})
close(r5)
fchmod(r1, 0x14c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f0000000640)='./file0\x00')
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='nicvf0\x00')

1m52.988055085s ago: executing program 32 (id=400):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = epoll_create1(0x0)
r6 = fcntl$dupfd(r3, 0x0, r5)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000010})
close(r5)
fchmod(r1, 0x14c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f0000000640)='./file0\x00')
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='nicvf0\x00')

53.279674916s ago: executing program 4 (id=1194):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x6000000, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

53.158685009s ago: executing program 4 (id=1196):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0)
pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x4)
r1 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r1})

53.11099602s ago: executing program 4 (id=1197):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2000094, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2d3, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x82)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/packet\x00')
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/227, 0xe3}], 0x1, 0x7, 0x20000000)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

52.844276596s ago: executing program 4 (id=1204):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2000094, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2d3, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x82)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000100)={&(0x7f00000001c0)=0x4, 0x4, &(0x7f0000000540)=[{}, {}], &(0x7f00000003c0)})
mkdir(&(0x7f0000000400)='./my_sys\x00', 0xff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
pread64(r3, 0x0, 0x0, 0xa)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r6=>0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000180)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x1b, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000002c0)={r6, 0x6db7}, 0x8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0)

52.378745096s ago: executing program 4 (id=1209):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = epoll_create1(0x0)
r6 = fcntl$dupfd(r3, 0x0, r5)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000010})
close(r5)
fchmod(r1, 0x14c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f0000000640)='./file0\x00')
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='nicvf0\x00')

52.21979961s ago: executing program 4 (id=1211):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f000014f000/0x3000)=nil, 0x3000, 0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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")

52.196868661s ago: executing program 33 (id=1211):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f000014f000/0x3000)=nil, 0x3000, 0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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")

19.002721607s ago: executing program 5 (id=1560):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x153)
preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
r3 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x8)
r4 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xffffffffa003e459, 0x700000000000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r6=>0x0, 0x10, 0x7800, 0x0, 0x10, {{0xc, 0x4, 0x2, 0x27, 0x30, 0x64, 0x0, 0x8, 0x29, 0x0, @broadcast, @private=0xa010101, {[@cipso={0x86, 0x17, 0x2, [{0x6, 0x11, "0170c536f9ba2b9a33706221da3bfb"}]}, @ra={0x94, 0x4}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x3, @void}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0)

18.87304352s ago: executing program 5 (id=1562):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%pK    \x00'}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:01/id\x00', 0x0, 0x0)
read(r6, &(0x7f0000000400), 0x100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xc, 0x4, 0x2, 0xfffffffffffffffc, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

17.294333075s ago: executing program 5 (id=1569):
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
sendto$inet6(r1, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc8, 0x2}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/120, 0x78}], 0x1}, 0x9}], 0x1, 0x20, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000013080033d7"], 0x0, 0x2c, 0x0, 0x8}, 0x28)
write(r4, &(0x7f00000000c0)="730c19210f5edebf66456994306db54459eff7f25ae9d6e04bd538eb55d6c188ee5be1eac3395fe6ab0a2fe6bc9a00e59d117e143a4c9663a6bf9a5642293ed76d7c2da32ba4c417a72f894332e9c32759fec74d89ff40cb8a13e63f86b91d80eb7b11d3fa549af1a118a21c74f2bfe748f4b6710ebf0a76282fd190ff9db526dba5790a607bbb86ece6eea8adc852f742e67b2b0f0b35cc5b4116ea1cb7cdc32beca31000554a4c79e94c2f947712c56a797563013f42dc8d582a6f5c780395979ee26a71be8048ad01adccf426ea9db3bf8e11137d8afab8ed06d1917b432165bd811eee55fd9154428f49abb24a56dd4bb04bffa3", 0xf6)
rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000540)={0x3b, 0xea, 0x80})
r5 = semget$private(0x0, 0x7, 0x191)
semtimedop(r5, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000080)=0x4)
semctl$IPC_RMID(r5, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x400, 0xfffff800, 0x4, 0x4, 0x6]}, &(0x7f0000000280)=0x54)

16.389526087s ago: executing program 5 (id=1577):
mkdir(&(0x7f0000000400)='./file0\x00', 0x1d5)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
socket$inet(0x2, 0x3, 0xfffffff7)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x20004010)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0x68, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffe, 0x0, 0x100}, 0x1c)
mount_setattr(r1, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r1}}, 0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, 0x0, 0x0)
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4044454)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x14)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdf, 0xdf, 0x4, [@const={0x7, 0x0, 0x0, 0xa, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x8, 0x4, 0xc}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x1}}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @datasec={0x9, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}, {0x1, 0x2}, {0x1, 0x8, 0x8}, {0x3, 0x2, 0xffff}, {0x5, 0x8, 0x24}, {0x4, 0x2, 0x40}, {0x2, 0x35fd9f49, 0xbb58}, {0x5}], "fce1cd"}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000800)=""/43, 0xfc, 0x2b, 0x1, 0x9}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x7, <r10=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3420}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff91}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3b53, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0xd, 0x0, 0x6, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0xfffffee9, 0xd9, &(0x7f0000000600)=""/217, 0x41000, 0xd7c9eb58e3546699, '\x00', r5, @fallback=0x7, r9, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x8, 0x1, 0x255e}, 0x10, r10, r1, 0x2, &(0x7f0000000940)=[r1, r1, r1], &(0x7f0000000980)=[{0x0, 0x5, 0xb, 0x3}, {0x1, 0x4, 0xe, 0x5}], 0x10, 0x5}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4000080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x8, 0x0, 'queue1\x00', 0xee2e})

16.096670733s ago: executing program 5 (id=1584):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f00000001c0)=""/167, &(0x7f0000000280)=0xa7)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700), 0xfc, 0x4d2, &(0x7f0000000c40)="$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")
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
truncate(&(0x7f0000000180)='./file1\x00', 0x28)

15.966969836s ago: executing program 5 (id=1587):
unshare(0x22020600)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)="f9f500", 0x3}], 0x1)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$sock(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x18}, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000)
r4 = getpid()
migrate_pages(r4, 0x1ff, &(0x7f00000001c0)=0x4d, &(0x7f0000000680)=0xc)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2000000)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x4c}}, 0x804)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004)

15.954751517s ago: executing program 34 (id=1587):
unshare(0x22020600)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)="f9f500", 0x3}], 0x1)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$sock(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x18}, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000)
r4 = getpid()
migrate_pages(r4, 0x1ff, &(0x7f00000001c0)=0x4d, &(0x7f0000000680)=0xc)
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2000000)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x4c}}, 0x804)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004)

15.228542233s ago: executing program 0 (id=1591):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x18, 0x0, 0x2)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x1c00000000000000}, 0x105103, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0)

15.022654437s ago: executing program 0 (id=1594):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

15.011748858s ago: executing program 0 (id=1595):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1004408, &(0x7f0000000240), 0x1, 0x782, &(0x7f0000000b00)="$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")

14.886402801s ago: executing program 0 (id=1596):
mkdir(&(0x7f0000000400)='./file0\x00', 0x1d5)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
socket$inet(0x2, 0x3, 0xfffffff7)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x20004010)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0x68, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffe, 0x0, 0x100}, 0x1c)
mount_setattr(r1, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r1}}, 0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, 0x0, 0x0)
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4044454)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x14)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdf, 0xdf, 0x4, [@const={0x7, 0x0, 0x0, 0xa, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x8, 0x4, 0xc}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x1}}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @datasec={0x9, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}, {0x1, 0x2}, {0x1, 0x8, 0x8}, {0x3, 0x2, 0xffff}, {0x5, 0x8, 0x24}, {0x4, 0x2, 0x40}, {0x2, 0x35fd9f49, 0xbb58}, {0x5}], "fce1cd"}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000800)=""/43, 0xfc, 0x2b, 0x1, 0x9}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x7, <r10=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3420}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff91}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3b53, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0xd, 0x0, 0x6, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0xfffffee9, 0xd9, &(0x7f0000000600)=""/217, 0x41000, 0xd7c9eb58e3546699, '\x00', r5, @fallback=0x7, r9, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x8, 0x1, 0x255e}, 0x10, r10, r1, 0x2, &(0x7f0000000940)=[r1, r1, r1], &(0x7f0000000980)=[{0x0, 0x5, 0xb, 0x3}, {0x1, 0x4, 0xe, 0x5}], 0x10, 0x5}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4000080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x8, 0x0, 'queue1\x00', 0xee2e})

14.335393214s ago: executing program 0 (id=1598):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x600, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0xa, 0x0, 0xed3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

13.503918712s ago: executing program 0 (id=1603):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0})
syz_emit_ethernet(0x266, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b192c6", 0x230, 0x21, 0x0, @local, @rand_addr=' \x01\x00', {[@routing={0x89, 0x8, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x6c, 0x2, 0x4, 0x1, 0xd, 0x70, 0x40, [@loopback]}, @routing={0x1c, 0x6, 0x0, 0x3, 0x0, [@private2, @mcast1, @remote]}, @routing={0x6, 0x14, 0x2, 0x6a, 0x0, [@loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @remote}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2, @loopback, @empty]}, @srh={0x89, 0x4, 0x4, 0x2, 0xb, 0x0, 0x2, [@local, @local]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x0, "a1187a", 0xd5, "4c4ef8"}, "eae8c9737a68c3f752981a32a8b69890e4a2aa2a364af39b31bfcdba157717216e4f8e98e24c787359d7691fc041fc002ecee80c5d4480c793c1fbf2f5719e8f8cb65ac01c1ef030ec971a872fdb6982aa68cf7857fe1e5906bb73a50f1a0e5d24892e6ad20dc8d16d6826394a20fd697bb5f423525950b1cef837f295a46a617e9170253ea84e9aed157d9911327844d0d2716d6fbdc67ce94e9d6ab770ae63ad43b421d884fe5e34417adff4b185098a9ac487e0f549cc"}}}}}}, &(0x7f0000000680)={0x1, 0x2, [0x1d7, 0x60c, 0xafa, 0xdd7]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

13.334107876s ago: executing program 35 (id=1603):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0})
syz_emit_ethernet(0x266, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b192c6", 0x230, 0x21, 0x0, @local, @rand_addr=' \x01\x00', {[@routing={0x89, 0x8, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x6c, 0x2, 0x4, 0x1, 0xd, 0x70, 0x40, [@loopback]}, @routing={0x1c, 0x6, 0x0, 0x3, 0x0, [@private2, @mcast1, @remote]}, @routing={0x6, 0x14, 0x2, 0x6a, 0x0, [@loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @remote}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2, @loopback, @empty]}, @srh={0x89, 0x4, 0x4, 0x2, 0xb, 0x0, 0x2, [@local, @local]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x0, "a1187a", 0xd5, "4c4ef8"}, "eae8c9737a68c3f752981a32a8b69890e4a2aa2a364af39b31bfcdba157717216e4f8e98e24c787359d7691fc041fc002ecee80c5d4480c793c1fbf2f5719e8f8cb65ac01c1ef030ec971a872fdb6982aa68cf7857fe1e5906bb73a50f1a0e5d24892e6ad20dc8d16d6826394a20fd697bb5f423525950b1cef837f295a46a617e9170253ea84e9aed157d9911327844d0d2716d6fbdc67ce94e9d6ab770ae63ad43b421d884fe5e34417adff4b185098a9ac487e0f549cc"}}}}}}, &(0x7f0000000680)={0x1, 0x2, [0x1d7, 0x60c, 0xafa, 0xdd7]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

4.82343346s ago: executing program 3 (id=1680):
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
sendto$inet6(r1, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc8, 0x2}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/120, 0x78}], 0x1}, 0x9}], 0x1, 0x20, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000013080033d7"], 0x0, 0x2c, 0x0, 0x8}, 0x28)
write(r4, &(0x7f00000000c0)="730c19210f5edebf66456994306db54459eff7f25ae9d6e04bd538eb55d6c188ee5be1eac3395fe6ab0a2fe6bc9a00e59d117e143a4c9663a6bf9a5642293ed76d7c2da32ba4c417a72f894332e9c32759fec74d89ff40cb8a13e63f86b91d80eb7b11d3fa549af1a118a21c74f2bfe748f4b6710ebf0a76282fd190ff9db526dba5790a607bbb86ece6eea8adc852f742e67b2b0f0b35cc5b4116ea1cb7cdc32beca31000554a4c79e94c2f947712c56a797563013f42dc8d582a6f5c780395979ee26a71be8048ad01adccf426ea9db3bf8e11137d8afab8ed06d1917b432165bd811eee55fd9154428f49abb24a56dd4bb04bffa3", 0xf6)
rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000540)={0x3b, 0xea, 0x80})
semop(0x0, &(0x7f0000000040)=[{0x1, 0xe8c7, 0x1000}], 0x1)
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000080)=0x4)
semctl$IPC_RMID(0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x400, 0xfffff800, 0x4, 0x4, 0x6]}, &(0x7f0000000280)=0x54)

4.576748545s ago: executing program 1 (id=1681):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000200)='G', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3.908516311s ago: executing program 3 (id=1684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xfe}, {}, @ext={0x0, 0x0}}], 0x38)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
unshare(0x8020400)
writev(r1, 0x0, 0x0)
lseek(r1, 0x0, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r8 = semget$private(0x0, 0x4, 0x29b)
semop(r8, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, <r10=>0x0, <r11=>0x0}, &(0x7f0000000080)=0xc)
keyctl$chown(0x4, 0x0, r10, r11)
semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f00000010c0)={{0x3, 0x0, r11, r10, r11, 0x101, 0x6}, 0x3f9, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa2})
flistxattr(r9, &(0x7f0000000100)=""/22, 0x16)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0xe8, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x9, 0xfd, 0x4, 0x103, 0x6, 0x800}, [@RTA_SRC={0x8, 0x2, @remote}, @RTA_IIF={0x8, 0x3, r7}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_METRICS={0x92, 0x8, 0x0, 0x1, "2cf5177e6c869427fafa7f03bae8be3da6ec4f70a751676ffd8c95c93886d2b65ac675fd194d3e3bff0b68a61ac7447a1925bdffe40af1aaa187f4d7d4c61d0f0cf8371ea9327a674f3209e89dbcb4ea65e9747bcda54a4db4c3d20dea09a9c8e4318f5021df75721fbf0368b3910dd154ab49202a4bb120896b5067c65f62e981c4e428ed13801bb45cf18b5259"}, @RTA_MARK={0x8, 0x10, 0x2b2}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_UID={0x8, 0x19, r10}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4800}, 0x20004)
sendmmsg$inet(r5, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}}], 0x1, 0xc0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x78}}, 0x0)

