last executing test programs:

4.288098063s ago: executing program 0 (id=99):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.250257955s ago: executing program 0 (id=101):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x811, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000000, 0xc2ba, 0x9, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r0=>0x0}, &(0x7f0000000340)=0xc)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x405e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x10c0e8, 0x0, 0xfff, 0x6, 0x8, 0xa857, 0x7fff, 0x0, 0x7db, 0x0, 0x8000000000000003}, r0, 0xf, 0xffffffffffffffff, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
capget(&(0x7f0000000000)={0x20071026}, 0x0)
rename(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x28180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x4, @perf_bp={&(0x7f0000000100)}, 0x500, 0x3, 0x7, 0x3, 0x6, 0x7ff, 0x7fff, 0x0, 0x0, 0x0, 0x4}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, ']}', 0x3a, '[$]3\x9bN\xcd\xd53\x90\xc21\xc6\xd3p-+\x9c\xe84\xdc\xa6\xdb\x0f\x007\xcb7j\x7f\xc1\x9d\x02\xdf2kN\x18\x9a**\x162\x98\xd2(\x12)\x91\x00F\xd7\xe6\x03\xa2\xfbq/\xaf\xb6\xads', 0x3a, './file0'}, 0x67)
close(0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
write(0xffffffffffffffff, 0x0, 0x0)
msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
fchown(0xffffffffffffffff, 0xee00, 0xee01)
shmctl$SHM_LOCK(r2, 0xb)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17)
shmctl$SHM_UNLOCK(r2, 0xc)
read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/43, 0x2b)

2.913836827s ago: executing program 0 (id=114):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x20000007, 0x40004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1220, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x6, 0x3e713eab, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/23, 0x0, 0x17, 0x0, 0x54c62f6a, 0x10000}, 0x28)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x40, 0xfffffffb}, 0x1}}, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0))
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r5 = perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x23, 0x80, 0xb, 0xd, 0x0, 0x0, 0x60058, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0xe7, 0x9, 0xb, 0x6, 0x6, 0x9, 0x0, 0x10, 0x0, 0xfffffffffffffffb}, 0x0, 0x1, r4, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

2.624477996s ago: executing program 4 (id=117):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x3830, 0x1, 0x7f, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@auto_da_alloc}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
fcntl$notify(r0, 0x402, 0x8000002f)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
timerfd_create(0x7, 0x800)
r2 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xa938, 0x2, 0xfffffffe, 0x181})
pause()
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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")
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
close_range(r2, r2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x2e}], 0x1}, 0x0)
read$hiddev(r1, &(0x7f00000001c0)=""/69, 0x45)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0xfffffffffffffffd})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2.623901596s ago: executing program 0 (id=118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0)
splice(r4, 0x0, r1, 0x0, 0x317e, 0x4)
write$P9_RREAD(r2, &(0x7f00000002c0)={0xb, 0x75, 0x1}, 0xb)
write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
io_setup(0x4fe, &(0x7f0000000200)=<r7=>0x0)
io_pgetevents(r7, 0x7, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)={0x0, 0x989680}, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00')
preadv(r8, &(0x7f0000000100), 0x0, 0x200000, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000050000000100000002000000010000001c02000009000000410000007f000000060000000100000005000000"])
openat$cgroup_ro(r8, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r9 = syz_open_dev$vcsu(&(0x7f0000000340), 0xa10, 0x900)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = syz_open_dev$vcsu(&(0x7f0000001ac0), 0x83d6, 0x200040)
io_submit(r7, 0x4, &(0x7f0000001b40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x1, r6, &(0x7f0000000080)="150f173c9f63138a969583a2438b3e56a55c074b4675a97d8f57201966a07291b91640a59ea403dfff65d9f89ab224e42c8b33c172737308f536ce41023620b32e3202b00083d7a2a19011ba22d76102928cbd3e72207060e419b6d06ba389b450501a48dcb3eef2c6a5e4b917373bd12876cc4c39d2d99f88d9fcc4c10435bf80d6a728c743912d4307bcaac033313bc9990ec634370c57246393858c6698c8079033af7b6360610533712043332dc551633d6d4265552be3ee89b0ea89ef8b23928017623b9c72", 0xc8, 0x2, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1ac, r6, &(0x7f0000000200)="7ba17724dc9237bc6ce1206267bd98f6a095f2c8ee013eecbe0e10fbfe399d4a0d285be49720f08a885f12", 0x2b, 0x8, 0x0, 0x3, r8}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x8, r6, &(0x7f00000002c0)="9022501140ee465e207a049d0fbb0213754233c3a6b831e1c9cef558553f274d0d7a3f05f3c8729ea356dd98c9eda346ea5bfacc11536af90c16d2a453b3ff953f72875cc9cb2f1aa9531558db3fb2c965968df752929eddf649b80ca2b404729a660aeedf7fafe69f7c6553ef9c1a4b99efa7be7270e6e0", 0x78, 0xfffffffffffff3f9, 0x0, 0x1, r9}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x7, r10, &(0x7f0000000ac0)="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", 0x1000, 0x9, 0x0, 0x1, r11}])
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)

2.20863944s ago: executing program 3 (id=127):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x811, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000000, 0xc2ba, 0x9, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r0=>0x0}, &(0x7f0000000340)=0xc)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x405e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x10c0e8, 0x0, 0xfff, 0x6, 0x8, 0xa857, 0x7fff, 0x0, 0x7db, 0x0, 0x8000000000000003}, r0, 0xf, 0xffffffffffffffff, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
capget(&(0x7f0000000000)={0x20071026}, 0x0)
rename(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x28180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x4, @perf_bp={&(0x7f0000000100)}, 0x500, 0x3, 0x7, 0x3, 0x6, 0x7ff, 0x7fff, 0x0, 0x0, 0x0, 0x4}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, ']}', 0x3a, '[$]3\x9bN\xcd\xd53\x90\xc21\xc6\xd3p-+\x9c\xe84\xdc\xa6\xdb\x0f\x007\xcb7j\x7f\xc1\x9d\x02\xdf2kN\x18\x9a**\x162\x98\xd2(\x12)\x91\x00F\xd7\xe6\x03\xa2\xfbq/\xaf\xb6\xads', 0x3a, './file0'}, 0x67)
close(0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
write(0xffffffffffffffff, 0x0, 0x0)
msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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")
fchown(0xffffffffffffffff, 0xee00, 0xee01)
shmctl$SHM_LOCK(r2, 0xb)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17)
shmctl$SHM_UNLOCK(r2, 0xc)
read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/43, 0x2b)

1.804133132s ago: executing program 1 (id=130):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r0, &(0x7f0000000780)="f313"}, 0x20) (fail_nth: 3)

1.803671112s ago: executing program 2 (id=131):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$loop(0x0, 0x81, 0x2a82)
r1 = syz_open_dev$loop(0x0, 0x3, 0xa8503)
fsmount(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
r2 = msgget$private(0x0, 0x3ac)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xd89c, 0xc000, 0x1, 0x20002f7})
r3 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x2, 0x6}, &(0x7f00000002c0), &(0x7f0000002c00), &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0}], 0x1)
msgrcv(r2, &(0x7f0000000080)={0x0, ""/48}, 0x38, 0x0, 0x0)
msgsnd(r2, &(0x7f0000000000)=ANY=[], 0x8, 0x800)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

1.619647328s ago: executing program 1 (id=132):
prlimit64(0x0, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x120)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0)

1.595907039s ago: executing program 1 (id=133):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x5b16, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000180)=0x10000, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000240)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50)
socket$inet6_icmp(0xa, 0x2, 0x3a)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r3, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
sendto$inet6(r6, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x253f4c600745cb57, 0x0, 0x0, 0xfffffffffffffef6}, &(0x7f0000000100)=0x35)

