last executing test programs:

1m2.878944418s ago: executing program 3 (id=592):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444d", 0xd2, 0x880, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x2, 0x0)

1m1.169506819s ago: executing program 3 (id=597):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x4, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x2, 0x866}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8946, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ff0725bd6cc83a8bdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x26040000}, 0x4)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x6, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x1, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044804)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r7 = timerfd_create(0x0, 0x0)
read(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)

1m0.545175738s ago: executing program 3 (id=602):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000e80)='./proc\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c)
write(r4, &(0x7f0000000200)="5c7830313032303330342032303030303030303030203020302030206b726235185c783030303030303030666666666666376630303030", 0x37)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x11, 0x1, '@:(\',&(--:@!\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000))
readv(r0, &(0x7f0000002300)=[{&(0x7f0000000900)=""/149, 0x95}, {0x0}], 0x2)
close(r2)
sendto(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x164)
write(r5, 0x0, 0x0)
pipe(&(0x7f00000000c0))

59.839339732s ago: executing program 3 (id=604):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {}, {@user_xattr}, {@bh}, {@barrier}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x575, &(0x7f0000000ec0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r4, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, 0x0, 0x0)
bind$xdp(r5, 0x0, 0x0)
close(r5)
close(r4)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)

58.448963227s ago: executing program 3 (id=610):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_create(0x3, 0x0, &(0x7f00000001c0)=<r3=>0x0)
timer_gettime(r3, &(0x7f00000003c0))
timer_delete(r3)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff)
timer_delete(r3)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000200000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000440)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1, 0x3}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES8], &(0x7f00000011c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

58.160365731s ago: executing program 3 (id=613):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$sg(0x0, 0x85d4, 0x20200)
ioctl$SG_IO(r2, 0x2285, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f93000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000444000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24050095)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20)
io_uring_enter(r3, 0x2219, 0xcf74, 0x52, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2a8, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x2}, {0x2, 0x0, 0x4}, 0xffffb792, 0xd94f}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xa}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x80000000}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x5, 0x0, [0x4, 0x7, 0x67, 0xa, 0x1ff, 0x0, 0x9, 0x1, 0xe, 0x1c, 0x3, 0xf, 0x2, 0x7, 0x32ad, 0x80], 0xd}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x1, 0x1, 0x2}, 0x8, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000)
r5 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000000c0)={'veth0_to_bridge\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x20000fc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x14, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x432f, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0xa9baab26adf3cfdf, 0x0, 0x5, 0x8, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x67}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

56.712784289s ago: executing program 32 (id=613):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$sg(0x0, 0x85d4, 0x20200)
ioctl$SG_IO(r2, 0x2285, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f93000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000444000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24050095)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20)
io_uring_enter(r3, 0x2219, 0xcf74, 0x52, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2a8, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x2}, {0x2, 0x0, 0x4}, 0xffffb792, 0xd94f}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xa}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x80000000}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x5, 0x0, [0x4, 0x7, 0x67, 0xa, 0x1ff, 0x0, 0x9, 0x1, 0xe, 0x1c, 0x3, 0xf, 0x2, 0x7, 0x32ad, 0x80], 0xd}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x1, 0x1, 0x2}, 0x8, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000)
r5 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000000c0)={'veth0_to_bridge\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x20000fc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x14, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x432f, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0xa9baab26adf3cfdf, 0x0, 0x5, 0x8, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x67}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13.081743094s ago: executing program 4 (id=963):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_gettime(0x0, &(0x7f00000003c0))
timer_delete(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff)
timer_delete(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x14f780, 0x184)
write$binfmt_register(r3, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000200000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000440)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1, 0x3}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES8=r3], &(0x7f00000011c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.876091324s ago: executing program 4 (id=965):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x43, 0xff, 0x2, 0x10, 0x10}, 0xe)
shutdown(r0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
setresgid(0x0, 0xee01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newqdisc={0xb0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xb0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)

7.414155931s ago: executing program 0 (id=975):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r3, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444d", 0xd2, 0x880, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x2, 0x0)