3.612932758s ago: executing program 1 (id=1687):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000012b71487ccae23f6caef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c000000cb0000119078000000000000000003004e2000089078"], 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
recvmmsg(r3, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x7}], 0x1, 0x40010140, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000400000000000000ff00100004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff040000000000e8df4689af58510082fcfa8c371500000000000000000000000000813f0393bf193fbac4b0a90a58b8bf05c7d95f58908598bc6db27485ef"], 0x50)
pwrite64(r4, &(0x7f0000000000)='10001', 0x5, 0x0)

3.342264133s ago: executing program 7 (id=1691):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0xa, 0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
socket(0xa, 0x5, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r4 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c, 0x0, r3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:mnt_t:s0\x00', 0x1b)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x23e}, 0x8)
close(0x3)

2.759628587s ago: executing program 1 (id=1695):
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
sendto$inet6(r1, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc8, 0x2}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/120, 0x78}], 0x1}, 0x9}], 0x1, 0x20, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000013080033d7"], 0x0, 0x2c, 0x0, 0x8}, 0x28)
write(r4, &(0x7f00000000c0)="730c19210f5edebf66456994306db54459eff7f25ae9d6e04bd538eb55d6c188ee5be1eac3395fe6ab0a2fe6bc9a00e59d117e143a4c9663a6bf9a5642293ed76d7c2da32ba4c417a72f894332e9c32759fec74d89ff40cb8a13e63f86b91d80eb7b11d3fa549af1a118a21c74f2bfe748f4b6710ebf0a76282fd190ff9db526dba5790a607bbb86ece6eea8adc852f742e67b2b0f0b35cc5b4116ea1cb7cdc32beca31000554a4c79e94c2f947712c56a797563013f42dc8d582a6f5c780395979ee26a71be8048ad01adccf426ea9db3bf8e11137d8afab8ed06d1917b432165bd811eee55fd9154428f49abb24a56dd4bb04bffa3", 0xf6)
rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000540)={0x3b, 0xea, 0x80})
r5 = semget$private(0x0, 0x7, 0x191)
semtimedop(r5, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semop(r5, &(0x7f0000000040)=[{0x1, 0xe8c7, 0x1000}], 0x1)
semctl$IPC_RMID(r5, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x400, 0xfffff800, 0x4, 0x4, 0x6]}, &(0x7f0000000280)=0x54)

2.759276637s ago: executing program 3 (id=1696):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x1074cc, 0x3fc, 0xfff7fffc, 0x0, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x4}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r3 = socket$inet6(0x10, 0x800, 0x4)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn")
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r5, &(0x7f0000000a00)="c7", 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x408, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x2a0, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_xfrm(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=@getsa={0x1a8, 0x12, 0x400, 0x70bd28, 0x25dfdbfd, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x2, 0x32}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd25, 0x70bd25, 0x70bd2b, 0x70bd28, 0xde9a, [0x7, 0x200, 0x1, 0x5, 0x1, 0x13, 0x3, 0x2]}}, @etimer_thresh={0x8, 0xc, 0x42}, @proto={0x5, 0x19, 0xff}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xa}}, @lastused={0xc, 0xf, 0x10000}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @lifetime_val={0x24, 0x9, {0x6, 0x101, 0xeedc, 0x7fffffffffffffff}}, @algo_auth={0xa7, 0x1, {{'wp512\x00'}, 0x2f8, "7617bed44a00b7f7d40eb1461d41c38a068e0b5866c8bc60aae791b55414ff4c7dc8b11cc3cdecc34d7abaa80b440bb57e07240456c4aaef062e45a76c194995f584903ebd1338c547c7983383505b0415e2216da3f956a574c2774d942b06"}}, @lifetime_val={0x24, 0x9, {0x4, 0x10000, 0x0, 0xe}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x810, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)

2.483527593s ago: executing program 7 (id=1697):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000200)='G', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1.906635296s ago: executing program 6 (id=1702):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xbd92299a9e00195f)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200080, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48e, 0x8861}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000)

1.854619328s ago: executing program 1 (id=1703):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x80)
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x200000, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.854139327s ago: executing program 6 (id=1704):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000100000018000000180000000a0000000000000001"], 0x0, 0x4b, 0x0, 0x2000001, 0x6}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r0 = epoll_create(0x4)
r1 = socket(0x28, 0x801, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x30000010})
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$eventfd(r2, &(0x7f0000000100), 0x8)

1.829090228s ago: executing program 6 (id=1705):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.711652031s ago: executing program 3 (id=1706):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000012b71487ccae23f6caef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c000000cb0000119078000000000000000003004e2000089078"], 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
recvmmsg(r3, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x7}], 0x1, 0x40010140, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000400000000000000ff00100004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff040000000000e8df4689af58510082fcfa8c371500000000000000000000000000813f0393bf193fbac4b0a90a58b8bf05c7d95f58908598bc6db27485ef"], 0x50)
pwrite64(r4, &(0x7f0000000000)='10001', 0x5, 0x0)

1.702392961s ago: executing program 6 (id=1707):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0xa, 0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
socket(0xa, 0x5, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r4 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c, 0x0, r3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:mnt_t:s0\x00', 0x1b)
shutdown(r1, 0x1)
close(0x3)

1.626668132s ago: executing program 3 (id=1708):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0xa, 0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
socket(0xa, 0x5, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r3 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c, 0x0, r2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.175092943s ago: executing program 7 (id=1709):
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
sendto$inet6(r1, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc8, 0x2}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/120, 0x78}], 0x1}, 0x9}], 0x1, 0x20, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000013080033d7"], 0x0, 0x2c, 0x0, 0x8}, 0x28)
write(r4, &(0x7f00000000c0)="730c19210f5edebf66456994306db54459eff7f25ae9d6e04bd538eb55d6c188ee5be1eac3395fe6ab0a2fe6bc9a00e59d117e143a4c9663a6bf9a5642293ed76d7c2da32ba4c417a72f894332e9c32759fec74d89ff40cb8a13e63f86b91d80eb7b11d3fa549af1a118a21c74f2bfe748f4b6710ebf0a76282fd190ff9db526dba5790a607bbb86ece6eea8adc852f742e67b2b0f0b35cc5b4116ea1cb7cdc32beca31000554a4c79e94c2f947712c56a797563013f42dc8d582a6f5c780395979ee26a71be8048ad01adccf426ea9db3bf8e11137d8afab8ed06d1917b432165bd811eee55fd9154428f49abb24a56dd4bb04bffa3", 0xf6)
r5 = semget$private(0x0, 0x7, 0x191)
semop(r5, &(0x7f0000000040)=[{0x1, 0xe8c7, 0x1000}], 0x1)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000080)=0x4)
semctl$IPC_RMID(r5, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x400, 0xfffff800, 0x4, 0x4, 0x6]}, &(0x7f0000000280)=0x54)

910.616629ms ago: executing program 8 (id=1712):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e23, @loopback}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000054009c7c76a0ae0100"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x2040400)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x10e80, 0x0, 0x0)
r4 = socket(0x1e, 0x80000, 0x20000)
setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0x4}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, &(0x7f0000000240))
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @remote, 0xc}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

909.246159ms ago: executing program 1 (id=1713):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000000)=[{r4, 0x8520}, {r4, 0x20}], 0x2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
socket$inet6(0xa, 0x3, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8)
r5 = socket$inet6(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x8}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8800000000000004}, 0x1040, 0x2, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r7, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000440)={0x2359, <r8=>r5, 'id0\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="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"], 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0xd4, r10, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffffa, 0x80000)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0)

832.225511ms ago: executing program 6 (id=1714):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x4}, 0x1024}, 0x0, 0xffffffffffffffff, r0, 0x9)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x3, 0x232, &(0x7f0000000640)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/59, 0x5e)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socketpair(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c4d40c9fc564e0bbfc7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e69f603ff0e80677eeba68562eb8ae2bcd87cef9000000a39c15a7ef365cc27dfeac7bb40e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19e9b5381791cbf0ceb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc08c2daa235197f1496679a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b1105696904fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d00"/382], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0x3}, 0x20)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0)
sendfile(r4, r4, 0x0, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x100}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b9010360fe40f000009e0ff008001fffffe1000087e9450077fbac141411ac1414e0be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x10c, 0xe, &(0x7f0000000400)="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", &(0x7f0000000100)="7c39f4f3a474a187f0e9a8aeeddd", 0x0, 0x0, 0xffffffff}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x2, 0x7fff7ffc}]})
mount_setattr(0xffffffffffffffff, 0x0, 0x180, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
unshare(0x42000000)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$rds(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r6 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0xa010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4000000002}, 0x0, 0xffffffffffffffff, r4, 0xa)
r7 = getpid()
fcntl$setownex(r6, 0xf, &(0x7f0000000240)={0x2, r7})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000280))
r8 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
fsetxattr$system_posix_acl(r8, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

775.693452ms ago: executing program 8 (id=1715):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000100000018000000180000000a0000000000000001"], 0x0, 0x4b, 0x0, 0x2000001, 0x6}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r0 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x30000010})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000100), 0x8)

748.594552ms ago: executing program 6 (id=1716):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x1074cc, 0x3fc, 0xfff7fffc, 0x0, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x4}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r3 = socket$inet6(0x10, 0x800, 0x4)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn")
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r5, &(0x7f0000000a00)="c7", 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x408, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x2a0, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_xfrm(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=@getsa={0x1a8, 0x12, 0x400, 0x70bd28, 0x25dfdbfd, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x2, 0x32}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd25, 0x70bd25, 0x70bd2b, 0x70bd28, 0xde9a, [0x7, 0x200, 0x1, 0x5, 0x1, 0x13, 0x3, 0x2]}}, @etimer_thresh={0x8, 0xc, 0x42}, @proto={0x5, 0x19, 0xff}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xa}}, @lastused={0xc, 0xf, 0x10000}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @lifetime_val={0x24, 0x9, {0x6, 0x101, 0xeedc, 0x7fffffffffffffff}}, @algo_auth={0xa7, 0x1, {{'wp512\x00'}, 0x2f8, "7617bed44a00b7f7d40eb1461d41c38a068e0b5866c8bc60aae791b55414ff4c7dc8b11cc3cdecc34d7abaa80b440bb57e07240456c4aaef062e45a76c194995f584903ebd1338c547c7983383505b0415e2216da3f956a574c2774d942b06"}}, @lifetime_val={0x24, 0x9, {0x4, 0x10000, 0x0, 0xe}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x810, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)

745.573893ms ago: executing program 8 (id=1717):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

720.849554ms ago: executing program 8 (id=1718):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000000)='10001', 0x5, 0x0)

668.596634ms ago: executing program 8 (id=1719):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000a00)={<r3=>0x0, 0x1000, "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"}, &(0x7f0000001a40)=0x1008)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001a80)={r3, 0x5, 0x10}, 0x8)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

668.347534ms ago: executing program 8 (id=1720):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000200)='G', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

345.507592ms ago: executing program 3 (id=1721):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0xa, 0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
socket(0xa, 0x5, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r3 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c, 0x0, r2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x23e}, 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x7, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0)
close(0x3)

287.505834ms ago: executing program 7 (id=1722):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000017c0)=0x7fffffff, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00')
pread64(r2, &(0x7f0000002180)=""/4105, 0x137, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800003, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x6, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3a, 0x0, 0x8}, 0x20)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, [0x4444b081, 0x2, 0x80000000, 0x7, 0x400, 0xcb, 0x3, 0x6, 0x80000001, 0x4, 0x2, 0xba6c, 0xa1b, 0x5d5ee9c5, 0x2]}, &(0x7f0000000340)=0x100)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x15, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x2, 0x3})
fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xfff3}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
unshare(0x40400)
sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007000)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x11)

133.668757ms ago: executing program 7 (id=1723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x3c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x600, 0x0, 0x44000}, 0x20040844)

61.730999ms ago: executing program 7 (id=1724):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x80)
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x200000, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=1725):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0xa, 0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
socket(0xa, 0x5, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r4 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c, 0x0, r3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:mnt_t:s0\x00', 0x1b)
close(0x3)

kernel console output (not intermixed with test programs):