1.561726021s ago: executing program 0 (id=134):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'gretap0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' P\xccs|\xe2', 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r6, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000140001002bbd7000fadbdf250a0801ff", @ANYRES32, @ANYBLOB="1400020028"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x50080)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xc, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xd00, 0x81)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}})
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000080)='\v\x00', 0x10001, &(0x7f0000000100)={@_ha_fsid={[0x2]}, {0x5, 0x100, 0x3, 0x9}}, 0x80000001, 0x0, &(0x7f0000000240)=0xaa5c}, {[0xfffffffe, 0x6, 0x66, 0x4]}, 0x1, 0x0, 0x0})

1.56093391s ago: executing program 4 (id=135):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.528436631s ago: executing program 2 (id=136):
r0 = syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r1)
recvmmsg(r1, &(0x7f0000004600)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000002400)=[{&(0x7f0000000240)=""/99, 0x63}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/152, 0x98}], 0x3, &(0x7f0000002440)=""/255, 0xff}, 0x48}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x2, &(0x7f0000004580)=""/87, 0x57}, 0x7}], 0x2, 0x10003, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000fd8708ae00000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f6164000000001000028009000100738fe5bdb70000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
r3 = syz_pidfd_open(r0, 0x0)
mkdir(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
gettid()
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0xc001)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
process_mrelease(r3, 0x700000000000000)

1.476634713s ago: executing program 4 (id=137):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, 0x0, 0x80)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x30000004})
socket$unix(0x1, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4)
io_setup(0x8, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}])
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x7c12, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff)

1.345385067s ago: executing program 4 (id=138):
socketpair(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8)
sendfile(r0, r0, 0x0, 0x101)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7fffffff, @empty, 0x4000000b}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0xf00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.317568398s ago: executing program 2 (id=139):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x300}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

1.125967995s ago: executing program 3 (id=140):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noinit_itable}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./bus/file0\x00', 0x28058d0, 0x0, 0x0, 0x0, &(0x7f00000002c0))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$ext4(0x0, &(0x7f0000000280)='./bus\x00', 0x80020, 0x0, 0x0, 0x0, &(0x7f0000000300))
rename(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
syz_usb_connect$cdc_ncm(0xe, 0x75, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x1, 0x70, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "18b7"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x1, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0xf4, 0x3d}, [@obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x85, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0xfe, 0x3}}}}}}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x2, 0x1, 0x4, 0x40, 0x8c}, 0xcc, &(0x7f0000000e40)={0x5, 0xf, 0xcc, 0x3, [@generic={0xc1, 0x10, 0xb, "56a0a6f1f652187937cb7d7ff8cb6d5c76aa1845ccd8f3ba81917ee2a42ea49e9fd1f0d1b8e1d39752acd4a17472ce22a5deea9db0c35ee377a57c0f303660043f815343c951cdaef1a6b448b7daccbd9fd392af8e80f3ada673d70fdc5e65f82fa60b18f34cd342244bc9fc89689d5688e34b30b748ba03a73dc692bab16269acd4ed428b8f34222325c5c81033b2a96ce25afd12c4a88193afbcaab543c2180e748f807ef6f4dcd100b3bdfea6e88bcd34f0f19168544c0c7271253450"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x9b, &(0x7f0000000f40)=@string={0x9b, 0x3, "a169d22be5f39c4edf927baa4794e39465691c7f25e36c3ca3f939af9a43dc15aa7128391f009d8b3f989604ed95323ab32581691958408aef046db3ea80b0a9416db17c0c04202f3a4d87f730dab630eeec21ddb1f964147255dba53f28a49f88107515632b1e89838f6db1dfe98dcf71428b949bc8722389f78199c3cf11e211a1fba68f439a7fa6e31b5a6986cef16e7b7091b3de1e2ea2"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1001}}, {0x31, &(0x7f0000001040)=ANY=[@ANYBLOB="3103b6fda8d3bff2eeed0a136ac9c4ea18e2007e57ab140312ad4c6dce78002196da901c881f403a573e9367d9334c6c1e"]}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x500a}}, {0x79, &(0x7f0000000a40)=ANY=[@ANYBLOB="79035f0f942da8228ce6149bb0bee9eade2ffd2c436c04bd5411782564025d6bb7f72f77d0ac25fbffc17e00000000000000002318ff445bef72998e92dfed19ab1272a21c920196b9da2c6032430fb47fba0c01cad1e356b98db08554cf9cc84ef426c399f7d8f5dd9db4d3e39f1a80ecdd225f49715348b4b986946e1a6f5bb4837bd06ddb85e078dd9db3fdbac200d370fffca5804e022642f8a73fba378572760905cf63ef8809ee1783df8e19"]}, {0xca, &(0x7f0000001140)=@string={0xca, 0x3, "8142191785959cb3349ad1c5d5b7f47e046e5ecdcc80ce9469a916af3fc9858164ab79ff73d9608f0aaf73180738a6ee177e93ec3d0ab2f1a587eb95cea171fd83c14b5fd8e66aa646ee10aca98c8a198b3f15d4c4a93d809babe65b2ca41df67d05d4ca8f1f052125d5c20b4d9e3fbc3cd06e4e7dc719622f9b502cf007e54bbcaa825db8a7e13d12d3bce562b3d93370f3d678f36dbbd8cd113fbbf02865ae696086535c6770cc6d55e29d034e1472ce2960b475fe6fabfb1ba333d6c76c093fa539ba0704ce48"}}, {0xad, &(0x7f0000001240)=@string={0xad, 0x3, "e9e5e7115c23c9e7c080d70bac1d4fd255f8fc8d3b93f199106fd2966d972a061bcfdde870ac9e691f1defc92bb3e4d55f24d5d103e436193b61aa21c3915070c103be3ac8d7fcacebffb8335a7e3e0278b02e2e9eb23be376f2f7ce89a9b33b7f611b855141ab3a26ffe2f82308b4a3f73c14a102ff44967f78646eb18b0cc409eef8f5b39c0190c7d28c83f8e774c01ce166bfcb68b9734cbab396ffd705e4af348aa85cee629a006191"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1809}}]})
times(&(0x7f0000000040))
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1400000010000100000000000000000001"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001880)="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", &(0x7f0000000580)="14918e46fee0d49d1896199373432e81c7d4381200000000000000", 0xce, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc)

1.076652356s ago: executing program 4 (id=141):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r1, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x50) (fail_nth: 1)

998.077068ms ago: executing program 1 (id=142):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pipe2$9p(&(0x7f0000000280), 0x4000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
semtimedop(0x0, &(0x7f0000001080)=[{0x0, 0x6, 0x1c00}], 0x1, 0x0)

774.815956ms ago: executing program 1 (id=143):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r1, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x50)

604.513871ms ago: executing program 4 (id=144):
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x20044000, &(0x7f0000000440)="e6c0d315af7f3d252864232d0738ab96968a654dfdf9e593fb95c94355cf7836c07cfd1d58c6868263ac19e66a0bff6e231341e9f959da8a0ce2255c9f35ae171d5e5cec086a8529a32db8265b9e2acf408e75cdd60b915b11b9c17b39cfddc5665b199a202e137c346e01a38f3735a6c591bade98ff1f56f58b2ee28000258478e9b96ec860f88c2d706e5ffa890d614b02c6e85b1aeb2c566ab446e21ff0f1ec", 0xa1, &(0x7f0000000500), &(0x7f0000000680), &(0x7f0000000840)="85c5a91038a765e70c57661af0cfbd83b911407105afe6f6777c7e0a8d034ad582781230f2f27b880859672f3297809e812e608dee469a1819446e25e84a0391ceaf1061a84f0c61a268f64a15e1186d745a590f2e0955506913bfd356d55bad887b40e67b2a8eb195465acc6e6753b56c1cad93de15b446e4bb177bd4f65744f2efc68f2e16c8980daea99ea405b58d445e80509d902252ba4937c6bdaeb10167f383019c91f09937e64d4ac832281031c9c9c0d3a0030d7d2a882214aa1e94b450423b68692e5da1793859aa885022d02a9f85801f")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x8, 0x0, 0x0, 0x0, 0x5, 0x800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x4}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xe}})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9f, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4534, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000580)=ANY=[], 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24006ae35e3066b543577000ff00000008000a00080000f470cf2777306fa805704a000000063dbfb007eee938c43114b5d51eb99f0f6b91ae36d637fd3372b370f16f1a26856e7b97b6e007abc43db121e92d389dabc6d4d32bb5965e29ccaa3515756b72d52da72e8553"], 0x24}}, 0x240448c8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)