6.858698628s ago: executing program 4 (id=979):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x7)
close(r0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
r3 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00010f29bd7000fcdbdf4d41001c000000080008000a"], 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x48050)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000103e00000c0000"], 0x10}, 0xb400)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000240)=0xc, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r7, &(0x7f00000002c0)="65ed5b318677f478acdffe82377d80", 0xf, 0x24000000, 0x0, 0x0)
recvfrom(r7, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0)
r8 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r8, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'syz_tun\x00'})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0xffe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/4094], 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000029"], 0x30}, 0x3400c8d4)

6.280351355s ago: executing program 4 (id=981):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4b4, 0x1}, 0x1000a4, 0x0, 0x9, 0x3, 0x6, 0x8001, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_procfs(0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000)
splice(r4, 0x0, r6, 0x0, 0x869, 0x0)
read$watch_queue(r5, &(0x7f0000000040)=""/187, 0x869)
write(r3, &(0x7f0000000040), 0xffffff4a)
socket$unix(0x1, 0x1, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, 0x0)
r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c840}, 0x0)

6.204724198s ago: executing program 0 (id=982):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
r2 = socket(0x3e, 0x4, 0xfffffffb)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d2f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xffff}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0xf, 0x1, 0x3d2f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xffff}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$sg(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
getrandom(&(0x7f0000000200)=""/208, 0xd0, 0x2)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0xc000, 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r5, &(0x7f0000000140)="303067e1c09a", 0x6)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x8)
pread64(r7, &(0x7f0000019200)=""/102400, 0xfffffdde, 0xffffffffc)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r9, r8, 0x0, 0x7ffff000)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000080))

5.971557829s ago: executing program 0 (id=984):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
close(r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
eventfd2(0x7, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x0, 0x58, 0x20}, 0xd)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862f01)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0)
r6 = dup(r5)
readv(r6, &(0x7f0000000240)=[{&(0x7f0000000300)=""/86, 0x56}], 0x1)
ustat(0x801, &(0x7f0000000240))
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x53, 0x1, 0x0, {0x93d1, 0x1}, {0x7, 0x431c}, @const={0x0, {0x1000, 0x1}}})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
acct(&(0x7f0000000040)='./file0\x00')
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
socket$inet6(0xa, 0x1, 0x6)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000380)={0x1, {{0x29, 0x1000, 0xfffffffe, @loopback, 0x4}}}, 0x88)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x17, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)

5.939213421s ago: executing program 2 (id=985):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xb29}, 0x100, 0x6ce, 0xffffffff, 0x3, 0x3, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000084)
socket$nl_netfilter(0x10, 0x3, 0xc)
flock(0xffffffffffffffff, 0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000080), 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8f25}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x40}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x30000004)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2=0xe0000300, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548dd3c7b", 0xff, 0xfffffff7, 0x4, 0x40080006}, 0x3c)
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x1004480, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=i'])
mkdirat(0xffffffffffffff9c, 0x0, 0x7)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

5.771137178s ago: executing program 5 (id=986):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x80800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x4000004, 0x4, 0x10000, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5)
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1c4, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf29}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x896}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x527}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x156a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}}, 0x44048)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="6a35df891be09646b62710b05dfd4983b3a3641b115da91add39ce244b4d2e84f97b30a8dbd7ee7826690df19b34ba8a38f981b6ec353b4dbdf87398cb1ccbe26cef31c3cbcb5a1900f1e841bd3a4e159c31128f993820818879c2c86002896232b30d1cc5d70880e37197681c4425a1bd07409e34a6e31392d755521e33572e353b592b0337bfc83f10bac0b47aea5d8f51060a48064811c640cf1327d6793bac03891403c0", 0xa6}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)

