last executing test programs:

7.562360174s ago: executing program 3 (id=4):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000000200100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="161c00000000000200000000007f"], 0x50)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280)=0x5, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
syz_io_uring_setup(0x65f2, &(0x7f0000000000)={0x0, 0xff4a, 0x400, 0x1, 0xc4}, &(0x7f0000000080), &(0x7f00000000c0))
listen(r1, 0x70000008)
listen(0xffffffffffffffff, 0x401)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000093c000/0x4000)=nil, 0x4000, &(0x7f0000000140)='MO\f;L\xf1\x1d^~{\x00\x00\x00\x00\xdd')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$dir(0xffffffffffffff9c, 0x0, 0x541200, 0x10c)
mkdirat(0xffffffffffffffff, 0x0, 0x11e)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@secondary)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)

5.958455887s ago: executing program 4 (id=16):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@getsa={0x6b, 0x12, 0x400, 0x70bd2a, 0x25dfdbfb, {@in6=@private0, 0x4d4, 0x2, 0xff}, [@algo_crypt={0x6d, 0x2, {{'ecb-cast6-avx\x00'}, 0x128, "0f7676a426ea44fa1dcbab1c203613be5fee9bf4013a754977e183d1dda53e113fb82207d3"}}, @proto={0x5, 0x19, 0x6c}, @lifetime_val={0x0, 0x9, {0x5, 0x2, 0x6, 0x1}}, @replay_val={0x0, 0xa, {0x70bd28, 0x70bd2a, 0x4}}, @lifetime_val={0x0, 0x9, {0xb82, 0x9, 0x1, 0x5}}, @policy={0x0, 0x7, {{@in=@multicast1, @in6=@empty, 0x4e20, 0x7, 0x4e22, 0x5e, 0x2, 0x30, 0x100}, {0x9, 0x1, 0x9, 0x4, 0x5, 0x15, 0x10001, 0x1}, {0x100000001, 0x10, 0x9, 0x6}, 0x6, 0x6e6bb5, 0x0, 0x1, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x48, 0x0, 0x0, 0x2, @empty, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1, 0x20, 0x9, 0x3}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0x580f4b35, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x4, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd700000000000ec000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000"], 0x64}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r8, 0x2007ffc)
lseek(r8, 0x8, 0x4)

4.948629378s ago: executing program 3 (id=20):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20044055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

4.756568014s ago: executing program 4 (id=22):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
fallocate(r3, 0x3, 0x4100, 0x8000c62)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")

2.982497623s ago: executing program 0 (id=25):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28)

2.858846124s ago: executing program 3 (id=26):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$eJzs3c9rHFUcAPDvbLL9rU2hFBWRgAcrtZsm8UcFD/WsxYLe65JsQ8mmW7Kb0sSC7cGepXgRC+JdPPdY/Ac8+DcUbKFICXrwEpnN7ObX5FezSbbdzwc2vDczu2++++a9vDdvlw2gZw2mfwoRr0fE90nE8YhIsn39ke0cXDxu/tmtsfSRxMLCl38nzePSfOu1Ws87mmVei4jfv4s4U1hbbn12brJcrVams/xQY+r6UH127uzVqfJEZaJybWR09PwHoyMff/Rhx2J999K/P37xsC/LnbiXxIU4luWWx7EDt5dnBmMwe0+KcWHVgcMdKKybJLlbf9vz82B7+rJ2Xoy0DzgefVmrB15+30bEAtCjkm23/z+Lu3MmwN5qjQNac/sOzYNfGE8/XZwArY2/f/HeSBxqzo2OzCcrZkbpfHegA+WnZTx4fP9e+ojO3YcA2NTtOxFxrr9/bf+XZP3f8zu3hWOWyli8g6j/g73zMB3/vJc3/im0xz+RM/45uqLtPr/Vr7G2/ReedKCYdaXjv09yx7/tRauBviz3SnPMV0yuXK1W0r7t1Yg4HcWDaX6j9Zzz848W1tu3fPz3oHD/Xlp+ayyYnceT/oMrnzNebpR3EvNyT+9EvJE7/k3a9Z/k1H/6flzaYhmnKvffytncHD6viP9xXvy7a+GXiHdy639pRSvZeH1yqHk9DLWuirX+uXvqj/XK3+/40/o/snH8A8ny9dr69sv4+dB/lWivJ6+0Iv7Y+vV/IPmqmT6QbbtZbjSmhyMOJJ+3txda20eWntvKt45P4z/99sb9X971fzgivt5i/HdP/vrmevu6of7Hc+u/PbtdVf/bTzz67Juf1it/8/jT+n+/mTqdbdlK/7fVE9zJewcAAAAAAADdphARxyIplNrpQqFUWvx8x8k4UqjW6o0zV2oz18aj+V3ZgSgWWivdx5d9HmI4WzFs5UdW5Ucj4kRE/NB3uJkvjdWq4/sdPAAAAAAAAAAAAAAAAAAAAHSJo+t8/z/1V99+nx2w6/zkN/SuTdt/J37pCehK/v9D79L+oXdp/9C7tH/oXdo/9C7tH3pXbvs/tPfnAew9//8BAAAAAAAAAAAAAAAAAAAAAAAAAACgoy5dvJg+Fuaf3RpL8+M3ZmcmazfOjlfqk6WpmbHSWG36emmiVpuoVkpjtanNXq9aq10fHomZm0ONSr0xVJ+duzxVm7nWuHx1qjxRuVwp7klUAAAAAAAAAAAAAAAAAAAA8GKpz85NlqvVyrTEy5xIImKXiujvigAlOp3Y754JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJb8HwAA//9jbDB1")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
io_setup(0x3, &(0x7f0000008240))
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00')
execveat$binfmt(r0, r4, &(0x7f00000001c0)={[&(0x7f0000000100)='--,\x00', &(0x7f0000000180)=']\x00']}, &(0x7f00000002c0)={[&(0x7f0000000200)='-!(\'!%\x98%\x00', &(0x7f0000000280)='ext4\x00']}, 0x1000)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)

2.503028596s ago: executing program 0 (id=28):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000035c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000040)={0x28, r1, 0x301, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000)

2.436024582s ago: executing program 0 (id=29):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000021)
fcntl$setsig(r1, 0xa, 0x11)
r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'gre0\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x18, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
rmdir(&(0x7f00000002c0)='./control\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000080)=0xcb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @loopback}, &(0x7f0000000280)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', r8, 0x29, 0x8, 0x7, 0x2, 0x10, @private0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10, 0x1, 0x5a, 0x10000}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94)

2.426605473s ago: executing program 3 (id=30):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00')
preadv(r4, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/204, 0xcc}], 0x1, 0x101, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)

2.409173325s ago: executing program 4 (id=31):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a00000000000000000000ffffffffffffff80000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)

