last executing test programs:

2m4.136641865s ago: executing program 2 (id=391):
sched_setscheduler(0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x400}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x9, 0xffffffff, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x401, 0x2, 0xc, 0x4, 0x5, 0xc, 0x3, 0x4}}]}}]}, 0x170}}, 0x24008004)
bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4020a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0xfffffffd, 0x3, 0x9, 0x8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0)
sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)

2m3.970192327s ago: executing program 2 (id=394):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000202020014000200776732000000000000000f00000000000900010073"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)

2m3.862331599s ago: executing program 2 (id=396):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x6)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'ip_vti0\x00'}}, 0x1e)
timer_create(0x3, 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x319801)
madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0xfffffd9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x40018)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000020900020073797a30000000000900010073797a30000000001400038008000240000000020800014000000000140000001100010000000000000000fffffff10a"], 0x68}}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
close(r4)
shmctl$IPC_RMID(0x0, 0x0)
r7 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2, 0x0, 0x0)
shmdt(r8)
timer_delete(0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0x38}}, 0x0)

2m3.854079988s ago: executing program 2 (id=397):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$eJzs3TtoJHUcB/Df7CMPEyRqI4gPEBENhFgIgo02CoEQgoigQkTEShIhJthlrWwstFZJZRPEztyVxzXhmoNrc3cpcs0VF664cMVdscfs7OY2yYbsZV8h8/nAZua/+38t7Pc/m5CZCSC3JiLio4goRsRkRJQjImmu8Eb2mKgX10e3FiKq1c/uJ7V6WTnTaDcWEZWI+CCi1HhtdfOr3Yfbn77920r5rX82vxzt1/trtre7M7v/99yv/8+8t1qoPzde3za/j25KWjxXSiJe7MVg50RSGvQMaMf8z//dTHP/UkS8Wct/OQr1yP6+PHS1HO/+dVLbP+7deKWfcwW6r1otp8fAShXInULtO3BSmIqIbL9QmJrKvsPfKibxw9LyT5PfL60sfjfolQroSNNv3eMRO59cHr40diT/d4tZ/tvyfq8mCpzJcHvV0vx/Pr9xO93fL/Z4TsD58Gq2SfM/+c3aOyH/kDvyD/l1kP9Z+Ye8cfyHC+CM2ZV/uKhO//da+Yf8kn+4wMqNnUrLl+Uf8kv+Ib+e5n8kzX/jDwZDA54W0AfNx38AIF+qw4M+AxkYlEGvPwAAAAAAAAAAAAAAAAAAwHHro1sLjUe/xrz2Z8TexxFROjx+dgvTYu1+xBEjtZ/PPUjSageSrFlHvn69ww469G+Xz76ea/Perw3P3+nu+M/q+mu96feXw8UTL4a/thhRSStPl0rHP/9J/fN3qhP7f+GUhuVv2xugW5Ij5Q+/6O/4Rz3eGOz4M9sRV9L1Z7rV+leIl2vb1uvPePMlls/ox0cddgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDfPAkAAP//Z9RrGg==")
symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1}, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x21, r0, 0x80000001, 0x4)
r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r3 = dup(r2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x40, 0x0, 0x1, 0x0, 0x5, 0x4000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xb2}, 0x10, 0x7760497c, 0x8, 0x1, 0x3, 0x3, 0x8001, 0x0, 0x5, 0x0, 0x8}, r4, 0xe, 0xffffffffffffffff, 0x2)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x7}, {0xeb4, 0x8007}, 0x10000004, 0x7})

2m3.519492712s ago: executing program 2 (id=399):
r0 = perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6e2f9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x5, @perf_bp={0x0}, 0x204, 0x40, 0x43a1bd76, 0x3, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='hybla', 0x5)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000d40)=ANY=[@ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250200000008000200020000000800020002000000080002000200000008000100030000000800020002000000020800010002000000000000000000000000000000400000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@bh}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@inlinecrypt}, {@data_err_abort}]}, 0x7, 0x621, &(0x7f00000002c0)="$eJzs3d9rHNUeAPDvzCa5SZp7014ul9tyLzdwH1q4NE16y636Yq0P9qFgwT6I+NDQJDV0+4MmBVsLpuCDgoKIryJ98R/wXfrumwjqm89CFalYUOnK7M62283uZk2TnSbz+cAkc87M5pzvTk7mnJmcnQBKayr7kkbsjbh/JomYbNk2EY2NU/l+d3+8cTZbkqjVXvohiSTPa+6f5N935YnRiPjieMRfK2vLXb52/fxctdbwZsShlQuXDy1fu35w6cLcuYVzCxdnDz915OjM07NHZjclzl359xMnX/zne2+99v/FL6sHkzgWp4ffmI+2ODbLVEzF/TzE1vyhiDiarXR4X7abHRBCqVXy38fhiPh7TEalnmqYjKV3C60csKVqlYjaukbX3wXYhpI+2j+wEzX7Ac2xfX/j4NNb3CsZnDvPNQZAa+MfalwbidH62Gj8btIyMmpc29i9CeVnZfx2Y99H2RKPXIe49+DoDG1COd2s3oyIf3SKP6nXbXc90iz+9JF6JKsRMxExktfv+ceoQ9KyvhXXYXrZaPxpRBzLv2f5xzdY/lRbetDxA1BOt7P+T3YiX81SD89/Wd+j2f+JDv2fiQ7nro0o+vzXvf/XPN+P1q+Rp239sKzPcqrzjxxuz/j2nRMfdCu/tf+XLVn5zb7gINy5GbGvLf63s2Dz/k8Wf9Lh+Ge7nDnWXxkvfPX9iW7bio6/ditif8fxz8NeabbW4/7kocWl6sJM42vHMj77/NVPupVfdPzZ8R/vEn/L8U/bX5e9J5f7LOPTU7cudNs20TH+1ZbRafrdSNIYb47kr3l9bmXlymzESHKykZG25B/uXZfmPs2fkcV/4D+d23/r73/7GzDW/JPZh8svn7/bbdtGjn/LzeT7tT7r0E0W//z6x39N+8/y3u+zjJ9fufqvbtt6xT/2OIEBAAAAAABACaX1e7BJOv1gPU2npxvzZf8W42n10vLKfxcvXb04H3Gg/v+Qw2nzTvdkI51k6dn8/2Gb6cNt6f9FxJ6I+LAyVk9Pn71UnS86eAAAAAAAAAAAAAAAAAAAAHhC7Mrn/zefU/1TpTH/HyiJrXzAHPBk0/6hnCrN9r/mEU9AGTj/Q3lp/1Be2j+Ul/YP5aX9Q3lp/1Be2j+Ul/YPAAAAADvSnn/f/iaJiNVnxupLZiTfZkYQ7GzDRVcAKEyl6AoAhXlw619nH0qnr/7/L/mHA259dYACJJ0y652DWu/Gf7vjK3P3NqVuAAAAAAAAAAAAAEDD/r3d5/+bGww7W9dpf2ODrQcweI8x/99HB8A256P/obyM8YFes/gzo9029Jz/DwAAAAAAAAAAAABspon6kqTT+VzgiUjT6emIP0fE7hhOFpeqCzMR8ZeI+Loy/KcsPVt0pQEAAAAAAAAAAAAAAAAAAGCHWb52/fxctbpwpXXl1zU5O3ul+RTUXvuMx/r79LHybPzBV0Uy+LdlLCIKPyhbtjLUkpNErGZH9Ymo2JXlaMkZKvgQFPhHCQAAAAAAAAAAAAAAAAAASqpl7nFn+z4ecI0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPAePv9/61aKjhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J5+DwAA///qOELD")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={r6, 0x0, 0x7c, 0x8d, &(0x7f00000001c0)="59b1c3a32925d06a1efbd0c7214d0b694c01f0ad89df981230c6f0271a6cdf5b20edd97241a8d7dba8a939421b803e36b7a4ceb5fff104b9b61810cfd6666e30e002861dfef277facfc91e22e5d20ee9850cc9455dc51c18df39db0b1cb9140784b6827fe4f7e30b050b20cbbfb7b12021d1fe3c9edd0b331c903ab2", &(0x7f0000000900)=""/141, 0x5, 0x0, 0x5b, 0x1000, &(0x7f00000009c0)="4f239847776bd1a9d3a1d8bf48f126fe34175e7abd7ed794458c67f2b94641e84b15eabc64d5d692bd18d37db576fd6ac7d982e6e8a3be2f84f2a1b31810fb5e715e1fab356e652fe21fd62ff0417d8e2f8b6c7f916d8fcfa0c566", &(0x7f0000001980)="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"}, 0x50)

2m2.240751406s ago: executing program 2 (id=415):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000200000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x9e)
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000700)="f7922726fa61478227f9e43371110f1c969029d0a78c21d7a41d6b86c7313eedbd3b3fc931ac08d9d4e227cc4c77833632c2caff642d0df502e4f38613a61658")
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@quota}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x45b, &(0x7f0000000dc0)="$eJzs3M1vFOUfAPDvzG7L6+/XqvgCglbRSHxpaXk9eMFo4kETEz1gPNW2EGShSmsihCh6wKMh8W48mvgXeNKLUU8mXvVuSIjhAnpaM7Mz7bLsli5s2cp+Psm0z7PzbOf5zsyz88zz7DSAgTWW/UgitkbE7xEx0sjeWGCs8ev61fMzf189P5NEvf7mX0le7trV8zNl0fJ9WxqZer3Ib2iz3YvvREzXanNnivzE4qn3JxbOnnvhxKnp43PH505PHT68f9+u4YNTB3oSZxbXtR0fz+/c/urbl16fOXrp3Z+/zeq7tVjfHEePbBpr7N22nu7xxvrtf03ppNrHitCVSkRkh2sob/8jUYlNS+tG4pXP+lo5YE3V6/V6u+tz4UIduIcl0e8aAP1RXuiz+99yuUtdj3XhypGIDw414r9eLI011UiLMkMt97e9NBYRRy/881W2xNqMQwAA3OD7IxHxfLv+XxoPNZX7f2MOpZKl74uI+yPigYjYFhEPRuRlH46IR7rcfusMyc39n/Ty7cS1Wln/78Vibmup/5dPZJW9vxitFLmsDzgaQ8mxE7W5vcU+2RNDG7L85Arb+OHl377otK65/5ct2fbLvmBDernaMkA3O704fWdRL7vyacSOakv8uSTKaZxsd2yPiB1d/eXlO4wTz36zs1OpW8e/gh7MM9W/jnimcfwvREv8paTj/OTkoYNTByY2Rm1u70R5Vtzsl18vvtFp+23jj+rq4u+B7Phvbj3/c0vxjyYbIxbOnjuZz9cuROsM8S1d/OPzjvc0t3v+Dydv5enh4rWPphcXz0xGDCev3fz61PJ7i3y1Of49u9vFn+afcWW0j0ZEdhLviojHIuLxou5PRMSTEbF7hfh/eump97qPf4VR+R7K4p+91fGP5uPffaJy8sfvuo+/lB3//XlqT/HKaj7/VlvBO9l3AAAA8F+R5t+BT9LxpXSajo83vsO/LTantfmFxeeOzX94erbxXfnRGErLka6RpvHQyTy9nJ9qye8rxo2/rGzK8+Mz87XZfgcPA25Lh/af+bPS79oBa87zWjC4tH8YXNo/DC7tHwaX9g+Dq137/6QP9QDuPtd/GFzaPwyupvZ/d546BNYN138YSB2fjU/v6JF/iXs+EWn376pGX+ucdPGPIdZPorrWdd7QdlW/P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6498AAAD//+kD5rM=")
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x1b)
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m2.216702706s ago: executing program 32 (id=415):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000200000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x9e)
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000700)="f7922726fa61478227f9e43371110f1c969029d0a78c21d7a41d6b86c7313eedbd3b3fc931ac08d9d4e227cc4c77833632c2caff642d0df502e4f38613a61658")
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@quota}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x45b, &(0x7f0000000dc0)="$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")
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x1b)
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m58.770136404s ago: executing program 3 (id=448):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmod(0xffffffffffffffff, 0x20)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000023070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ffff6d000d"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xffffffffffffff58}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000000101040000000000000000070000092c0016400000000c0000000800000007ffffffff00000002000000030000e70700000005000000060000002b0c0010800800014000000000cf2638f96dc880d869d9987e776777bfb443ef37330754b4542e65a24e97e68b76fda0db8ba2ae01"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4)

1m58.306519199s ago: executing program 3 (id=451):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x100c404, &(0x7f0000000540)={[{@nodots}, {@dots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f800"], 0x164}}, 0x8000000)

1m58.24423554s ago: executing program 3 (id=452):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000020800040001000000", 0x24)

1m58.20156463s ago: executing program 3 (id=453):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48)
ppoll(&(0x7f0000000200)=[{r0, 0x16}], 0x1, 0x0, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
lsm_list_modules(0x0, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) (async)
ppoll(&(0x7f0000000200)=[{r0, 0x16}], 0x1, 0x0, 0x0, 0x0) (async)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async)
lsm_list_modules(0x0, 0x0, 0x0) (async)

1m58.114300701s ago: executing program 3 (id=454):
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000490001002a"], 0x38}, 0x1, 0xba01, 0x0, 0x24000080}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x400}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x9, 0xffffffff, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x401, 0x2, 0xc, 0x4, 0x5, 0xc, 0x3, 0x4}}]}}]}, 0x170}}, 0x24008004)
bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4020a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0xfffffffd, 0x3, 0x9, 0x8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0)
sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)

1m58.094144741s ago: executing program 3 (id=455):
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000490001002a"], 0x38}, 0x1, 0xba01, 0x0, 0x24000080}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x400}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x9, 0xffffffff, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x401, 0x2, 0xc, 0x4, 0x5, 0xc, 0x3, 0x4}}]}}]}, 0x170}}, 0x24008004)
bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4020a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0xfffffffd, 0x3, 0x9, 0x8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0)
sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)

1m58.016173202s ago: executing program 33 (id=455):
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000490001002a"], 0x38}, 0x1, 0xba01, 0x0, 0x24000080}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x400}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x9, 0xffffffff, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x401, 0x2, 0xc, 0x4, 0x5, 0xc, 0x3, 0x4}}]}}]}, 0x170}}, 0x24008004)
bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4020a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0xfffffffd, 0x3, 0x9, 0x8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0)
sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)

7.981539213s ago: executing program 1 (id=1085):
syz_open_dev$loop(0x0, 0x6d3ce776, 0x2e8801)
socket$kcm(0x21, 0x2, 0x2)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f2435f0100088000000000950800", 0xe, 0x1, 0x0, 0x0)
syncfs(r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x40000005, 0x5)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x1})