6884 comm="syz.1.1037" name="NETLINK" dev="sockfs" ino=17585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  104.568809][   T28] audit: type=1400 audit(1787137227.721:1786): avc:  denied  { relabelto } for  pid=6884 comm="syz.1.1037" name="NETLINK" dev="sockfs" ino=17585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon=""
[  104.607546][   T28] audit: type=1326 audit(1787137227.771:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff58e1e0d9 code=0x7ffc0000
[  104.638523][   T28] audit: type=1326 audit(1787137227.771:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.1.1037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff58e1e0d9 code=0x7ffc0000
[  104.798980][ T6898] loop5: detected capacity change from 0 to 512
[  104.799945][ T6901] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  104.855586][ T6898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.872789][ T6898] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.647055][ T6918] loop4: detected capacity change from 0 to 128
[  105.764893][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.820296][ T6924] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  105.835769][ T6926] netlink: 'syz.5.1049': attribute type 5 has an invalid length.
[  105.836222][ T6924] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1051: iget: bad i_size value: 360287970189639680
[  105.873514][ T6924] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  105.873713][ T6924] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1051: couldn't read orphan inode 15 (err -117)
[  105.882888][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  105.882905][    C1] EXT4-fs (loop4): initial error at time 1787137229: ext4_orphan_get:1399: inode 15
[  105.882936][    C1] EXT4-fs (loop4): last error at time 1787137229: ext4_orphan_get:1399: inode 15
[  105.987175][ T6924] loop4: lost filesystem error report for type 5 error -117
[  105.987811][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.253350][   T28] kauditd_printk_skb: 124 callbacks suppressed
[  106.253381][   T28] audit: type=1400 audit(1787137229.431:1913): avc:  denied  { ioctl } for  pid=6939 comm="syz.0.1054" path="socket:[17699]" dev="sockfs" ino=17699 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  106.300373][ T6940] SELinux:  Context ¼OPcÕÇ™»žÅè?‰s�ÞUâ²Éì^tú”Q`wê�&ò˜m
[  106.300373][ T6940] ¤ù¡×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i
†jÏÉ’
%Ø‘ÙfËíîYjwõÔLÝ�˜»ã8ôÇݱábV:±vÓiý	 is not valid (left unmapped).
[  106.321249][   T28] audit: type=1400 audit(1787137229.501:1914): avc:  denied  { relabelto } for  pid=6939 comm="syz.0.1054" name="bus" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09
[  106.368632][   T28] audit: type=1400 audit(1787137229.501:1915): avc:  denied  { associate } for  pid=6939 comm="syz.0.1054" name="bus" dev="tmpfs" ino=1148 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09
[  106.425045][   T28] audit: type=1400 audit(1787137229.601:1916): avc:  denied  { unlink } for  pid=3294 comm="syz-executor" name="bus" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09
[  106.488332][ T6946] FAULT_INJECTION: forcing a failure.
[  106.488332][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.503484][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: syz.0.1055 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  106.503517][ T6946] Tainted: [W]=WARN
[  106.503524][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.503592][ T6946] Call Trace:
[  106.503599][ T6946]  <TASK>
[  106.503607][ T6946]  __dump_stack+0x1d/0x30
[  106.503633][ T6946]  dump_stack_lvl+0x95/0xd0
[  106.503676][ T6946]  dump_stack+0x15/0x1b
[  106.503732][ T6946]  should_fail_ex+0x262/0x280
[  106.503765][ T6946]  should_fail+0xb/0x20
[  106.503874][ T6946]  should_fail_usercopy+0x1a/0x20
[  106.503908][ T6946]  _copy_from_user+0x1c/0xb0
[  106.503929][ T6946]  kstrtouint_from_user+0x69/0xf0
[  106.503990][ T6946]  ? 0xffffffff81000000
[  106.504005][ T6946]  ? avc_policy_seqno+0x15/0x30
[  106.504040][ T6946]  proc_fail_nth_write+0x50/0x160
[  106.504074][ T6946]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  106.504148][ T6946]  vfs_write+0x254/0x9a0
[  106.504230][ T6946]  ? __fget_files+0x184/0x1c0
[  106.504305][ T6946]  ? mutex_lock+0x57/0x90
[  106.504326][ T6946]  ksys_write+0xdc/0x1a0
[  106.504359][ T6946]  __x64_sys_write+0x40/0x50
[  106.504384][ T6946]  x64_sys_call+0x154e/0x2550
[  106.504411][ T6946]  do_syscall_64+0x112/0x360
[  106.504444][ T6946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.504534][ T6946] RIP: 0033:0x7f327ddae90e
[  106.504552][ T6946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  106.504571][ T6946] RSP: 002b:00007f327c846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  106.504594][ T6946] RAX: ffffffffffffffda RBX: 00007f327c8476c0 RCX: 00007f327ddae90e
[  106.504609][ T6946] RDX: 0000000000000001 RSI: 00007f327c8470a0 RDI: 0000000000000004
[  106.504624][ T6946] RBP: 00007f327c847090 R08: 0000000000000000 R09: 0000000000000000
[  106.504707][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.504721][ T6946] R13: 00007f327e076038 R14: 00007f327e075fa0 R15: 00007ffdab1a0348
[  106.504805][ T6946]  </TASK>
[  106.754908][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.780820][ T6954] set_capacity_and_notify: 1 callbacks suppressed
[  106.780899][ T6954] loop4: detected capacity change from 0 to 512
[  106.830380][ T6952] __nla_validate_parse: 8 callbacks suppressed
[  106.830404][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'.
[  106.855781][ T6954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.877868][ T6954] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.942444][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'.
[  107.175285][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1059'.
[  107.642177][   T28] audit: type=1400 audit(1787137230.821:1917): avc:  denied  { recv } for  pid=6985 comm="modprobe" saddr=10.128.0.163 src=30036 daddr=10.128.1.62 dest=53436 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  107.691114][ T6982] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  107.697695][ T6982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  107.713389][ T6982] vhci_hcd vhci_hcd.0: Device attached
[  107.768428][ T6989] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[  107.770543][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.784708][   T30] vhci_hcd vhci_hcd.5: stop threads
[  107.790430][   T30] vhci_hcd vhci_hcd.5: release socket
[  107.799086][   T30] vhci_hcd vhci_hcd.5: disconnect device
[  107.838737][ T6996] loop4: detected capacity change from 0 to 128
[  107.903397][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'.
[  107.918182][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1070'.
[  108.347523][ T7028] loop4: detected capacity change from 0 to 512
[  108.388511][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.418991][ T7028] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.450307][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'.
[  108.634757][ T7038] loop5: detected capacity change from 0 to 512
[  108.696114][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'.
[  109.128825][ T7038] EXT4-fs: Ignoring removed oldalloc option
[  109.146805][ T7038] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1084: bad orphan inode 15
[  109.170847][ T7038] loop5: lost filesystem error report for type 5 error -117
[  109.171025][ T7038] ext4_test_bit(bit=14, block=5) = 0
[  109.183653][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  109.183690][    C0] EXT4-fs (loop5): initial error at time 1787137232: ext4_orphan_get:1425
[  109.183718][    C0] EXT4-fs (loop5): last error at time 1787137232: ext4_orphan_get:1425
[  109.209926][ T7038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.232696][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'.
[  109.282976][ T7047] bridge0: entered promiscuous mode
[  109.288417][ T7047] bridge0: entered allmulticast mode
[  109.296676][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.298101][   T28] audit: type=1400 audit(1787137232.471:1918): avc:  denied  { write } for  pid=7052 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  109.361418][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.453722][ T7072] loop4: detected capacity change from 0 to 4096
[  109.459444][ T7069] sch_tbf: peakrate 11 is lower than or equals to rate 2048 !
[  109.478632][ T7072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.491381][ T7069] loop5: detected capacity change from 0 to 2048
[  109.502565][   T28] audit: type=1400 audit(1787137232.681:1919): avc:  denied  { write } for  pid=7071 comm="syz.4.1098" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  109.634492][ T7082] bridge4: entered promiscuous mode
[  109.937433][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'.
[  109.980814][ T7097] netlink: 'syz.5.1101': attribute type 4 has an invalid length.
[  110.112040][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'.
[  110.525362][ T7106] loop5: detected capacity change from 0 to 512
[  110.576444][ T7106] EXT4-fs: Ignoring removed oldalloc option
[  110.611823][ T7106] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1104: bad orphan inode 15
[  110.658215][ T7106] loop5: lost filesystem error report for type 5 error -117
[  110.661373][ T7106] ext4_test_bit(bit=14, block=5) = 0
[  110.674279][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  110.674295][    C1] EXT4-fs (loop5): initial error at time 1787137233: ext4_orphan_get:1425
[  110.674319][    C1] EXT4-fs (loop5): last error at time 1787137233: ext4_orphan_get:1425
[  110.708949][ T7106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.759150][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.831361][   T28] audit: type=1400 audit(1787137234.011:1920): avc:  denied  { connect } for  pid=7122 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  110.860737][ T7120] bridge0: port 3(syz_tun) entered disabled state
[  110.867365][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.874736][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.877106][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.911144][ T7128] bridge0: port 3(syz_tun) entered blocking state
[  110.917618][ T7128] bridge0: port 3(syz_tun) entered forwarding state
[  110.924385][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.931481][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.938822][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.946007][ T7128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.954626][ T7128] bridge0: entered promiscuous mode
[  110.960133][ T7128] bridge0: entered allmulticast mode
[  110.973986][ T7132] bridge2: entered promiscuous mode
[  111.043877][ T7134] netlink: 'syz.1.1113': attribute type 4 has an invalid length.
[  111.135597][ T7145] loop5: detected capacity change from 0 to 4096
[  111.163753][ T7145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.212891][   T28] audit: type=1400 audit(1787137234.381:1921): avc:  denied  { write } for  pid=7144 comm="syz.5.1117" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  111.975097][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.017569][ T7186] __nla_validate_parse: 3 callbacks suppressed
[  112.017584][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'.
[  112.254035][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'.
[  112.412926][ T7198] loop5: detected capacity change from 0 to 128
[  112.654707][   T28] audit: type=1400 audit(1787137235.361:1922): avc:  denied  { append } for  pid=7189 comm="syz.0.1129" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  112.679078][   T28] audit: type=1400 audit(1787137235.361:1923): avc:  denied  { open } for  pid=7189 comm="syz.0.1129" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  112.710500][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1131'.
[  112.773783][ T7210] loop5: detected capacity change from 0 to 128
[  112.824678][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'.
[  112.861390][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'.
[  112.873447][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'.
[  112.885415][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'.
[  112.897577][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'.
[  112.917119][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'.
[  112.931958][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'.
[  112.963976][ T7218] bridge0: port 3(syz_tun) entered disabled state
[  112.978005][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.044618][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.058247][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.119849][ T5657] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.140037][ T5657] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.149030][ T5657] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.170748][ T5657] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.793012][ T7252] netlink: 'syz.4.1142': attribute type 4 has an invalid length.
[  113.918850][ T7258] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.931518][ T7258] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  113.942199][ T7258] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  114.130780][ T7277] loop5: detected capacity change from 0 to 256
[  114.651847][ T7284] loop4: detected capacity change from 0 to 128
[  115.345804][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.352982][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.787910][ T7313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64272 sclass=netlink_route_socket pid=7313 comm=syz.1.1161
[  115.837948][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.854979][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.961951][ T5657] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.987548][ T5657] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.018375][ T5657] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.027552][ T5657] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.076320][ T7338] loop4: detected capacity change from 0 to 128
[  116.134028][   T28] audit: type=1400 audit(1787137241.305:1924): avc:  denied  { ioctl } for  pid=7342 comm="syz.3.1167" path="socket:[19730]" dev="sockfs" ino=19730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  116.186452][ T7346] netlink: 'syz.5.1165': attribute type 4 has an invalid length.
[  116.289070][   T28] audit: type=1400 audit(1787137241.455:1925): avc:  denied  { ioctl } for  pid=7354 comm="syz.4.1169" path="socket:[19765]" dev="sockfs" ino=19765 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  116.472275][ T7361] loop4: detected capacity change from 0 to 4096
[  117.000457][ T7361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.034370][   T28] audit: type=1400 audit(1787137242.205:1926): avc:  denied  { write } for  pid=7360 comm="syz.4.1171" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  117.338004][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.368745][ T7332] Invalid ELF header magic: != ELF
[  117.373093][   T28] audit: type=1400 audit(1787137242.535:1927): avc:  denied  { module_load } for  pid=7331 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  117.394720][ T7376] loop5: detected capacity change from 0 to 512
[  117.418711][ T7376] EXT4-fs: Ignoring removed oldalloc option
[  117.434885][ T7376] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1177: bad orphan inode 15
[  117.451171][ T7376] loop5: lost filesystem error report for type 5 error -117
[  117.452560][ T7376] ext4_test_bit(bit=14, block=5) = 0
[  117.459948][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  117.459969][    C0] EXT4-fs (loop5): initial error at time 1787137242: ext4_orphan_get:1425
[  117.460011][    C0] EXT4-fs (loop5): last error at time 1787137242: ext4_orphan_get:1425
[  117.486913][ T7378] __nla_validate_parse: 296 callbacks suppressed
[  117.486936][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'.
[  117.501582][ T7376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.610549][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.745514][ T7401] FAULT_INJECTION: forcing a failure.
[  117.745514][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.781260][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.0.1185 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  117.781321][ T7401] Tainted: [W]=WARN
[  117.781329][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  117.781342][ T7401] Call Trace:
[  117.781348][ T7401]  <TASK>
[  117.781355][ T7401]  __dump_stack+0x1d/0x30
[  117.781376][ T7401]  dump_stack_lvl+0x95/0xd0
[  117.781395][ T7401]  dump_stack+0x15/0x1b
[  117.781477][ T7401]  should_fail_ex+0x262/0x280
[  117.781506][ T7401]  should_fail+0xb/0x20
[  117.781613][ T7401]  should_fail_usercopy+0x1a/0x20