2.200280113s ago: executing program 0 (id=34):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='>p,\x00'])
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)=ANY=[@ANYBLOB='nos,inode32,\x00'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/130, 0x82}], 0x1, 0x0, 0x8)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e})
sigaltstack(&(0x7f0000000480)={0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000440)={'tunl0\x00', 0x9})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000840)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0x4, 0x6, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0xff, 0x8, 0x8000100, 0x7, 0x0, 0x11000, 0x8, 0x9, 0x79b, 0x7, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x0, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x400002, 0x7e87, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0xff, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0x7, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x5cb7, 0x400, 0x8, 0x0, 0x4, 0x2, 0x40, 0x6, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff], "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"}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)

1.810402098s ago: executing program 1 (id=35):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000000, 0xa)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000ffffffffffffff8000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)

1.810005299s ago: executing program 3 (id=36):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x4b7, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000000)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @random="4f4d5d8273cd"}, 0x14)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000d00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
close(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000000000000000004", @ANYRES32=r11], 0x20}}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc)
splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0)

1.432992472s ago: executing program 4 (id=38):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r2, &(0x7f0000000f00)=[{{&(0x7f0000000880)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}], 0x1, 0x44000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0xc, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
dup2(r3, r0)

1.366598488s ago: executing program 2 (id=39):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[], 0x2, 0x245, &(0x7f00000007c0)="$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")
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}], 0x10}, 0x91a41b5a5d139772)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff0000000000ff"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

1.34205714s ago: executing program 1 (id=40):
r0 = socket(0x1f, 0x6, 0x2006)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
sendto(r0, &(0x7f0000000ec0)="92da883ba5ba99583dc31c40471291563ff053f6312e3229c0125075f3bf0018926cf6206f8a9df90471dc46e4c3b29fd2aee438829dc3179675e77a78e0851651d186", 0x43, 0x4008000, &(0x7f0000000f40)=@phonet={0x23, 0x7f, 0xc4, 0x3}, 0x80)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @empty, 0xa2}}, 0x24)
bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x1e4, r6, 0x140, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ff5d71e4dd617ea118c9b028b8b7dd30061ea8ee8d9b2a84"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbfd6269e7ef2067ec26b5ad942458d0091895933177a403"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d6d9fac03334d424d043ebc777f3187d64b34c38d9967e7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e66f04ed5d473df5c6c9ae99b80326cef87567afac9e557b"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6055b1c59924b1e5b4d41b340c6393e7e74d1431c3f44be5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7dc839c8cbe29646d3a55d1d063660d72014a9483d937164"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2f093e28b6ba834b0ec1635da0f538d0d300dd13669c5708"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f0000000fc0)={0x6d0, r3, 0x2, 0x70bd28, 0x6, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x17f, 0x80, [@perr={0x84, 0xd6, {0x51, 0xe, [{{}, @device_b, 0x7, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x3e}, {{}, @device_b, 0x0, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x26}, {{}, @broadcast, 0xe520, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x3f}, {{}, @device_a, 0x7, @void, 0xd}, {{}, @device_b, 0x5, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0xc}, {{}, @device_a, 0x2, @void, 0x9}, {{}, @device_a, 0x8, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x39}, {{}, @device_a, 0xfab, @void, 0x1}, {{}, @device_b, 0x9, @void, 0x2a}]}}, @supported_rates, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x7c, 0x5, @broadcast, 0x1e, 0x4, 0x1000}}, @preq={0x82, 0x25, {{0x1, 0x1}, 0x0, 0x7e, 0x396, @device_a, 0x6, @void, 0x8, 0x8, 0x1, [{{}, @broadcast}]}}, @fast_bss_trans={0x37, 0x61, {0x0, 0x3, "4ad7c81d4ce80f443bf81ebf68fe2853", "49dfd910dd1b264252dd94d8dc289137452b97548674b7b7f80a0620243e64aa", "744ccfd2be63871897e428d0e0f3d8bcf5162c79252508666180be7aba8f897c", [{0x2}, {0x3, 0x7, "2ea84cff26f2a8"}, {0x3, 0x2, "b8d3"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x3b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xef, 0x3, "212d89b700a7984bc6e64721e79e8c45a225b7abcbab7d603a4abd619ede0754ca2a82da817c4ad028bffa4817eb3013b41f71749d09154cff1abea4f78479387bcf8963531a50520e56999781b288b6914d59214b716ccf773dac3204069885ebe4f2a94a7c9403d8b340259648820c277157ba0050b2ecaa85ff4f420ba81b15310bde5ba51349c7f91ab6de8fa5f6aa63bc71e8244b362a6e5bb4b28b9e55479c55770f1672940316b55fe7dd3a1c37bc696a1e04ae6aa164754a7170c9e359ce8df41998d771c4f23ec458ffe162d0914d0b577e953cbe3c5420f6c4a5d40c679bd308e3aae59058ab"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "294e5955d06df8d9a1e1b3273cdb37b5ab59c46926b0f028181353fe1ed81c43b62197dd004b98c332dd513d8f2da5b95808ee3768b0fa6da6ebb53e5bd06484e3aab0f77e1b102e51f68180c4d7d0772f22a6cf8fc9757a686521f9b5836a7fb4a14216f173c8ba88be98a794ee17fdbfb54ba452454a07885bc2c82ce035edfcc139d4a93df407a02ba1ecc85bb87649f64ff21d0c72c6324409144da5470c2eba716072487782df6335b79097e2bbdd845ad4a4dcbe0083aaa327a4d886fc3a0e862d7cdf0a67a4765a28ed965f707418296c26"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "b87a0f2fc7feafb8a09246509c54a5bc64a814663ceeb4e677"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc7, 0x3, "2430871f895a52d56c7ed5cd0d876603e0c205f28be6ec02f120a5943be4137840aff87ccefecbf5ffab37c3562571a129935d0fb849bc2e3586d75b4bdb820091771ea37671b065c140fcf22527671054449fc899d87589b7c3e6ca8862a8fb01d4705c5aa0a498086ba1e9af3c39ae02aaa63734d9903db46a80f621b37f94c5eaf9a1cf81aa5f6fd643b61e7965b402e9438c1ddb0fd7e7bd945808690c8d84d63c8d8d85201696920d8cb0c556ce1c76e5e84047293015fecfcc417454fcadb5ae"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf2, 0x3, "e35802c17fb8bea8ca0da3abfabed1c72e18791f126d83e28ed16db2b589376d5eeca51edb925cfcd0960ab52671626b2a88b69286c7c300711733b3bc838a095d868f60c329137983186559a6910f3ed69cda7b7828ca792b3376bc6e40ba90e63a3e6bada905b60508f75e31cf5d430b02b65993e3adf54a8a21b48d5624ca098fba06306bdaab886f40af2046dab41a96cc5f1e0108f1086cdba4d08d21e37c2c0c7b788bc00f54d28f3476e35bbaa048a23447006c8b53e83564da92e946a2a2e8a71c20267f7a29547134068d0920cec2d12fa7b7ab83690864ed533ffa8e8d23227ee474f3a6d0f111f805"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x14b, 0x7f, [@perr={0x84, 0x101, {0x6, 0xf, [{{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x3d}, {{0x0, 0x1}, @device_a, 0x9b, @value=@broadcast, 0x5}, {{}, @device_a, 0x4, @void, 0x1e}, {{}, @device_a, 0x1, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0xfe91, @value, 0x2c}, {{0x0, 0x1}, @device_b, 0x6e, @value=@device_b, 0x37}, {{}, @broadcast, 0x1, @void, 0x14}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x22}, {{0x0, 0x1}, @broadcast, 0xd, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x5c}, {{}, @device_a, 0x86, @void, 0x2e}, {{0x0, 0x1}, @device_a, 0x48, @value=@device_b, 0x23}, {{}, @broadcast, 0xc, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1000}]}}, @measure_req={0x26, 0x22, {0xfc, 0xa0, 0x9, "5e75047930a43211584aff6c6f2444647ae7a61bc86ecbc7f74db69241a2e7"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @val=0x7, @void, @val="3fe062d50bfd3ef52b48e88274fa3f1f"}}]}], @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x24004000}, 0x81)
sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept4(r2, 0x0, &(0x7f0000000000), 0x80000)
r8 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0xffffffffffffff44, {0x6, 0x0, 0x7, 0x6, 0x7}})
r9 = socket$kcm(0x21, 0x2, 0x2)
r10 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018)
recvmmsg$unix(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000ac0)=""/166, 0xa6}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/164, 0xa4}], 0xa, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000dc0)=""/240, 0xf0}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x2, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18)