592.276072ms ago: executing program 1 (id=145):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x200, 0xec75, {0x77359400}, {0x77359400}, {0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x3b, 0x0, 0x0, 0x0, "6ecf528945ff8dd00bf54c8541030a0e5e64f5390bfed35caba8b1cc350bbabebd552aa078996ace6d98c5c30c0af2fff19875942abdd35191f7efa03a551cb5"}}, 0x80}}, 0x8000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r2, 0x0, 0x3ffff)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x7fff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x54, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet6(0xa, 0x5, 0x0)
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4800)
write$P9_RXATTRCREATE(r6, &(0x7f0000000640)={0x7, 0x21, 0x1}, 0x7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpriority(0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000002119078ac1414000a010100000000f7259c90780100000000000000f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf15f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1a23ee304d79621e0e5c97af731853eecf8c31eb75e0d9896f5f2897a5bd69475dc0a5f713bddc5f9fbba1aa5f19e3e15428f0fbd5913c373609afb2e68b21f0700"/254], 0x0)

591.946452ms ago: executing program 2 (id=146):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$loop(0x0, 0x81, 0x2a82)
r1 = syz_open_dev$loop(0x0, 0x3, 0xa8503)
fsmount(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
r2 = msgget$private(0x0, 0x3ac)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xd89c, 0xc000, 0x1, 0x20002f7})
r3 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x2, 0x6}, &(0x7f00000002c0), &(0x7f0000002c00), &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0}], 0x1)
msgrcv(r2, &(0x7f0000000080)={0x0, ""/48}, 0x38, 0x0, 0x0)
msgsnd(r2, &(0x7f0000000000)=ANY=[], 0x8, 0x800)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

496.635644ms ago: executing program 3 (id=147):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x9, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x2, 0x9, 0x400000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48085}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810003308030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x1000}, 0x20)
socket$xdp(0x2c, 0x3, 0x0)

455.925976ms ago: executing program 2 (id=148):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, 0x0, 0x80)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x30000004})
socket$unix(0x1, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
io_submit(r6, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x7c12, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff)

324.59583ms ago: executing program 3 (id=149):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10acc9, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000094}, 0x800)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xf}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x18001}, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c)

236.379963ms ago: executing program 3 (id=150):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151)
fallocate(r0, 0x110000, 0x0, 0x8800000)

22.49846ms ago: executing program 3 (id=151):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x811, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000000, 0xc2ba, 0x9, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r0=>0x0}, &(0x7f0000000340)=0xc)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x405e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x10c0e8, 0x0, 0xfff, 0x6, 0x8, 0xa857, 0x7fff, 0x0, 0x7db, 0x0, 0x8000000000000003}, r0, 0xf, 0xffffffffffffffff, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
capget(&(0x7f0000000000)={0x20071026}, 0x0)
rename(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x28180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x4, @perf_bp={&(0x7f0000000100)}, 0x500, 0x3, 0x7, 0x3, 0x6, 0x7ff, 0x7fff, 0x0, 0x0, 0x0, 0x4}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, ']}', 0x3a, '[$]3\x9bN\xcd\xd53\x90\xc21\xc6\xd3p-+\x9c\xe84\xdc\xa6\xdb\x0f\x007\xcb7j\x7f\xc1\x9d\x02\xdf2kN\x18\x9a**\x162\x98\xd2(\x12)\x91\x00F\xd7\xe6\x03\xa2\xfbq/\xaf\xb6\xads', 0x3a, './file0'}, 0x67)
close(0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
write(0xffffffffffffffff, 0x0, 0x0)
msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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")
fchown(0xffffffffffffffff, 0xee00, 0xee01)
shmctl$SHM_LOCK(r2, 0xb)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17)
shmctl$SHM_UNLOCK(r2, 0xc)
read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/43, 0x2b)

363.26µs ago: executing program 0 (id=152):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5, 0xffffffffffffffff, 0x0, 0xf00000000000000}, 0x38)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r2, r1, 0x0, 0xfff)
r3 = socket$inet(0x2, 0x800, 0x137b)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6'], 0x48)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x2, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x100})
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
kexec_load(0xfffbfffffffffffc, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x200400000, 0x2000000}], 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

0s ago: executing program 2 (id=153):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
fchdir(0xffffffffffffffff)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(r2, 0x0, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={<r5=>0x0, 0x3}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x0, @loopback, 0x9}}, 0x9, 0x5}, &(0x7f0000000480)=0x90)
pwrite64(r0, 0x0, 0x0, 0x8000c64)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYRES32=0x0], 0x1, 0x172, &(0x7f00000001c0)="$eJzs27GKE1EUBuAzZjZGLUwtFgM2VkF9AmVZQRxQlCm0Uog2u7LgNqNVHsUXFGSr7a5kZkl2lwQMJI7ufF+TE37u5Z5mDjdkPtz/cjg9Pvl8/Po0RlkW+dMo4iyLcdyIQUyriIhZAADXyVlK8SullPKI+BEppa5PBADs2mL+35zFLfMfAHrB/AeA/jH/AaB/3r57//JZWR68KYpRxM9ZXdVV87nf5s9flAePisZ4ueq0rqvBIn/c5sXlfC9un+dPmvTivwjn+TAePmjzebr/qryy/k5Md949AAAA9MOkWFh5v59M1uVtdeH3gfn9/e4yz+Ne3nwZ/8V2AIA/cPLt++HHo6NPX//zYnDez6bLRxHR+eEVmxTZv3GMrothbHXDvYjLG3b8YAJ2bvkY6PokAAAAAAAAAAAAAADAOlt9LWm4esOuewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrfgcAAP//TMFI9w==")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[\x00', r6)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010100}, 0xfffffffffffffd0e, 0x0}, 0x3000c085)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
pread64(r8, &(0x7f0000000000)=""/16, 0x9600, 0x3ff)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r10 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x541b, &(0x7f00000000c0))
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

kernel console output (not intermixed with test programs):