[  117.781667][ T7401]  _copy_from_user+0x1c/0xb0
[  117.781720][ T7401]  __se_sys_move_pages+0xeb6/0x1510
[  117.781758][ T7401]  ? get_pid_task+0x92/0xc0
[  117.781786][ T7401]  ? mutex_unlock+0x4e/0x90
[  117.781806][ T7401]  ? fput+0x91/0xc0
[  117.781837][ T7401]  ? ksys_write+0x194/0x1a0
[  117.781961][ T7401]  __x64_sys_move_pages+0x78/0x90
[  117.781986][ T7401]  x64_sys_call+0x183d/0x2550
[  117.782008][ T7401]  do_syscall_64+0x112/0x360
[  117.782033][ T7401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.782065][ T7401] RIP: 0033:0x7f327ddee0d9
[  117.782080][ T7401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.782095][ T7401] RSP: 002b:00007f327c847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  117.782147][ T7401] RAX: ffffffffffffffda RBX: 00007f327e075fa0 RCX: 00007f327ddee0d9
[  117.782159][ T7401] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000
[  117.782174][ T7401] RBP: 00007f327c847090 R08: 0000200000000040 R09: 0000000000000000
[  117.782189][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.782205][ T7401] R13: 00007f327e076038 R14: 00007f327e075fa0 R15: 00007ffdab1a0348
[  117.782229][ T7401]  </TASK>
[  117.969756][ T7403] loop5: detected capacity change from 0 to 4096
[  117.993671][ T7403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.021172][   T28] audit: type=1400 audit(1787137243.175:1928): avc:  denied  { write } for  pid=7402 comm="syz.5.1186" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  118.139964][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'.
[  118.378423][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'.
[  118.647932][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'.
[  118.811272][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.822746][ T7438] loop4: detected capacity change from 0 to 128
[  118.831983][ T7438] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.854392][ T7438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.875795][ T7444] loop5: detected capacity change from 0 to 128
[  118.889074][ T7444] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.910269][ T7444] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.068280][ T3437] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.095198][ T7453] loop4: detected capacity change from 0 to 128
[  119.112812][ T7456] FAULT_INJECTION: forcing a failure.
[  119.112812][ T7456] name failslab, interval 1, probability 0, space 0, times 0
[  119.117195][ T7453] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.125709][ T7456] CPU: 0 UID: 0 PID: 7456 Comm: syz.5.1199 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  119.125819][ T7456] Tainted: [W]=WARN
[  119.125827][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.125841][ T7456] Call Trace:
[  119.125874][ T7456]  <TASK>
[  119.125882][ T7456]  __dump_stack+0x1d/0x30
[  119.125908][ T7456]  dump_stack_lvl+0x95/0xd0
[  119.125930][ T7456]  dump_stack+0x15/0x1b
[  119.125951][ T7456]  should_fail_ex+0x262/0x280
[  119.126023][ T7456]  should_failslab+0x8c/0xb0
[  119.126051][ T7456]  __kvmalloc_node_noprof+0x15b/0x590
[  119.126082][ T7456]  ? traverse+0x9c/0x3b0
[  119.126111][ T7456]  ? traverse+0x9c/0x3b0
[  119.126136][ T7456]  traverse+0x9c/0x3b0
[  119.126156][ T7456]  ? lockref_put_return+0xf7/0x130
[  119.126191][ T7456]  seq_read_iter+0x7dc/0x8f0
[  119.126239][ T7456]  seq_read+0x279/0x2c0
[  119.126267][ T7456]  ? __pfx_seq_read+0x10/0x10
[  119.126348][ T7456]  proc_reg_read+0x128/0x1c0
[  119.126370][ T7456]  ? __pfx_proc_reg_read+0x10/0x10
[  119.126471][ T7456]  vfs_readv+0x417/0x6d0
[  119.126580][ T7456]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  119.126618][ T7456]  __x64_sys_preadv+0xfd/0x1c0
[  119.126707][ T7456]  x64_sys_call+0x20e8/0x2550
[  119.126736][ T7456]  do_syscall_64+0x112/0x360
[  119.126765][ T7456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.126788][ T7456] RIP: 0033:0x7f99b1a6e0d9
[  119.126805][ T7456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.126866][ T7456] RSP: 002b:00007f99b04a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  119.126887][ T7456] RAX: ffffffffffffffda RBX: 00007f99b1cf6090 RCX: 00007f99b1a6e0d9
[  119.126903][ T7456] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000009
[  119.126917][ T7456] RBP: 00007f99b04a6090 R08: 0000000020000000 R09: 0000000000000000
[  119.126932][ T7456] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  119.126946][ T7456] R13: 00007f99b1cf6128 R14: 00007f99b1cf6090 R15: 00007ffce1179218
[  119.126976][ T7456]  </TASK>
[  119.361311][ T7453] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.416109][   T28] audit: type=1400 audit(1787137244.585:1929): avc:  denied  { mounton } for  pid=7452 comm="syz.4.1204" path="/224/file1/my_sys" dev="loop4" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  119.490590][ T3295] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  119.499200][ T3295] FAT-fs (loop4): Filesystem has been set read-only
[  119.509950][ T3295] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  119.546020][ T4365] bridge0: port 3(syz_tun) entered disabled state
[  119.560967][ T4365] syz_tun (unregistering): left allmulticast mode
[  119.567635][ T4365] syz_tun (unregistering): left promiscuous mode
[  119.579866][ T4365] bridge0: port 3(syz_tun) entered disabled state
[  119.672776][ T4365] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.707041][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'.
[  119.729134][   T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.748663][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'.
[  119.863372][ T5657] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.880749][   T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.984092][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'.
[  120.399119][   T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.465554][ T7492] loop5: detected capacity change from 0 to 512
[  120.486795][   T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.499800][ T7492] ext4: Bad value for 'min_batch_time'
[  120.603710][   T30] bridge_slave_1: left allmulticast mode
[  120.612721][   T30] bridge_slave_1: left promiscuous mode
[  120.676682][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.696404][   T30] bridge_slave_0: left allmulticast mode
[  120.702106][   T30] bridge_slave_0: left promiscuous mode
[  120.707799][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.738856][   T28] audit: type=1400 audit(1787137245.905:1930): avc:  denied  { write } for  pid=7512 comm="syz.5.1220" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  120.774706][ T7514] netlink: 'syz.5.1220': attribute type 10 has an invalid length.
[  120.785663][   T28] audit: type=1400 audit(1787137245.955:1931): avc:  denied  { write } for  pid=7500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.811198][ T7514] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1220'.
[  120.841501][   T28] audit: type=1400 audit(1787137245.985:1932): avc:  denied  { write } for  pid=7522 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.887874][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.908802][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.923176][   T30] bond0 (unregistering): Released all slaves
[  120.951039][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5
[  121.002733][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.012844][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.020752][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.037139][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.065066][   T30] veth1_macvtap: left promiscuous mode
[  121.070907][   T30] veth0_macvtap: left promiscuous mode
[  121.076548][   T30] veth1_vlan: left promiscuous mode
[  121.081854][   T30] veth0_vlan: left promiscuous mode
[  121.116376][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'.
[  121.172804][   T30] team0 (unregistering): Port device team_slave_1 removed
[  121.182528][   T30] team0 (unregistering): Port device team_slave_0 removed
[  121.292233][ T7544] loop5: detected capacity change from 0 to 512
[  121.324828][ T7544] EXT4-fs: Ignoring removed oldalloc option
[  121.385729][ T7544] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1227: bad orphan inode 15
[  121.420120][ T7544] loop5: lost filesystem error report for type 5 error -117
[  121.420447][ T7544] ext4_test_bit(bit=14, block=5) = 0
[  121.429753][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  121.439852][    C0] EXT4-fs (loop5): initial error at time 1787137246: ext4_orphan_get:1425
[  121.449032][    C0] EXT4-fs (loop5): last error at time 1787137246: ext4_orphan_get:1425
[  121.470853][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'.
[  121.471659][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.480311][ T7544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.502111][   T28] audit: type=1400 audit(1787137246.665:1933): avc:  denied  { write } for  pid=7549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.526279][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.542025][ T7480] bridge_slave_0: entered allmulticast mode
[  121.643574][   T28] audit: type=1400 audit(1787137246.705:1934): avc:  denied  { write } for  pid=7567 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.646480][ T7480] bridge_slave_0: entered promiscuous mode
[  121.672545][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.680550][ T7547] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  121.691434][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.701679][ T7480] bridge_slave_1: entered allmulticast mode
[  121.706574][   T28] audit: type=1400 audit(1787137246.865:1935): avc:  denied  { relabelto } for  pid=7545 comm="syz.3.1228" name="267" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  121.713947][ T7480] bridge_slave_1: entered promiscuous mode
[  121.756349][   T28] audit: type=1400 audit(1787137246.865:1936): avc:  denied  { associate } for  pid=7545 comm="syz.3.1228" name="267" dev="tmpfs" ino=1435 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  121.792559][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6
[  121.859418][ T7547] netlink: 'syz.3.1228': attribute type 1 has an invalid length.
[  121.891578][   T28] audit: type=1400 audit(1787137246.875:1937): avc:  denied  { write } for  pid=7545 comm="syz.3.1228" name="267" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  121.923804][ T7480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.940069][ T7480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.033334][ T7547] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.153306][ T7480] team0: Port device team_slave_0 added
[  122.169172][ T7480] team0: Port device team_slave_1 added
[  122.179979][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.188678][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.195970][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.221870][ T7480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.233094][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.240062][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.266375][ T7480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.330009][ T7480] hsr_slave_0: entered promiscuous mode
[  122.348829][ T7590] loop5: detected capacity change from 0 to 4096
[  122.355953][ T7480] hsr_slave_1: entered promiscuous mode
[  122.389754][ T7590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.433331][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7
[  122.667829][ T7480] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  122.668990][ T7609] __nla_validate_parse: 1 callbacks suppressed
[  122.669013][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'.
[  122.693355][ T7480] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  122.708864][ T7480] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  122.754762][ T7480] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  122.763318][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  122.793691][ T7480] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  122.836242][ T7480] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  122.848591][ T7480] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  122.874665][ T7480] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  122.914501][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  122.941447][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1242'.
[  122.950261][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.963834][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  122.984519][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1242'.
[  123.003142][ T7480] 8021q: adding VLAN 0 to HW filter on device team0
[  123.038093][  T414] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.045184][  T414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.076371][ T7480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.101485][ T7480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.118548][  T414] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.125651][  T414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.140342][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  123.140388][   T28] audit: type=1400 audit(1787137248.315:1956): avc:  denied  { egress } for  pid=7316 comm="kworker/1:9" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  123.205435][   T28] audit: type=1400 audit(1787137248.315:1957): avc:  denied  { sendto } for  pid=7316 comm="kworker/1:9" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  123.245352][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.330152][ T7665] loop5: detected capacity change from 0 to 512
[  123.353916][ T7665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  123.390679][ T7665] EXT4-fs (loop5): 1 truncate cleaned up
[  123.396885][ T7665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.428013][   T28] audit: type=1400 audit(1787137248.595:1958): avc:  denied  { write } for  pid=7664 comm="syz.5.1245" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  123.431650][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.510295][   T28] audit: type=1400 audit(1787137248.685:1959): avc:  denied  { map } for  pid=7664 comm="syz.5.1245" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  123.592909][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'.
[  123.622534][   T28] audit: type=1400 audit(1787137248.725:1960): avc:  denied  { ioctl } for  pid=7664 comm="syz.5.1245" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop5" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  123.696965][ T4680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.817489][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'.
[  123.847067][ T7694] loop5: detected capacity change from 0 to 128
[  124.058335][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'.
[  124.236729][ T7707] netlink: 'syz.1.1252': attribute type 4 has an invalid length.
[  124.313147][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'.
[  124.316140][ T7719] FAULT_INJECTION: forcing a failure.
[  124.316140][ T7719] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.323082][ T7480] veth0_vlan: entered promiscuous mode
[  124.347103][ T7480] veth1_vlan: entered promiscuous mode
[  124.353287][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1255'.
[  124.359778][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.1.1256 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  124.359861][ T7719] Tainted: [W]=WARN
[  124.359868][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.359881][ T7719] Call Trace:
[  124.359887][ T7719]  <TASK>
[  124.359895][ T7719]  __dump_stack+0x1d/0x30
[  124.359920][ T7719]  dump_stack_lvl+0x95/0xd0
[  124.360023][ T7719]  dump_stack+0x15/0x1b
[  124.360043][ T7719]  should_fail_ex+0x262/0x280
[  124.360074][ T7719]  should_fail+0xb/0x20
[  124.360100][ T7719]  should_fail_usercopy+0x1a/0x20
[  124.360194][ T7719]  _copy_from_iter+0xcc/0xe70
[  124.360225][ T7719]  ? __alloc_skb+0x516/0x6f0
[  124.360256][ T7719]  ? __alloc_skb+0x209/0x6f0
[  124.360332][ T7719]  netlink_sendmsg+0x4a4/0x6f0
[  124.360391][ T7719]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.360421][ T7719]  ____sys_sendmsg+0x532/0x580
[  124.360556][ T7719]  ___sys_sendmsg+0x195/0x1e0
[  124.360596][ T7719]  __x64_sys_sendmsg+0xd4/0x160
[  124.360622][ T7719]  x64_sys_call+0x22ab/0x2550
[  124.360648][ T7719]  do_syscall_64+0x112/0x360
[  124.360675][ T7719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.360762][ T7719] RIP: 0033:0x7eff58e1e0d9
[  124.360778][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.360797][ T7719] RSP: 002b:00007eff57877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.360818][ T7719] RAX: ffffffffffffffda RBX: 00007eff590a5fa0 RCX: 00007eff58e1e0d9
[  124.360833][ T7719] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  124.360846][ T7719] RBP: 00007eff57877090 R08: 0000000000000000 R09: 0000000000000000