1.284548445s ago: executing program 0 (id=41):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x3, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x103, 0xd32, 0x5, 0x38, 0x2, 0x78, 0x5, 0x2}, [{0x5, 0x81, 0x7, 0x8000000000000000, 0x4, 0xa4b, 0x8, 0x4}, {0x3, 0x9, 0x4, 0x7fffffffffffffff, 0x100000001, 0xf6e2, 0xcdf1, 0xf84}]}, 0xb0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7})
r1 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x8001)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000a00)='/\x00\x00\x00tf', 0x0, 0x9, 0x1, 0x2, 0x0})
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77, 0x0, r0})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendfile(r5, r5, 0x0, 0x5)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0xfffffffc, 0x3, 0xfff, 0x7fff, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @empty}}}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x3)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1.206813002s ago: executing program 1 (id=42):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
io_setup(0x3, &(0x7f0000008240))
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00')
execveat$binfmt(r0, r4, &(0x7f00000001c0)={[&(0x7f0000000100)='--,\x00', &(0x7f0000000180)=']\x00']}, &(0x7f00000002c0)={[&(0x7f0000000200)='-!(\'!%\x98%\x00', &(0x7f0000000280)='ext4\x00']}, 0x1000)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)

1.204696552s ago: executing program 2 (id=43):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x4000010)

1.158744897s ago: executing program 2 (id=44):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x4d5, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}, 0x1, 0x100000000000000}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000440)={'\x00', @local})

1.144753558s ago: executing program 4 (id=45):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000000200100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="161c00000000000200000000007f"], 0x50)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280)=0x5, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
syz_io_uring_setup(0x65f2, &(0x7f0000000000)={0x0, 0xff4a, 0x400, 0x1, 0xc4}, &(0x7f0000000080), &(0x7f00000000c0))
listen(r1, 0x70000008)
listen(0xffffffffffffffff, 0x401)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000093c000/0x4000)=nil, 0x4000, &(0x7f0000000140)='MO\f;L\xf1\x1d^~{\x00\x00\x00\x00\xdd')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$dir(0xffffffffffffff9c, 0x0, 0x541200, 0x10c)
mkdirat(0xffffffffffffffff, 0x0, 0x11e)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@secondary)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)

936.637746ms ago: executing program 2 (id=46):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%+9llu \x00'}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x8000)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x800, 0x87, &(0x7f00000006c0)=""/135, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x26, 0x9}, 0x10, 0x2e6c6, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x4, 0x3, 0x3}, {0x0, 0x3, 0x9}], 0x10, 0x1e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x5, '\x00', r4, @fallback=0x36, r5, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x2, 0x0, &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x7}, {0x3, 0x3, 0xf, 0x2}], 0x10, 0x8000}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1)
r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x6800, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250b00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x400)

922.536887ms ago: executing program 2 (id=47):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='>p,\x00'])
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)=ANY=[@ANYBLOB='nos,inode32,\x00'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/130, 0x82}], 0x1, 0x0, 0x8)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e})
sigaltstack(&(0x7f0000000480)={0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000440)={'tunl0\x00', 0x9})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000840)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0x4, 0x6, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0xff, 0x8, 0x8000100, 0x7, 0x0, 0x11000, 0x8, 0x9, 0x79b, 0x7, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x0, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x400002, 0x7e87, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0xff, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0x7, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x5cb7, 0x400, 0x8, 0x0, 0x4, 0x2, 0x40, 0x6, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff], "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"}})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)

918.198168ms ago: executing program 3 (id=48):
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)

614.723365ms ago: executing program 1 (id=49):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x3a00)

356.329399ms ago: executing program 0 (id=50):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000000200100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="161c00000000000200000000007f"], 0x50)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280)=0x5, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
syz_io_uring_setup(0x65f2, &(0x7f0000000000)={0x0, 0xff4a, 0x400, 0x1, 0xc4}, &(0x7f0000000080), &(0x7f00000000c0))
listen(r1, 0x70000008)
listen(0xffffffffffffffff, 0x401)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000093c000/0x4000)=nil, 0x4000, &(0x7f0000000140)='MO\f;L\xf1\x1d^~{\x00\x00\x00\x00\xdd')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$dir(0xffffffffffffff9c, 0x0, 0x541200, 0x10c)
mkdirat(0xffffffffffffffff, 0x0, 0x11e)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@secondary)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)

104.824311ms ago: executing program 1 (id=51):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00')
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendfile(r1, r0, 0x0, 0x8000000010001)

102.242131ms ago: executing program 1 (id=52):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
shmctl$IPC_SET(0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@dioread_lock}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r1, &(0x7f0000000a00)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x5, 0x6, 0x1})
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000580)={0x3, 0x80, 0xff, 0x5, 0x18, 0x42, 0x0, 0xffffffff, 0x8828, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x800, 0xf, 0x47, 0x7, 0x1, 0x5, 0x5, 0x0, 0x2, 0x0, 0x9}, r3, 0x9, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