[   20.099267][   T28] audit: type=1400 audit(1781932372.386:104): avc:  denied  { write } for  pid=3206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   21.596907][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   21.596923][   T28] audit: type=1400 audit(1781932373.886:110): avc:  denied  { write } for  pid=3252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   21.629186][   T28] audit: type=1400 audit(1781932373.896:111): avc:  denied  { write } for  pid=3263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   21.811185][   T28] audit: type=1400 audit(1781932374.096:112): avc:  denied  { transition } for  pid=3268 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.837559][   T28] audit: type=1400 audit(1781932374.096:113): avc:  denied  { noatsecure } for  pid=3268 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.859697][   T28] audit: type=1400 audit(1781932374.096:114): avc:  denied  { write } for  pid=3268 comm="sh" path="pipe:[2470]" dev="pipefs" ino=2470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   21.896569][   T28] audit: type=1400 audit(1781932374.096:115): avc:  denied  { rlimitinh } for  pid=3268 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.917351][   T28] audit: type=1400 audit(1781932374.096:116): avc:  denied  { siginh } for  pid=3268 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.340897][ T3276] sshd-session (3276) used greatest stack depth: 11232 bytes left
Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts.
[   29.495170][   T28] audit: type=1400 audit(1781932381.776:117): avc:  denied  { mounton } for  pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   29.527541][   T28] audit: type=1400 audit(1781932381.816:118): avc:  denied  { mount } for  pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.528719][ T3284] cgroup: Unknown subsys name 'net'
[   29.567829][   T28] audit: type=1400 audit(1781932381.856:119): avc:  denied  { unmount } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.727451][ T3284] cgroup: Unknown subsys name 'cpuset'
[   29.736085][ T3284] cgroup: Unknown subsys name 'rlimit'
[   29.863395][   T28] audit: type=1400 audit(1781932382.146:120): avc:  denied  { setattr } for  pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.889966][   T28] audit: type=1400 audit(1781932382.146:121): avc:  denied  { create } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.916447][   T28] audit: type=1400 audit(1781932382.146:122): avc:  denied  { write } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.923529][ T3286] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   29.938943][   T28] audit: type=1400 audit(1781932382.146:123): avc:  denied  { read } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.971639][   T28] audit: type=1400 audit(1781932382.156:124): avc:  denied  { mounton } for  pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.997699][   T28] audit: type=1400 audit(1781932382.156:125): avc:  denied  { mount } for  pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   30.022139][   T28] audit: type=1400 audit(1781932382.176:126): avc:  denied  { read } for  pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   30.027493][ T3284] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.464474][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.472761][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.481569][ T3302] bridge_slave_0: entered allmulticast mode
[   31.488561][ T3302] bridge_slave_0: entered promiscuous mode
[   31.512889][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.520048][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.527603][ T3302] bridge_slave_1: entered allmulticast mode
[   31.534179][ T3302] bridge_slave_1: entered promiscuous mode
[   31.562183][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.569389][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.576753][ T3295] bridge_slave_0: entered allmulticast mode
[   31.583421][ T3295] bridge_slave_0: entered promiscuous mode
[   31.603979][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.612019][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.619910][ T3295] bridge_slave_1: entered allmulticast mode
[   31.627039][ T3295] bridge_slave_1: entered promiscuous mode
[   31.640328][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.664954][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.674797][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.682308][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.689824][ T3297] bridge_slave_0: entered allmulticast mode
[   31.697141][ T3297] bridge_slave_0: entered promiscuous mode
[   31.728743][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.735988][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.743285][ T3297] bridge_slave_1: entered allmulticast mode
[   31.749671][ T3297] bridge_slave_1: entered promiscuous mode
[   31.757153][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.776488][ T3302] team0: Port device team_slave_0 added
[   31.787949][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.801573][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.808846][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.816866][ T3301] bridge_slave_0: entered allmulticast mode
[   31.823678][ T3301] bridge_slave_0: entered promiscuous mode
[   31.830717][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.839590][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.847448][ T3304] bridge_slave_0: entered allmulticast mode
[   31.854442][ T3304] bridge_slave_0: entered promiscuous mode
[   31.862030][ T3302] team0: Port device team_slave_1 added
[   31.877766][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.885477][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.894736][ T3301] bridge_slave_1: entered allmulticast mode
[   31.901513][ T3301] bridge_slave_1: entered promiscuous mode
[   31.908943][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.917540][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.924669][ T3304] bridge_slave_1: entered allmulticast mode
[   31.931370][ T3304] bridge_slave_1: entered promiscuous mode
[   31.943727][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.954825][ T3295] team0: Port device team_slave_0 added
[   31.976022][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.986568][ T3295] team0: Port device team_slave_1 added
[   32.001806][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.009269][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.039136][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.063610][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.075334][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.086828][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.094257][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.123923][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.144006][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.154941][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.168279][ T3297] team0: Port device team_slave_0 added
[   32.174483][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.182155][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.208520][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.234768][ T3297] team0: Port device team_slave_1 added
[   32.241803][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.249413][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.277239][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.294556][ T3301] team0: Port device team_slave_0 added
[   32.301766][ T3304] team0: Port device team_slave_0 added
[   32.323509][ T3301] team0: Port device team_slave_1 added
[   32.330361][ T3304] team0: Port device team_slave_1 added
[   32.346416][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.353844][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.382383][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.403792][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.411031][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.439887][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.461222][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.470576][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.501039][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.514636][ T3302] hsr_slave_0: entered promiscuous mode
[   32.522003][ T3302] hsr_slave_1: entered promiscuous mode
[   32.538227][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.546307][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.575012][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.589463][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.596898][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.627993][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.658564][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.666851][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.701226][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.717249][ T3295] hsr_slave_0: entered promiscuous mode
[   32.724184][ T3295] hsr_slave_1: entered promiscuous mode
[   32.731830][ T3295] debugfs: 'hsr0' already exists in 'hsr'
[   32.739774][ T3295] Cannot create hsr debugfs directory
[   32.765580][ T3304] hsr_slave_0: entered promiscuous mode
[   32.772835][ T3304] hsr_slave_1: entered promiscuous mode
[   32.779740][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   32.786754][ T3304] Cannot create hsr debugfs directory
[   32.823606][ T3297] hsr_slave_0: entered promiscuous mode
[   32.831334][ T3297] hsr_slave_1: entered promiscuous mode
[   32.839461][ T3297] debugfs: 'hsr0' already exists in 'hsr'
[   32.846513][ T3297] Cannot create hsr debugfs directory
[   32.882881][ T3301] hsr_slave_0: entered promiscuous mode
[   32.889889][ T3301] hsr_slave_1: entered promiscuous mode
[   32.896009][ T3301] debugfs: 'hsr0' already exists in 'hsr'
[   32.902186][ T3301] Cannot create hsr debugfs directory