[  124.360922][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.360934][ T7719] R13: 00007eff590a6038 R14: 00007eff590a5fa0 R15: 00007fff4673d698
[  124.360954][ T7719]  </TASK>
[  124.459697][   T28] audit: type=1400 audit(1787137249.615:1961): avc:  denied  { getopt } for  pid=7720 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  124.474654][ T7480] veth0_macvtap: entered promiscuous mode
[  124.592043][ T7480] veth1_macvtap: entered promiscuous mode
[  124.667854][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.675229][ T7732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.702512][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.716654][ T3437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.735940][ T3437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.781387][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.798213][ T7736] xt_connbytes: Forcing CT accounting to be enabled
[  124.810415][   T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.820126][   T28] audit: type=1400 audit(1787137249.985:1962): avc:  denied  { mount } for  pid=7480 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  124.850049][ T7736] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.973373][ T7732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.135960][ T7749] loop6: detected capacity change from 0 to 512
[  125.149173][ T7749] EXT4-fs: Ignoring removed oldalloc option
[  125.178812][ T7749] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1261: bad orphan inode 15
[  125.189067][ T7749] loop6: lost filesystem error report for type 5 error -117
[  125.189209][ T7749] ext4_test_bit(bit=14, block=5) = 0
[  125.196521][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  125.196538][    C1] EXT4-fs (loop6): initial error at time 1787137250: ext4_orphan_get:1425
[  125.196561][    C1] EXT4-fs (loop6): last error at time 1787137250: ext4_orphan_get:1425
[  125.233686][ T7749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.308206][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.359441][ T7766] netlink: 'syz.0.1263': attribute type 4 has an invalid length.
[  125.386651][ T7768] syzkaller0: entered promiscuous mode
[  125.392487][ T7768] syzkaller0: entered allmulticast mode
[  125.401660][ T7768] tipc: Started in network mode
[  125.406608][ T7768] tipc: Node identity 6636a42413ed, cluster identity 4711
[  125.415664][ T7768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.431199][ T7767] tipc: Resetting bearer <eth:syzkaller0>
[  125.441900][ T7767] tipc: Disabling bearer <eth:syzkaller0>
[  125.592004][ T7774] loop6: detected capacity change from 0 to 512
[  125.666520][ T7774] ext4: Bad value for 'min_batch_time'
[  126.228196][ T7779] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  126.294413][   T28] audit: type=1326 audit(1787137251.465:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327ddee0d9 code=0x7ffc0000
[  126.344811][   T28] audit: type=1326 audit(1787137251.465:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327ddee0d9 code=0x7ffc0000
[  126.401260][   T28] audit: type=1326 audit(1787137251.465:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.0.1272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327ddee0d9 code=0x7ffc0000
[  126.520475][ T7793] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  126.794501][ T7821] netlink: 'syz.5.1283': attribute type 4 has an invalid length.
[  127.730464][ T7850] pim6reg: entered allmulticast mode
[  127.756616][ T7850] pim6reg: left allmulticast mode
[  128.123415][ T7855] __nla_validate_parse: 12 callbacks suppressed
[  128.123438][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'.
[  128.994961][ T7888] loop6: detected capacity change from 0 to 512
[  129.261913][ T7900] netlink: 'syz.1.1298': attribute type 4 has an invalid length.
[  129.354877][ T7900] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1298'.
[  129.391981][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'.
[  129.594209][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1305'.
[  129.669151][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'.
[  129.709683][ T7919] netlink: 'syz.3.1308': attribute type 21 has an invalid length.
[  129.735475][ T7919] IPv6: NLM_F_CREATE should be specified when creating new route
[  130.087623][ T7899] Process accounting paused
[  130.215520][ T7934] loop6: detected capacity change from 0 to 512
[  130.254590][ T7934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.267397][ T7934] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.367728][ T7932] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  130.493443][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.553444][ T7950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.041886][ T7962] xt_connbytes: Forcing CT accounting to be enabled
[  131.060558][ T7962] xt_CT: You must specify a L4 protocol and not use inversions on it
[  131.093129][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1314'.
[  131.162500][ T7962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.468206][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'.
[  131.505559][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  131.505575][   T28] audit: type=1400 audit(1787137256.675:1997): avc:  denied  { read write } for  pid=7975 comm="syz.6.1320" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  131.547832][ T7976] loop6: detected capacity change from 0 to 128
[  131.649293][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'.
[  131.827408][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'.
[  132.047407][ T7995] syz_tun: entered allmulticast mode
[  132.087326][ T7993] syz_tun: left allmulticast mode
[  132.580878][ T8011] netlink: 'syz.3.1331': attribute type 11 has an invalid length.
[  132.589777][ T8011] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1331'.
[  132.623764][ T8014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.793355][   T28] audit: type=1400 audit(1787137257.965:1998): avc:  denied  { cpu } for  pid=8020 comm="syz.5.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  133.041228][   T28] audit: type=1400 audit(1787137258.215:1999): avc:  denied  { write } for  pid=8027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.104946][   T28] audit: type=1400 audit(1787137258.275:2000): avc:  denied  { write } for  pid=8054 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.253517][   T28] audit: type=1400 audit(1787137258.425:2001): avc:  denied  { write } for  pid=8060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.280409][ T8068] __nla_validate_parse: 3 callbacks suppressed
[  133.280434][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'.
[  133.413145][   T28] audit: type=1400 audit(1787137258.575:2002): avc:  denied  { write } for  pid=8076 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.460366][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'.
[  133.470853][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'.
[  133.490702][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'.
[  133.513874][ T8081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.573253][   T28] audit: type=1400 audit(1787137258.745:2003): avc:  denied  { write } for  pid=8085 comm="syz.5.1346" name="functions" dev="configfs" ino=5077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  133.605566][   T28] audit: type=1400 audit(1787137258.745:2004): avc:  denied  { write } for  pid=8085 comm="syz.5.1346" name="p_srate" dev="configfs" ino=22232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  133.635776][   T28] audit: type=1400 audit(1787137258.745:2005): avc:  denied  { open } for  pid=8085 comm="syz.5.1346" path="/154/config/usb_gadget/g1/functions/uac2.usb0/p_srate" dev="configfs" ino=22232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  133.704821][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'.
[  133.735979][   T28] audit: type=1400 audit(1787137258.905:2006): avc:  denied  { create } for  pid=8103 comm="syz.5.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  133.875886][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.885381][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.895590][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.905144][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.943918][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1357'.
[  133.973143][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1357'.
[  133.996028][ T8116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.654294][ T8137] loop6: detected capacity change from 0 to 128
[  134.707866][ T8137] hsr0: entered promiscuous mode
[  134.756640][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1363'.
[  134.768099][ T8145] ip_tables: iptables: counters copy to user failed while replacing table
[  134.779853][ T8137] hsr_slave_0: left promiscuous mode
[  134.829883][ T8137] hsr_slave_1: left promiscuous mode
[  134.863866][ T8137] hsr0 (unregistering): left promiscuous mode
[  134.959886][ T8164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.995735][ T8171] IPVS: Unknown mcast interface: pim6reg0
[  135.045477][ T8174] loop6: detected capacity change from 0 to 512
[  135.074927][ T8174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.090574][ T8174] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.103808][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'.
[  135.116067][ T8164] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.270847][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1370'.
[  135.850217][ T8233] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  135.978838][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.168495][ T8233] xt_connbytes: Forcing CT accounting to be enabled
[  136.175815][ T8233] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.216360][ T8248] netlink: 'syz.5.1387': attribute type 39 has an invalid length.
[  136.286738][ T8250] 9p: Bad value for 'wfdno'
[  136.298117][ T8250] netlink: 'syz.0.1388': attribute type 83 has an invalid length.
[  136.759950][   T28] kauditd_printk_skb: 97 callbacks suppressed
[  136.760044][   T28] audit: type=1326 audit(1787137261.935:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.811429][   T28] audit: type=1326 audit(1787137261.965:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.839937][   T28] audit: type=1326 audit(1787137261.965:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.866381][   T28] audit: type=1326 audit(1787137261.965:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.892237][   T28] audit: type=1326 audit(1787137261.965:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.926436][   T28] audit: type=1326 audit(1787137261.965:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.961394][   T28] audit: type=1326 audit(1787137261.965:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.968702][ T8295] FAULT_INJECTION: forcing a failure.
[  136.968702][ T8295] name failslab, interval 1, probability 0, space 0, times 0
[  136.988862][   T28] audit: type=1326 audit(1787137261.965:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  136.999774][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.6.1397 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  136.999807][ T8295] Tainted: [W]=WARN
[  136.999814][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  136.999828][ T8295] Call Trace:
[  136.999834][ T8295]  <TASK>
[  136.999843][ T8295]  __dump_stack+0x1d/0x30
[  136.999868][ T8295]  dump_stack_lvl+0x95/0xd0
[  136.999952][ T8295]  dump_stack+0x15/0x1b
[  136.999971][ T8295]  should_fail_ex+0x262/0x280
[  137.000023][ T8295]  should_failslab+0x8c/0xb0
[  137.000049][ T8295]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  137.000075][ T8295]  ? skb_clone+0x151/0x1f0
[  137.000108][ T8295]  ? skb_clone+0x151/0x1f0
[  137.000130][ T8295]  skb_clone+0x151/0x1f0
[  137.000151][ T8295]  __netlink_deliver_tap+0x2be/0x510
[  137.000184][ T8295]  netlink_unicast+0x656/0x680
[  137.000261][ T8295]  netlink_sendmsg+0x5be/0x6f0
[  137.000300][ T8295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.000376][ T8295]  ____sys_sendmsg+0x532/0x580
[  137.000400][ T8295]  ___sys_sendmsg+0x195/0x1e0
[  137.000434][ T8295]  __x64_sys_sendmsg+0xd4/0x160
[  137.000462][ T8295]  x64_sys_call+0x22ab/0x2550
[  137.000487][ T8295]  do_syscall_64+0x112/0x360
[  137.000555][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.000739][ T8295] RIP: 0033:0x7f460440e0d9
[  137.000755][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.000775][ T8295] RSP: 002b:00007f4602e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.000796][ T8295] RAX: ffffffffffffffda RBX: 00007f4604695fa0 RCX: 00007f460440e0d9
[  137.000812][ T8295] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  137.000891][ T8295] RBP: 00007f4602e67090 R08: 0000000000000000 R09: 0000000000000000
[  137.000905][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.000918][ T8295] R13: 00007f4604696038 R14: 00007f4604695fa0 R15: 00007ffee0e26d78
[  137.000938][ T8295]  </TASK>
[  137.055793][ T8297] loop6: detected capacity change from 0 to 512
[  137.056587][   T28] audit: type=1326 audit(1787137261.965:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  137.065327][ T8297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  137.069214][   T28] audit: type=1326 audit(1787137261.965:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83811ce0d9 code=0x7ffc0000
[  137.079762][ T8297] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal
[  137.174398][ T8299] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  137.424834][ T8299] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.491366][ T8311] FAULT_INJECTION: forcing a failure.
[  137.491366][ T8311] name failslab, interval 1, probability 0, space 0, times 0
[  137.504053][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.6.1402 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  137.504126][ T8311] Tainted: [W]=WARN
[  137.504133][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  137.504147][ T8311] Call Trace:
[  137.504154][ T8311]  <TASK>
[  137.504163][ T8311]  __dump_stack+0x1d/0x30
[  137.504187][ T8311]  dump_stack_lvl+0x95/0xd0
[  137.504270][ T8311]  dump_stack+0x15/0x1b
[  137.504292][ T8311]  should_fail_ex+0x262/0x280
[  137.504326][ T8311]  should_failslab+0x8c/0xb0
[  137.504425][ T8311]  __kmalloc_node_track_caller_noprof+0xd5/0x4c0
[  137.504457][ T8311]  ? sidtab_sid2str_get+0xa0/0x130
[  137.504487][ T8311]  ? sidtab_sid2str_get+0xa0/0x130
[  137.504547][ T8311]  kmemdup_noprof+0x2b/0x70
[  137.504570][ T8311]  sidtab_sid2str_get+0xa0/0x130
[  137.504597][ T8311]  security_sid_to_context_core+0x1eb/0x2e0
[  137.504670][ T8311]  security_sid_to_context+0x27/0x40
[  137.504708][ T8311]  selinux_lsmprop_to_secctx+0x67/0xf0
[  137.504801][ T8311]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  137.504856][ T8311]  audit_log_subj_ctx+0xa4/0x3e0
[  137.504880][ T8311]  audit_log_task_context+0x48/0x70
[  137.504961][ T8311]  audit_log_task+0xf3/0x240
[  137.504988][ T8311]  audit_seccomp+0x6a/0x110
[  137.505019][ T8311]  __seccomp_filter+0x909/0x1360
[  137.505098][ T8311]  ? __fget_files+0x184/0x1c0
[  137.505134][ T8311]  ? mutex_lock+0x57/0x90
[  137.505154][ T8311]  ? mutex_unlock+0x4e/0x90
[  137.505184][ T8311]  __seccomp_permit_syscall+0x7d/0x150
[  137.505208][ T8311]  do_syscall_64+0xca/0x360
[  137.505313][ T8311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.505333][ T8311] RIP: 0033:0x7f460440e0d9
[  137.505350][ T8311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.505455][ T8311] RSP: 002b:00007f4602e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  137.505556][ T8311] RAX: ffffffffffffffda RBX: 00007f4604696090 RCX: 00007f460440e0d9
[  137.505569][ T8311] RDX: 0000000000000401 RSI: 00002000000006c0 RDI: 0000000000000000
[  137.505581][ T8311] RBP: 00007f4602e46090 R08: 0000000000000000 R09: 0000000000000000
[  137.505622][ T8311] R10: be573b18f6e31390 R11: 0000000000000246 R12: 0000000000000001
[  137.505711][ T8311] R13: 00007f4604696128 R14: 00007f4604696090 R15: 00007ffee0e26d78
[  137.505731][ T8311]  </TASK>
[  138.267523][ T8341] loop6: detected capacity change from 0 to 128
[  138.285397][ T8339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.461853][ T8341] __nla_validate_parse: 13 callbacks suppressed
[  138.461906][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1415'.
[  138.478047][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1414'.
[  138.504025][ T8339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.954323][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'.
[  139.167438][ T8369] vlan2: entered promiscuous mode
[  139.172521][ T8369] bond0: entered promiscuous mode
[  139.177603][ T8369] bond_slave_0: entered promiscuous mode
[  139.183328][ T8369] bond_slave_1: entered promiscuous mode