63.934964ms ago: executing program 4 (id=53):
r0 = socket(0x1f, 0x6, 0x2006)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
sendto(r0, &(0x7f0000000ec0)="92da883ba5ba99583dc31c40471291563ff053f6312e3229c0125075f3bf0018926cf6206f8a9df90471dc46e4c3b29fd2aee438829dc3179675e77a78e0851651d186", 0x43, 0x4008000, &(0x7f0000000f40)=@phonet={0x23, 0x7f, 0xc4, 0x3}, 0x80)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @empty, 0xa2}}, 0x24)
bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x1e4, r6, 0x140, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ff5d71e4dd617ea118c9b028b8b7dd30061ea8ee8d9b2a84"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbfd6269e7ef2067ec26b5ad942458d0091895933177a403"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d6d9fac03334d424d043ebc777f3187d64b34c38d9967e7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e66f04ed5d473df5c6c9ae99b80326cef87567afac9e557b"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6055b1c59924b1e5b4d41b340c6393e7e74d1431c3f44be5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7dc839c8cbe29646d3a55d1d063660d72014a9483d937164"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2f093e28b6ba834b0ec1635da0f538d0d300dd13669c5708"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f0000000fc0)={0x6d0, r3, 0x2, 0x70bd28, 0x6, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x17f, 0x80, [@perr={0x84, 0xd6, {0x51, 0xe, [{{}, @device_b, 0x7, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x3e}, {{}, @device_b, 0x0, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x26}, {{}, @broadcast, 0xe520, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x3f}, {{}, @device_a, 0x7, @void, 0xd}, {{}, @device_b, 0x5, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0xc}, {{}, @device_a, 0x2, @void, 0x9}, {{}, @device_a, 0x8, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x39}, {{}, @device_a, 0xfab, @void, 0x1}, {{}, @device_b, 0x9, @void, 0x2a}]}}, @supported_rates, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x7c, 0x5, @broadcast, 0x1e, 0x4, 0x1000}}, @preq={0x82, 0x25, {{0x1, 0x1}, 0x0, 0x7e, 0x396, @device_a, 0x6, @void, 0x8, 0x8, 0x1, [{{}, @broadcast}]}}, @fast_bss_trans={0x37, 0x61, {0x0, 0x3, "4ad7c81d4ce80f443bf81ebf68fe2853", "49dfd910dd1b264252dd94d8dc289137452b97548674b7b7f80a0620243e64aa", "744ccfd2be63871897e428d0e0f3d8bcf5162c79252508666180be7aba8f897c", [{0x2}, {0x3, 0x7, "2ea84cff26f2a8"}, {0x3, 0x2, "b8d3"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x3b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xef, 0x3, "212d89b700a7984bc6e64721e79e8c45a225b7abcbab7d603a4abd619ede0754ca2a82da817c4ad028bffa4817eb3013b41f71749d09154cff1abea4f78479387bcf8963531a50520e56999781b288b6914d59214b716ccf773dac3204069885ebe4f2a94a7c9403d8b340259648820c277157ba0050b2ecaa85ff4f420ba81b15310bde5ba51349c7f91ab6de8fa5f6aa63bc71e8244b362a6e5bb4b28b9e55479c55770f1672940316b55fe7dd3a1c37bc696a1e04ae6aa164754a7170c9e359ce8df41998d771c4f23ec458ffe162d0914d0b577e953cbe3c5420f6c4a5d40c679bd308e3aae59058ab"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "294e5955d06df8d9a1e1b3273cdb37b5ab59c46926b0f028181353fe1ed81c43b62197dd004b98c332dd513d8f2da5b95808ee3768b0fa6da6ebb53e5bd06484e3aab0f77e1b102e51f68180c4d7d0772f22a6cf8fc9757a686521f9b5836a7fb4a14216f173c8ba88be98a794ee17fdbfb54ba452454a07885bc2c82ce035edfcc139d4a93df407a02ba1ecc85bb87649f64ff21d0c72c6324409144da5470c2eba716072487782df6335b79097e2bbdd845ad4a4dcbe0083aaa327a4d886fc3a0e862d7cdf0a67a4765a28ed965f707418296c26"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "b87a0f2fc7feafb8a09246509c54a5bc64a814663ceeb4e677"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc7, 0x3, "2430871f895a52d56c7ed5cd0d876603e0c205f28be6ec02f120a5943be4137840aff87ccefecbf5ffab37c3562571a129935d0fb849bc2e3586d75b4bdb820091771ea37671b065c140fcf22527671054449fc899d87589b7c3e6ca8862a8fb01d4705c5aa0a498086ba1e9af3c39ae02aaa63734d9903db46a80f621b37f94c5eaf9a1cf81aa5f6fd643b61e7965b402e9438c1ddb0fd7e7bd945808690c8d84d63c8d8d85201696920d8cb0c556ce1c76e5e84047293015fecfcc417454fcadb5ae"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf2, 0x3, "e35802c17fb8bea8ca0da3abfabed1c72e18791f126d83e28ed16db2b589376d5eeca51edb925cfcd0960ab52671626b2a88b69286c7c300711733b3bc838a095d868f60c329137983186559a6910f3ed69cda7b7828ca792b3376bc6e40ba90e63a3e6bada905b60508f75e31cf5d430b02b65993e3adf54a8a21b48d5624ca098fba06306bdaab886f40af2046dab41a96cc5f1e0108f1086cdba4d08d21e37c2c0c7b788bc00f54d28f3476e35bbaa048a23447006c8b53e83564da92e946a2a2e8a71c20267f7a29547134068d0920cec2d12fa7b7ab83690864ed533ffa8e8d23227ee474f3a6d0f111f805"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x14b, 0x7f, [@perr={0x84, 0x101, {0x6, 0xf, [{{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x3d}, {{0x0, 0x1}, @device_a, 0x9b, @value=@broadcast, 0x5}, {{}, @device_a, 0x4, @void, 0x1e}, {{}, @device_a, 0x1, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0xfe91, @value, 0x2c}, {{0x0, 0x1}, @device_b, 0x6e, @value=@device_b, 0x37}, {{}, @broadcast, 0x1, @void, 0x14}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x22}, {{0x0, 0x1}, @broadcast, 0xd, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x5c}, {{}, @device_a, 0x86, @void, 0x2e}, {{0x0, 0x1}, @device_a, 0x48, @value=@device_b, 0x23}, {{}, @broadcast, 0xc, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1000}]}}, @measure_req={0x26, 0x22, {0xfc, 0xa0, 0x9, "5e75047930a43211584aff6c6f2444647ae7a61bc86ecbc7f74db69241a2e7"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @val=0x7, @void, @val="3fe062d50bfd3ef52b48e88274fa3f1f"}}]}], @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x24004000}, 0x81)
sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept4(r2, 0x0, &(0x7f0000000000), 0x80000)
r8 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0xffffffffffffff44, {0x6, 0x0, 0x7, 0x6, 0x7}})
r9 = socket$kcm(0x21, 0x2, 0x2)
r10 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018)
recvmmsg$unix(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000ac0)=""/166, 0xa6}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/164, 0xa4}], 0xa, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000dc0)=""/240, 0xf0}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x2, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18)