[   33.111686][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.123885][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.132989][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.142615][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.151535][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.162049][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.173889][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   33.183294][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.213330][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.224625][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.234322][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.246071][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.260255][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.273851][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.290437][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.299859][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.334941][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.345153][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.353250][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.365488][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.374859][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.385171][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.394630][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.405593][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.440623][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.452013][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.462000][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   33.471326][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.480881][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   33.490582][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.500056][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   33.511048][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.560829][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.576714][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.588230][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.606497][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.615859][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.626203][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.635565][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.645168][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.654866][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.684725][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   33.698184][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.706155][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.738567][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.751007][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.773557][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.789162][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.809006][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   33.823080][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.831555][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.849073][ T3295] 8021q: adding VLAN 0 to HW filter on device team0
[   33.859221][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.871421][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.901489][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.925593][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.937195][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.944429][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.956884][  T321] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.964138][  T321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.996086][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   34.018594][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   34.030041][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.038700][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.049506][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.057480][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.080783][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.091995][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.108600][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.117242][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.193430][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.299806][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.355823][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.400569][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.495531][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.516980][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.554653][ T3304] veth0_vlan: entered promiscuous mode
[   34.574422][ T3304] veth1_vlan: entered promiscuous mode
[   34.634421][ T3304] veth0_macvtap: entered promiscuous mode
[   34.645050][ T3295] veth0_vlan: entered promiscuous mode
[   34.652928][ T3302] veth0_vlan: entered promiscuous mode
[   34.666936][ T3304] veth1_macvtap: entered promiscuous mode
[   34.681784][ T3302] veth1_vlan: entered promiscuous mode
[   34.689681][ T3295] veth1_vlan: entered promiscuous mode
[   34.714135][ T3301] veth0_vlan: entered promiscuous mode
[   34.730275][ T3297] veth0_vlan: entered promiscuous mode
[   34.739397][ T3297] veth1_vlan: entered promiscuous mode
[   34.749784][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.759278][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.781817][ T3301] veth1_vlan: entered promiscuous mode
[   34.794716][   T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.804499][   T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.816138][ T3295] veth0_macvtap: entered promiscuous mode
[   34.828535][ T3302] veth0_macvtap: entered promiscuous mode
[   34.840661][   T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.852588][   T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.865422][ T3295] veth1_macvtap: entered promiscuous mode
[   34.875720][ T3302] veth1_macvtap: entered promiscuous mode
[   34.889783][ T3301] veth0_macvtap: entered promiscuous mode
[   34.913978][ T3301] veth1_macvtap: entered promiscuous mode
[   34.923283][ T3297] veth0_macvtap: entered promiscuous mode
[   34.935575][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   34.935590][   T28] audit: type=1400 audit(1781932387.226:140): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Zp0WLb/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   34.939646][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.949249][   T28] audit: type=1400 audit(1781932387.226:141): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   34.972963][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.979052][   T28] audit: type=1400 audit(1781932387.236:142): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Zp0WLb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   35.014909][ T3297] veth1_macvtap: entered promiscuous mode
[   35.045027][   T28] audit: type=1400 audit(1781932387.236:143): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   35.054293][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.071361][   T28] audit: type=1400 audit(1781932387.236:144): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Zp0WLb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   35.079748][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.107843][   T28] audit: type=1400 audit(1781932387.236:145): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/root/syzkaller.Zp0WLb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   35.143844][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.145239][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.163396][   T28] audit: type=1400 audit(1781932387.236:146): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   35.178378][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.191072][   T28] audit: type=1400 audit(1781932387.296:147): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   35.198801][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.221697][   T28] audit: type=1400 audit(1781932387.296:148): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   35.268029][   T28] audit: type=1400 audit(1781932387.556:149): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.274336][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.305730][   T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.315108][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.335940][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.346790][ T2120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.361652][ T2120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.387497][ T2120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.401861][ T2120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.417625][ T3505] loop4: detected capacity change from 0 to 2048
[   35.436500][ T2120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.446211][ T2120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.457369][ T2120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.466823][ T2120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.475848][ T2120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.486334][ T2120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.499110][ T2120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.517825][ T2120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.527675][ T2120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.551543][ T3505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.634125][ T3513] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   35.784339][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.793843][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.815801][ T3515] can0: slcan on ptm0.
[   35.843466][ T3518] syz.3.4 (3518) used greatest stack depth: 10952 bytes left
[   36.077255][   T12] tipc: Subscription rejected, illegal request
[   36.737505][ T3508] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   37.216543][ T3514] can0 (unregistered): slcan off ptm0.
[   37.563476][ T3525] syz.3.6 (3525) used greatest stack depth: 10944 bytes left
[   37.586965][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.745373][ T3546] usb usb8: usbfs: process 3546 (syz.4.11) did not claim interface 2 before use
[   37.917961][ T3557] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14'.
[   38.110894][ T3568] =======================================================
[   38.110894][ T3568] WARNING: The mand mount option has been deprecated and
[   38.110894][ T3568]          and is ignored by this kernel. Remove the mand
[   38.110894][ T3568]          option from the mount to silence this warning.
[   38.110894][ T3568] =======================================================