[  139.308625][ T8377] sit0: entered promiscuous mode
[  139.319258][ T8377] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  139.340131][ T8377] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1424'.
[  139.387561][ T8377] netlink: 'syz.1.1424': attribute type 178 has an invalid length.
[  139.392369][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'.
[  139.404457][ T8386] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1427'.
[  139.413798][ T8386] tipc: Failed to obtain node identity
[  139.419324][ T8386] tipc: Enabling of bearer <ib:veth1_to_team> rejected, failed to enable media
[  139.523383][ T8396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.561195][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'.
[  139.667950][ T8403] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  139.753060][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1432'.
[  139.776961][ T8396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.796003][ T8415] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1437'.
[  139.806373][ T8415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=8415 comm=syz.0.1437
[  140.881661][ T8449] loop6: detected capacity change from 0 to 256
[  140.975677][ T8456] loop6: detected capacity change from 0 to 512
[  141.020809][ T8456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.045163][ T8456] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.103099][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'.
[  141.874359][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.899420][ T8474] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  141.960161][ T8481] loop6: detected capacity change from 0 to 4096
[  141.972154][ T8481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.007263][ T8484] netlink: 'syz.5.1454': attribute type 4 has an invalid length.
[  142.023073][   T28] kauditd_printk_skb: 228 callbacks suppressed
[  142.023087][   T28] audit: type=1400 audit(1787137267.195:2341): avc:  denied  { write } for  pid=8480 comm="syz.6.1455" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.119974][ T8472] hub 1-0:1.0: USB hub found
[  142.124824][ T8472] hub 1-0:1.0: 8 ports detected
[  142.930583][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.974596][ T8510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.057470][ T8518] netlink: 'syz.6.1465': attribute type 1 has an invalid length.
[  143.104255][ T8518] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.225625][ T8521] vti0: entered promiscuous mode
[  143.262526][ T8521] vti0: entered allmulticast mode
[  143.283197][ T8521] team0: Device vti0 is of different type
[  143.329745][ T8510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.573046][ T8534] netlink: 'syz.6.1467': attribute type 4 has an invalid length.
[  143.594555][ T8534] __nla_validate_parse: 7 callbacks suppressed
[  143.594578][ T8534] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1467'.
[  144.151237][ T8550] netlink: 'syz.0.1472': attribute type 4 has an invalid length.
[  144.159410][ T8550] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1472'.
[  144.435649][ T8566] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  144.464809][ T8566] Cannot find set identified by id 0 to match
[  144.473638][ T8566] loop6: detected capacity change from 0 to 256
[  144.497335][ T8564] 9pnet_fd: Insufficient options for proto=fd
[  144.501704][   T28] audit: type=1400 audit(1787137269.665:2342): avc:  denied  { mounton } for  pid=8563 comm="syz.1.1478" path="/334/file0" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  144.521406][ T8564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=922 sclass=netlink_route_socket pid=8564 comm=syz.1.1478
[  144.576541][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'.
[  144.688031][ T8577] loop6: detected capacity change from 0 to 256
[  145.379817][ T8598] netlink: 'syz.1.1486': attribute type 4 has an invalid length.
[  145.387563][ T8598] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1486'.
[  145.830236][   T28] audit: type=1400 audit(1787137271.005:2343): avc:  denied  { name_bind } for  pid=8603 comm="syz.3.1488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  145.935315][ T8596] hub 1-0:1.0: USB hub found
[  145.940074][ T8596] hub 1-0:1.0: 8 ports detected
[  145.944612][ T8610] loop6: detected capacity change from 0 to 4096
[  145.979194][ T8610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.994118][   T28] audit: type=1400 audit(1787137271.165:2344): avc:  denied  { write } for  pid=8605 comm="syz.6.1489" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  146.019072][ T8618] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  146.047367][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.109209][ T8623] loop6: detected capacity change from 0 to 512
[  146.124669][ T8623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.142778][ T8623] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.155469][ T8628] netlink: 'syz.5.1491': attribute type 4 has an invalid length.
[  146.174783][ T8628] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1491'.
[  146.225855][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1492'.
[  146.235017][ T8618] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  146.254271][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.268986][ T8634] netlink: 'syz.1.1494': attribute type 4 has an invalid length.
[  146.280495][ T8634] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1494'.
[  146.323609][   T28] audit: type=1400 audit(1787137271.495:2345): avc:  denied  { append } for  pid=8636 comm="syz.6.1496" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  146.373518][ T8645] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  146.513467][ T8645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'.
[  146.522557][ T8645] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  146.738093][   T28] audit: type=1400 audit(1787137271.905:2346): avc:  denied  { bind } for  pid=8652 comm="syz.6.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  147.144970][   T28] audit: type=1400 audit(1787137272.315:2347): avc:  denied  { map } for  pid=8668 comm="syz.1.1505" path="socket:[23944]" dev="sockfs" ino=23944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  147.188641][ T8670] netlink: 'syz.5.1504': attribute type 4 has an invalid length.
[  147.199429][ T8670] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1504'.
[  147.233044][ T8672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.412737][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1506'.
[  147.427776][ T8680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.520857][ T8666] hub 1-0:1.0: USB hub found
[  147.530795][ T8666] hub 1-0:1.0: 8 ports detected
[  147.631552][ T8684] loop6: detected capacity change from 0 to 256
[  147.674055][ T8688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.702156][ T8682] random: crng reseeded on system resumption
[  147.722412][ T8682] lo speed is unknown, defaulting to 1000
[  147.745527][ T8682] lo speed is unknown, defaulting to 1000
[  147.812005][ T8682] lo speed is unknown, defaulting to 1000
[  147.819722][ T8696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.886999][ T8682] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  147.926960][ T8682] lo speed is unknown, defaulting to 1000
[  147.927824][ T8698] netlink: 'syz.3.1509': attribute type 4 has an invalid length.
[  147.958680][ T8682] lo speed is unknown, defaulting to 1000
[  147.989544][ T8682] lo speed is unknown, defaulting to 1000
[  148.011868][ T8682] lo speed is unknown, defaulting to 1000
[  148.027173][ T8682] lo speed is unknown, defaulting to 1000
[  148.051974][   T28] audit: type=1400 audit(1787137273.225:2348): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  148.086940][ T7126] bond1: (slave syz_tun): Removing an active aggregator
[  148.094480][ T7126] bond1: (slave syz_tun): Releasing backup interface
[  148.399929][  T414] bridge_slave_1: left allmulticast mode
[  148.408644][  T414] bridge_slave_1: left promiscuous mode
[  148.414762][  T414] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.423429][  T414] bridge_slave_0: left allmulticast mode
[  148.429438][  T414] bridge_slave_0: left promiscuous mode
[  148.435397][  T414] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.474481][   T28] audit: type=1400 audit(1787137273.645:2349): avc:  denied  { write } for  pid=8711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.479701][ T3363] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[  148.524121][   T28] audit: type=1400 audit(1787137273.685:2350): avc:  denied  { write } for  pid=8722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.563919][  T414] bond1 (unregistering): Released all slaves
[  148.582895][  T414] bond2 (unregistering): Released all slaves
[  148.611870][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9
[  148.725443][  T414] team0 (unregistering): Port device team_slave_1 removed
[  148.736821][  T414] team0 (unregistering): Port device team_slave_0 removed
[  148.780503][ T8743] netlink: 'syz.3.1512': attribute type 4 has an invalid length.
[  148.791260][ T8744] netlink: 'syz.0.1522': attribute type 4 has an invalid length.
[  148.803904][ T8743] __nla_validate_parse: 2 callbacks suppressed
[  148.803929][ T8743] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1512'.
[  148.807078][ T8744] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1522'.
[  148.838043][   T28] audit: type=1400 audit(1787137274.005:2351): avc:  denied  { write } for  pid=8734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.869122][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11
[  148.869195][   T28] audit: type=1400 audit(1787137274.005:2352): avc:  denied  { write } for  pid=8749 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.920928][ T8758] loop6: detected capacity change from 0 to 128
[  149.037708][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1515'.
[  149.070959][   T28] audit: type=1400 audit(1787137274.245:2353): avc:  denied  { write } for  pid=8762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.146957][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.154084][   T28] audit: type=1400 audit(1787137274.315:2354): avc:  denied  { write } for  pid=8790 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.176216][ T8789] loop6: detected capacity change from 0 to 4096
[  149.177855][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.191385][ T8731] bridge_slave_0: entered allmulticast mode
[  149.198264][ T8731] bridge_slave_0: entered promiscuous mode
[  149.204638][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'.
[  149.212839][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.221192][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.228341][ T8731] bridge_slave_1: entered allmulticast mode
[  149.234126][ T8789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.235059][ T8731] bridge_slave_1: entered promiscuous mode
[  149.254379][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10
[  149.301181][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.317725][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.347157][ T8731] team0: Port device team_slave_0 added
[  149.357288][ T8731] team0: Port device team_slave_1 added
[  149.373709][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'.
[  149.395807][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.404711][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.408415][   T28] audit: type=1400 audit(1787137274.565:2355): avc:  denied  { write } for  pid=8797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.412167][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.487203][   T28] audit: type=1400 audit(1787137274.615:2356): avc:  denied  { write } for  pid=8809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.508460][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.527777][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.546496][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.582910][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.601702][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12
[  149.613522][ T8816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.692502][ T8731] hsr_slave_0: entered promiscuous mode
[  149.698542][ T8731] hsr_slave_1: entered promiscuous mode
[  149.942590][ T8815] hub 1-0:1.0: USB hub found
[  149.947970][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1518'.
[  149.953913][ T8815] hub 1-0:1.0: 8 ports detected
[  149.961817][ T8816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.123443][ T8731] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.150594][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  150.167273][ T8731] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.186715][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  150.197828][ T8731] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.214159][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  150.222073][ T8731] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.240249][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  150.249281][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'.
[  150.329470][ T8889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.377621][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.399337][ T8731] 8021q: adding VLAN 0 to HW filter on device team0
[  150.427558][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.434657][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.453378][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1528'.
[  150.474964][  T414] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.482091][  T414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.523120][ T8731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.537682][ T8731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.555087][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1528'.
[  150.571444][ T8889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.714816][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.756862][ T8947] netlink: 'syz.3.1530': attribute type 4 has an invalid length.
[  150.780516][ T8947] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1530'.
[  150.824953][ T8958] autofs4:pid:8958:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  150.899207][ T8731] veth0_vlan: entered promiscuous mode
[  150.928096][ T8731] veth1_vlan: entered promiscuous mode
[  150.952145][ T8978] FAULT_INJECTION: forcing a failure.
[  150.952145][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.987831][ T8731] veth0_macvtap: entered promiscuous mode
[  151.005061][ T8731] veth1_macvtap: entered promiscuous mode
[  151.018349][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.026252][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: syz.5.1536 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  151.026281][ T8978] Tainted: [W]=WARN
[  151.026287][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  151.026301][ T8978] Call Trace:
[  151.026308][ T8978]  <TASK>
[  151.026356][ T8978]  __dump_stack+0x1d/0x30
[  151.026383][ T8978]  dump_stack_lvl+0x95/0xd0
[  151.026464][ T8978]  dump_stack+0x15/0x1b
[  151.026480][ T8978]  should_fail_ex+0x262/0x280
[  151.026510][ T8978]  should_fail+0xb/0x20
[  151.026539][ T8978]  should_fail_usercopy+0x1a/0x20
[  151.026608][ T8978]  _copy_to_user+0x20/0xa0
[  151.026625][ T8978]  simple_read_from_buffer+0xb5/0x130
[  151.026698][ T8978]  proc_fail_nth_read+0x10e/0x150
[  151.026727][ T8978]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.026833][ T8978]  vfs_read+0x18e/0x7c0
[  151.026936][ T8978]  ? __rcu_read_unlock+0x4e/0x70
[  151.027103][ T8978]  ? __fget_files+0x184/0x1c0
[  151.027137][ T8978]  ? mutex_lock+0x57/0x90
[  151.027202][ T8978]  ksys_read+0xdc/0x1a0
[  151.027224][ T8978]  __x64_sys_read+0x40/0x50
[  151.027250][ T8978]  x64_sys_call+0x2135/0x2550
[  151.027276][ T8978]  do_syscall_64+0x112/0x360
[  151.027372][ T8978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.027392][ T8978] RIP: 0033:0x7f99b1a2e90e
[  151.027447][ T8978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  151.027513][ T8978] RSP: 002b:00007f99b04c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  151.027571][ T8978] RAX: ffffffffffffffda RBX: 00007f99b04c76c0 RCX: 00007f99b1a2e90e
[  151.027584][ T8978] RDX: 000000000000000f RSI: 00007f99b04c70a0 RDI: 0000000000000005
[  151.027625][ T8978] RBP: 00007f99b04c7090 R08: 0000000000000000 R09: 0000000000000000
[  151.027638][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.027649][ T8978] R13: 00007f99b1cf6038 R14: 00007f99b1cf5fa0 R15: 00007ffce1179218
[  151.027667][ T8978]  </TASK>
[  151.037327][ T8984] loop6: detected capacity change from 0 to 512