0s ago: executing program 2 (id=54):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001a140100000000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@filename='./file0\x00', 0xee01, &(0x7f0000000180)={0x8, 0x5, 0x40, 0x6, 0x5, 0x6, 0x9, 0x401, 0x1})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
gettid()
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
preadv(r3, 0x0, 0x0, 0x95400000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0)
sendmmsg$sock(r4, 0x0, 0x0, 0x40500f0)
accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts.
[   34.385385][   T28] audit: type=1400 audit(1771499368.433:62): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.408558][   T28] audit: type=1400 audit(1771499368.453:63): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.410879][ T3300] cgroup: Unknown subsys name 'net'
[   34.436300][   T28] audit: type=1400 audit(1771499368.483:64): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.551997][ T3300] cgroup: Unknown subsys name 'cpuset'
[   34.558251][ T3300] cgroup: Unknown subsys name 'rlimit'
[   34.669962][   T28] audit: type=1400 audit(1771499368.713:65): avc:  denied  { setattr } for  pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.704488][   T28] audit: type=1400 audit(1771499368.723:66): avc:  denied  { create } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.725281][   T28] audit: type=1400 audit(1771499368.723:67): avc:  denied  { write } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.745728][   T28] audit: type=1400 audit(1771499368.723:68): avc:  denied  { read } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.766103][   T28] audit: type=1400 audit(1771499368.733:69): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.791005][   T28] audit: type=1400 audit(1771499368.733:70): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.814371][   T28] audit: type=1400 audit(1771499368.743:71): avc:  denied  { read } for  pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   34.834215][ T3303] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.874744][ T3300] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.086478][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   36.135422][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   36.154951][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   36.171673][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   36.180594][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   36.244376][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.251574][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.258723][ T3318] bridge_slave_0: entered allmulticast mode
[   36.265099][ T3318] bridge_slave_0: entered promiscuous mode
[   36.290459][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.297592][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.304886][ T3318] bridge_slave_1: entered allmulticast mode
[   36.311365][ T3318] bridge_slave_1: entered promiscuous mode
[   36.337269][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.344405][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.351578][ T3312] bridge_slave_0: entered allmulticast mode
[   36.358087][ T3312] bridge_slave_0: entered promiscuous mode
[   36.378549][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.385807][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.392962][ T3317] bridge_slave_0: entered allmulticast mode
[   36.399389][ T3317] bridge_slave_0: entered promiscuous mode
[   36.405899][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.413017][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.420166][ T3312] bridge_slave_1: entered allmulticast mode
[   36.426824][ T3312] bridge_slave_1: entered promiscuous mode
[   36.439315][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.448585][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.455822][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.463006][ T3317] bridge_slave_1: entered allmulticast mode
[   36.469482][ T3317] bridge_slave_1: entered promiscuous mode
[   36.495407][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.527597][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.534774][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.541963][ T3316] bridge_slave_0: entered allmulticast mode
[   36.548534][ T3316] bridge_slave_0: entered promiscuous mode
[   36.556615][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.567133][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.582370][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.591606][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.598794][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.606019][ T3313] bridge_slave_0: entered allmulticast mode
[   36.612501][ T3313] bridge_slave_0: entered promiscuous mode
[   36.619048][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.626203][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.633454][ T3316] bridge_slave_1: entered allmulticast mode
[   36.639893][ T3316] bridge_slave_1: entered promiscuous mode
[   36.651342][ T3318] team0: Port device team_slave_0 added
[   36.657906][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.672064][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.679184][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.686619][ T3313] bridge_slave_1: entered allmulticast mode
[   36.693143][ T3313] bridge_slave_1: entered promiscuous mode
[   36.714380][ T3318] team0: Port device team_slave_1 added
[   36.729271][ T3312] team0: Port device team_slave_0 added
[   36.736037][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.750911][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.760801][ T3317] team0: Port device team_slave_0 added
[   36.771742][ T3317] team0: Port device team_slave_1 added
[   36.778151][ T3312] team0: Port device team_slave_1 added
[   36.785374][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.814032][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.823498][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.830459][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.856788][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.887495][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.894529][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.920622][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.931813][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.938867][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.964976][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.976616][ T3316] team0: Port device team_slave_0 added
[   36.982680][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.989662][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.015878][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.032225][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.039285][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.065301][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.080014][ T3316] team0: Port device team_slave_1 added
[   37.090641][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.097712][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.123809][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.135337][ T3313] team0: Port device team_slave_0 added
[   37.160823][ T3313] team0: Port device team_slave_1 added
[   37.188563][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.195635][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.221808][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.233702][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.240684][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.266875][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.284127][ T3317] hsr_slave_0: entered promiscuous mode
[   37.290243][ T3317] hsr_slave_1: entered promiscuous mode
[   37.313411][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.320438][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.346632][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.364091][ T3318] hsr_slave_0: entered promiscuous mode
[   37.370077][ T3318] hsr_slave_1: entered promiscuous mode
[   37.376089][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   37.381876][ T3318] Cannot create hsr debugfs directory
[   37.403532][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.410502][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.436481][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.449824][ T3312] hsr_slave_0: entered promiscuous mode
[   37.456040][ T3312] hsr_slave_1: entered promiscuous mode
[   37.462041][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   37.467764][ T3312] Cannot create hsr debugfs directory
[   37.480446][ T3316] hsr_slave_0: entered promiscuous mode
[   37.486812][ T3316] hsr_slave_1: entered promiscuous mode
[   37.492994][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   37.498830][ T3316] Cannot create hsr debugfs directory
[   37.541688][ T3313] hsr_slave_0: entered promiscuous mode