[   38.328100][ T3578] loop1: detected capacity change from 0 to 512
[   38.337152][ T3578] EXT4-fs: dax option not supported
[   38.372669][ T3578] netlink: 112 bytes leftover after parsing attributes in process `syz.1.22'.
[   38.408314][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   38.606125][ T3594] loop4: detected capacity change from 0 to 2048
[   38.652510][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.822528][ T3606] netlink: 'syz.3.29': attribute type 83 has an invalid length.
[   39.102446][   T40] tipc: Subscription rejected, illegal request
[   39.161135][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.172047][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.235772][ T3620] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   39.250558][ T3620] tmpfs: Bad value for 'mpol'
[   39.272336][ T3620] team0: Port device gretap1 added
[   39.285387][ T3620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=3620 comm=syz.2.34
[   39.313319][ T3620] veth0_virt_wifi: entered promiscuous mode
[   39.330814][ T3620] team0: Port device veth0_virt_wifi added
[   39.385888][ T3620] syz.2.34 (3620) used greatest stack depth: 10048 bytes left
[   40.583108][ T3625] loop2: detected capacity change from 0 to 8192
[   40.598127][ T3625] syz.2.35: attempt to access beyond end of device
[   40.598127][ T3625] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   40.616317][   T28] kauditd_printk_skb: 75 callbacks suppressed
[   40.616334][   T28] audit: type=1400 audit(1781932392.876:225): avc:  denied  { mount } for  pid=3621 comm="syz.2.35" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   40.679166][ T3625] FAT-fs (loop2): error, invalid FAT chain (i_pos 1171, last_block 3)
[   40.687895][ T3625] FAT-fs (loop2): Filesystem has been set read-only
[   40.735052][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.839410][   T28] audit: type=1400 audit(1781932393.126:226): avc:  denied  { mounton } for  pid=3628 comm="syz.1.37" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   40.875089][ T3629] 9pnet_fd: p9_fd_create_tcp (3629): problem connecting socket to 127.0.0.1
[   40.908993][   T28] audit: type=1400 audit(1781932393.196:227): avc:  denied  { create } for  pid=3633 comm="syz.0.38" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   40.994775][   T28] audit: type=1400 audit(1781932393.226:228): avc:  denied  { map } for  pid=3633 comm="syz.0.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.035221][   T28] audit: type=1400 audit(1781932393.226:229): avc:  denied  { read write } for  pid=3633 comm="syz.0.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.063096][   T28] audit: type=1400 audit(1781932393.256:230): avc:  denied  { read } for  pid=3630 comm="syz.1.39" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   41.106897][   T28] audit: type=1400 audit(1781932393.256:231): avc:  denied  { open } for  pid=3630 comm="syz.1.39" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   41.108223][ T3641] team0: Cannot enslave team device to itself
[   41.141038][   T28] audit: type=1400 audit(1781932393.266:232): avc:  denied  { ioctl } for  pid=3630 comm="syz.1.39" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   41.178862][   T28] audit: type=1400 audit(1781932393.316:233): avc:  denied  { create } for  pid=3636 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   41.212363][   T28] audit: type=1400 audit(1781932393.316:234): avc:  denied  { connect } for  pid=3636 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   41.699124][ T3652] hub 8-0:1.0: USB hub found
[   41.705719][ T3652] hub 8-0:1.0: 8 ports detected
[   41.736019][ T3650] loop3: detected capacity change from 0 to 4096
[   41.769967][ T3653] loop1: detected capacity change from 0 to 1024
[   41.777638][ T3653] EXT4-fs: Ignoring removed bh option
[   41.829698][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.842772][ T3653] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks
[   41.851339][ T3653] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   41.865858][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.993969][ T3659] capability: warning: `syz.0.47' uses deprecated v2 capabilities in a way that may be insecure
[   42.250121][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.251630][ T3659] loop0: detected capacity change from 0 to 512
[   42.267962][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.278234][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.302975][ T3659] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   42.351617][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   42.381474][ T3659] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.47: corrupted inode contents
[   42.441811][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.446288][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   42.465478][    C0] EXT4-fs (loop0): initial error at time 1781932394: ext4_do_update_inode:5742: inode 16
[   42.475616][    C0] EXT4-fs (loop0): last error at time 1781932394: ext4_do_update_inode:5742: inode 16
[   42.537408][ T3659] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.47: mark_inode_dirty error
[   42.556231][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.565536][ T3659] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.47: corrupted inode contents
[   42.612344][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.612624][ T3659] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.47: mark_inode_dirty error
[   42.651354][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.696604][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.697135][ T3659] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.47: corrupted inode contents
[   42.721527][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.731686][ T3659] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   42.764384][ T3687] netlink: 108 bytes leftover after parsing attributes in process `syz.2.52'.
[   42.788551][ T3659] loop0: lost filesystem error report for type 5 error -117
[   42.799758][ T3659] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.47: corrupted inode contents
[   42.843749][ T3690] loop4: detected capacity change from 0 to 512
[   42.852982][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.854771][ T3659] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.47: mark_inode_dirty error
[   42.889629][ T3694] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   42.911196][ T3694] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   42.946130][ T3659] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.052117][ T3659] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   43.079038][ T3659] loop0: lost filesystem error report for type 5 error -117
[   43.100308][ T3659] EXT4-fs (loop0): 1 truncate cleaned up
[   43.107385][ T3690] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.55: corrupted inode contents
[   43.114075][ T3659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.145709][ T3690] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.146296][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   43.164151][    C0] EXT4-fs (loop4): initial error at time 1781932395: ext4_do_update_inode:5742: inode 16
[   43.175907][    C0] EXT4-fs (loop4): last error at time 1781932395: ext4_do_update_inode:5742: inode 16
[   43.240500][ T3659] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.259610][ T3690] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.55: mark_inode_dirty error
[   43.335593][   T40] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1
[   43.411323][ T3690] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.413502][ T3690] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.55: corrupted inode contents
[   43.615530][ T3690] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.616490][ T3710] Zero length message leads to an empty skb
[   43.637307][ T3690] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.55: mark_inode_dirty error
[   43.649734][ T3690] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.55: corrupted inode contents
[   43.664260][ T3690] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   43.675026][ T3690] loop4: lost filesystem error report for type 5 error -117
[   43.675503][ T3690] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.55: corrupted inode contents
[   43.700407][ T3690] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.55: mark_inode_dirty error
[   43.714634][ T3690] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   43.737562][ T3690] loop4: lost filesystem error report for type 5 error -117
[   43.738014][ T3690] EXT4-fs (loop4): 1 truncate cleaned up
[   43.755022][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.769205][   T40] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1
[   43.786681][   T40] loop4: lost filesystem error report for type 5 error -117
[   43.787222][ T3690] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.998757][ T3659] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.47: Failed to acquire dquot type 1
[   44.125906][ T3719] loop2: detected capacity change from 0 to 128
[   44.176902][ T3719] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   44.243907][ T3685] syz.3.54 (3685) used greatest stack depth: 9472 bytes left
[   44.251761][ T3682] syz.4.55 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   44.326913][ T3682] CPU: 1 UID: 0 PID: 3682 Comm: syz.4.55 Not tainted syzkaller #0 PREEMPT(lazy) 
[   44.326940][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   44.326959][ T3682] Call Trace:
[   44.326965][ T3682]  <TASK>
[   44.326972][ T3682]  __dump_stack+0x1d/0x30
[   44.326993][ T3682]  dump_stack_lvl+0x95/0xd0
[   44.327068][ T3682]  dump_stack+0x15/0x1b
[   44.327097][ T3682]  dump_header+0x80/0x240
[   44.327116][ T3682]  oom_kill_process+0x295/0x350
[   44.327140][ T3682]  out_of_memory+0x981/0xbc0
[   44.327183][ T3682]  try_charge_memcg+0x621/0xa00
[   44.327268][ T3682]  charge_memcg+0x6d/0x120
[   44.327368][ T3682]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[   44.327410][ T3682]  swap_cache_alloc_folio+0x47b/0x5e0
[   44.327439][ T3682]  swap_cluster_readahead+0x3d2/0x460
[   44.327566][ T3682]  swapin_readahead+0xd8/0x8a0
[   44.327590][ T3682]  ? _raw_spin_unlock+0x9/0x30
[   44.327614][ T3682]  ? swap_put_entries_cluster+0x49c/0x4c0