7.923254554s ago: executing program 4 (id=1086):
syz_read_part_table(0x5b6, &(0x7f0000001340)="$eJzs0r9Lm3kYAPBvcsYfd95FRDg4bxAMLucP0OFuMByHxOCictwdNzgLDt4gODhIjijtpvYfqNjaIi5ily4dxQhiS5wko/gPtDg0U0rIWzS2SymxVD4fSPi+z/s8PN+X5wl81eLhaVPtVIldCze/P0TB/z9e/fduZnyiZ7q1ljkTEiHzc3sITR9m7ofww/Xnt5VKZet47M1ux0nvaSH1OB7FX8RrzebPt5Of+23cfXvpw+TK6kJ2bSk9d5ZdvhiZHch0r2f+e/Dro9HcPz+O/hstVnWv7jWkf3X5r/qnivd/r70ZTBSK5eGjKK8/Vl8Xb8BduH0392+zK1/Klyf7dhaH+jtLB7mNaO6XsS99UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4K7bSx8mV1YXsq1L6bmz7PLFyOxApns90xy9Hn1V/Y9Hvwb2X4v6p4q/PXlZmXr98PvBRKFYHj4KP+Wqef2x+rqmEMKzxlyJW/RLqJ//Zle+lC9P9u0sDn3TWTrIbURzv7wx/3DzGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgkhmf6Jn+48+/QoiFmfYQwne1eKXlKufbEMJ+dJ6K4hMtw8Wt47HEbsdJ72kh1RZaQrhWEubPt5Ntz+taxRv9LXy6dwEAAP//eFN5aA==")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@init_itable}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shutdown(0xffffffffffffffff, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1)

7.906333934s ago: executing program 5 (id=1087):
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r0 = open$dir(0x0, 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x45e, &(0x7f0000000b40)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@grpquota}, {@nodiscard}]}, 0x3, 0x453, &(0x7f0000000f80)="$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")

7.006440894s ago: executing program 6 (id=1088):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000060018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.006046324s ago: executing program 0 (id=1089):
socket$kcm(0xa, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}})
socket(0x2, 0x80805, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETAW(r2, 0x5407, 0x0)
r3 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080))
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x9, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x203, 0x80, 0x4, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x80, 0x82, 0x200, 0x44, 0x2, 0x3f, 0x2, 0x101, 0x30720d00, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x4, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x6, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0xffffffff, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x9, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0xe000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x1, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x9, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x1000006, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x6, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x5, 0x7, 0x9, 0x2007, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0xc, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68081b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x200, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0x9, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0x21ef, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000003, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x3c, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x2, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x8, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x7f, 0x8, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084)

6.943079324s ago: executing program 6 (id=1090):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x100000001)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x297}], 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'veth0_virt_wifi\x00', &(0x7f00000009c0)=@ethtool_gstrings={0x1b, 0x4}})

6.897660285s ago: executing program 6 (id=1091):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0xf0}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)

6.186226372s ago: executing program 6 (id=1092):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x81}, 0x100000, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_emit_ethernet(0x1aa, &(0x7f0000000e00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="02eb624e5fa9", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x174, 0x3a, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x4, [{0x6c, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00'], [0x200]}, {0x2, 0x3, 0x4, @empty, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2, @rand_addr=' \x01\x00'], [0x3a, 0x100, 0xffffffff]}, {0x0, 0x7, 0x2, @private1, [@remote, @mcast2], [0x1, 0x2, 0xb, 0x3, 0x2, 0x1, 0xfffffffa]}, {0x7, 0x4, 0x4, @mcast1, [@loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x3b}, @remote], [0xf, 0xebb, 0x7, 0xf5]}]}}}}}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
io_setup(0x6, 0x0)
mq_notify(r5, &(0x7f0000000180)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'ipvlan1\x00', @random="9332c32613be"})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

6.071490984s ago: executing program 1 (id=1102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b00000001000030425bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00130000000000008800128009000100766c616e00000000780002800600010002000000280003800c00010000000000060000002400010000020000090000000c0021000000000001000100280004800c00010001000000ef0300000c00010005000000a30000000c00010005000000000001001c0004801dfd010002000000020000000c0001007f00000005000000080005", @ANYRES32=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)

6.064793294s ago: executing program 0 (id=1093):
socket$nl_route(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) (async)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) (async)
readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000100000008000000"], 0x50) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x7, 0x40, 0x233, 0xa, {{0x3c, 0x4, 0x0, 0x1, 0xf0, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x1f, 0x11, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @multicast1, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x103}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@private=0xa010101, 0x3}]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0x9, "2101f3c7b577ae"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010100, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@local, 0x8}, {@rand_addr=0x64010100, 0x10001e}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x7, 0xc5, [@multicast2]}]}}}}}) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
syz_emit_ethernet(0x4a, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_read_part_table(0x105f, &(0x7f00000011c0)="$eJzsz7FtwlAUBdBrR05i/URUrMIm1PSUTOAJYAoaNqFCzMAAsIGRZQs2AIpzqq//7n3SC2/VJuvV13eSKkmXMv6l+nlm6rLblEWTKrchtU3Sz5J+HDZJPTz2xymdcnpUL8Oq6znJX5L/Lr9p51MzqZeHV94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/qHgAA//+qQg4Q")

4.833667447s ago: executing program 1 (id=1094):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
getgroups(0x4, &(0x7f00000000c0)=[0xee01, <r1=>0xffffffffffffffff, 0x0, 0xffffffffffffffff])
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x9801, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r1}}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37, 0x12, 0x33, 0x36, 0x30, 0x34]}}, {@huge_advise}, {@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x32, 0x74]}}], [{@subj_user}]})
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000fc0)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804)

3.537991192s ago: executing program 1 (id=1095):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f0000000440)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x33, 0x37, 0x37, 0x41, 0x30, 0x38, 0x36], 0x2d, [0x39, 0x32, 0x55, 0x61], 0x2d, [0x65, 0x32, 0x65, 0x30], 0x2d, [0x66, 0x35, 0x3e, 0x31], 0x2d, [0x35, 0x66, 0x38, 0x34, 0x64, 0x31, 0x31, 0x63]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '\xddfo\a,]\xf8z\x93e\x02\x8c\xb6\x91w\xac\xc7\xf5\"\xf0\xab:o\x80\x01t\xd4\xb9\xe1\x18\xb4L6\xa3\x84qa\xc9ue\xe0\xb8zp\xa3\xb7wf)\x9f\xea\xc6\xf4\xd5\x85\x16\xba\xde\xa3\xfb'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
socket$packet(0x11, 0x2, 0x300)
mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
syz_open_dev$loop(&(0x7f0000000300), 0x6, 0x46a00)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x800, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r2, r2, 0x0, 0xe3aa6ea)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
io_setup(0xc, &(0x7f0000000000))
r3 = socket(0x23, 0x80805, 0xfffffffd)
listen(r3, 0x0)
accept(r3, 0x0, 0x0)
eventfd(0x1ff)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0xa1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xd012})
cachestat(r6, &(0x7f0000000200)={0x10011}, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001b40))
eventfd(0x40)

3.536722312s ago: executing program 5 (id=1096):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @typedef={0x1}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x34, 0xa00, 0xa}, 0x28)

3.058635227s ago: executing program 5 (id=1097):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xa, 0xffffffff, 0x3, 0x100, r0, 0x1, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x8}, 0x50) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0x7f, 0xdf, 0x0, 0x1, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3})
getsockopt(r6, 0x7, 0x7fff, &(0x7f0000000000)=""/32, &(0x7f0000000040)=0x20)

2.988768688s ago: executing program 5 (id=1098):
pipe(0x0)
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x6200}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket(0xa, 0x801, 0x0)
getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0)
socket(0x840000000002, 0x801, 0x100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001340)={{0x0, 0x9f6, 0x5, 0x101, 0x0, 0xb8be, 0x40000000, 0x0, 0x5, 0x4, 0x9, 0x8, 0xfffffffffffffff9, 0xff, 0x1}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d000000000000"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000000850000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, &(0x7f0000002700)=[{&(0x7f00000012c0)="0f6e26e7377f", 0x6}], 0x1}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)}}], 0x2, 0x40088c4)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
close(0x3)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrquota', 0x3a, '', 0x3a, './file1', 0x3a, [0x16]}, 0x30)

2.79455598s ago: executing program 0 (id=1099):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x1, 0x2, 0x10000b, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @empty}}}})

2.504116273s ago: executing program 6 (id=1100):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, 0xffffffffffffffff, 0x15b4}, 0x50)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x17, 0x2, {0x28, "0000000000000000000100ff000000ff"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x4040004)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
prctl$PR_SCHED_CORE(0x4c, 0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

2.457806444s ago: executing program 4 (id=1101):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}, 0x1, 0x0, 0xa000000}, 0x0)

2.322359035s ago: executing program 4 (id=1103):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x1f00, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000003640))
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x1}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe01, 0x0, 0x6, 0x1000000000}, 0x0, 0x1000, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1}}, 0xe8)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x69}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x1, 0x1, 0x1}}, 0x44)
sendmsg$sock(r4, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='p', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @local, 0x8}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8800, 0x8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x6, 0x5, 0x7, 0x0, 0x2, 0x5, 0x6, {0x0, @in6={{0xa, 0x8e5, 0xd, @mcast2, 0x100}}, 0x3, 0x7, 0xfffffffb, 0x19, 0x2}}, &(0x7f0000000180)=0xb0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24004891}, 0x0)

2.231886476s ago: executing program 0 (id=1104):
socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x6, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xd, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xffffff80, <r11=>0x0}, 0x8)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x44)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, r1}, 0x14)

2.057176528s ago: executing program 0 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP")
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400ff1f00000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0)

2.034306028s ago: executing program 5 (id=1106):
epoll_create1(0x80000)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000801000500000000000400040000000000108002000020000020"], 0x24, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb0, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket$inet(0x2, 0x4, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2, 0x2, 0xe, 0x9, 0x0, 0x7fff, 0x800, 0x64cdb319b21e11b0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x100002, 0x7fffffffffffffff, 0x2, 0x0, 0xffff, 0x0, 0x1762, 0x0, 0xabf4, 0x0, 0x190a}, r1, 0x9, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x0, 0xff, 0x6, 0x4, 0x6}, 0x20)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

1.81835634s ago: executing program 4 (id=1107):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002020200140002007767320000000000000000000f0000000900010073"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)

1.81778117s ago: executing program 6 (id=1108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1018}, [@IFLA_GROUP={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x0, {0x1, 0xba770cb12e8eb8e8, 0x6}, 0x1}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000480)="81b641f1", 0x4}, {&(0x7f0000000d00)="bcdca9f047", 0x5}], 0x2}, 0x0)
recvmsg$can_j1939(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'syz_tun\x00', 0x2})
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r4, &(0x7f0000000200), &(0x7f0000000280)=0xc)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[], 0x6c}}, 0x240040c0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r13 = socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r15, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1.799528171s ago: executing program 1 (id=1109):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf25090002006c797a32000000000800410072786500140033006c6f000000000000000000000e000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000)

1.713889921s ago: executing program 4 (id=1110):
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000006000000000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

1.257429057s ago: executing program 0 (id=1111):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
getpgrp(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
socket$inet(0x2, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd)
unshare(0x44040200)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b0000/0x4000)=nil, &(0x7f0000079000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000127000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000dd000/0x2000)=nil, &(0x7f000012a000/0x2000)=nil, 0x0, 0x0, r4}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0)

1.182507977s ago: executing program 4 (id=1112):
syz_open_dev$loop(0x0, 0x6d3ce776, 0x2e8801)
socket$kcm(0x21, 0x2, 0x2)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f2435f0100088000000000950800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
syncfs(r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x40000005, 0x5)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x1})

1.182177137s ago: executing program 1 (id=1113):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs")
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x600000000000000)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000070001"], 0x28}, 0x4004004)
socket$inet6_udp(0xa, 0x2, 0x0)

0s ago: executing program 5 (id=1114):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) (async)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff}}, 0x14)
sendto(r0, 0x0, 0x0, 0x40, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000300)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x0, 0x10001}]}, 0x10) (async)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000300)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x0, 0x10001}]}, 0x10)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000740)="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") (async)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000740)="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")
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x0, 0x10001}]}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000140)=0x2c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r7=>0x0})
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000280)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r8, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0)

kernel console output (not intermixed with test programs):