[   37.547923][ T3313] hsr_slave_1: entered promiscuous mode
[   37.553924][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   37.559746][ T3313] Cannot create hsr debugfs directory
[   37.739296][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.750197][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.760901][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.769508][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.801076][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.810936][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.822433][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.833901][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.857105][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.872040][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.880999][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.893171][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.915326][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.938941][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.952563][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.969395][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.984215][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   37.991601][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.018417][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.025499][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.035065][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.042169][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.054432][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.072716][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.086187][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.095407][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.136460][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.149960][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.175684][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   38.201732][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.213589][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   38.226234][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.233329][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.247502][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   38.258559][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.265652][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.275298][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.282430][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.297034][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.304137][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.314858][  T114] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.322061][  T114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.332004][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.359665][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.366797][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.413698][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.454242][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   38.484681][  T114] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.491951][  T114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.518196][  T114] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.525423][  T114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.544685][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.573954][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.598802][ T3317] veth0_vlan: entered promiscuous mode
[   38.606163][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.620912][ T3317] veth1_vlan: entered promiscuous mode
[   38.660826][ T3317] veth0_macvtap: entered promiscuous mode
[   38.682623][ T3317] veth1_macvtap: entered promiscuous mode
[   38.703342][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.723654][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.740305][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.773970][  T114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.800074][  T114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.831736][  T114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.849131][ T3313] veth0_vlan: entered promiscuous mode
[   38.863401][  T114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.884417][ T3313] veth1_vlan: entered promiscuous mode
[   38.910512][ T3318] veth0_vlan: entered promiscuous mode
[   38.919562][ T3318] veth1_vlan: entered promiscuous mode
[   38.933007][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.954364][ T3316] veth0_vlan: entered promiscuous mode
[   38.967066][ T3313] veth0_macvtap: entered promiscuous mode
[   38.984353][ T3318] veth0_macvtap: entered promiscuous mode
[   38.997162][ T3313] veth1_macvtap: entered promiscuous mode
[   39.007626][ T3318] veth1_macvtap: entered promiscuous mode
[   39.017427][ T3316] veth1_vlan: entered promiscuous mode
[   39.035543][ T3312] veth0_vlan: entered promiscuous mode
[   39.055009][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.065003][ T3312] veth1_vlan: entered promiscuous mode
[   39.077241][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.107813][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.117661][ T3316] veth0_macvtap: entered promiscuous mode
[   39.130071][ T3312] veth0_macvtap: entered promiscuous mode
[   39.146689][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.157254][ T3316] veth1_macvtap: entered promiscuous mode
[   39.165674][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.175958][ T3312] veth1_macvtap: entered promiscuous mode
[   39.199623][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.251923][  T286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.260943][  T286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.272351][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.283782][  T114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.310109][  T286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.319474][  T286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.329177][  T286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.352413][ T3486] loop0: detected capacity change from 0 to 256
[   39.391557][ T3486] FAT-fs (loop0): Directory bread(block 64) failed
[   39.398175][ T3486] FAT-fs (loop0): Directory bread(block 65) failed
[   39.404895][ T3486] FAT-fs (loop0): Directory bread(block 66) failed
[   39.411568][ T3486] FAT-fs (loop0): Directory bread(block 67) failed
[   39.418216][ T3486] FAT-fs (loop0): Directory bread(block 68) failed
[   39.424855][ T3486] FAT-fs (loop0): Directory bread(block 69) failed
[   39.431540][ T3486] FAT-fs (loop0): Directory bread(block 70) failed
[   39.438272][ T3486] FAT-fs (loop0): Directory bread(block 71) failed
[   39.444971][ T3486] FAT-fs (loop0): Directory bread(block 72) failed
[   39.451625][ T3486] FAT-fs (loop0): Directory bread(block 73) failed
[   39.560462][   T28] kauditd_printk_skb: 28 callbacks suppressed
[   39.560477][   T28] audit: type=1400 audit(1771499373.523:100): avc:  denied  { mount } for  pid=3482 comm="syz.0.6" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   39.617350][   T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.652862][   T28] audit: type=1400 audit(1771499373.553:101): avc:  denied  { prog_load } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   39.672539][   T28] audit: type=1400 audit(1771499373.553:102): avc:  denied  { bpf } for  pid=3482 comm="syz.0.6" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   39.693960][   T28] audit: type=1400 audit(1771499373.573:103): avc:  denied  { prog_run } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   39.714609][   T28] audit: type=1400 audit(1771499373.593:104): avc:  denied  { allowed } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   39.735018][   T28] audit: type=1400 audit(1771499373.603:105): avc:  denied  { create } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   39.755993][ T3488] tmpfs: Unknown parameter '>p'
[   39.761619][ T3488] =======================================================
[   39.761619][ T3488] WARNING: The mand mount option has been deprecated and
[   39.761619][ T3488]          and is ignored by this kernel. Remove the mand
[   39.761619][ T3488]          option from the mount to silence this warning.
[   39.761619][ T3488] =======================================================
[   39.798406][   T28] audit: type=1400 audit(1771499373.603:106): avc:  denied  { write } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   39.805581][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.852040][   T28] audit: type=1400 audit(1771499373.603:107): avc:  denied  { nlmsg_write } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   39.873977][   T28] audit: type=1400 audit(1771499373.663:108): avc:  denied  { create } for  pid=3482 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.057449][ T3493] netlink: 'syz.1.2': attribute type 36 has an invalid length.