[  151.058279][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.263152][ T8984] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  151.285928][ T8984] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  151.319757][  T414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.328728][  T414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.358986][  T414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.389778][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.455857][ T8995] netlink: 'syz.3.1539': attribute type 1 has an invalid length.
[  151.460091][ T8996] netlink: 'syz.1.1513': attribute type 4 has an invalid length.
[  151.600321][ T8984] syz.6.1537 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  151.743536][ T9037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.876091][ T9037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.949086][ T9068] FAULT_INJECTION: forcing a failure.
[  151.949086][ T9068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.963086][ T9068] CPU: 1 UID: 0 PID: 9068 Comm: syz.0.1547 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  151.963206][ T9068] Tainted: [W]=WARN
[  151.963214][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  151.963279][ T9068] Call Trace:
[  151.963286][ T9068]  <TASK>
[  151.963300][ T9068]  __dump_stack+0x1d/0x30
[  151.963326][ T9068]  dump_stack_lvl+0x95/0xd0
[  151.963400][ T9068]  dump_stack+0x15/0x1b
[  151.963420][ T9068]  should_fail_ex+0x262/0x280
[  151.963451][ T9068]  should_fail+0xb/0x20
[  151.963515][ T9068]  should_fail_usercopy+0x1a/0x20
[  151.963546][ T9068]  _copy_to_user+0x20/0xa0
[  151.963566][ T9068]  simple_read_from_buffer+0xb5/0x130
[  151.963651][ T9068]  proc_fail_nth_read+0x10e/0x150
[  151.963681][ T9068]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.963710][ T9068]  vfs_read+0x18e/0x7c0
[  151.963794][ T9068]  ? __rcu_read_unlock+0x4e/0x70
[  151.963821][ T9068]  ? __fget_files+0x184/0x1c0
[  151.963880][ T9068]  ? mutex_lock+0x57/0x90
[  151.963898][ T9068]  ksys_read+0xdc/0x1a0
[  151.963921][ T9068]  __x64_sys_read+0x40/0x50
[  151.964002][ T9068]  x64_sys_call+0x2135/0x2550
[  151.964027][ T9068]  do_syscall_64+0x112/0x360
[  151.964063][ T9068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.964086][ T9068] RIP: 0033:0x7f327ddae90e
[  151.964103][ T9068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  151.964123][ T9068] RSP: 002b:00007f327c846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  151.964145][ T9068] RAX: ffffffffffffffda RBX: 00007f327c8476c0 RCX: 00007f327ddae90e
[  151.964198][ T9068] RDX: 000000000000000f RSI: 00007f327c8470a0 RDI: 0000000000000003
[  151.964210][ T9068] RBP: 00007f327c847090 R08: 0000000000000000 R09: 0000000000000000
[  151.964222][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.964233][ T9068] R13: 00007f327e076038 R14: 00007f327e075fa0 R15: 00007ffdab1a0348
[  151.964251][ T9068]  </TASK>
[  152.101461][ T9076] netlink: 'syz.5.1549': attribute type 4 has an invalid length.
[  152.573120][ T9136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9136 comm=syz.6.1556
[  152.753425][ T9141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.189764][ T9161] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  153.211528][ T9141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.258206][ T9163] netlink: 'syz.0.1561': attribute type 4 has an invalid length.
[  153.400132][ T9165] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  154.158248][ T9170] __nla_validate_parse: 9 callbacks suppressed
[  154.158275][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'.
[  154.225913][ T9181] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1567'.
[  154.643454][ T9188] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  154.671309][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  154.671324][   T28] audit: type=1400 audit(1787137279.835:2369): avc:  denied  { ioctl } for  pid=9186 comm="syz.6.1570" path="socket:[25214]" dev="sockfs" ino=25214 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  154.710641][ T9188] WARNING! power/level is deprecated; use power/control instead
[  154.756203][ T9195] netlink: 'syz.5.1569': attribute type 4 has an invalid length.
[  154.763967][ T9195] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1569'.
[  154.835009][ T9202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.082582][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1575'.
[  155.114666][ T9202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.561377][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  155.573377][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  155.590816][ T9214] random: crng reseeded on system resumption
[  155.608295][ T9214] lo speed is unknown, defaulting to 1000
[  155.630552][ T9214] lo speed is unknown, defaulting to 1000
[  155.641634][ T9214] lo speed is unknown, defaulting to 1000
[  155.662756][ T9214] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  155.708707][ T9214] lo speed is unknown, defaulting to 1000
[  155.714823][ T9214] lo speed is unknown, defaulting to 1000
[  155.720917][ T9214] lo speed is unknown, defaulting to 1000
[  155.723104][ T9226] netlink: 'syz.3.1576': attribute type 4 has an invalid length.
[  155.726995][ T9214] lo speed is unknown, defaulting to 1000
[  155.738047][ T9227] netlink: 'syz.0.1586': attribute type 4 has an invalid length.
[  155.740624][ T9214] lo speed is unknown, defaulting to 1000
[  155.748121][ T9226] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1576'.
[  155.766253][ T9227] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1586'.
[  155.824277][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'.
[  155.858808][ T8306] syz_tun (unregistering): left allmulticast mode
[  155.865468][ T8306] syz_tun (unregistering): left promiscuous mode
[  155.872196][ T8306] bridge0: port 3(syz_tun) entered disabled state
[  156.034356][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'.
[  156.485650][   T12] bridge_slave_1: left promiscuous mode
[  156.497001][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.516759][   T12] bridge_slave_0: left allmulticast mode
[  156.532669][   T12] bridge_slave_0: left promiscuous mode
[  156.554304][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.576746][   T28] audit: type=1400 audit(1787137281.745:2370): avc:  denied  { write } for  pid=9267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.628283][   T28] audit: type=1400 audit(1787137281.805:2371): avc:  denied  { write } for  pid=9281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.689574][ T9284] netlink: 'syz.0.1591': attribute type 21 has an invalid length.
[  156.790645][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9
[  156.802519][   T28] audit: type=1400 audit(1787137281.975:2372): avc:  denied  { read } for  pid=9285 comm="syz.6.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.821332][ T9251] lo speed is unknown, defaulting to 1000
[  156.866869][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.887484][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.960620][   T12] team0 (unregistering): Port device team_slave_1 removed
[  156.978145][   T28] audit: type=1400 audit(1787137282.145:2373): avc:  denied  { write } for  pid=9293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.004453][   T12] team0 (unregistering): Port device team_slave_0 removed
[  157.058568][   T28] audit: type=1400 audit(1787137282.225:2374): avc:  denied  { write } for  pid=9310 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.108303][ T9309] random: crng reseeded on system resumption
[  157.119430][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10
[  157.127470][ T9309] lo speed is unknown, defaulting to 1000
[  157.142277][ T9309] lo speed is unknown, defaulting to 1000
[  157.172441][ T9309] lo speed is unknown, defaulting to 1000
[  157.231247][ T9309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  157.325361][ T9309] lo speed is unknown, defaulting to 1000
[  157.361324][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.365190][   T28] audit: type=1400 audit(1787137282.535:2375): avc:  denied  { write } for  pid=9315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.376796][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.398580][ T9251] bridge_slave_0: entered allmulticast mode
[  157.405173][ T9251] bridge_slave_0: entered promiscuous mode
[  157.412231][ T9309] lo speed is unknown, defaulting to 1000
[  157.423603][ T9309] lo speed is unknown, defaulting to 1000
[  157.435815][ T9309] lo speed is unknown, defaulting to 1000
[  157.444506][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.451612][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.458713][   T28] audit: type=1400 audit(1787137282.595:2376): avc:  denied  { write } for  pid=9332 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.458782][ T9251] bridge_slave_1: entered allmulticast mode
[  157.487157][ T9251] bridge_slave_1: entered promiscuous mode
[  157.500362][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11
[  157.510189][ T9309] lo speed is unknown, defaulting to 1000
[  157.529147][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.544250][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.585256][ T9251] team0: Port device team_slave_0 added
[  157.595849][ T9251] team0: Port device team_slave_1 added
[  157.651649][ T9342] netlink: 'syz.3.1600': attribute type 3 has an invalid length.
[  157.658322][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.666526][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.722877][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.763078][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.776198][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.826522][   T28] audit: type=1400 audit(1787137282.995:2377): avc:  denied  { write } for  pid=9343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.839763][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.878806][   T28] audit: type=1400 audit(1787137283.045:2378): avc:  denied  { write } for  pid=9364 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.909150][ T9362] netlink: 'syz.6.1599': attribute type 4 has an invalid length.
[  157.922777][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12
[  157.939045][ T9251] hsr_slave_0: entered promiscuous mode
[  157.951532][ T9251] hsr_slave_1: entered promiscuous mode
[  157.958476][ T9251] debugfs: 'hsr0' already exists in 'hsr'
[  157.964515][ T9251] Cannot create hsr debugfs directory
[  158.169130][ T9251] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  158.177684][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  158.185490][ T9251] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  158.415464][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  158.529609][ T9251] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  158.562526][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  158.604390][ T9251] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  158.625412][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  158.648886][ T9383] bond0: entered promiscuous mode
[  158.651871][ T9387] loop6: detected capacity change from 0 to 256
[  158.660226][ T9383] bond_slave_0: entered promiscuous mode
[  158.660400][ T9383] bond_slave_1: entered promiscuous mode
[  158.678550][ T9383] batadv0: entered promiscuous mode
[  158.693256][ T9383] 8021q: adding VLAN 0 to HW filter on device hsr1
[  158.779457][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.806192][ T9251] 8021q: adding VLAN 0 to HW filter on device team0
[  158.839495][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.846599][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.850105][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8235 sclass=netlink_route_socket pid=9408 comm=syz.1.1609
[  158.890640][ T9388] lo speed is unknown, defaulting to 1000
[  158.902408][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.909542][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.442078][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.477930][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.497114][ T9388] bridge_slave_0: entered allmulticast mode
[  159.528112][ T9388] bridge_slave_0: entered promiscuous mode
[  159.580645][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.599540][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.621843][ T9388] bridge_slave_1: entered allmulticast mode
[  159.656107][ T9388] bridge_slave_1: entered promiscuous mode
[  159.706207][ T9388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.743048][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.756256][ T9388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.800582][ T9388] team0: Port device team_slave_0 added
[  159.827360][ T9388] team0: Port device team_slave_1 added
[  159.885719][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.899796][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.935317][ T9388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.950280][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.967443][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.001617][ T9388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.040340][ T9251] veth0_vlan: entered promiscuous mode
[  160.066320][ T9388] hsr_slave_0: entered promiscuous mode
[  160.072821][ T9388] hsr_slave_1: entered promiscuous mode
[  160.078703][ T9388] debugfs: 'hsr0' already exists in 'hsr'
[  160.084915][ T9388] Cannot create hsr debugfs directory
[  160.091940][ T9251] veth1_vlan: entered promiscuous mode
[  160.145351][ T9251] veth0_macvtap: entered promiscuous mode
[  160.173617][ T9251] veth1_macvtap: entered promiscuous mode
[  160.223635][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.234003][ T9461] netlink: 'syz.1.1614': attribute type 4 has an invalid length.
[  160.245256][ T9388] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  160.254247][ T9388] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.261561][ T9461] __nla_validate_parse: 5 callbacks suppressed
[  160.261624][ T9461] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1614'.
[  160.279117][ T9388] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  160.289965][ T9388] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.302678][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.315433][ T9388] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  160.328124][ T9388] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.349945][ T9111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.359060][ T9111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.369296][ T9388] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  160.379134][ T9388] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.399701][ T9114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.408624][ T9114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.466167][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  160.466182][   T28] audit: type=1326 audit(1787137285.635:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537ece0d9 code=0x7ffc0000
[  160.467654][ T9471] FAULT_INJECTION: forcing a failure.
[  160.467654][ T9471] name failslab, interval 1, probability 0, space 0, times 0
[  160.472380][   T28] audit: type=1326 audit(1787137285.635:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537ece0d9 code=0x7ffc0000
[  160.512914][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.7.1588 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  160.512948][ T9471] Tainted: [W]=WARN
[  160.512961][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.513008][ T9471] Call Trace:
[  160.513014][ T9471]  <TASK>
[  160.513021][ T9471]  __dump_stack+0x1d/0x30
[  160.513047][ T9471]  dump_stack_lvl+0x95/0xd0
[  160.513068][ T9471]  dump_stack+0x15/0x1b
[  160.513112][ T9471]  should_fail_ex+0x262/0x280
[  160.513142][ T9471]  ? audit_log_d_path+0x8d/0x150
[  160.513253][ T9471]  should_failslab+0x8c/0xb0
[  160.513331][ T9471]  __kmalloc_cache_noprof+0x7b/0x3d0
[  160.513360][ T9471]  ? audit_log_d_path+0x8d/0x150
[  160.513393][ T9471]  ? audit_log_n_string+0x17e/0x2c0
[  160.513452][ T9471]  audit_log_d_path+0x8d/0x150
[  160.513484][ T9471]  audit_log_d_path_exe+0x42/0x70
[  160.513536][ T9471]  audit_log_task+0x1e8/0x240
[  160.513568][ T9471]  audit_seccomp+0x6a/0x110
[  160.513727][ T9471]  __seccomp_filter+0x909/0x1360
[  160.513754][ T9471]  ? __fget_files+0x184/0x1c0
[  160.513785][ T9471]  ? mutex_lock+0x57/0x90
[  160.513821][ T9471]  ? mutex_unlock+0x4e/0x90
[  160.513866][ T9471]  __seccomp_permit_syscall+0x7d/0x150
[  160.513893][ T9471]  do_syscall_64+0xca/0x360
[  160.513919][ T9471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.513944][ T9471] RIP: 0033:0x7f4537ece0d9
[  160.513966][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.514046][ T9471] RSP: 002b:00007f4536927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  160.514118][ T9471] RAX: ffffffffffffffda RBX: 00007f4538155fa0 RCX: 00007f4537ece0d9