[   44.327644][ T3682]  ? __entry_text_end+0x10298/0x102179
[   44.327718][ T3682]  ? __rcu_read_unlock+0x4e/0x70
[   44.327741][ T3682]  ? swap_cache_get_folio+0x1f7/0x200
[   44.327885][ T3682]  do_swap_page+0x2a2/0x1ec0
[   44.327915][ T3682]  ? __css_rstat_updated+0xbb/0x280
[   44.328010][ T3682]  ? __rcu_read_lock+0x36/0x50
[   44.328032][ T3682]  ? pte_offset_map_rw_nolock+0x19e/0x200
[   44.328056][ T3682]  handle_mm_fault+0xb3c/0x2da0
[   44.328089][ T3682]  do_user_addr_fault+0x634/0x1060
[   44.328207][ T3682]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[   44.328236][ T3682]  ? trace_page_fault_user+0x1f/0xa0
[   44.328268][ T3682]  exc_page_fault+0x62/0xa0
[   44.328297][ T3682]  asm_exc_page_fault+0x26/0x30
[   44.328317][ T3682] RIP: 0033:0x7fe8e0d7370d
[   44.328335][ T3682] Code: 48 8d 43 17 31 ed 48 83 f8 1f 76 0c 48 83 e0 f0 48 8d 68 ef 48 c1 ed 04 64 48 8b 14 25 d0 ff ff ff 48 85 d2 0f 84 93 00 00 00 <48> 3b 2d d4 a6 28 00 0f 83 b6 00 00 00 0f b7 0c 6a 66 85 c9 0f 84
[   44.328351][ T3682] RSP: 002b:00007ffdc1df6750 EFLAGS: 00010206
[   44.328425][ T3682] RAX: 0000000000000120 RBX: 0000000000000110 RCX: 00007fe8e0dacc57
[   44.328438][ T3682] RDX: 000055557dfcae90 RSI: 0000000000000010 RDI: 0000000000000011
[   44.328449][ T3682] RBP: 0000000000000010 R08: 00000000ffffffff R09: 0000000000000000
[   44.328462][ T3682] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdc1df6900
[   44.328475][ T3682] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   44.328557][ T3682]  </TASK>
[   44.357276][ T3722] loop3: detected capacity change from 0 to 2048
[   44.402632][ T3682] memory: usage 307200kB, limit 307200kB, failcnt 408
[   44.571629][   T48] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   44.634730][ T3728] loop1: detected capacity change from 0 to 4096
[   44.639048][ T3682] memory+swap: usage 307612kB, limit 9007199254740988kB, failcnt 0
[   44.650718][ T3722]  loop3: p2 < > p4
[   44.657131][ T3722] loop3: p4 size 262144 extends beyond EOD, truncated
[   44.660931][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.684551][   T48] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1
[   44.712779][ T3682] kmem: usage 305472kB, limit 9007199254740988kB, failcnt 0
[   44.726201][ T3728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.743038][   T48] loop0: lost filesystem error report for type 5 error -117
[   44.811601][ T3682] Memory cgroup stats for /syz4:
[   44.905492][ T3682] cache 1765376
[   44.925577][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.952442][ T3682] rss 0
[   44.954829][ T3743] loop0: detected capacity change from 0 to 512
[   44.968559][ T3682] shmem 1753088
[   44.998893][ T3682] mapped_file 1753088
[   45.011116][ T3743] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   45.032386][ T3682] dirty 0
[   45.058870][ T3682] writeback 0
[   45.078771][ T3743] EXT4-fs (loop0): Remounting filesystem read-only
[   45.086399][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   45.093349][    C1] EXT4-fs (loop0): initial error at time 1781932397: ext4_mb_generate_buddy:1317
[   45.103336][    C1] EXT4-fs (loop0): last error at time 1781932397: ext4_mb_generate_buddy:1317
[   45.118130][ T3682] workingset_refault_anon 8
[   45.142424][ T3743] EXT4-fs (loop0): 1 truncate cleaned up
[   45.148209][ T3682] workingset_refault_file 26
[   45.153567][ T3736] loop2: detected capacity change from 0 to 512
[   45.165129][  T321] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   45.174193][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.191061][  T321] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   45.194888][ T3682] swap 442368
[   45.206338][ T3743] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.240636][  T321] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   45.248442][ T3682] swapcached 475136
[   45.292810][ T3736] 9p: Bad value for 'wfdno'
[   45.357702][ T3682] pgpgin 12768
[   45.403159][ T3682] pgpgout 12337
[   45.408574][ T3682] pgfault 15510
[   45.412087][ T3682] pgmajfault 16
[   45.415569][ T3682] inactive_anon 0
[   45.419835][ T3682] active_anon 0
[   45.423359][ T3682] inactive_file 0
[   45.427618][ T3682] active_file 12288
[   45.578325][ T3682] unevictable 1753088
[   45.613839][ T3682] hierarchical_memory_limit 314572800
[   45.677196][ T3682] hierarchical_memsw_limit 9223372036854771712
[   45.755769][ T3683] syz.4.55 (3683) used greatest stack depth: 9152 bytes left
[   45.799323][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.837659][ T3682] total_cache 1765376
[   45.860834][ T3682] total_rss 0
[   45.888438][ T3682] total_shmem 1753088
[   45.907519][ T3682] total_mapped_file 1753088
[   45.917943][ T3682] total_dirty 0
[   45.921761][ T3682] total_writeback 0
[   45.926571][ T3682] total_workingset_refault_anon 8
[   45.932894][ T3682] total_workingset_refault_file 26
[   45.939896][ T3682] total_swap 442368
[   45.944982][ T3682] total_swapcached 475136
[   45.951766][ T3682] total_pgpgin 12768
[   45.959875][ T3682] total_pgpgout 12337
[   45.965832][ T3682] total_pgfault 15510
[   45.965951][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'.
[   45.971629][ T3682] total_pgmajfault 16
[   45.986465][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   45.986861][ T3682] total_inactive_anon 0
[   46.001395][ T3767] netlink: 'syz.0.75': attribute type 12 has an invalid length.
[   46.001792][ T3682] total_active_anon 0
[   46.016832][ T3682] total_inactive_file 0
[   46.018352][ T3767] netlink: 'syz.0.75': attribute type 11 has an invalid length.
[   46.021567][ T3682] total_active_file 12288
[   46.036816][ T3682] total_unevictable 1753088
[   46.041927][ T3682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.55,pid=3682,uid=0
[   46.057793][ T3682] Memory cgroup out of memory: Killed process 3682 (syz.4.55) total-vm:96348kB, anon-rss:1248kB, file-rss:22216kB, shmem-rss:1716kB, UID:0 pgtables:128kB oom_score_adj:1000
[   46.117954][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.256068][   T28] kauditd_printk_skb: 58 callbacks suppressed
[   46.256083][   T28] audit: type=1400 audit(1781932398.536:280): avc:  denied  { ioctl } for  pid=3769 comm="syz.1.78" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   46.258385][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.301970][   T28] audit: type=1400 audit(1781932398.586:281): avc:  denied  { kexec_image_load } for  pid=3770 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   46.340177][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.363503][ T3778] loop4: detected capacity change from 0 to 512
[   46.376912][   T28] audit: type=1400 audit(1781932398.656:282): avc:  denied  { bind } for  pid=3770 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   46.436551][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.458081][ T3778] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.480463][   T28] audit: type=1400 audit(1781932398.756:283): avc:  denied  { write } for  pid=3779 comm="syz.2.80" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   46.650284][ T3763] syz.3.74 (3763) used greatest stack depth: 8896 bytes left
[   46.669457][ T3772] loop0: detected capacity change from 0 to 512
[   46.676974][   T28] audit: type=1400 audit(1781932398.816:284): avc:  denied  { create } for  pid=3777 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   46.697793][ T3772] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.732304][ T3772] EXT4-fs: Ignoring removed mblk_io_submit option
[   46.879969][ T3789] loop2: detected capacity change from 0 to 512
[   46.919316][ T3772] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   46.975580][ T3788] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   46.979299][ T3772] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   47.141294][ T3789] msdos: Bad value for 'uid'
[   47.232418][ T3788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=85 sclass=netlink_tcpdiag_socket pid=3788 comm=syz.3.82
[   47.272302][ T3772] EXT4-fs (loop0): 1 truncate cleaned up
[   47.289206][ T3789] msdos: Bad value for 'uid'
[   47.329081][ T3772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.655083][   T28] audit: type=1400 audit(1781932399.096:285): avc:  denied  { bind } for  pid=3787 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   47.674266][   T28] audit: type=1400 audit(1781932399.096:286): avc:  denied  { name_bind } for  pid=3787 comm="syz.3.82" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   47.697213][   T28] audit: type=1400 audit(1781932399.096:287): avc:  denied  { node_bind } for  pid=3787 comm="syz.3.82" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   48.495042][   T28] audit: type=1400 audit(1781932400.566:288): avc:  denied  { create } for  pid=3786 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   48.537454][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.726439][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.761572][   T28] audit: type=1400 audit(1781932401.046:289): avc:  denied  { shutdown } for  pid=3805 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.218636][ T3824] dummy0: entered promiscuous mode
[   49.288709][ T3824] dummy0: left promiscuous mode
[   49.439117][ T3849] loop1: detected capacity change from 0 to 512
[   49.448594][ T3849] EXT4-fs: Ignoring removed orlov option
[   49.458057][ T3849] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.480984][ T3849] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.102: corrupted in-inode xattr: e_value size too large
[   49.504971][ T3849] fserror_report: 4 callbacks suppressed
[   49.504986][ T3849] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.517276][ T3849] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.102: couldn't read orphan inode 15 (err -117)
[   49.527198][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   49.527225][    C0] EXT4-fs (loop1): initial error at time 1781932401: ext4_iget_extra_inode:5180: inode 15
[   49.527251][    C0] EXT4-fs (loop1): last error at time 1781932401: ext4_iget_extra_inode:5180: inode 15
[   49.572127][ T3849] loop1: lost filesystem error report for type 5 error -117
[   49.572727][ T3849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.285252][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.342211][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   50.392867][ T3873] loop4: detected capacity change from 0 to 2048