ce netdevsim3
[   93.513727][   T28] audit: type=1400 audit(1778241176.876:997): avc:  denied  { wake_alarm } for  pid=5189 comm="syz.4.480" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.516317][ T5185] loop0: detected capacity change from 0 to 2048
[   93.660359][ T5062] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.674231][ T5062] 8021q: adding VLAN 0 to HW filter on device team0
[   93.681177][ T5185]  loop0: p1 p3 p4
[   93.687636][ T5185] loop0: p1 size 67110656 extends beyond EOD, truncated
[   93.687913][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.695847][ T5185] loop0: p3 size 134217728 extends beyond EOD, 
[   93.701866][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.701888][ T5185] truncated
[   93.702749][ T5185] loop0: p4 size 4278190080 extends beyond EOD, truncated
[   93.721000][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.733794][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.768302][ T5180] __nla_validate_parse: 72 callbacks suppressed
[   93.768321][ T5180] netlink: 64 bytes leftover after parsing attributes in process `syz.0.478'.
[   93.859932][ T5195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'.
[   93.902040][ T2979]  loop0: p1 p3 p4
[   93.934942][ T2979] loop0: p1 size 67110656 extends beyond EOD, truncated
[   93.962275][ T5062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.009850][ T2979] loop0: p3 size 134217728 extends beyond EOD, truncated
[   94.032565][ T5062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.054140][ T2979] loop0: p4 size 4278190080 extends beyond EOD, truncated
[   94.381695][ T5212] loop0: detected capacity change from 0 to 512
[   94.521198][ T5212] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   94.535526][ T5218] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.578217][ T5218] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.614253][ T3302] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   94.648100][   T28] audit: type=1400 audit(1778241177.943:998): avc:  denied  { write } for  pid=5205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   94.720991][ T5218] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.725868][   T28] audit: type=1400 audit(1778241178.008:999): avc:  denied  { write } for  pid=5239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   94.795166][ T5218] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.821736][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7
[   94.879200][ T3457] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.889417][ T5062] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.941154][ T5245] vlan2: entered promiscuous mode
[   94.958726][ T5245] bridge0: entered promiscuous mode
[   94.989168][ T3457] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.023348][ T3457] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.047463][ T3457] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.085999][   T28] audit: type=1400 audit(1778241178.355:1000): avc:  denied  { write } for  pid=5247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.207222][   T28] audit: type=1400 audit(1778241178.457:1001): avc:  denied  { write } for  pid=5272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.488526][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8
[   95.497465][ T5277] loop5: detected capacity change from 0 to 1024
[   95.556517][ T5277] EXT4-fs: Ignoring removed bh option
[   95.624207][ T5277] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   95.735649][ T5277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.785996][ T5281] tipc: Started in network mode
[   95.793537][ T5281] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[   95.805321][ T5277] xt_hashlimit: size too large, truncated to 1048576
[   95.818045][ T5281] tipc: Enabled bearer <eth:batadv0>, priority 10
[   95.887101][   T28] audit: type=1400 audit(1778241179.103:1002): avc:  denied  { write } for  pid=5276 comm="syz.5.491" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.995957][ T5062] veth0_vlan: entered promiscuous mode
[   96.003107][   T28] audit: type=1400 audit(1778241179.131:1003): avc:  denied  { write } for  pid=5276 comm="syz.5.491" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   96.030777][ T5062] veth1_vlan: entered promiscuous mode
[   96.045328][ T5062] veth0_macvtap: entered promiscuous mode
[   96.069765][ T5062] veth1_macvtap: entered promiscuous mode
[   96.092629][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.111460][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.131564][  T117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.154641][ T3457] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.192535][ T3457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.224093][ T3457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.249668][ T5316] loop4: detected capacity change from 0 to 4096
[   96.286045][ T5322] syzkaller0: entered promiscuous mode
[   96.296117][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.303533][ T5322] syzkaller0: entered allmulticast mode
[   96.311314][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.346692][ T5316] EXT4-fs (loop4): shut down requested (1)
[   96.397379][ T5330] netlink: 32 bytes leftover after parsing attributes in process `syz.5.495'.
[   96.407550][ T5316] lo speed is unknown, defaulting to 1000
[   96.485725][   T28] audit: type=1400 audit(1778241179.655:1004): avc:  denied  { read } for  pid=5335 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.507283][ T5336] loop0: detected capacity change from 0 to 512
[   96.514407][   T28] audit: type=1400 audit(1778241179.655:1005): avc:  denied  { sqpoll } for  pid=5335 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   96.522885][ T5336] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.549168][ T5336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   96.549885][   T28] audit: type=1400 audit(1778241179.655:1006): avc:  denied  { map } for  pid=5335 comm="syz.0.497" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.558063][ T5336] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   96.591104][ T5336] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.497: Allocating blocks 41-42 which overlap fs metadata
[   96.592544][   T28] audit: type=1400 audit(1778241179.655:1007): avc:  denied  { read write } for  pid=5335 comm="syz.0.497" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.606945][ T5336] loop0: lost filesystem error report for type 5 error -117
[   96.631867][ T5336] EXT4-fs (loop0): Remounting filesystem read-only
[   96.645964][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   96.645985][    C1] EXT4-fs (loop0): initial error at time 1778241179: ext4_mb_mark_diskspace_used:4222
[   96.646010][    C1] EXT4-fs (loop0): last error at time 1778241179: ext4_mb_mark_diskspace_used:4222
[   96.672141][ T5336] Quota error (device loop0): write_blk: dquota write failed
[   96.679558][ T5336] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[   96.688846][ T5336] Quota error (device loop0): write_blk: dquota write failed
[   96.696534][ T5336] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   96.706812][ T5336] EXT4-fs (loop0): 1 truncate cleaned up
[   96.713786][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.747087][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.774497][   T28] audit: type=1326 audit(1778241179.927:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.1.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8bb3cdd9 code=0x0
[   96.807830][   T28] audit: type=1400 audit(1778241179.964:1009): avc:  denied  { shutdown } for  pid=5346 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   96.849194][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.950477][ T5360] syzkaller0: entered promiscuous mode
[   96.956538][ T5360] syzkaller0: entered allmulticast mode
[   96.967801][ T5360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.976094][ T5359] tipc: Resetting bearer <eth:syzkaller0>
[   96.989502][ T5359] tipc: Disabling bearer <eth:syzkaller0>
[   97.132536][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.507'.
[   97.135414][    C1] sd 0:0:1:0: [sda] tag#8154 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   97.151959][    C1] sd 0:0:1:0: [sda] tag#8154 CDB: Read(6) 08 00 bb bb bb bb aa aa aa aa aa bb
[   97.193538][ T5372] lo speed is unknown, defaulting to 1000
[   97.235216][ T5374] ip6tnl1: entered allmulticast mode
[   97.458896][ T5388] loop0: detected capacity change from 0 to 1764
[   98.490133][   T35] tipc: Node number set to 8432298
[   99.567334][ T5391] bond1: option min_links: invalid value (18446744073709551612)
[   99.580771][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.518'.
[   99.674342][ T5391] bond1: option min_links: allowed values 0 - 2147483647
[   99.689796][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.518'.
[   99.937416][ T5391] bond1 (unregistering): Released all slaves
[  100.013833][ T5404] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.045120][ T5418] netlink: 104 bytes leftover after parsing attributes in process `syz.1.521'.
[  100.117281][ T5407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.172629][ T5431] loop0: detected capacity change from 0 to 512
[  100.236397][ T5431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.253940][ T5431] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.282867][ T5443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'.
[  100.371059][ T5450] 9p: Bad value for 'rfdno'
[  100.416328][ T5459] 9p: Bad value for 'rfdno'
[  100.444712][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.454875][ T5407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.539397][ T5407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.622501][ T5407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.665324][ T5474] lo speed is unknown, defaulting to 1000
[  100.779144][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.786395][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.793649][ T5494] bridge0: entered allmulticast mode
[  100.801654][ T5494] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  100.820242][ T5494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.534'.
[  100.843918][ T3456] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.932137][ T3456] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.017908][ T3456] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.131350][ T5490] loop0: detected capacity change from 0 to 8192
[  101.146958][ T3456] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.341334][ T5496] loop4: detected capacity change from 0 to 1764
[  101.467920][ T5498] loop5: detected capacity change from 0 to 8192
[  101.530876][ T5504] netlink: 'syz.0.539': attribute type 3 has an invalid length.
[  101.661273][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.537'.
[  102.092814][ T5520] loop1: detected capacity change from 0 to 512
[  102.126489][ T5520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.149469][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  102.149518][   T28] audit: type=1400 audit(1778241184.961:1022): avc:  denied  { write } for  pid=5518 comm="syz.1.543" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  102.215921][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.263159][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[  102.488213][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.548'.
[  103.441410][ T5551] loop4: detected capacity change from 0 to 1024
[  103.448334][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.549'.
[  103.448691][ T5551] EXT4-fs: Ignoring removed orlov option
[  103.584833][ T5551] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  103.599685][ T5545] team0 (unregistering): Port device team_slave_0 removed
[  103.611626][ T5551] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.550: iget: bad extra_isize 8192 (inode size 256)
[  103.631184][ T5545] team0 (unregistering): Port device team_slave_1 removed
[  103.653219][ T5551] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  103.653417][ T5551] EXT4-fs (loop4): Remounting filesystem read-only
[  103.662628][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  103.662648][    C1] EXT4-fs (loop4): initial error at time 1778241186: __ext4_fill_super:5596: inode 2
[  103.662680][    C1] EXT4-fs (loop4): last error at time 1778241186: __ext4_fill_super:5596: inode 2
[  103.704415][ T5551] EXT4-fs (loop4): get root inode failed
[  103.712251][ T5552] team0 (unregistering): Port device team_slave_0 removed
[  103.720544][ T5551] EXT4-fs (loop4): mount failed
[  103.722616][ T5552] team0 (unregistering): Port device team_slave_1 removed
[  103.894602][ T5561] loop6: detected capacity change from 0 to 512
[  103.901449][ T5557] loop5: detected capacity change from 0 to 8192
[  103.910817][ T5561] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  103.986232][ T5561] EXT4-fs (loop6): 1 truncate cleaned up
[  104.004298][ T5561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.145181][ T4828] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  104.163011][ T4828] FAT-fs (loop5): Filesystem has been set read-only
[  104.322462][ T5571] loop5: detected capacity change from 0 to 8192
[  104.529777][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.542486][ T5582] netlink: 'syz.5.557': attribute type 1 has an invalid length.
[  104.568972][   T28] audit: type=1400 audit(102.721:1023): avc:  denied  { write } for  pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.649083][ T5590] loop6: detected capacity change from 0 to 256
[  104.665479][   T28] audit: type=1400 audit(102.759:1024): avc:  denied  { write } for  pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.696096][ T5582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.557'.
[  105.068327][ T5602] __nla_validate_parse: 67 callbacks suppressed
[  105.068422][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.562'.
[  106.052447][ T3385] IPVS: starting estimator thread 0...
[  106.062103][ T5626] netlink: 132 bytes leftover after parsing attributes in process `syz.5.569'.
[  106.074147][ T5619] bridge0: left allmulticast mode
[  106.098662][ T5630] loop0: detected capacity change from 0 to 128
[  106.109940][   T28] audit: type=1400 audit(104.172:1025): avc:  denied  { search } for  pid=5628 comm="syz.4.570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.110903][ T5631] loop4: detected capacity change from 0 to 128
[  106.141997][   T28] audit: type=1400 audit(104.172:1026): avc:  denied  { search } for  pid=5628 comm="syz.4.570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.172299][   T28] audit: type=1400 audit(104.172:1027): avc:  denied  { read } for  pid=5628 comm="syz.4.570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.173055][ T5627] IPVS: using max 2736 ests per chain, 136800 per kthread
[  106.193983][   T28] audit: type=1400 audit(104.172:1028): avc:  denied  { read open } for  pid=5628 comm="syz.4.570" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.222265][   T28] audit: type=1400 audit(104.191:1029): avc:  denied  { write } for  pid=5628 comm="syz.4.570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.250549][   T28] audit: type=1400 audit(104.200:1030): avc:  denied  { write } for  pid=5628 comm="syz.4.570" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.273290][   T28] audit: type=1400 audit(104.200:1031): avc:  denied  { add_name } for  pid=5628 comm="syz.4.570" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  106.327078][ T5619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.341668][ T5619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.379789][ T3456] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.390175][ T3456] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.399545][ T3456] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.412531][ T3456] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.424825][ T5637] xt_hashlimit: max too large, truncated to 1048576
[  106.570707][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'.
[  106.723923][ T5648] loop4: detected capacity change from 0 to 512
[  106.748457][ T5648] EXT4-fs: test_dummy_encryption option not supported
[  106.837350][ T5669] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  106.856882][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.879156][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.578'.
[  107.087303][ T5687] loop6: detected capacity change from 0 to 512
[  107.106802][ T5687] EXT4-fs: Ignoring removed bh option
[  107.127044][ T5687] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.138643][ T5687] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  107.175289][ T5687] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  107.201964][ T5687] EXT4-fs (loop6): orphan cleanup on readonly fs
[  107.211352][ T5676] 9pnet_fd: p9_fd_create_unix (5676): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  107.236327][ T5687] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.580: Failed to acquire dquot type 1
[  107.353417][ T5687] loop6: lost filesystem error report for type 5 error -5
[  107.353719][ T5687] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.580: Invalid block bitmap block 0 in block_group 0
[  107.360937][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  107.360961][    C1] EXT4-fs (loop6): last error at time 105: ext4_acquire_dquot:7034
[  107.390929][ T5687] loop6: lost filesystem error report for type 5 error -117
[  107.394138][ T5687] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.580: Invalid block bitmap block 0 in block_group 0