[   40.072762][ T3493] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   40.082731][ T3493] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   40.115038][ T3493] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   40.138918][   T28] audit: type=1400 audit(1771499373.663:109): avc:  denied  { setopt } for  pid=3482 comm="syz.0.6" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.160819][ T3493] macvlan1: entered allmulticast mode
[   40.170325][ T3493] veth1_vlan: entered allmulticast mode
[   40.181522][ T3493] team0: Port device macvlan1 added
[   40.214914][   T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.242560][   T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.256949][ T3486] syz.0.6 (3486) used greatest stack depth: 10040 bytes left
[   41.195307][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.392254][   T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.413162][   T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.443671][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   41.463257][   T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.472979][ T3493] syz.1.2 (3493) used greatest stack depth: 9272 bytes left
[   41.506427][   T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.521071][   T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.550919][   T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.597600][ T3514] netlink: 399 bytes leftover after parsing attributes in process `syz.0.9'.
[   41.627043][ T3514] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[   41.627737][    C0] hrtimer: interrupt took 52935 ns
[   41.645269][ T3518] loop2: detected capacity change from 0 to 1024
[   41.670632][ T3516] Invalid ELF header magic: != ELF
[   41.718520][ T3514] loop0: detected capacity change from 0 to 8192
[   41.725763][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.766386][ T3526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   41.779952][ T3525] loop3: detected capacity change from 0 to 2048
[   41.796779][ T3526] loop1: detected capacity change from 0 to 1764
[   41.828457][ T3415] kernel read not supported for file /2/net/ip_vs_stats_percpu (pid: 3415 comm: kworker/0:4)
[   41.838819][ T3426] kernel write not supported for file /2/net/ip_vs_stats_percpu (pid: 3426 comm: kworker/0:5)
[   41.878774][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.893742][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.923936][ T3516] loop4: detected capacity change from 0 to 764
[   41.954852][ T3516] iso9660: Unknown parameter ':�+��Τ����a������T�l�Ǝ�[nƙr<��T'
[   42.036365][ T3525] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 234: padding at end of block bitmap is not set
[   42.062337][ T3525] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1356 with error 28
[   42.086214][ T3525] EXT4-fs (loop3): This should not happen!! Data will be lost
[   42.086214][ T3525] 
[   42.111415][ T3525] EXT4-fs (loop3): Total free blocks count 0
[   42.121499][ T3525] EXT4-fs (loop3): Free/Dirty block details
[   42.127427][ T3525] EXT4-fs (loop3): free_blocks=0
[   42.160065][ T3525] EXT4-fs (loop3): dirty_blocks=1360
[   42.177648][ T3525] EXT4-fs (loop3): Block reservation details
[   42.190373][ T3525] EXT4-fs (loop3): i_reserved_data_blocks=85
[   42.323441][ T3546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15'.
[   42.342154][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'.
[   42.364640][ T3546] vlan2: entered promiscuous mode
[   42.387744][ T3546] bridge0: entered promiscuous mode
[   42.404629][ T3547] loop1: detected capacity change from 0 to 256
[   42.432253][ T3547] FAT-fs (loop1): Directory bread(block 64) failed
[   42.439025][ T3547] FAT-fs (loop1): Directory bread(block 65) failed
[   42.445720][ T3547] FAT-fs (loop1): Directory bread(block 66) failed
[   42.452316][ T3547] FAT-fs (loop1): Directory bread(block 67) failed
[   42.458922][ T3547] FAT-fs (loop1): Directory bread(block 68) failed
[   42.465564][ T3547] FAT-fs (loop1): Directory bread(block 69) failed
[   42.472162][ T3547] FAT-fs (loop1): Directory bread(block 70) failed
[   42.478889][ T3547] FAT-fs (loop1): Directory bread(block 71) failed
[   42.485624][ T3547] FAT-fs (loop1): Directory bread(block 72) failed
[   42.492471][ T3547] FAT-fs (loop1): Directory bread(block 73) failed
[   44.164487][ T3558] hub 8-0:1.0: USB hub found
[   44.169368][ T3558] hub 8-0:1.0: 8 ports detected
[   44.191521][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'.
[   44.208036][ T3558] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   44.218035][ T3558] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   44.239371][ T3558] netlink: 'syz.4.16': attribute type 10 has an invalid length.
[   44.465264][ T3558] macvlan1: entered allmulticast mode
[   44.472724][ T3558] veth1_vlan: entered allmulticast mode
[   44.477419][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.483038][ T3558] team0: Port device macvlan1 added
[   44.526216][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'.
[   44.579140][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'.
[   44.613212][ T3574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'.
[   44.626411][ T3569] loop4: detected capacity change from 0 to 4096
[   44.691263][   T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   44.700040][   T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   44.709691][   T28] kauditd_printk_skb: 216 callbacks suppressed
[   44.709708][   T28] audit: type=1326 audit(1771499378.753:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   44.731646][   T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   44.764908][   T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   44.795370][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   44.807172][ T3581] 9pnet_fd: p9_fd_create_unix (3581): problem connecting socket: ./file1: -1
[   45.306063][   T28] audit: type=1326 audit(1771499378.753:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   45.331884][ T3574] netlink: 'syz.3.20': attribute type 10 has an invalid length.
[   45.352085][ T3569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.383897][   T28] audit: type=1326 audit(1771499378.753:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   45.474973][ T3573] batman_adv: batadv0: Adding interface: dummy0
[   45.481403][ T3573] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   45.535892][ T3573] batman_adv: batadv0: Interface activated: dummy0
[   45.597053][ T3585] geneve2: entered promiscuous mode
[   45.631130][ T3587] loop2: detected capacity change from 0 to 2048
[   45.656181][ T3585] geneve2: entered allmulticast mode
[   45.688524][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.745684][ T3577] batadv0: mtu less than device minimum
[   45.771951][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.782947][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.793865][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.804757][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.815814][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.826733][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.837720][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.848504][ T3577] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   45.872726][ T3585] Zero length message leads to an empty skb
[   45.886183][ T3567] loop1: detected capacity change from 0 to 512
[   45.950295][ T3587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.24: bg 0: block 234: padding at end of block bitmap is not set
[   46.015284][ T3587] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 117
[   46.042166][ T3567] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   46.052945][ T3587] EXT4-fs (loop2): This should not happen!! Data will be lost
[   46.052945][ T3587] 
[   46.070530][ T3567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   46.086699][   T28] audit: type=1326 audit(1771499378.753:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.100019][ T3567] System zones: 
[   46.110238][   T28] audit: type=1326 audit(1771499378.753:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.110278][   T28] audit: type=1326 audit(1771499378.753:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.110318][   T28] audit: type=1326 audit(1771499378.753:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.110429][   T28] audit: type=1326 audit(1771499378.763:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.110463][   T28] audit: type=1326 audit(1771499378.763:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.110561][   T28] audit: type=1326 audit(1771499378.763:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c473c629 code=0x7ffc0000
[   46.291424][ T3567] 0-1, 15-15, 18-18, 34-34
[   46.297215][ T3567] EXT4-fs (loop1): orphan cleanup on readonly fs
[   46.298880][ T3574] team0: Port device geneve1 added