[   50.448377][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.648221][ T3887] loop2: detected capacity change from 0 to 256
[   50.661646][ T3889] loop1: detected capacity change from 0 to 512
[   50.750843][ T3890] loop1: detected capacity change from 0 to 256
[   50.807376][ T3895] SELinux: ebitmap: map size 65536 does not match my size 64 (high bit was 4294967295)
[   50.844421][ T3895] SELinux: failed to load policy
[   51.019700][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.070269][ T3905] loop4: detected capacity change from 0 to 512
[   51.083139][ T3905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   51.108675][ T3905] EXT4-fs (loop4): 1 truncate cleaned up
[   51.120747][ T3905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.259488][ T3918] hub 8-0:1.0: USB hub found
[   51.265339][ T3918] hub 8-0:1.0: 8 ports detected
[   51.279547][ T3918] loop1: detected capacity change from 0 to 1024
[   51.286703][ T3918] EXT4-fs: Ignoring removed bh option
[   51.317500][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.332354][ T3918] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks
[   51.339837][ T3918] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   51.358661][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.566785][ T3940] loop1: detected capacity change from 0 to 164
[   51.576752][ T3940] rock: directory entry would overflow storage
[   51.583282][ T3940] rock: sig=0x5252, size=5, remaining=3
[   51.592112][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   51.592141][   T28] audit: type=1400 audit(1781932403.876:320): avc:  denied  { mount } for  pid=3939 comm="syz.1.128" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   51.683990][   T28] audit: type=1400 audit(1781932403.966:321): avc:  denied  { read write } for  pid=3941 comm="syz.2.129" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   51.689489][ T3944] bridge0: port 3(gretap0) entered blocking state
[   51.720666][ T3944] bridge0: port 3(gretap0) entered disabled state
[   51.724209][ T3940] 9p: Bad value for 'wfdno'
[   51.727597][   T28] audit: type=1400 audit(1781932403.966:323): avc:  denied  { open } for  pid=3941 comm="syz.2.129" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   51.759519][ T3944] gretap0: entered allmulticast mode
[   51.766827][ T3944] gretap0: entered promiscuous mode
[   51.773329][   T28] audit: type=1400 audit(1781932403.966:322): avc:  denied  { read write } for  pid=3941 comm="syz.2.129" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   51.800495][   T28] audit: type=1400 audit(1781932404.006:324): avc:  denied  { mounton } for  pid=3939 comm="syz.1.128" path="/39/file0" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1
[   51.831068][   T28] audit: type=1400 audit(1781932404.116:325): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   51.858803][ T3951] FAULT_INJECTION: forcing a failure.
[   51.858803][ T3951] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   51.883498][ T3951] CPU: 0 UID: 0 PID: 3951 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.883526][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   51.883539][ T3951] Call Trace:
[   51.883569][ T3951]  <TASK>
[   51.883578][ T3951]  __dump_stack+0x1d/0x30
[   51.883663][ T3951]  dump_stack_lvl+0x95/0xd0
[   51.883681][ T3951]  dump_stack+0x15/0x1b
[   51.883697][ T3951]  should_fail_ex+0x25e/0x270
[   51.883724][ T3951]  should_fail+0xb/0x20
[   51.883803][ T3951]  should_fail_usercopy+0x1a/0x20
[   51.883827][ T3951]  _copy_from_user+0x1c/0xb0
[   51.883870][ T3951]  map_delete_elem+0x1fb/0x3c0
[   51.883898][ T3951]  __sys_bpf+0x7e1/0xc30
[   51.883965][ T3951]  ? vfs_write+0x7d0/0x990
[   51.883999][ T3951]  __x64_sys_bpf+0x69/0x80
[   51.884038][ T3951]  x64_sys_call+0x10cb/0x3020
[   51.884061][ T3951]  do_syscall_64+0x136/0x3c0
[   51.884086][ T3951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.884146][ T3951] RIP: 0033:0x7f40688ece59
[   51.884159][ T3951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.884172][ T3951] RSP: 002b:00007f4067347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   51.884190][ T3951] RAX: ffffffffffffffda RBX: 00007f4068b65fa0 RCX: 00007f40688ece59
[   51.884205][ T3951] RDX: 0000000000000020 RSI: 0000200000000700 RDI: 0000000000000003
[   51.884262][ T3951] RBP: 00007f4067347090 R08: 0000000000000000 R09: 0000000000000000
[   51.884291][ T3951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.884304][ T3951] R13: 00007f4068b66038 R14: 00007f4068b65fa0 R15: 00007ffec50c5958
[   51.884324][ T3951]  </TASK>
[   52.115232][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.191757][   T28] audit: type=1400 audit(1781932404.476:326): avc:  denied  { setopt } for  pid=3964 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   52.215229][ T3963] can0: slcan on ptm0.
[   52.256489][ T3968] hub 8-0:1.0: USB hub found
[   52.289531][ T3962] can0 (unregistered): slcan off ptm0.
[   52.290400][ T3968] hub 8-0:1.0: 8 ports detected
[   52.300632][   T28] audit: type=1400 audit(1781932404.586:327): avc:  denied  { read } for  pid=3972 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.378485][   T28] audit: type=1400 audit(1781932404.586:328): avc:  denied  { read open } for  pid=3972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.470319][   T28] audit: type=1400 audit(1781932404.586:329): avc:  denied  { getattr } for  pid=3972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.577499][ T3968] loop0: detected capacity change from 0 to 1024
[   52.577855][ T3990] FAULT_INJECTION: forcing a failure.
[   52.577855][ T3990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.626104][ T3968] EXT4-fs: Ignoring removed bh option
[   52.657958][ T3968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.696928][ T3990] CPU: 1 UID: 0 PID: 3990 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT(lazy) 
[   52.696953][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   52.696965][ T3990] Call Trace:
[   52.696972][ T3990]  <TASK>
[   52.696980][ T3990]  __dump_stack+0x1d/0x30
[   52.697012][ T3990]  dump_stack_lvl+0x95/0xd0
[   52.697086][ T3990]  dump_stack+0x15/0x1b
[   52.697110][ T3990]  should_fail_ex+0x25e/0x270
[   52.697135][ T3990]  should_fail+0xb/0x20
[   52.697156][ T3990]  should_fail_usercopy+0x1a/0x20
[   52.697230][ T3990]  _copy_from_user+0x1c/0xb0
[   52.697260][ T3990]  ___sys_sendmsg+0xc1/0x1e0
[   52.697374][ T3990]  __x64_sys_sendmsg+0xd4/0x160
[   52.697398][ T3990]  x64_sys_call+0x194c/0x3020
[   52.697434][ T3990]  do_syscall_64+0x136/0x3c0
[   52.697467][ T3990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.697544][ T3990] RIP: 0033:0x7fe8e0dace59
[   52.697557][ T3990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.697578][ T3990] RSP: 002b:00007fe8df7ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.697596][ T3990] RAX: ffffffffffffffda RBX: 00007fe8e1025fa0 RCX: 00007fe8e0dace59
[   52.697649][ T3990] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000004
[   52.697662][ T3990] RBP: 00007fe8df7ff090 R08: 0000000000000000 R09: 0000000000000000
[   52.697675][ T3990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.697687][ T3990] R13: 00007fe8e1026038 R14: 00007fe8e1025fa0 R15: 00007ffdc1df6808
[   52.697705][ T3990]  </TASK>
[   52.817961][ T3968] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks
[   52.868873][ T3968] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   53.093369][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'.
[   53.154241][ T4019] loop1: detected capacity change from 0 to 4096
[   53.206549][ T4024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'.
[   53.237131][ T4019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.388606][ T4029] can0: slcan on ptm0.
[   53.415251][ T4018] loop4: detected capacity change from 0 to 512
[   53.496876][ T4026] can0 (unregistered): slcan off ptm0.
[   53.565879][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.634556][ T4018] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.685822][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.765678][ T4032] ==================================================================
[   53.773822][ T4032] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[   53.783421][ T4032] 
[   53.785746][ T4032] read to 0xffff88810bc5f000 of 4096 bytes by task 48 on cpu 1:
[   53.794078][ T4032]  copy_folio_from_iter_atomic+0x728/0x10a0
[   53.800003][ T4032]  generic_perform_write+0x2c4/0x490
[   53.805304][ T4032]  shmem_file_write_iter+0xc5/0xf0
[   53.810722][ T4032]  lo_rw_aio+0x6a9/0x760
[   53.814990][ T4032]  loop_process_work+0x567/0xac0
[   53.819939][ T4032]  loop_workfn+0x31/0x40
[   53.824220][ T4032]  process_scheduled_works+0x4d4/0x9a0
[   53.829720][ T4032]  worker_thread+0x569/0x750
[   53.834335][ T4032]  kthread+0x221/0x270
[   53.838405][ T4032]  ret_from_fork+0x146/0x330
[   53.843006][ T4032]  ret_from_fork_asm+0x1a/0x30
[   53.848532][ T4032] 
[   53.851400][ T4032] write to 0xffff88810bc5f2a2 of 15 bytes by task 4032 on cpu 0:
[   53.859468][ T4032]  copy_folio_from_iter_atomic+0x728/0x10a0
[   53.865721][ T4032]  generic_perform_write+0x2c4/0x490
[   53.871749][ T4032]  ext4_buffered_write_iter+0x2e2/0x480
[   53.877332][ T4032]  ext4_file_write_iter+0x38e/0xef0
[   53.882737][ T4032]  iter_file_splice_write+0x6a0/0xa60
[   53.888397][ T4032]  direct_splice_actor+0x156/0x280
[   53.893982][ T4032]  splice_direct_to_actor+0x2f9/0x680
[   53.900293][ T4032]  do_splice_direct+0x119/0x1a0
[   53.905367][ T4032]  do_sendfile+0x37d/0x640
[   53.910434][ T4032]  __x64_sys_sendfile64+0x105/0x150
[   53.915859][ T4032]  x64_sys_call+0x2dc4/0x3020
[   53.920556][ T4032]  do_syscall_64+0x136/0x3c0
[   53.925668][ T4032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.931590][ T4032] 
[   53.933942][ T4032] Reported by Kernel Concurrency Sanitizer on:
[   53.941125][ T4032] CPU: 0 UID: 0 PID: 4032 Comm: syz.1.145 Not tainted syzkaller #0 PREEMPT(lazy) 
[   53.950466][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   53.960706][ T4032] ==================================================================
[   54.031778][ T4055] loop2: detected capacity change from 0 to 128
[   54.105449][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.261660][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.