[  107.478301][ T5687] loop6: lost filesystem error report for type 5 error -117
[  107.478561][ T5687] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.580: Invalid block bitmap block 0 in block_group 0
[  107.503430][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  107.503448][   T28] audit: type=1400 audit(105.445:1039): avc:  denied  { write } for  pid=5692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.543763][ T5687] loop6: lost filesystem error report for type 5 error -117
[  107.544093][ T5687] Quota error (device loop6): write_blk: dquota write failed
[  107.581498][ T5687] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  107.600114][   T28] audit: type=1400 audit(105.557:1040): avc:  denied  { write } for  pid=5709 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.606766][ T5687] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.580: Failed to acquire dquot type 1
[  107.635383][ T5713] FAULT_INJECTION: forcing a failure.
[  107.635383][ T5713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.639904][ T3385] IPVS: starting estimator thread 0...
[  107.661534][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: syz.0.582 Not tainted syzkaller #0 PREEMPT(full) 
[  107.661564][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  107.661579][ T5713] Call Trace:
[  107.661586][ T5713]  <TASK>
[  107.661595][ T5713]  __dump_stack+0x1d/0x30
[  107.661625][ T5713]  dump_stack_lvl+0x95/0xd0
[  107.661718][ T5713]  dump_stack+0x15/0x1b
[  107.661739][ T5713]  should_fail_ex+0x263/0x280
[  107.661792][ T5713]  should_fail+0xb/0x20
[  107.661859][ T5713]  should_fail_usercopy+0x1a/0x20
[  107.661890][ T5713]  copy_folio_from_iter_atomic+0x24d/0x10b0
[  107.661961][ T5713]  ? shmem_write_begin+0xfc/0x1f0
[  107.661982][ T5713]  ? shmem_write_begin+0x135/0x1f0
[  107.662073][ T5713]  generic_perform_write+0x2c1/0x490
[  107.662173][ T5713]  shmem_file_write_iter+0xc5/0xf0
[  107.662199][ T5713]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  107.662228][ T5713]  vfs_write+0x5a6/0x9f0
[  107.662266][ T5713]  ksys_write+0xdc/0x1a0
[  107.662295][ T5713]  __x64_sys_write+0x40/0x50
[  107.662367][ T5713]  x64_sys_call+0x27e1/0x3020
[  107.662393][ T5713]  do_syscall_64+0x12c/0x3b0
[  107.662502][ T5713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.662527][ T5713] RIP: 0033:0x7f23bd77d60e
[  107.662544][ T5713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  107.662563][ T5713] RSP: 002b:00007f23bc1f5da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  107.662587][ T5713] RAX: ffffffffffffffda RBX: 00007f23bc1f66c0 RCX: 00007f23bd77d60e
[  107.662640][ T5713] RDX: 0000000000010000 RSI: 00007f23b3dd6000 RDI: 0000000000000005
[  107.662656][ T5713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  107.662669][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  107.662681][ T5713] R13: 00007f23bc1f5ee0 R14: 00007f23bc1f5ea0 R15: 00007f23b3dd6000
[  107.662725][ T5713]  </TASK>
[  107.721655][ T5687] loop6: lost filesystem error report for type 5 error -28
[  107.767512][ T5712] IPVS: using max 2640 ests per chain, 132000 per kthread
[  107.845192][ T5687] Quota error (device loop6): write_blk: dquota write failed
[  107.924607][ T5687] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  107.939712][ T5723] loop1: detected capacity change from 0 to 8192
[  107.947964][ T5687] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.580: Failed to acquire dquot type 1
[  107.980691][   T28] audit: type=1400 audit(105.922:1041): avc:  denied  { write } for  pid=5714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.005850][ T5687] loop6: lost filesystem error report for type 5 error -28
[  108.006102][ T5687] EXT4-fs (loop6): 1 orphan inode deleted
[  108.038031][ T5687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  108.083063][   T28] audit: type=1400 audit(106.006:1042): avc:  denied  { write } for  pid=5730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.129258][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.132077][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'.
[  108.260016][ T5734] netlink: 300 bytes leftover after parsing attributes in process `syz.5.587'.
[  108.314848][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.586'.
[  108.392525][   T28] audit: type=1400 audit(106.296:1043): avc:  denied  { write } for  pid=5735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.437196][   T28] audit: type=1400 audit(106.296:1044): avc:  denied  { write } for  pid=5758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.503124][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811aaaee00: rx timeout, send abort
[  108.541278][ T5755] loop6: detected capacity change from 0 to 512
[  108.642423][ T5784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.594'.
[  108.648449][ T5755] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  108.673472][ T5783] loop5: detected capacity change from 0 to 512
[  108.687470][ T5755] EXT4-fs (loop6): invalid journal inode
[  108.709582][ T5755] EXT4-fs (loop6): can't get journal size
[  108.712869][ T5783] EXT4-fs: error -4 creating inode table initialization thread
[  108.730251][ T5783] EXT4-fs (loop5): mount failed
[  108.738590][ T5797] loop0: detected capacity change from 0 to 512
[  108.771398][ T5797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.801498][ T5755] EXT4-fs (loop6): orphan cleanup on readonly fs
[  108.831554][ T5755] EXT4-fs (loop6): 1 truncate cleaned up
[  108.857152][ T5755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  108.893221][ T5812] loop5: detected capacity change from 0 to 1764
[  108.999501][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.035615][    C1] vcan0: j1939_tp_rxtimer: 0xffff888123a41a00: rx timeout, send abort
[  109.048071][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811aaaee00: abort rx timeout. Force session deactivation
[  109.194637][ T5821] 8021q: adding VLAN 0 to HW filter on device eth0
[  109.206110][ T5821] 8021q: adding VLAN 0 to HW filter on device eth1
[  109.216892][ T5821] 8021q: adding VLAN 0 to HW filter on device eth2
[  109.229103][ T5821] 8021q: adding VLAN 0 to HW filter on device eth3
[  109.460873][ T5823] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.597: iget: bad i_size value: 2533274857506816
[  109.578291][    C1] vcan0: j1939_tp_rxtimer: 0xffff888123a41a00: abort rx timeout. Force session deactivation
[  109.664307][ T5823] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.597: iget: bad i_size value: 2533274857506816
[  109.664614][ T3297] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  109.689217][ T3297] FAT-fs (loop1): Filesystem has been set read-only
[  109.727791][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.873186][ T5842] lo speed is unknown, defaulting to 1000
[  109.892688][ T5844] netlink: 'syz.6.605': attribute type 29 has an invalid length.
[  109.932726][ T5844] netlink: 'syz.6.605': attribute type 29 has an invalid length.
[  110.263253][ T5860] loop6: detected capacity change from 0 to 128
[  110.959778][ T5885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.028566][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.291699][ T5908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58640 sclass=netlink_route_socket pid=5908 comm=syz.5.615
[  111.305865][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.615'.
[  111.315218][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'.
[  111.362344][ T5911] netlink: 'syz.5.615': attribute type 4 has an invalid length.
[  111.410519][ T5911] netlink: 152 bytes leftover after parsing attributes in process `syz.5.615'.
[  112.363391][ T5911] .`: renamed from bond0
[  112.523918][ T5908] syz.5.615(5908): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  112.594900][ T5908] geneve1: entered promiscuous mode
[  112.685784][ T5921] netlink: 'syz.6.618': attribute type 3 has an invalid length.
[  112.731119][ T5921] netlink: 84 bytes leftover after parsing attributes in process `syz.6.618'.
[  112.771164][ T5921] netlink: 84 bytes leftover after parsing attributes in process `syz.6.618'.
[  112.860548][ T5923] set_capacity_and_notify: 2 callbacks suppressed
[  112.860597][ T5923] loop5: detected capacity change from 0 to 8192
[  113.022415][ T5926] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.122302][ T5926] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.197786][ T5926] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.293458][ T5926] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.366441][  T117] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.396616][  T117] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.427220][  T117] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.463623][  T117] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.618585][ T5949] syzkaller0: entered promiscuous mode
[  114.637927][ T5949] syzkaller0: entered allmulticast mode
[  114.809829][ T5953] rdma_rxe: rxe_newlink: failed to add lo
[  114.894373][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'.
[  114.959075][   T28] kauditd_printk_skb: 48 callbacks suppressed
[  114.959091][   T28] audit: type=1400 audit(112.444:1093): avc:  denied  { mount } for  pid=5950 comm="syz.6.631" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  115.029290][ T5962] Driver unsupported XDP return value 0 on prog  (id 175) dev N/A, expect packet loss!
[  115.184808][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  115.389740][ T5943] loop5: detected capacity change from 0 to 4096
[  115.425919][ T5943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.441764][ T5962] syzkaller0: entered promiscuous mode
[  115.448424][ T5962] syzkaller0: entered allmulticast mode
[  115.459271][ T5943] EXT4-fs (loop5): shut down requested (1)
[  115.538292][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'.
[  115.620277][ T5978] loop1: detected capacity change from 0 to 1764
[  115.673699][ T5943] lo speed is unknown, defaulting to 1000
[  115.706841][   T28] audit: type=1400 audit(113.146:1094): avc:  denied  { unmount } for  pid=5062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  115.769671][   T28] audit: type=1400 audit(113.184:1095): avc:  denied  { read } for  pid=5979 comm="syz.6.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  115.830333][   T28] audit: type=1400 audit(113.184:1096): avc:  denied  { ioctl } for  pid=5979 comm="syz.6.639" path="socket:[14585]" dev="sockfs" ino=14585 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  115.910957][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.118254][ T5999] xt_hashlimit: size too large, truncated to 1048576
[  117.358351][ T6008] netlink: 40 bytes leftover after parsing attributes in process `syz.6.647'.
[  117.394525][ T6008] netlink: 40 bytes leftover after parsing attributes in process `syz.6.647'.
[  117.486287][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.648'.
[  117.671367][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.648'.
[  118.747033][ T6020] netlink: 248 bytes leftover after parsing attributes in process `syz.6.651'.
[  120.081152][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[  120.121759][ T6041] loop4: detected capacity change from 0 to 128
[  120.143609][   T28] audit: type=1400 audit(117.301:1097): avc:  denied  { append } for  pid=6037 comm="syz.4.657" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  120.180077][ T6045] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  120.328443][ T6047] loop6: detected capacity change from 0 to 512
[  120.339527][ T6047] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  120.352433][ T6047] EXT4-fs (loop6): invalid journal inode
[  120.359658][ T6047] EXT4-fs (loop6): can't get journal size
[  120.592687][ T6047] EXT4-fs (loop6): orphan cleanup on readonly fs
[  120.648357][ T6047] EXT4-fs (loop6): 1 truncate cleaned up
[  120.729641][ T6047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  120.886073][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.069068][ T6063] Cannot find add_set index 0 as target
[  121.103213][ T6063] loop0: detected capacity change from 0 to 256
[  122.001250][ T6065] loop5: detected capacity change from 0 to 1764
[  122.143762][ T6065] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  122.153408][ T6065] isofs_fill_super: get root inode failed
[  122.422605][  T117] kworker/u8:5: attempt to access beyond end of device
[  122.422605][  T117] loop4: rw=1, sector=145, nr_sectors = 6 limit=128
[  123.196540][ T6063] FAT-fs (loop0): Directory bread(block 64) failed
[  123.203565][ T6063] FAT-fs (loop0): Directory bread(block 65) failed
[  123.210263][ T6063] FAT-fs (loop0): Directory bread(block 66) failed
[  123.216986][ T6063] FAT-fs (loop0): Directory bread(block 67) failed
[  123.223601][ T6063] FAT-fs (loop0): Directory bread(block 68) failed
[  123.230333][ T6063] FAT-fs (loop0): Directory bread(block 69) failed
[  123.237150][ T6063] FAT-fs (loop0): Directory bread(block 70) failed
[  123.243924][ T6063] FAT-fs (loop0): Directory bread(block 71) failed
[  123.250988][ T6063] FAT-fs (loop0): Directory bread(block 72) failed
[  123.257880][ T6063] FAT-fs (loop0): Directory bread(block 73) failed
[  123.531687][   T28] audit: type=1400 audit(120.464:1098): avc:  denied  { write } for  pid=6075 comm="syz.4.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  123.934726][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'.
[  124.261757][ T6077] veth5: entered allmulticast mode
[  124.293395][ T6081] lo speed is unknown, defaulting to 1000
[  124.299938][ T6086] loop5: detected capacity change from 0 to 164
[  124.318189][ T6085] loop6: detected capacity change from 0 to 1764
[  124.331542][ T6086] ISOFS: unable to read i-node block
[  124.345676][ T6086] isofs_fill_super: get root inode failed
[  124.590454][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'.
[  124.664653][ T6108] kernel profiling enabled (shift: 9)
[  124.689898][ T6114] FAULT_INJECTION: forcing a failure.
[  124.689898][ T6114] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  124.703440][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.5.682 Not tainted syzkaller #0 PREEMPT(full) 
[  124.703545][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  124.703560][ T6114] Call Trace:
[  124.703568][ T6114]  <TASK>
[  124.703578][ T6114]  __dump_stack+0x1d/0x30
[  124.703604][ T6114]  dump_stack_lvl+0x95/0xd0
[  124.703677][ T6114]  dump_stack+0x15/0x1b
[  124.703690][ T6114]  should_fail_ex+0x263/0x280
[  124.703715][ T6114]  should_fail_alloc_page+0xf2/0x100
[  124.703738][ T6114]  __alloc_frozen_pages_noprof+0x108/0x350
[  124.703807][ T6114]  alloc_pages_mpol+0xb3/0x260
[  124.703824][ T6114]  folio_alloc_mpol_noprof+0x39/0x80
[  124.703840][ T6114]  shmem_get_folio_gfp+0x3da/0xd60
[  124.703875][ T6114]  shmem_write_begin+0xfc/0x1f0
[  124.703891][ T6114]  generic_perform_write+0x183/0x490
[  124.703963][ T6114]  shmem_file_write_iter+0xc5/0xf0
[  124.704118][ T6114]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  124.704136][ T6114]  vfs_write+0x5a6/0x9f0
[  124.704189][ T6114]  ksys_write+0xdc/0x1a0
[  124.704209][ T6114]  __x64_sys_write+0x40/0x50
[  124.704227][ T6114]  x64_sys_call+0x27e1/0x3020
[  124.704244][ T6114]  do_syscall_64+0x12c/0x3b0
[  124.704371][ T6114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.704387][ T6114] RIP: 0033:0x7f1631fbd60e
[  124.704400][ T6114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  124.704414][ T6114] RSP: 002b:00007f1630a35da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.704464][ T6114] RAX: ffffffffffffffda RBX: 00007f1630a366c0 RCX: 00007f1631fbd60e
[  124.704474][ T6114] RDX: 0000000000010000 RSI: 00007f1628616000 RDI: 0000000000000005
[  124.704514][ T6114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.704522][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  124.704559][ T6114] R13: 00007f1630a35ee0 R14: 00007f1630a35ea0 R15: 00007f1628616000
[  124.704572][ T6114]  </TASK>
[  124.991370][ T6123] loop1: detected capacity change from 0 to 1024
[  124.999455][ T6123] EXT4-fs: test_dummy_encryption option not supported
[  127.183810][   T28] audit: type=1400 audit(123.879:1099): avc:  denied  { read } for  pid=6147 comm="syz.0.694" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  127.218170][ T6152] loop1: detected capacity change from 0 to 256
[  127.241575][ T6145] loop4: detected capacity change from 0 to 512
[  127.252324][ T6152] vfat: Unknown parameter '�����������������������������(��HVE[*�UbCJ�'
[  127.263470][   T28] audit: type=1400 audit(123.879:1100): avc:  denied  { open } for  pid=6147 comm="syz.0.694" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  127.294195][ T6145] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  127.306531][ T6145] EXT4-fs (loop4): invalid journal inode
[  127.316691][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'.
[  127.317830][ T6145] EXT4-fs (loop4): can't get journal size
[  127.335050][ T6145] EXT4-fs (loop4): orphan cleanup on readonly fs
[  127.351396][ T6145] EXT4-fs (loop4): 1 truncate cleaned up
[  127.368975][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'.
[  127.394779][ T6145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  127.567760][ T6162] loop5: detected capacity change from 0 to 512
[  127.581915][ T6162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  127.598664][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.662157][ T6162] EXT4-fs (loop5): 1 orphan inode deleted
[  127.676332][ T6162] EXT4-fs (loop5): 1 truncate cleaned up