[   46.305933][ T3567] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   46.320343][ T3596] loop0: detected capacity change from 0 to 512
[   46.330994][ T3567] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   46.352878][ T3567] EXT4-fs (loop1): 1 truncate cleaned up
[   46.365350][ T3596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   46.391919][ T3567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.414580][ T3596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   46.427769][ T3596] EXT4-fs (loop0): 1 truncate cleaned up
[   46.441736][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.474364][ T3599] loop3: detected capacity change from 0 to 1024
[   46.572011][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.582715][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.725079][ T3607] __nla_validate_parse: 3 callbacks suppressed
[   46.725101][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   46.770846][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.797559][ T3607] syz_tun: entered promiscuous mode
[   46.810501][ T3607] vlan2: entered promiscuous mode
[   46.864011][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.893742][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.972763][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   46.998227][ T3623] netlink: 'syz.2.32': attribute type 10 has an invalid length.
[   47.012528][ T3623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32'.
[   47.025294][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.039746][ T3615] netlink: 'syz.3.30': attribute type 10 has an invalid length.
[   47.044547][ T3623] team0: Port device geneve1 added
[   47.104282][ T3627] tmpfs: Unknown parameter '>p'
[   47.139572][ T3615] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.187419][ T3615] team0: Port device bond0 added
[   47.234004][ T3638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'.
[   47.293934][ T3637] netlink: 'syz.0.34': attribute type 36 has an invalid length.
[   47.310057][ T3637] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   47.320039][ T3637] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   47.340748][ T3637] netlink: 'syz.0.34': attribute type 10 has an invalid length.
[   47.412322][ T3637] macvlan1: entered allmulticast mode
[   47.421761][ T3637] veth1_vlan: entered allmulticast mode
[   47.433552][ T3637] team0: Port device macvlan1 added
[   47.800717][ T3659] loop2: detected capacity change from 0 to 1024
[   47.813808][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.847283][ T3666] veth0_vlan: entered allmulticast mode
[   47.856490][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'.
[   47.887690][ T3666] veth0_vlan (unregistering): left allmulticast mode
[   47.904798][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.916804][ T3666] veth1_vlan (unregistering): left allmulticast mode
[   47.971907][ T3666] team0: Port device macvlan1 removed
[   47.977706][ T3637] syz.0.34 (3637) used greatest stack depth: 8952 bytes left
[   47.996265][ T3675] loop2: detected capacity change from 0 to 256
[   48.007118][ T3675] FAT-fs (loop2): bogus number of FAT sectors
[   48.021018][ T3675] FAT-fs (loop2): Can't find a valid FAT filesystem
[   48.092568][ T3684] loop1: detected capacity change from 0 to 1024
[   48.137854][ T3690] loop4: detected capacity change from 0 to 2048
[   48.153685][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.169463][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.300200][ T3690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.45: bg 0: block 234: padding at end of block bitmap is not set
[   48.316337][ T3690] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1196 with error 28
[   48.350767][ T3684] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4224: comm syz.1.42: Allocating blocks 497-513 which overlap fs metadata
[   48.351527][ T3690] EXT4-fs (loop4): This should not happen!! Data will be lost
[   48.351527][ T3690] 
[   48.382587][ T3683] EXT4-fs (loop1): pa ffff888107f8b930: logic 48, phys. 177, len 21
[   48.390794][ T3683] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 1
[   48.393555][ T3690] EXT4-fs (loop4): Total free blocks count 0
[   48.408702][ T3703] tmpfs: Unknown parameter '>p'
[   48.414139][ T3690] EXT4-fs (loop4): Free/Dirty block details
[   48.420750][ T3690] EXT4-fs (loop4): free_blocks=0
[   48.426028][ T3690] EXT4-fs (loop4): dirty_blocks=1200
[   48.431925][ T3690] EXT4-fs (loop4): Block reservation details
[   48.438138][ T3690] EXT4-fs (loop4): i_reserved_data_blocks=75
[   48.555439][ T3708] netlink: 'syz.2.47': attribute type 36 has an invalid length.
[   48.572959][ T3708] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   48.582966][ T3708] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   48.642466][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.107639][ T3710] loop0: detected capacity change from 0 to 2048
[   49.139590][ T3710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.233999][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.280848][ T3000] ==================================================================
[   49.288975][ T3000] BUG: KCSAN: data-race in block_uevent / inc_diskseq
[   49.295765][ T3000] 
[   49.298199][ T3000] write to 0xffff888101db0a18 of 8 bytes by task 3318 on cpu 0:
[   49.305847][ T3000]  inc_diskseq+0x2d/0x40
[   49.310117][ T3000]  disk_force_media_change+0x9e/0xe0
[   49.315448][ T3000]  lo_release+0x2eb/0x420
[   49.319817][ T3000]  bdev_release+0x373/0x3d0
[   49.324368][ T3000]  blkdev_release+0x15/0x20
[   49.328888][ T3000]  __fput+0x29b/0x650
[   49.332888][ T3000]  fput_close_sync+0xad/0x190
[   49.337590][ T3000]  __x64_sys_close+0x55/0xf0
[   49.342199][ T3000]  x64_sys_call+0x275d/0x3020
[   49.346897][ T3000]  do_syscall_64+0x12c/0x370
[   49.351515][ T3000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.357424][ T3000] 
[   49.359778][ T3000] read to 0xffff888101db0a18 of 8 bytes by task 3000 on cpu 1:
[   49.367356][ T3000]  block_uevent+0x31/0x50
[   49.371715][ T3000]  dev_uevent+0x375/0x400
[   49.376074][ T3000]  uevent_show+0x11a/0x200
[   49.380519][ T3000]  dev_attr_show+0x3f/0xa0
[   49.384961][ T3000]  sysfs_kf_seq_show+0x1a3/0x280
[   49.389943][ T3000]  kernfs_seq_show+0x82/0xa0
[   49.394569][ T3000]  seq_read_iter+0x31e/0x940
[   49.399188][ T3000]  kernfs_fop_read_iter+0xc1/0x330
[   49.404337][ T3000]  vfs_read+0x6c0/0x7f0
[   49.408538][ T3000]  ksys_read+0xdc/0x1a0
[   49.412726][ T3000]  __x64_sys_read+0x40/0x50
[   49.417256][ T3000]  x64_sys_call+0x2886/0x3020
[   49.421960][ T3000]  do_syscall_64+0x12c/0x370
[   49.426584][ T3000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.432496][ T3000] 
[   49.434837][ T3000] value changed: 0x000000000000003f -> 0x0000000000000043
[   49.441955][ T3000] 
[   49.444313][ T3000] Reported by Kernel Concurrency Sanitizer on:
[   49.450506][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[   49.459395][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   49.469477][ T3000] ==================================================================
[   49.481535][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.494392][ T3719] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.520323][ T3710] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.50: bg 0: block 234: padding at end of block bitmap is not set
[   49.590027][ T3710] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 846 with error 28
[   49.684952][ T3735] mmap: syz.1.52 (3735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   49.691598][ T3710] EXT4-fs (loop0): This should not happen!! Data will be lost
[   49.691598][ T3710] 
[   49.731309][ T3710] EXT4-fs (loop0): Total free blocks count 0
[   49.737389][ T3710] EXT4-fs (loop0): Free/Dirty block details
[   49.761388][ T3710] EXT4-fs (loop0): free_blocks=0
[   49.766382][ T3710] EXT4-fs (loop0): dirty_blocks=848
[   49.781292][ T3710] EXT4-fs (loop0): Block reservation details
[   49.787332][ T3710] EXT4-fs (loop0): i_reserved_data_blocks=53
[   49.896615][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.965702][ T3731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.52: bg 0: block 345: padding at end of block bitmap is not set
[   49.994608][ T3731] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[   50.012317][ T3731] EXT4-fs (loop1): This should not happen!! Data will be lost
[   50.012317][ T3731] 
[   50.065000][   T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28
[   50.077849][   T36] EXT4-fs (loop1): This should not happen!! Data will be lost
[   50.077849][   T36] 
[   50.087724][   T36] EXT4-fs (loop1): Total free blocks count 0
[   50.093865][   T36] EXT4-fs (loop1): Free/Dirty block details
[   50.099760][   T36] EXT4-fs (loop1): free_blocks=0
[   50.104744][   T36] EXT4-fs (loop1): dirty_blocks=2048
[   50.110047][   T36] EXT4-fs (loop1): Block reservation details