[  160.514132][ T9471] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffffff
[  160.514146][ T9471] RBP: 00007f4536927090 R08: 0000000000000000 R09: 0000000000000000
[  160.514168][ T9471] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001
[  160.514237][ T9471] R13: 00007f4538156038 R14: 00007f4538155fa0 R15: 00007fff4963ce48
[  160.514258][ T9471]  </TASK>
[  160.514526][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.568508][   T28] audit: type=1326 audit(1787137285.635:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537ece0d9 code=0x7ffc0000
[  160.621278][ T9478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'.
[  160.625348][   T28] audit: type=1326 audit(1787137285.635:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537ece0d9 code=0x7ffc0000
[  160.659350][ T9475] veth5: entered allmulticast mode
[  160.664695][   T28] audit: type=1326 audit(1787137285.635:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4537e8e90e code=0x7ffc0000
[  160.679950][ T9388] 8021q: adding VLAN 0 to HW filter on device team0
[  160.704940][   T28] audit: type=1326 audit(1787137285.635:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4537e8e90e code=0x7ffc0000
[  160.726390][ T9477] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1617'.
[  160.729519][   T28] audit: type=1326 audit(1787137285.635:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="<no_memory>" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4537ece0d9 code=0x7ffc0000
[  160.900249][   T28] audit: type=1326 audit(1787137285.745:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4537e8e90e code=0x7ffc0000
[  160.925721][   T28] audit: type=1326 audit(1787137285.745:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4537e8e90e code=0x7ffc0000
[  160.951095][   T28] audit: type=1326 audit(1787137285.745:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.7.1588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4537e8e90e code=0x7ffc0000
[  160.955385][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.983385][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.993624][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.000735][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.047457][ T9490] loop7: detected capacity change from 0 to 512
[  161.080894][ T9490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.093619][ T9490] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.114378][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1620'.
[  161.191843][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.333885][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1620'.
[  161.763336][ T9518] loop6: detected capacity change from 0 to 4096
[  161.775508][ T9518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.873134][ T9388] veth0_vlan: entered promiscuous mode
[  161.880993][ T9526] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1623'.
[  161.900589][ T9388] veth1_vlan: entered promiscuous mode
[  161.963237][ T9251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.983723][ T9388] veth0_macvtap: entered promiscuous mode
[  162.002317][ T9388] veth1_macvtap: entered promiscuous mode
[  162.038034][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.061423][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.139974][   T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.152497][   T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.166451][ T9541] lo speed is unknown, defaulting to 1000
[  162.170225][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.245879][ T9548] netlink: 'syz.7.1628': attribute type 4 has an invalid length.
[  162.267437][ T9548] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.1628'.
[  162.279789][ T9111] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.288528][ T9111] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.321820][ T9556] futex_wake_op: syz.8.1631 tries to shift op by 36; fix this program
[  162.343549][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'.
[  162.586044][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1633'.
[  162.756306][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.910933][ T9565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9565 comm=syz.6.1634
[  163.026102][ T9571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=9571 comm=syz.7.1637
[  163.185962][ T9585] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1640'.
[  163.582119][ T9609] netlink: 'syz.7.1647': attribute type 4 has an invalid length.
[  164.187741][ T9629] loop8: detected capacity change from 0 to 512
[  164.228077][ T9629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.243500][ T9629] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.399118][ T9638] loop7: detected capacity change from 0 to 1024
[  164.658590][ T9638] EXT4-fs: Ignoring removed nobh option
[  164.687689][ T9638] EXT4-fs: Ignoring removed bh option
[  164.693575][ T9638] EXT4-fs: Ignoring removed nobh option
[  164.708371][ T9638] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  164.786942][ T9638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.898690][ T9251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.109199][ T9388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.180847][ T9668] loop8: detected capacity change from 0 to 4096
[  165.205534][ T9668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.361906][ T9677] netlink: 'syz.3.1666': attribute type 4 has an invalid length.
[  165.381146][ T9677] __nla_validate_parse: 5 callbacks suppressed
[  165.381201][ T9677] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1666'.
[  166.092142][ T9388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.112313][ T9690] netlink: 'syz.7.1669': attribute type 4 has an invalid length.
[  166.120159][ T9690] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.1669'.
[  166.180748][ T9693] tmpfs: Bad value for 'gid'
[  166.185515][ T9693] tmpfs: Bad value for 'gid'
[  166.413643][ T9704] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  166.525661][ T9711] loop8: detected capacity change from 0 to 128
[  166.551179][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1675'.
[  166.703722][ T9718] FAULT_INJECTION: forcing a failure.
[  166.703722][ T9718] name failslab, interval 1, probability 0, space 0, times 0
[  166.716406][ T9718] CPU: 1 UID: 0 PID: 9718 Comm: syz.6.1677 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  166.716480][ T9718] Tainted: [W]=WARN
[  166.716487][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.716502][ T9718] Call Trace:
[  166.716509][ T9718]  <TASK>
[  166.716519][ T9718]  __dump_stack+0x1d/0x30
[  166.716544][ T9718]  dump_stack_lvl+0x95/0xd0
[  166.716565][ T9718]  dump_stack+0x15/0x1b
[  166.716608][ T9718]  should_fail_ex+0x262/0x280
[  166.716638][ T9718]  should_failslab+0x8c/0xb0
[  166.716663][ T9718]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  166.716708][ T9718]  ? dst_alloc+0xbd/0x100
[  166.716725][ T9718]  ? dst_alloc+0xbd/0x100
[  166.716744][ T9718]  dst_alloc+0xbd/0x100
[  166.716761][ T9718]  ? ip_vs_mh_reassign+0x662/0x800
[  166.716834][ T9718]  ip_route_output_key_hash_rcu+0xed9/0x1320
[  166.716960][ T9718]  ipv4_redirect+0x1d9/0x240
[  166.717018][ T9718]  icmp_err+0x199/0x240
[  166.717047][ T9718]  gue_err+0x5eb/0x760
[  166.717068][ T9718]  udp_err+0x84b/0xcf0
[  166.717104][ T9718]  ? __pfx_udp_err+0x10/0x10
[  166.717129][ T9718]  icmp_redirect+0x1e7/0x2d0
[  166.717160][ T9718]  icmp_rcv+0xb77/0xe00
[  166.717242][ T9718]  ? __pfx_icmp_rcv+0x10/0x10
[  166.717264][ T9718]  ip_protocol_deliver_rcu+0x418/0x7a0
[  166.717290][ T9718]  ip_local_deliver_finish+0x1f0/0x2e0
[  166.717382][ T9718]  ip_local_deliver+0xe8/0x1e0
[  166.717401][ T9718]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  166.717426][ T9718]  ? __pfx_ip_local_deliver+0x10/0x10
[  166.717446][ T9718]  ip_rcv_finish+0x188/0x1a0
[  166.717509][ T9718]  ip_rcv+0x62/0x160
[  166.717528][ T9718]  ? __pfx_ip_rcv_finish+0x10/0x10
[  166.717596][ T9718]  ? __pfx_ip_rcv+0x10/0x10
[  166.717631][ T9718]  netif_receive_skb+0x137/0x4c0
[  166.717656][ T9718]  ? tun_rx_batched+0xca/0x430
[  166.717771][ T9718]  tun_rx_batched+0x101/0x430
[  166.717824][ T9718]  tun_get_user+0x1fe6/0x2820
[  166.717856][ T9718]  ? _parse_integer+0x27/0x40
[  166.717883][ T9718]  ? ref_tracker_alloc+0x1eb/0x2f0
[  166.717994][ T9718]  tun_chr_write_iter+0x15a/0x210
[  166.718025][ T9718]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  166.718056][ T9718]  vfs_write+0x57f/0x9a0
[  166.718136][ T9718]  ksys_write+0xdc/0x1a0
[  166.718162][ T9718]  __x64_sys_write+0x40/0x50
[  166.718252][ T9718]  x64_sys_call+0x154e/0x2550
[  166.718342][ T9718]  do_syscall_64+0x112/0x360
[  166.718366][ T9718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.718387][ T9718] RIP: 0033:0x7f46043ce90e
[  166.718405][ T9718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  166.718496][ T9718] RSP: 002b:00007f4602e66fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  166.718518][ T9718] RAX: ffffffffffffffda RBX: 00007f4602e676c0 RCX: 00007f46043ce90e
[  166.718532][ T9718] RDX: 0000000000000086 RSI: 0000200000000300 RDI: 00000000000000c8
[  166.718581][ T9718] RBP: 00007f4602e67090 R08: 0000000000000000 R09: 0000000000000000
[  166.718594][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.718605][ T9718] R13: 00007f4604696038 R14: 00007f4604695fa0 R15: 00007ffee0e26d78
[  166.718623][ T9718]  </TASK>
[  167.049395][ T9720] loop6: detected capacity change from 0 to 512
[  167.071853][ T9722] loop7: detected capacity change from 0 to 256
[  167.112771][ T9720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.141742][ T9720] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.167843][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1678'.
[  167.446245][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1678'.
[  167.460263][ T9732] netlink: 'syz.3.1680': attribute type 4 has an invalid length.
[  167.476883][ T9732] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1680'.
[  168.039493][ T9754] loop7: detected capacity change from 0 to 512
[  168.050192][ T9754] EXT4-fs: Ignoring removed nobh option
[  168.069909][ T9754] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  168.102334][ T9754] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[  168.115110][ T9754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.210091][ T9251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.318638][ T9765] loop7: detected capacity change from 0 to 128
[  168.414882][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1686'.
[  168.623777][ T7480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.788907][   T28] kauditd_printk_skb: 161 callbacks suppressed
[  168.788920][   T28] audit: type=1400 audit(1787137549.961:2574): avc:  denied  { write } for  pid=9788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  168.870952][   T28] audit: type=1400 audit(1787137550.051:2575): avc:  denied  { write } for  pid=9803 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  168.898612][ T9804] netlink: 'syz.6.1694': attribute type 4 has an invalid length.
[  168.919446][ T9804] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1694'.
[  169.061633][   T28] audit: type=1400 audit(1787137550.241:2576): avc:  denied  { write } for  pid=9808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.107966][   T28] audit: type=1400 audit(1787137550.281:2577): avc:  denied  { write } for  pid=9820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.201654][   T28] audit: type=1400 audit(1787137550.371:2578): avc:  denied  { write } for  pid=9823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.244509][   T28] audit: type=1400 audit(1787137550.421:2579): avc:  denied  { write } for  pid=9840 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.296057][ T9844] netlink: 'syz.1.1695': attribute type 4 has an invalid length.
[  169.320497][ T9844] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1695'.
[  169.381730][   T28] audit: type=1400 audit(1787137550.561:2580): avc:  denied  { write } for  pid=9845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.438633][   T28] audit: type=1400 audit(1787137550.581:2581): avc:  denied  { write } for  pid=9857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.502506][ T9861] loop7: detected capacity change from 0 to 4096
[  169.533643][ T9861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.561810][   T28] audit: type=1400 audit(1787137550.741:2582): avc:  denied  { write } for  pid=9859 comm="syz.7.1697" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  169.603597][ T9872] loop6: detected capacity change from 0 to 128
[  169.663626][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'.
[  170.734164][ T9251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.755639][ T9905] loop8: detected capacity change from 0 to 128
[  170.783304][ T9905] __nla_validate_parse: 2 callbacks suppressed
[  170.783320][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1710'.
[  170.799244][ T9905] hsr_slave_0: left promiscuous mode
[  170.806251][ T9905] hsr_slave_1: left promiscuous mode
[  170.881699][ T9916] netlink: 'syz.7.1709': attribute type 4 has an invalid length.
[  170.890553][ T9916] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.1709'.
[  170.978087][ T9921] syzkaller0: entered promiscuous mode
[  170.983810][ T9921] syzkaller0: entered allmulticast mode
[  171.005062][   T28] audit: type=1400 audit(1787137552.181:2583): avc:  denied  { setopt } for  pid=9923 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  171.082725][ T9927] loop6: detected capacity change from 0 to 128
[  171.107339][ T9927] lo speed is unknown, defaulting to 1000
[  171.178292][ T9931] loop6: detected capacity change from 0 to 256
[  171.240901][ T9939] loop8: detected capacity change from 0 to 4096
[  171.260017][ T9939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.645659][ T9949] loop7: detected capacity change from 0 to 128
[  171.699456][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1722'.
[  171.710076][ T9949] hsr_slave_0: left promiscuous mode
[  171.719130][ T9949] hsr_slave_1: left promiscuous mode
[  171.816977][ T9955] loop7: detected capacity change from 0 to 512
[  171.832934][ T9955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.851539][ T9955] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.865177][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1724'.
[  171.983770][ T9118] ==================================================================
[  171.992030][ T9118] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[  172.001544][ T9118] 
[  172.003874][ T9118] write to 0xffff888106e777b8 of 2 bytes by task 9940 on cpu 0:
[  172.011510][ T9118]  copy_folio_from_iter_atomic+0x728/0x10a0
[  172.017438][ T9118]  generic_perform_write+0x2c4/0x490
[  172.022743][ T9118]  __generic_file_write_iter+0x9e/0x120
[  172.028308][ T9118]  generic_file_write_iter+0x77/0x1f0
[  172.033698][ T9118]  iter_file_splice_write+0x6a0/0xa60
[  172.039107][ T9118]  direct_splice_actor+0x158/0x280
[  172.044242][ T9118]  splice_direct_to_actor+0x2f9/0x680
[  172.049634][ T9118]  do_splice_direct+0x119/0x1a0
[  172.054507][ T9118]  do_sendfile+0x37d/0x640
[  172.058950][ T9118]  __x64_sys_sendfile64+0x105/0x150
[  172.064515][ T9118]  x64_sys_call+0x1015/0x2550
[  172.069213][ T9118]  do_syscall_64+0x112/0x360
[  172.073820][ T9118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.079747][ T9118] 
[  172.082084][ T9118] read to 0xffff888106e77000 of 2048 bytes by task 9118 on cpu 1:
[  172.089927][ T9118]  copy_folio_from_iter_atomic+0x728/0x10a0
[  172.095926][ T9118]  generic_perform_write+0x2c4/0x490
[  172.101253][ T9118]  shmem_file_write_iter+0xc5/0xf0
[  172.106379][ T9118]  lo_rw_aio+0x6ab/0x760
[  172.110624][ T9118]  loop_process_work+0x569/0xad0
[  172.115571][ T9118]  loop_workfn+0x31/0x40
[  172.119901][ T9118]  process_scheduled_works+0x4d4/0x9a0
[  172.125387][ T9118]  worker_thread+0x569/0x750
[  172.130164][ T9118]  kthread+0x223/0x270
[  172.134453][ T9118]  ret_from_fork+0x146/0x330
[  172.139064][ T9118]  ret_from_fork_asm+0x1a/0x30
[  172.143840][ T9118] 
[  172.146153][ T9118] Reported by Kernel Concurrency Sanitizer on:
[  172.152303][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: kworker/u8:13 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  172.163433][ T9118] Tainted: [W]=WARN
[  172.167227][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.177283][ T9118] Workqueue: loop6 loop_workfn
[  172.182231][ T9118] ==================================================================
[  172.196399][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1724'.
[  172.700388][ T9388] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.770997][ T9251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.