[  127.704773][ T6162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.732908][ T6162] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.698: path /58/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  127.754998][ T6162] EXT4-fs (loop5): Remounting filesystem read-only
[  127.771461][ T6171] syzkaller0: entered promiscuous mode
[  127.777794][ T6171] syzkaller0: entered allmulticast mode
[  127.839342][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.884885][ T6175] loop1: detected capacity change from 0 to 2048
[  127.911350][ T6182] loop5: detected capacity change from 0 to 2048
[  127.930194][ T6175]  loop1: p1 p3 p4
[  127.942745][ T6182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.956383][ T6175] loop1: p1 size 67110656 extends beyond EOD, truncated
[  128.016060][ T6175] loop1: p3 size 134217728 extends beyond EOD, truncated
[  128.023812][ T6175] loop1: p4 size 4278190080 extends beyond EOD, truncated
[  128.036789][ T6174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.702'.
[  128.054715][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  128.071767][   T28] audit: type=1400 audit(124.712:1101): avc:  denied  { write } for  pid=6180 comm="syz.5.705" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.119641][   T28] audit: type=1400 audit(124.721:1102): avc:  denied  { write } for  pid=6180 comm="syz.5.705" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  129.160098][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.393707][ T6202] loop5: detected capacity change from 0 to 1764
[  129.626409][ T6211] lo speed is unknown, defaulting to 1000
[  129.646463][ T6214] loop1: detected capacity change from 0 to 2048
[  129.670729][   T28] audit: type=1400 audit(126.209:1103): avc:  denied  { create } for  pid=6215 comm="syz.6.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  129.725383][ T6214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.779995][ T6214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.037655][ T6225] loop6: detected capacity change from 0 to 128
[  132.274868][   T28] audit: type=1400 audit(128.652:1104): avc:  denied  { append } for  pid=6239 comm="syz.4.724" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  132.281040][ T6240] loop4: detected capacity change from 0 to 1024
[  132.305418][ T6240] EXT4-fs: test_dummy_encryption option not supported
[  132.326726][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.752732][ T6245] loop4: detected capacity change from 0 to 512
[  133.911601][ T6245] EXT4-fs (loop4): 1 orphan inode deleted
[  133.927332][ T6245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.380863][ T6254] loop1: detected capacity change from 0 to 1024
[  134.450016][  T838] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  134.485752][   T28] audit: type=1400 audit(130.701:1105): avc:  denied  { associate } for  pid=6247 comm="syz.1.725" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  134.554636][  T838] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1
[  135.333861][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.706025][   T28] audit: type=1400 audit(131.862:1106): avc:  denied  { read } for  pid=6276 comm="syz.6.731" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  135.777961][   T28] audit: type=1400 audit(131.862:1107): avc:  denied  { open } for  pid=6276 comm="syz.6.731" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  136.505811][ T6266] vlan2: left promiscuous mode
[  136.512436][ T6266] geneve1: left promiscuous mode
[  136.526735][ T6266] vlan2: left allmulticast mode
[  136.540239][ T6266] geneve1: left allmulticast mode
[  136.556179][ T3456] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.568482][ T3456] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.578491][ T3456] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.590958][ T3456] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.638368][ T6302] syzkaller0: entered promiscuous mode
[  136.662700][ T6302] syzkaller0: entered allmulticast mode
[  136.710339][ T6302] tipc: Started in network mode
[  136.732288][ T6304] loop1: detected capacity change from 0 to 8192
[  136.733520][ T6302] tipc: Node identity 2aabcfe76127, cluster identity 4711
[  136.746242][ T6302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.813432][ T6301] tipc: Resetting bearer <eth:syzkaller0>
[  136.814869][ T6306] loop4: detected capacity change from 0 to 512
[  136.847088][ T6301] tipc: Disabling bearer <eth:syzkaller0>
[  136.872020][ T6306] EXT4-fs: Ignoring removed bh option
[  136.882990][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'.
[  136.895135][ T6306] EXT4-fs: Ignoring removed mblk_io_submit option
[  136.916381][ T6306] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  136.932911][ T6306] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  136.941913][ T6306] EXT4-fs (loop4): orphan cleanup on readonly fs
[  136.965972][ T6306] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4
[  136.970067][ T6313] netlink: 'syz.6.739': attribute type 1 has an invalid length.
[  136.993765][ T6306] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  137.007977][ T6306] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.737: Failed to acquire dquot type 1
[  137.027536][ T6306] loop4: lost filesystem error report for type 5 error -5
[  137.034218][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  137.050257][    C0] EXT4-fs (loop4): last error at time 133: ext4_acquire_dquot:7034
[  137.069121][ T6313] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.070967][ T6306] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.737: Invalid block bitmap block 0 in block_group 0
[  137.091495][ T6306] loop4: lost filesystem error report for type 5 error -117
[  137.095415][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'.
[  137.099919][ T6306] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.737: Invalid block bitmap block 0 in block_group 0
[  137.118287][ T6318] tipc: Started in network mode
[  137.129292][ T6306] loop4: lost filesystem error report for type 5 error -117
[  137.136500][ T6318] tipc: Node identity 7, cluster identity 4711
[  137.155999][ T6306] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.737: Invalid block bitmap block 0 in block_group 0
[  137.176773][ T6318] tipc: Node number set to 7
[  137.181663][ T6306] loop4: lost filesystem error report for type 5 error -117
[  137.189267][ T6319] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.205068][ T6319] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  137.212972][ T6306] Quota error (device loop4): write_blk: dquota write failed
[  137.235584][ T6319] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  137.247789][ T6326] loop1: detected capacity change from 0 to 1764
[  137.267886][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.276880][ T6306] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  137.277094][ T6306] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.737: Failed to acquire dquot type 1
[  137.333311][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.362783][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.395899][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.405349][ T6306] loop4: lost filesystem error report for type 5 error -28
[  137.429018][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.458111][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.471327][ T6306] Quota error (device loop4): write_blk: dquota write failed
[  137.488136][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.491728][ T6306] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  137.497739][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.739'.
[  137.595257][   T28] audit: type=1400 audit(133.612:1108): avc:  denied  { getopt } for  pid=6325 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.664053][ T6306] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.737: Failed to acquire dquot type 1
[  137.691066][ T6334] xt_TPROXY: Can be used only with -p tcp or -p udp
[  137.756835][ T6306] loop4: lost filesystem error report for type 5 error -28
[  137.771178][ T6306] EXT4-fs (loop4): 1 orphan inode deleted
[  137.943891][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.047140][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.070406][ T6306] syz.4.737 (6306) used greatest stack depth: 7488 bytes left
[  138.314804][ T6341] loop1: detected capacity change from 0 to 8192
[  138.370406][ T6349] loop1: detected capacity change from 0 to 512
[  138.379680][ T6347] loop4: detected capacity change from 0 to 512
[  138.386184][ T6349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.405327][ T6349] EXT4-fs (loop1): 1 truncate cleaned up
[  138.411634][ T6349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.436763][ T6347] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  138.453497][   T28] audit: type=1400 audit(134.426:1109): avc:  denied  { write } for  pid=6348 comm="syz.1.752" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  138.492962][ T6347] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  138.506612][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.529869][ T6347] EXT4-fs (loop4): failed to initialize system zone (-117)
[  138.552940][ T6347] EXT4-fs (loop4): mount failed
[  138.593953][ T6353] loop1: detected capacity change from 0 to 512
[  138.613941][ T6353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.650770][ T6353] EXT4-fs (loop1): 1 orphan inode deleted
[  138.656729][ T6353] EXT4-fs (loop1): 1 truncate cleaned up
[  138.668110][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.693767][ T6353] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.1.753: path /136/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  138.726174][ T6353] EXT4-fs (loop1): Remounting filesystem read-only
[  138.770910][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.881647][ T6367] loop1: detected capacity change from 0 to 512
[  138.912395][ T6367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.934468][ T6371] ext4: Unknown parameter 'noacl'
[  139.067821][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.235637][ T6383] xt_hashlimit: max too large, truncated to 1048576
[  139.479250][ T6381] set_capacity_and_notify: 1 callbacks suppressed
[  139.479269][ T6381] loop1: detected capacity change from 0 to 8192
[  139.507072][ T6386] loop0: detected capacity change from 0 to 512
[  140.164759][ T6386] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.202231][ T6386] EXT4-fs (loop0): 1 orphan inode deleted
[  140.347849][ T6386] EXT4-fs (loop0): 1 truncate cleaned up
[  140.376628][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.453093][ T6386] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.766: path /164/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  140.556763][ T6386] EXT4-fs (loop0): Remounting filesystem read-only
[  140.578838][ T6411] loop1: detected capacity change from 0 to 1764
[  140.972370][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.806492][ T6430] loop6: detected capacity change from 0 to 512
[  141.843884][ T6430] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #16: comm syz.6.780: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  141.916283][ T6439] lo: Caught tx_queue_len zero misconfig
[  141.923793][ T6430] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  141.924038][ T6430] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.780: couldn't read orphan inode 16 (err -117)
[  141.933314][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  141.933336][    C1] EXT4-fs (loop6): initial error at time 137: ext4_ext_check_inode:521: inode 16
[  141.933367][    C1] EXT4-fs (loop6): last error at time 137: ext4_ext_check_inode:521: inode 16
[  141.998187][ T6442] bridge0: entered promiscuous mode
[  142.007953][ T6442] bridge0: entered allmulticast mode
[  142.021313][ T6430] loop6: lost filesystem error report for type 5 error -117
[  142.021958][ T6430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.050655][ T6437] loop5: detected capacity change from 0 to 8192
[  142.117844][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  142.117864][   T28] audit: type=1400 audit(137.860:1115): avc:  denied  { write } for  pid=6429 comm="syz.6.780" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.118003][ T6430] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.780: corrupted inode contents
[  142.129130][   T28] audit: type=1400 audit(137.860:1116): avc:  denied  { link } for  pid=6429 comm="syz.6.780" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  142.213884][ T6430] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #3: comm syz.6.780: mark_inode_dirty error
[  142.262399][ T6430] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.780: corrupted inode contents
[  142.301110][ T6430] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.780: mark_inode_dirty error
[  142.310273][ T6450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.339464][ T6430] Quota error (device loop6): write_blk: dquota write failed
[  142.346373][ T6450] smc: net device bond0 applied user defined pnetid SYZ0
[  142.364083][ T6430] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  142.393732][ T6430] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.780: Failed to acquire dquot type 0
[  142.453541][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.520505][   T28] audit: type=1400 audit(138.225:1117): avc:  denied  { bind } for  pid=6461 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  142.563294][ T6460] loop0: detected capacity change from 0 to 8192
[  142.563356][ T6458] loop5: detected capacity change from 0 to 8192
[  142.609676][ T6460] netlink: 'syz.0.790': attribute type 7 has an invalid length.
[  142.672091][ T6462] xt_CT: You must specify a L4 protocol and not use inversions on it
[  142.702142][ T6462] loop6: detected capacity change from 0 to 512
[  142.767973][ T6462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.792886][   T28] audit: type=1400 audit(138.487:1118): avc:  denied  { write } for  pid=6461 comm="syz.6.791" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.848208][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  142.870057][ T3302] FAT-fs (loop0): Filesystem has been set read-only
[  142.877642][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.889506][   T28] audit: type=1400 audit(138.525:1119): avc:  denied  { read write } for  pid=6461 comm="syz.6.791" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  143.916348][   T28] audit: type=1400 audit(138.525:1120): avc:  denied  { open } for  pid=6461 comm="syz.6.791" path="/62/bus/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  147.977724][ T6488] loop0: detected capacity change from 0 to 256
[  148.000852][ T6484] loop5: detected capacity change from 0 to 8192
[  148.018671][ T6488] __nla_validate_parse: 63 callbacks suppressed
[  148.018691][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'.
[  148.138975][ T6490] tmpfs: Unknown parameter '�
F�.�'
[  148.247076][ T6497] loop5: detected capacity change from 0 to 1024
[  148.278823][ T6497] EXT4-fs: Ignoring removed orlov option
[  148.303395][ T6497] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  148.347391][ T6497] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  148.381561][ T6497] EXT4-fs (loop5): orphan cleanup on readonly fs
[  148.408462][ T6497] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.801: Invalid inode table block 0 in block_group 0
[  148.455226][ T6497] loop5: lost filesystem error report for type 5 error -117
[  148.455374][ T6497] EXT4-fs (loop5): Remounting filesystem read-only
[  148.462755][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  148.462795][    C0] EXT4-fs (loop5): initial error at time 143: __ext4_get_inode_loc:4885
[  148.462836][    C0] EXT4-fs (loop5): last error at time 143: __ext4_get_inode_loc:4885
[  148.588193][ T6490] loop0: detected capacity change from 0 to 1024
[  148.607491][ T6497] Quota error (device loop5): write_blk: dquota write failed
[  148.628537][ T6490] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  148.650666][ T6497] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  148.673293][ T6490] JBD2: no valid journal superblock found
[  148.684088][ T6497] EXT4-fs (loop5): 1 truncate cleaned up
[  148.694107][ T6490] EXT4-fs (loop0): Could not load journal inode
[  148.738260][ T6497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  148.838893][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.032914][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.805'.
[  150.064769][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'.
[  150.094001][   T28] audit: type=1400 audit(145.328:1121): avc:  denied  { connect } for  pid=6514 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  150.121142][ T6490] loop0: detected capacity change from 0 to 512
[  150.135558][ T6515] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  150.340510][ T6522] loop5: detected capacity change from 0 to 8192
[  150.354082][   T30] Bluetooth: hci0: Frame reassembly failed (-84)
[  150.369752][ T6490] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  150.418193][ T6490] EXT4-fs (loop0): orphan cleanup on readonly fs
[  150.449847][ T6490] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.800: Allocating blocks 41-42 which overlap fs metadata
[  150.485559][ T6530] loop5: detected capacity change from 0 to 512
[  150.492315][ T6490] loop0: lost filesystem error report for type 5 error -117
[  150.492953][ T6490] Quota error (device loop0): write_blk: dquota write failed
[  150.500583][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  150.500617][    C0] EXT4-fs (loop0): initial error at time 145: ext4_mb_mark_diskspace_used:4222
[  150.500652][    C0] EXT4-fs (loop0): last error at time 145: ext4_mb_mark_diskspace_used:4222
[  150.535964][ T6530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  150.564916][ T6530] EXT4-fs (loop5): 1 orphan inode deleted
[  150.572572][ T6530] EXT4-fs (loop5): 1 truncate cleaned up
[  150.578920][ T6490] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  150.591186][ T6530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.604802][ T6490] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.800: Failed to acquire dquot type 0
[  150.618614][ T6530] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.811: path /78/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  150.640553][ T6490] loop0: lost filesystem error report for type 5 error -117
[  150.641148][ T6490] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  150.664414][ T6530] EXT4-fs (loop5): Remounting filesystem read-only
[  150.671458][ T6490] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.800: corrupted inode contents
[  150.685755][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.688785][ T6490] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.800: mark_inode_dirty error
[  150.729774][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.735416][ T6490] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.800: corrupted inode contents
[  150.775685][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.777307][ T6490] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.800: mark_inode_dirty error
[  150.802135][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.803359][ T6490] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.800: corrupted inode contents
[  150.827545][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.837022][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.845276][ T6490] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  150.865441][ T6490] loop0: lost filesystem error report for type 5 error -117
[  150.866012][ T6490] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.800: corrupted inode contents
[  150.889385][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.889772][ T6490] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.800: mark_inode_dirty error
[  150.916067][ T6490] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.917221][ T6490] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  150.951707][ T6490] loop0: lost filesystem error report for type 5 error -117
[  150.953056][ T6490] EXT4-fs (loop0): 1 truncate cleaned up
[  150.968362][ T6490] EXT4-fs (loop0): pa ffff888107153850: logic 1, phys. 41, len 23
[  150.976322][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'.
[  150.976642][ T6490] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23
[  151.004747][ T6490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  151.050063][ T6547] loop6: detected capacity change from 0 to 256
[  151.075582][ T6549] netlink: 'syz.5.819': attribute type 29 has an invalid length.
[  151.091435][ T6547] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.104186][ T6549] netlink: 'syz.5.819': attribute type 29 has an invalid length.
[  151.114562][ T6547] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.127836][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'.
[  151.188471][ T6553] loop5: detected capacity change from 0 to 1764
[  151.264740][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.315329][ T6555] loop4: detected capacity change from 0 to 8192
[  151.441048][ T6561] 8021q: adding VLAN 0 to HW filter on device .`
[  151.474784][ T6561] 8021q: adding VLAN 0 to HW filter on device eth0
[  151.483820][ T6561] 8021q: adding VLAN 0 to HW filter on device eth1
[  151.497354][ T6561] 8021q: adding VLAN 0 to HW filter on device eth2
[  151.510275][ T6561] 8021q: adding VLAN 0 to HW filter on device eth3
[  152.344148][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'.
[  152.477970][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.484265][ T6525] Bluetooth: hci0: command 0x1003 tx timeout
[  153.502827][ T6566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.825'.
[  153.619675][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.826'.
[  153.697099][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.826'.
[  154.017660][ T6582] 
: renamed from bond0 (while UP)
[  154.066360][ T6582] batadv0: entered promiscuous mode
[  154.173286][ T6582] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  154.204251][ T6590] xt_TPROXY: Can be used only with -p tcp or -p udp
[  154.277436][ T6582] batadv0: left promiscuous mode
[  154.330839][ T6591] loop6: detected capacity change from 0 to 512
[  154.386264][ T6591] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  154.496718][ T6589] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  154.616779][ T6597] sctp: [Deprecated]: syz.1.832 (pid 6597) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.616779][ T6597] Use struct sctp_sack_info instead
[  154.635216][ T6596] rdma_rxe: rxe_newlink: failed to add lo
[  154.658059][ T6599] loop5: detected capacity change from 0 to 512
[  154.665039][ T6599] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  154.776185][ T6602] loop4: detected capacity change from 0 to 4096
[  154.776777][ T6601] loop1: detected capacity change from 0 to 8192
[  154.794643][ T6602] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  154.815893][ T6603] loop5: detected capacity change from 0 to 4096
[  154.830136][ T6603] EXT4-fs: Ignoring removed nomblk_io_submit option
[  154.922577][ T4684] udevd[4684]: incorrect ext4 checksum on /dev/loop4
[  154.961374][ T6603] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  156.109436][ T6603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.235606][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.840'.
[  156.695641][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'.
[  156.706418][   T28] audit: type=1400 audit(151.448:1122): avc:  denied  { write } for  pid=6598 comm="syz.5.835" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  157.313096][ T6634] loop0: detected capacity change from 0 to 128
[  157.458710][   T28] audit: type=1400 audit(152.215:1123): avc:  denied  { write } for  pid=6598 comm="syz.5.835" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  158.308973][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.390366][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.851'.
[  158.496678][ T6662] loop0: detected capacity change from 0 to 128
[  158.587497][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.854'.
[  158.655381][   T28] audit: type=1326 audit(153.338:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8bb3cdd9 code=0x0
[  159.891657][ T6672] loop1: detected capacity change from 0 to 164
[  159.943637][ T6672] ISOFS: unable to read i-node block
[  160.007938][ T6672] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  160.246803][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[  160.377381][ T6684] netlink: 'syz.1.859': attribute type 10 has an invalid length.
[  160.424211][ T6684] netlink: 'syz.1.859': attribute type 10 has an invalid length.
[  160.482503][ T6684] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  161.027235][ T6697] lo speed is unknown, defaulting to 1000
[  161.539903][   T28] audit: type=1400 audit(156.033:1125): avc:  denied  { firmware_load } for  pid=6705 comm="syz.6.866" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  161.600553][   T28] audit: type=1400 audit(156.033:1126): avc:  denied  { open } for  pid=6712 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  161.643307][   T28] audit: type=1400 audit(156.033:1127): avc:  denied  { kernel } for  pid=6712 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  161.731093][   T28] audit: type=1400 audit(156.071:1128): avc:  denied  { create } for  pid=6712 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  161.755451][   T28] audit: type=1400 audit(156.127:1129): avc:  denied  { write } for  pid=6712 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  161.928169][ T6718] loop1: detected capacity change from 0 to 512
[  161.963655][ T6718] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  162.982860][   T28] audit: type=1400 audit(156.501:1130): avc:  denied  { write } for  pid=6719 comm="syz.5.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  163.013242][ T6718] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  163.100223][ T6718] EXT4-fs (loop1): failed to initialize system zone (-117)
[  163.110666][ T6718] EXT4-fs (loop1): mount failed
[  163.132608][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'.
[  163.419853][ T6736] netlink: 248 bytes leftover after parsing attributes in process `syz.0.876'.
[  163.784309][   T28] audit: type=1400 audit(158.139:1131): avc:  denied  { create } for  pid=6752 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.889505][   T28] audit: type=1400 audit(158.167:1132): avc:  denied  { prog_load } for  pid=6752 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  163.971271][   T28] audit: type=1400 audit(158.167:1133): avc:  denied  { bpf } for  pid=6752 comm="syz.5.879" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  163.973576][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'.
[  163.998594][   T28] audit: type=1400 audit(158.176:1134): avc:  denied  { perfmon } for  pid=6752 comm="syz.5.879" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  164.034060][ T6766] loop4: detected capacity change from 0 to 512
[  164.050305][ T6766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  164.066769][   T28] audit: type=1400 audit(158.186:1135): avc:  denied  { allowed } for  pid=6752 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  164.088821][   T28] audit: type=1400 audit(158.195:1136): avc:  denied  { read write } for  pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.112769][   T28] audit: type=1400 audit(158.195:1137): avc:  denied  { open } for  pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.144446][   T28] audit: type=1400 audit(158.195:1138): avc:  denied  { ioctl } for  pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.250611][   T28] audit: type=1400 audit(158.195:1139): avc:  denied  { create } for  pid=6752 comm="syz.5.879" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  164.343632][ T6766] EXT4-fs (loop4): 1 orphan inode deleted
[  164.349654][ T6766] EXT4-fs (loop4): 1 truncate cleaned up
[  164.372588][ T6766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.445332][ T6766] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.4.882: path /152/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  164.470336][ T6766] EXT4-fs (loop4): Remounting filesystem read-only
[  164.552810][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.722838][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  166.089782][ T6807] Cannot find add_set index 0 as target
[  166.563790][ T3456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  166.594823][ T3456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  166.625195][ T3456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  166.651529][ T3456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  166.833593][ T6838] netlink: 'syz.6.907': attribute type 29 has an invalid length.
[  166.859348][ T6838] netlink: 'syz.6.907': attribute type 29 has an invalid length.
[  166.937980][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'.
[  166.960818][ T6840] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.908'.
[  167.201934][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'.
[  167.210856][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.914'.
[  167.219770][ T6856] netlink: 'syz.6.914': attribute type 14 has an invalid length.
[  167.240711][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.914'.
[  168.349921][ T6862] No such timeout policy "syz1"
[  168.360859][   T28] kauditd_printk_skb: 67 callbacks suppressed
[  168.360878][   T28] audit: type=1400 audit(162.417:1207): avc:  denied  { unmount } for  pid=5062 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  168.449532][ T6866] loop6: detected capacity change from 0 to 128
[  168.471533][   T28] audit: type=1400 audit(162.445:1208): avc:  denied  { create } for  pid=6861 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  168.496270][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=6868 comm=syz.0.917
[  168.564289][   T28] audit: type=1400 audit(162.464:1209): avc:  denied  { write } for  pid=6861 comm="syz.4.915" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  168.651491][   T28] audit: type=1400 audit(162.520:1210): avc:  denied  { write } for  pid=6867 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  168.711169][   T28] audit: type=1400 audit(162.576:1211): avc:  denied  { mount } for  pid=6865 comm="syz.6.916" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  168.802593][ T6875] loop6: detected capacity change from 0 to 128
[  168.821212][   T28] audit: type=1400 audit(162.595:1212): avc:  denied  { connect } for  pid=6867 comm="syz.0.917" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  168.897297][   T28] audit: type=1400 audit(162.669:1213): avc:  denied  { create } for  pid=6870 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  168.937064][   T28] audit: type=1400 audit(162.679:1214): avc:  denied  { sys_admin } for  pid=6870 comm="syz.0.918" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  168.957676][   T28] audit: type=1400 audit(162.791:1215): avc:  denied  { write } for  pid=6870 comm="syz.0.918" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  168.977649][   T28] audit: type=1400 audit(162.791:1216): avc:  denied  { mount } for  pid=6870 comm="syz.0.918" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  169.205447][ T6886] -1: renamed from syzkaller0
[  169.323756][ T6884] loop6: detected capacity change from 0 to 8192
[  169.395197][ T6884]  loop6: p1 < > p2 p4 < p5 >
[  169.412183][ T6884] loop6: partition table partially beyond EOD, truncated
[  169.426382][ T6889] loop4: detected capacity change from 0 to 8192
[  169.434762][ T6884] loop6: p1 start 134217728 is beyond EOD, truncated
[  169.457672][ T6884] loop6: p2 size 591360 extends beyond EOD, truncated
[  169.491906][ T6884] loop6: p5 size 591360 extends beyond EOD, truncated
[  169.509996][ T6897] loop4: detected capacity change from 0 to 256
[  173.916421][ T6918] lo speed is unknown, defaulting to 1000
[  174.082163][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  174.082192][   T28] audit: type=1400 audit(167.264:1221): avc:  denied  { create } for  pid=6911 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  174.283247][ T6923] loop1: detected capacity change from 0 to 1024
[  174.297075][ T6923] EXT4-fs: Ignoring removed orlov option
[  174.316484][ T6925] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  174.331072][ T6923] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  174.351679][   T28] audit: type=1400 audit(168.032:1222): avc:  denied  { shutdown } for  pid=6924 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.355270][ T6923] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  174.379179][ T6923] EXT4-fs (loop1): orphan cleanup on readonly fs
[  174.406290][ T6923] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.934: Invalid inode table block 0 in block_group 0
[  174.482857][   T28] audit: type=1400 audit(168.032:1223): avc:  denied  { getopt } for  pid=6924 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.484800][ T6923] loop1: lost filesystem error report for type 5 error -117
[  174.502488][ T6923] EXT4-fs (loop1): Remounting filesystem read-only
[  174.509924][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  174.509961][    C1] EXT4-fs (loop1): initial error at time 168: __ext4_get_inode_loc:4885
[  174.509984][    C1] EXT4-fs (loop1): last error at time 168: __ext4_get_inode_loc:4885
[  174.552107][ T6923] Quota error (device loop1): write_blk: dquota write failed
[  174.559656][ T6923] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  174.572862][ T6923] EXT4-fs (loop1): 1 truncate cleaned up
[  174.584755][ T6923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  174.603476][   T28] audit: type=1400 audit(168.050:1224): avc:  denied  { setopt } for  pid=6924 comm="syz.4.936" laddr=fe80::b lport=51589 faddr=fe80::1c fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.753671][ T6928] loop6: detected capacity change from 0 to 8192
[  174.986979][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.175977][   T28] audit: type=1400 audit(168.799:1225): avc:  denied  { create } for  pid=6935 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  175.197653][ T6936] loop1: detected capacity change from 0 to 512
[  175.215173][ T6936] EXT4-fs: inline encryption not supported
[  175.241171][ T6936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  175.268133][   T28] audit: type=1400 audit(168.799:1226): avc:  denied  { bind } for  pid=6935 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  175.299660][   T28] audit: type=1400 audit(168.799:1227): avc:  denied  { write } for  pid=6935 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  175.301730][ T6936] EXT4-fs (loop1): 1 truncate cleaned up
[  175.321899][ T6938] loop6: detected capacity change from 0 to 512
[  175.345114][ T6936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.388038][ T6938] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  175.424057][ T6938] EXT4-fs (loop6): orphan cleanup on readonly fs
[  175.451262][ T6938] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated!
[  175.474769][ T6938] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.940: Failed to acquire dquot type 1
[  175.525735][ T6938] loop6: lost filesystem error report for type 5 error -5
[  175.526418][ T6938] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.940: bg 0: block 40: padding at end of block bitmap is not set
[  175.548116][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  175.548144][    C1] EXT4-fs (loop6): initial error at time 169: ext4_acquire_dquot:7034
[  175.548172][    C1] EXT4-fs (loop6): last error at time 169: ext4_acquire_dquot:7034
[  175.578685][ T6943] Cannot find add_set index 0 as target
[  175.632585][ T6938] loop6: lost filesystem error report for type 5 error -117
[  175.632964][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.651214][ T6938] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  175.667416][ T6938] loop6: lost filesystem error report for type 5 error -117
[  175.711423][ T6938] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.940: data will be lost
[  175.765213][ T6938] EXT4-fs (loop6): 1 truncate cleaned up
[  175.773903][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'.
[  175.796938][ T6938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.820600][ T6947] vlan2: entered promiscuous mode
[  175.828652][ T6947] geneve1: entered promiscuous mode
[  175.840688][ T6947] vlan2: entered allmulticast mode
[  175.846319][ T6947] geneve1: entered allmulticast mode
[  175.959087][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.336524][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'.
[  177.363078][   T23] bridge0: entered promiscuous mode
[  177.646372][ T6966] loop4: detected capacity change from 0 to 8192
[  178.379326][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.951'.
[  178.509257][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.951'.
[  178.564213][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.951'.
[  178.578785][ T6982] loop4: detected capacity change from 0 to 256
[  178.608687][ T6974] veth0: entered promiscuous mode
[  178.686263][ T6986] xt_TPROXY: Can be used only with -p tcp or -p udp
[  179.183634][ T6970] veth0: left promiscuous mode
[  180.239765][ T7007] loop1: detected capacity change from 0 to 2048
[  180.252467][ T6997] loop6: detected capacity change from 0 to 128
[  180.277827][ T6997] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.313201][ T7007]  loop1: p1 p3 p4
[  180.317202][ T7007] loop1: p1 size 67110656 extends beyond EOD, truncated
[  180.333958][ T7007] loop1: p3 size 134217728 extends beyond EOD, truncated
[  180.400242][ T7007] loop1: p4 size 4278190080 extends beyond EOD, truncated
[  180.429659][ T2979]  loop1: p1 p3 p4
[  180.434625][ T7005] netlink: 64 bytes leftover after parsing attributes in process `syz.1.961'.
[  180.439701][ T2979] loop1: p1 size 67110656 extends beyond EOD, 
[  180.444300][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  180.444318][   T28] audit: type=1400 audit(173.731:1237): avc:  denied  { write } for  pid=6996 comm="syz.6.959" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.483041][ T2979] truncated
[  180.489873][ T2979] loop1: p3 size 134217728 extends beyond EOD, truncated
[  180.501703][ T2979] loop1: p4 size 4278190080 extends beyond EOD, truncated
[  180.559697][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  180.571561][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  180.571743][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'.
[  180.583911][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  180.600245][   T28] audit: type=1400 audit(173.731:1238): avc:  denied  { add_name } for  pid=6996 comm="syz.6.959" name=02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.623870][ T5062] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.639464][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  180.650890][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'.
[  180.653580][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  180.661556][   T28] audit: type=1400 audit(173.731:1239): avc:  denied  { create } for  pid=6996 comm="syz.6.959" name=02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  180.670176][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  180.703019][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'.
[  180.772031][   T28] audit: type=1400 audit(173.731:1240): avc:  denied  { write open } for  pid=6996 comm="syz.6.959" path=2F39382F66696C65302F02 dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  180.832159][   T28] audit: type=1400 audit(173.731:1241): avc:  denied  { write } for  pid=6996 comm="syz.6.959" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.853381][   T28] audit: type=1400 audit(173.731:1242): avc:  denied  { remove_name } for  pid=6996 comm="syz.6.959" name=02 dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.911097][   T28] audit: type=1400 audit(173.731:1243): avc:  denied  { unlink } for  pid=6996 comm="syz.6.959" name=02 dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  180.952379][ T7026] loop6: detected capacity change from 0 to 128
[  181.035225][ T7025] d: renamed from syzkaller0
[  181.162306][   T28] audit: type=1400 audit(173.731:1244): avc:  denied  { write } for  pid=6996 comm="syz.6.959" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  181.384265][   T28] audit: type=1400 audit(173.731:1245): avc:  denied  { read } for  pid=6996 comm="syz.6.959" path=2F39382F66696C65302F18 dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  181.430347][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.470097][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.495258][   T28] audit: type=1400 audit(173.964:1246): avc:  denied  { create } for  pid=7013 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  181.537199][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'.
[  181.680676][ T7040] FAULT_INJECTION: forcing a failure.
[  181.680676][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  181.722430][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.1.971 Not tainted syzkaller #0 PREEMPT(full) 
[  181.722477][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  181.722492][ T7040] Call Trace:
[  181.722500][ T7040]  <TASK>
[  181.722509][ T7040]  __dump_stack+0x1d/0x30
[  181.722562][ T7040]  dump_stack_lvl+0x95/0xd0
[  181.722584][ T7040]  dump_stack+0x15/0x1b
[  181.722606][ T7040]  should_fail_ex+0x263/0x280
[  181.722648][ T7040]  should_fail+0xb/0x20
[  181.722729][ T7040]  should_fail_usercopy+0x1a/0x20
[  181.722838][ T7040]  _copy_from_user+0x1c/0xb0
[  181.722874][ T7040]  __sys_bpf+0x183/0x7e0
[  181.722960][ T7040]  __x64_sys_bpf+0x41/0x50
[  181.723018][ T7040]  x64_sys_call+0x10cb/0x3020
[  181.723060][ T7040]  do_syscall_64+0x12c/0x3b0
[  181.723091][ T7040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.723115][ T7040] RIP: 0033:0x7f5a8bb3cdd9
[  181.723135][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.723169][ T7040] RSP: 002b:00007f5a8a597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  181.723239][ T7040] RAX: ffffffffffffffda RBX: 00007f5a8bdb5fa0 RCX: 00007f5a8bb3cdd9
[  181.723256][ T7040] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 000000000000000a
[  181.723271][ T7040] RBP: 00007f5a8a597090 R08: 0000000000000000 R09: 0000000000000000
[  181.723347][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.723362][ T7040] R13: 00007f5a8bdb6038 R14: 00007f5a8bdb5fa0 R15: 00007ffe31f2d578
[  181.723384][ T7040]  </TASK>
[  181.907174][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'.
[  182.000984][ T7044] loop6: detected capacity change from 0 to 512
[  182.017644][ T7045] loop1: detected capacity change from 0 to 256
[  182.085452][ T7044] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  182.193388][ T7044] EXT4-fs (loop6): 1 truncate cleaned up
[  182.230514][ T7055] loop1: detected capacity change from 0 to 512
[  182.242390][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'.
[  182.262134][ T7044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.280435][ T7055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  182.298995][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'.
[  182.322847][ T7055] EXT4-fs (loop1): 1 truncate cleaned up
[  182.338138][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'.
[  182.352401][ T7055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.615257][ T7062] d: renamed from syzkaller0
[  182.709537][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'.
[  182.729193][ T7059] netlink: 100 bytes leftover after parsing attributes in process `syz.1.974'.
[  182.740551][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.974'.
[  182.855463][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'.
[  182.900037][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.924592][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.6.982'.
[  183.085500][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.395672][ T7101] syzkaller0: entered promiscuous mode
[  183.423486][ T7101] syzkaller0: entered allmulticast mode
[  183.620929][ T7103] ipvlan1: entered allmulticast mode
[  183.627757][ T7103] veth0_vlan: entered allmulticast mode
[  183.766805][ T7103] loop1: detected capacity change from 0 to 512
[  183.833456][ T7104] d: renamed from syzkaller0
[  186.636590][ T7103] EXT4-fs: error -4 creating inode table initialization thread
[  186.650546][ T7103] EXT4-fs (loop1): mount failed
[  187.028177][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  187.028194][   T28] audit: type=1400 audit(179.888:1277): avc:  denied  { bind } for  pid=7116 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  187.161979][   T28] audit: type=1400 audit(179.916:1278): avc:  denied  { name_bind } for  pid=7116 comm="syz.6.994" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  187.274263][   T28] audit: type=1400 audit(179.916:1279): avc:  denied  { node_bind } for  pid=7116 comm="syz.6.994" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  187.404781][   T28] audit: type=1400 audit(180.234:1280): avc:  denied  { remount } for  pid=7124 comm="syz.1.996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  187.478677][ T7125] xt_ecn: cannot match TCP bits for non-tcp packets
[  187.614468][ T7126] lo speed is unknown, defaulting to 1000
[  187.919920][ T7130] loop4: detected capacity change from 0 to 256
[  188.124639][ T7143] loop5: detected capacity change from 0 to 512
[  188.131081][   T28] audit: type=1400 audit(180.917:1281): avc:  denied  { connect } for  pid=7144 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  188.153400][ T7143] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.166073][   T28] audit: type=1400 audit(180.917:1282): avc:  denied  { read } for  pid=7144 comm="syz.4.1004" path="socket:[17721]" dev="sockfs" ino=17721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  188.199672][ T7147] loop0: detected capacity change from 0 to 512
[  188.210036][ T7143] EXT4-fs (loop5): 1 truncate cleaned up
[  188.233755][ T7147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  188.242047][ T7143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.262307][   T28] audit: type=1400 audit(181.039:1283): avc:  denied  { write } for  pid=7144 comm="syz.4.1004" path="socket:[17722]" dev="sockfs" ino=17722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  188.266188][ T7134] __nla_validate_parse: 3 callbacks suppressed
[  188.266587][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'.
[  188.308840][ T7147] EXT4-fs (loop0): 1 orphan inode deleted
[  188.320632][ T7147] EXT4-fs (loop0): 1 truncate cleaned up
[  188.326879][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.349312][ T7154] loop6: detected capacity change from 0 to 8192
[  188.407461][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.420485][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.472986][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'.
[  188.511653][ T7166] tmpfs: Unknown parameter '�
F�.�'
[  188.514065][   T28] audit: type=1400 audit(181.273:1284): avc:  denied  { mounton } for  pid=7165 comm="syz.6.1010" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  188.549619][ T7163] lo speed is unknown, defaulting to 1000
[  188.588477][   T28] audit: type=1400 audit(181.311:1285): avc:  denied  { read } for  pid=7161 comm="syz.5.1008" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  188.621891][   T28] audit: type=1400 audit(181.311:1286): avc:  denied  { open } for  pid=7161 comm="syz.5.1008" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  188.658518][ T7170] loop0: detected capacity change from 0 to 512
[  188.679127][ T7170] EXT4-fs: inline encryption not supported
[  188.691031][ T7170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  188.713463][ T7170] EXT4-fs (loop0): 1 truncate cleaned up
[  188.720795][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.722814][ T7170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.743389][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.752801][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.804466][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.809613][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.823205][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.845918][ T7166] loop6: detected capacity change from 0 to 1024
[  188.849533][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.863858][ T7166] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  188.886441][ T7166] JBD2: no valid journal superblock found
[  188.892447][ T7166] EXT4-fs (loop6): Could not load journal inode
[  188.923404][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.947256][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  188.974864][ T7186] bond0: (slave dummy0): Releasing backup interface
[  189.055114][ T7190] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  189.055769][ T7178] ------------[ cut here ]------------
[  189.069323][ T7178] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.5.1008/7178
[  189.079414][ T7178] Modules linked in:
[  189.083350][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.5.1008 Not tainted syzkaller #0 PREEMPT(full) 
[  189.092695][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  189.102759][ T7178] RIP: 0010:do_notify_parent+0x5c3/0x600
[  189.108532][ T7178] Code: 8b 05 f1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 e8 5e 04 cc e8 1e 18 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 18 1e 00 90 0f 0b 90 e9 af fa ff ff
[  189.128164][ T7178] RSP: 0018:ffffc90001227dd8 EFLAGS: 00010093
[  189.134410][ T7178] RAX: ffffffff813b1652 RBX: ffff888101f5a200 RCX: ffff888101f5a200
[  189.142393][ T7178] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040
[  189.150548][ T7178] RBP: 0000000000000080 R08: ffff888101f5acf8 R09: 0000000000000000
[  189.158594][ T7178] R10: ffffc90001227df0 R11: 0001c90001227df0 R12: ffff888101f5a200
[  189.166656][ T7178] R13: ffff888101f5aa28 R14: ffff888104779690 R15: 0000000000000080
[  189.174948][ T7178] FS:  0000000000000000(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000
[  189.183975][ T7178] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.190640][ T7178] CR2: 00007f1630a56ff8 CR3: 0000000121052000 CR4: 00000000003506f0
[  189.198642][ T7178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  189.206637][ T7178] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  189.214758][ T7178] Call Trace:
[  189.218063][ T7178]  <TASK>
[  189.221006][ T7178]  ? _raw_spin_lock_irqsave+0x57/0xb0
[  189.226552][ T7178]  ? __list_add_valid_or_report+0x38/0xe0
[  189.232302][ T7178]  do_exit+0xc13/0x1530
[  189.236499][ T7178]  ? switch_fpu_return+0xe7/0x1b0
[  189.241635][ T7178]  __x64_sys_exit+0x1f/0x20
[  189.246329][ T7178]  x64_sys_call+0x301d/0x3020
[  189.251108][ T7178]  do_syscall_64+0x12c/0x3b0
[  189.255842][ T7178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.262033][ T7178] RIP: 0033:0x7f1631ffcdd9
[  189.266456][ T7178] Code: Unable to access opcode bytes at 0x7f1631ffcdaf.
[  189.273473][ T7178] RSP: 002b:00007f1630a56fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  189.281952][ T7178] RAX: ffffffffffffffda RBX: 00007f1632275fa0 RCX: 00007f1631ffcdd9
[  189.290017][ T7178] RDX: 00007f1630a579c8 RSI: 0000000000000000 RDI: 0000000000000000
[  189.298000][ T7178] RBP: 00007f1632092d69 R08: 0000000000000000 R09: 0000000000000000
[  189.306085][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.314186][ T7178] R13: 00007f1632276038 R14: 00007f1632275fa0 R15: 00007fffb32e6078
[  189.322190][ T7178]  </TASK>
[  189.325395][ T7178] ---[ end trace 0000000000000000 ]---
[  189.382430][ T7197] loop4: detected capacity change from 0 to 512
[  189.390556][ T7197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  189.421556][ T7197] EXT4-fs (loop4): 1 orphan inode deleted
[  189.467511][ T7197] EXT4-fs (loop4): 1 truncate cleaned up
[  189.478248][ T7204] loop5: detected capacity change from 0 to 128
[  189.487976][ T7166] loop6: detected capacity change from 0 to 512
[  189.499461][ T7166] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  189.512619][ T7166] EXT4-fs (loop6): orphan cleanup on readonly fs
[  189.517909][ T7197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.526058][ T7166] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.1010: Allocating blocks 41-42 which overlap fs metadata
[  189.555983][ T7166] loop6: lost filesystem error report for type 5 error -117
[  189.559751][ T7166] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1010: Failed to acquire dquot type 0
[  189.567401][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  189.567488][    C1] EXT4-fs (loop6): initial error at time 182: ext4_mb_mark_diskspace_used:4222
[  189.567555][    C1] EXT4-fs (loop6): last error at time 182: ext4_mb_mark_diskspace_used:4222
[  189.619189][ T7166] loop6: lost filesystem error report for type 5 error -117
[  189.635364][ T7166] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  189.664092][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.684369][ T7166] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1010: corrupted inode contents
[  189.722100][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  189.722541][ T7166] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.1010: mark_inode_dirty error
[  189.746538][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  189.746688][ T7166] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1010: corrupted inode contents
[  189.775638][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  189.775926][ T7166] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.1010: mark_inode_dirty error
[  189.800351][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  189.800783][ T7166] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1010: corrupted inode contents
[  189.830786][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  189.831153][ T7166] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  189.872471][ T7166] loop6: lost filesystem error report for type 5 error -117
[  189.872916][ T7166] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1010: corrupted inode contents
[  189.940037][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  189.948794][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.965253][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.972742][ T7225] bridge0: entered allmulticast mode
[  189.981118][ T7225] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  190.040915][ T7166] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.1010: mark_inode_dirty error
[  190.058683][ T7166] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.114815][ T7166] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  190.186887][ T7230] d: renamed from syzkaller0
[  190.246898][ T7166] loop6: lost filesystem error report for type 5 error -117
[  190.250383][ T7166] EXT4-fs (loop6): 1 truncate cleaned up
[  190.396501][ T7166] EXT4-fs (loop6): pa ffff888107153850: logic 1, phys. 41, len 23
[  190.404640][ T7166] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23
[  190.439286][ T7166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.445843][ T7233] loop4: detected capacity change from 0 to 1024
[  190.458913][ T7233] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  190.613056][ T7242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  190.625429][ T7242] EXT4-fs (loop4): 1 orphan inode deleted
[  190.631294][ T7242] EXT4-fs (loop4): 1 truncate cleaned up
[  190.637954][ T7242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.698845][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.717331][ T7249] netlink: 'syz.0.1039': attribute type 29 has an invalid length.
[  190.726679][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.738098][ T7249] netlink: 'syz.0.1039': attribute type 29 has an invalid length.
[  190.786110][ T7254] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  190.940545][ T7277] EXT4-fs: quotafile must be on filesystem root
[  191.042468][ T7284] netlink: 'syz.6.1048': attribute type 29 has an invalid length.
[  191.073289][ T7284] netlink: 'syz.6.1048': attribute type 29 has an invalid length.
[  191.122536][ T7288] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  191.151722][ T7290] syz.4.1051: attempt to access beyond end of device
[  191.151722][ T7290] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[  191.232009][ T7298] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  191.251742][ T7298] EXT4-fs (loop5): 1 orphan inode deleted
[  191.269920][ T7298] EXT4-fs (loop5): 1 truncate cleaned up
[  191.282517][ T7298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.358806][ T3297] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  191.367088][ T3297] FAT-fs (loop1): Filesystem has been set read-only
[  191.377380][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.660973][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.324216][ T7320] EXT4-fs (loop0): Invalid default hash set in the superblock
[  192.444600][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  193.645646][   T28] kauditd_printk_skb: 21 callbacks suppressed
[  193.645665][   T28] audit: type=1400 audit(186.079:1306): avc:  denied  { setopt } for  pid=7323 comm="syz.1.1062" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  194.493424][ T7329] FAULT_INJECTION: forcing a failure.
[  194.493424][ T7329] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  194.507065][ T7329] CPU: 0 UID: 0 PID: 7329 Comm: syz.6.1064 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  194.507105][ T7329] Tainted: [W]=WARN
[  194.507112][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  194.507124][ T7329] Call Trace:
[  194.507131][ T7329]  <TASK>
[  194.507138][ T7329]  __dump_stack+0x1d/0x30
[  194.507215][ T7329]  dump_stack_lvl+0x95/0xd0
[  194.507239][ T7329]  dump_stack+0x15/0x1b
[  194.507259][ T7329]  should_fail_ex+0x263/0x280
[  194.507307][ T7329]  should_fail_alloc_page+0xf2/0x100
[  194.507422][ T7329]  __alloc_frozen_pages_noprof+0x108/0x350
[  194.507453][ T7329]  alloc_pages_mpol+0xb3/0x260
[  194.507482][ T7329]  ? anon_pipe_write+0xa1/0xb20
[  194.507520][ T7329]  alloc_pages_noprof+0x8f/0x140
[  194.507553][ T7329]  anon_pipe_write+0x69c/0xb20
[  194.507584][ T7329]  ? anon_pipe_write+0xa1/0xb20
[  194.507626][ T7329]  ? __pfx_anon_pipe_write+0x10/0x10
[  194.507666][ T7329]  vfs_write+0x5a6/0x9f0
[  194.507706][ T7329]  ksys_write+0xdc/0x1a0
[  194.507805][ T7329]  __x64_sys_write+0x40/0x50
[  194.507834][ T7329]  x64_sys_call+0x27e1/0x3020
[  194.507863][ T7329]  do_syscall_64+0x12c/0x3b0
[  194.507915][ T7329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.507941][ T7329] RIP: 0033:0x7f965e17d60e
[  194.507961][ T7329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  194.507984][ T7329] RSP: 002b:00007f965cc16ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  194.508011][ T7329] RAX: ffffffffffffffda RBX: 00007f965cc176c0 RCX: 00007f965e17d60e
[  194.508046][ T7329] RDX: 0000000000000029 RSI: 00007f965cc16e90 RDI: 0000000000000002
[  194.508060][ T7329] RBP: 00007f965cc16e90 R08: 0000000000000000 R09: 0000000000000000
[  194.508149][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029
[  194.508178][ T7329] R13: 00007f965e40d7a0 R14: 00007f965e4044a0 R15: 0000000000000001
[  194.508196][ T7329]  </TASK>
[  194.776381][ T7332] set_capacity_and_notify: 10 callbacks suppressed
[  194.776400][ T7332] loop4: detected capacity change from 0 to 1024
[  194.806270][ T7332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.838532][ T7332] EXT4-fs (loop4): The Hurd can't support 64-bit file systems
[  194.967208][   T28] audit: type=1400 audit(187.314:1307): avc:  denied  { bind } for  pid=7331 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  194.973716][ T7344] loop4: detected capacity change from 0 to 512
[  194.993337][ T7345] loop6: detected capacity change from 0 to 512
[  195.006829][ T7345] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  195.040467][ T7345] EXT4-fs (loop6): 1 orphan inode deleted
[  195.057409][ T7345] EXT4-fs (loop6): 1 truncate cleaned up
[  195.063932][ T7345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.104088][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.228940][ T7359] netlink: 'syz.6.1071': attribute type 1 has an invalid length.
[  195.271359][ T7359] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[  195.286527][ T7359] macvlan2: entered promiscuous mode
[  195.292029][ T7359] macvlan2: entered allmulticast mode
[  195.326403][ T7359] bond2: entered promiscuous mode
[  195.331866][ T7359] bridge1: entered promiscuous mode
[  195.337902][ T7359] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  195.352134][ T7359] bond2: left promiscuous mode
[  195.362562][ T7359] bridge1: left promiscuous mode
[  195.446207][   T28] audit: type=1400 audit(187.763:1308): avc:  denied  { ioctl } for  pid=7362 comm="syz.0.1074" path="socket:[18106]" dev="sockfs" ino=18106 ioctlcmd=0x587c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  195.770394][ T7363] netlink: 'syz.0.1074': attribute type 29 has an invalid length.
[  196.419773][ T7376] loop0: detected capacity change from 0 to 1024
[  196.439537][ T7373] loop6: detected capacity change from 0 to 128
[  196.473892][ T7376] EXT4-fs (loop0): Can't support bigalloc feature without extents feature
[  196.473892][ T7376] 
[  196.532151][ T7373] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.592178][ T7376] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  196.680261][ T7332] loop4: detected capacity change from 0 to 256
[  196.703307][ T7376] netlink: 'syz.0.1077': attribute type 3 has an invalid length.
[  196.869778][ T7332] vfat: Unknown parameter '����0x00000000000000000xffffffffffffffff'
[  197.109282][ T7393] loop5: detected capacity change from 0 to 512
[  197.141756][ T5062] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.151444][ T7393] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  197.173384][   T28] audit: type=1400 audit(189.363:1309): avc:  denied  { ioctl } for  pid=7386 comm="syz.0.1080" path="socket:[18921]" dev="sockfs" ino=18921 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  197.229152][ T7393] EXT4-fs (loop5): 1 orphan inode deleted
[  197.265289][ T7393] EXT4-fs (loop5): 1 truncate cleaned up
[  197.285067][   T28] audit: type=1400 audit(189.485:1310): avc:  denied  { read write } for  pid=7398 comm="syz.6.1083" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  197.414158][ T7393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.436111][   T28] audit: type=1400 audit(189.485:1311): avc:  denied  { open } for  pid=7398 comm="syz.6.1083" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  197.821624][ T4828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.026427][ T7404] loop4: detected capacity change from 0 to 2048
[  198.379470][ T7404]  loop4: p1
[  199.329943][ T7419] loop5: detected capacity change from 0 to 512
[  199.340873][ T7424] __nla_validate_parse: 6 callbacks suppressed
[  199.340893][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'.
[  199.361797][ T7419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  199.376454][   T28] audit: type=1400 audit(191.431:1312): avc:  denied  { mounton } for  pid=7418 comm="syz.5.1087" path="/122/file0" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  200.406010][ T7419] EXT4-fs (loop5): blocks per group (11) and clusters per group (8192) inconsistent
[  200.418372][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'.
[  201.196560][ T7429] ipvlan1: entered allmulticast mode
[  201.202712][ T7429] veth0_vlan: entered allmulticast mode
[  201.280323][ T7429] loop6: detected capacity change from 0 to 512
[  201.549868][   T28] audit: type=1400 audit(193.481:1313): avc:  denied  { create } for  pid=7403 comm="syz.4.1086" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  201.912846][ T7429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.051428][ T7438] loop1: detected capacity change from 0 to 512
[  202.291869][ T7438] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  202.529298][ T7447] loop1: detected capacity change from 0 to 4096
[  202.579395][ T7447] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.607724][   T28] audit: type=1400 audit(193.855:1314): avc:  denied  { write } for  pid=7420 comm="syz.6.1092" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  202.616389][ T7448] bridge0: left allmulticast mode
[  202.629063][   T28] audit: type=1400 audit(193.865:1315): avc:  denied  { read } for  pid=7420 comm="syz.6.1092" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  202.629102][   T28] audit: type=1400 audit(194.239:1316): avc:  denied  { mount } for  pid=7436 comm="syz.1.1095" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  202.655367][ T7447] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  202.739208][ T7447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.832888][   T28] audit: type=1400 audit(194.632:1317): avc:  denied  { write } for  pid=7436 comm="syz.1.1095" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  202.939801][ T5062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.949169][   T28] audit: type=1400 audit(194.763:1318): avc:  denied  { unlink } for  pid=3296 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  203.038760][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.050228][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.051285][   T28] audit: type=1400 audit(194.875:1319): avc:  denied  { ioctl } for  pid=7461 comm="syz.4.1103" path="socket:[18987]" dev="sockfs" ino=18987 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  203.104001][ T7448] geneve1: left promiscuous mode
[  203.110901][ T7448] ip6tnl1: left allmulticast mode
[  203.189162][   T28] audit: type=1400 audit(195.006:1320): avc:  denied  { name_connect } for  pid=7461 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  203.245773][ T5610] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.262082][   T28] audit: type=1400 audit(195.081:1321): avc:  denied  { write } for  pid=7436 comm="syz.1.1095" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  203.285837][ T5610] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.354262][ T7472] loop0: detected capacity change from 0 to 512
[  203.373111][ T5610] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.382297][ T5610] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.403419][ T7472] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  203.533981][ T7472] EXT4-fs (loop0): 1 orphan inode deleted
[  203.550682][ T7472] EXT4-fs (loop0): 1 truncate cleaned up
[  203.566877][ T7472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.591658][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1107'.
[  203.603087][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.129898][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.140473][ T7497] lyz2: rxe_newlink: already configured on lo
[  204.211410][ T7503] loop1: detected capacity change from 0 to 1764
[  204.623453][ T7506] lo speed is unknown, defaulting to 1000
[  205.408191][   T28] audit: type=1400 audit(197.084:1322): avc:  denied  { create } for  pid=7508 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  205.660829][ T7479] ==================================================================
[  205.668978][ T7479] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath
[  205.678127][ T7479] 
[  205.680479][ T7479] write to 0xffffc9000eab39f0 of 1 bytes by task 7506 on cpu 0:
[  205.688693][ T7479]  rwsem_down_write_slowpath+0x3dd/0xac0
[  205.694392][ T7479]  down_write+0xab/0xc0
[  205.698628][ T7479]  kernfs_add_one+0x5a/0x280
[  205.703441][ T7479]  __kernfs_create_file+0x145/0x180
[  205.708668][ T7479]  sysfs_add_file_mode_ns+0x132/0x1b0
[  205.714145][ T7479]  internal_create_group+0x441/0x9e0
[  205.719453][ T7479]  sysfs_create_groups+0x3f/0xf0
[  205.724416][ T7479]  ib_setup_port_attrs+0xe87/0x1400
[  205.729786][ T7479]  add_one_compat_dev+0x297/0x390
[  205.734868][ T7479]  rdma_dev_init_net+0x1b9/0x240
[  205.740053][ T7479]  ops_init+0x22a/0x2e0
[  205.744336][ T7479]  setup_net+0x9f/0x230
[  205.748797][ T7479]  copy_net_ns+0x310/0x450
[  205.753269][ T7479]  create_new_namespaces+0x20e/0x440
[  205.758588][ T7479]  unshare_nsproxy_namespaces+0x115/0x150
[  205.764438][ T7479]  ksys_unshare+0x402/0x740
[  205.768991][ T7479]  __x64_sys_unshare+0x1f/0x30
[  205.773800][ T7479]  x64_sys_call+0x1cef/0x3020
[  205.778505][ T7479]  do_syscall_64+0x12c/0x3b0
[  205.783132][ T7479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.789058][ T7479] 
[  205.791405][ T7479] read to 0xffffc9000eab39f0 of 1 bytes by task 7479 on cpu 1:
[  205.799062][ T7479]  rwsem_down_write_slowpath+0x44f/0xac0
[  205.804723][ T7479]  down_write+0xab/0xc0
[  205.808897][ T7479]  kernfs_remove_by_name_ns+0x6b/0x110
[  205.814502][ T7479]  sysfs_remove_group+0xa5/0x170
[  205.819474][ T7479]  sysfs_remove_groups+0x3a/0x80
[  205.824444][ T7479]  device_remove_attrs+0x15a/0x1a0
[  205.829603][ T7479]  device_del+0x361/0x790
[  205.834049][ T7479]  netdev_unregister_kobject+0x24d/0x270
[  205.839734][ T7479]  unregister_netdevice_many_notify+0x128b/0x1650
[  205.846275][ T7479]  unregister_netdevice_queue+0x1cd/0x200
[  205.852044][ T7479]  __tun_detach+0x7d7/0xa70
[  205.856697][ T7479]  tun_chr_close+0x5a/0x100
[  205.861245][ T7479]  __fput+0x29b/0x630
[  205.865254][ T7479]  ____fput+0x1c/0x30
[  205.869263][ T7479]  task_work_run+0x130/0x1a0
[  205.873960][ T7479]  exit_to_user_mode_loop+0x1f4/0x6f0
[  205.879451][ T7479]  do_syscall_64+0x232/0x3b0
[  205.884076][ T7479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.890011][ T7479] 
[  205.892360][ T7479] value changed: 0x00 -> 0x01
[  205.897046][ T7479] 
[  205.899383][ T7479] Reported by Kernel Concurrency Sanitizer on:
[  205.905596][ T7479] CPU: 1 UID: 0 PID: 7479 Comm: syz.6.1108 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  205.916663][ T7479] Tainted: [W]=WARN
[  205.920483][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.930647][ T7479] ==================================================================
[  207.641922][   T28] audit: type=1400 audit(197.308:1323): avc:  denied  { connect } for  pid=7508 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  207.661619][   T28] audit: type=1400 audit(197.308:1324): avc:  denied  { write } for  pid=7508 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1