5.515862611s ago: executing program 5 (id=987):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000832f9697b73f6ed0b61ef97018b21c9f204b792fd4cf2413dcd359dd4d15867836afb7947c06e3d365d0edc24125e39b6b329a6ae620c3f31b9953aa40437e304c5590da5757d09ef3bc4886c1424e150e57550b98d08abc7d0ea07dcf45e4f34e1af324de76801f6e169a3b89f3768f62aa9f761f5cd7161aff624a25bd792e50f16f2a617559b7dc16f78a44966d92d3f7554947450fd2df7d9afadc8a7900b9c170d01f50c02a7d000000001de7e2d8eb4e4ac51389f2139ccc8355bc1dbef05d6b088c1b7bdd21263de6fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open$cgroup(&(0x7f0000000980)={0x5, 0x80, 0xff, 0xc1, 0xff, 0x5, 0x0, 0x3, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8001, 0xf8}, 0x881, 0x9, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x101, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cb3368129330fc3f083308bc7dcf800"})
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8915, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e24, @local}})
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x9, &(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = semget$private(0x0, 0x2, 0x724)
semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf9ae}, 0x1, 0x3dc, 0x0, 0x0, 0x0, 0x0, 0x7})
semop(r6, &(0x7f0000000180)=[{0x0, 0xff}, {0x2, 0x5, 0x1800}, {0x2, 0x1, 0x800}, {0x2, 0x7, 0x1000}, {0x2, 0x81, 0x800}, {0x1, 0x3ff, 0x1800}, {0x2, 0xc3, 0x1000}, {0x3, 0x8, 0x800}, {0x1, 0x457, 0x1800}], 0x9)
mlock(&(0x7f0000000000/0x4000)=nil, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000065000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.193101766s ago: executing program 1 (id=988):
r0 = socket$inet(0x2, 0x1, 0xfffffffb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x46c5, 0x9ab, 0x0, 0x4, 0x763, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstatfs(0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'security.', 'REJECT\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='1', 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x55b7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_ident={0x0, 0xb, 0x6, 0x0, 0x8}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1)

5.134322558s ago: executing program 0 (id=989):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b0000000000000000ffe0000edc8726000008009840a23c15023a4e9f1a93e7eddf985b5de72ef8d03e7f7e17b16b4613ee4ee78afd2c5fc74b7cf0ebee2fd82b8dfc896e2977e28f60daeba89be9a06ef7db99e1d62e1b40059bcd2c3b48da2ec0617c34284632398dbbd69252214a80ed3e3af567556f66764a565113f62573b169c5e096ce8bd8bd76afd8230d3798cd67fe61cb1b25507a3193ff3c0ca7d65627517c2a071de041bde281a764ffff02e756a8d3a764722cb1ebbde89f403d4a5b4ec099e38c1b45d63f1fc6821a41b719f30bd9325de0a46636ce67395c57cd245e0ef35a485e23a1aa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702220014000000b70300d16f1d1278d9020000000000000009000000226cc7490901000000004a0000000000000000bffedd2717a94f91000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
socket(0x27, 0x800, 0xf3)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x34, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = getpid()
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ad}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @ldst={0x1, 0x2, 0x4, 0x0, 0x7, 0x0, 0x8}, @alu={0x7, 0x0, 0x6, 0xb, 0xa, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0xef, &(0x7f00000007c0)=""/239, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x4, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000a00)=[{0x4, 0x5, 0x10, 0x8}, {0x4, 0x4, 0xd, 0xa}, {0x0, 0x2, 0x7, 0xc}, {0x1, 0x2, 0xb, 0x9}, {0x5, 0x1, 0x3, 0xa}, {0x5, 0x5, 0xb, 0x1}, {0x5, 0x4, 0x0, 0x6}, {0x1, 0x5, 0x7, 0xb}, {0x4, 0x5, 0x9, 0xa}], 0x10, 0x6}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000ff3f000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc)
syz_clone(0xae1ae400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.126089518s ago: executing program 2 (id=990):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
keyctl$session_to_parent(0x12)
r2 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0xb7}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
write(r4, &(0x7f00000001c0)='1', 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe)
socket(0x10, 0x3, 0x0)
read(r1, 0x0, 0x0)
r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x1a10, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0xffffffe4, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000869, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xee2, 0xfb}, 0x100442, 0x0, 0xfffffff9, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r5, 0xa)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0)

4.8878099s ago: executing program 1 (id=991):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x80800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x4000004, 0x4, 0x10000, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/48], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6)
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1c4, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf29}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x896}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x527}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x156a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}}, 0x44048)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1000}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000001}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4040010)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="6a35df891be09646b62710b05dfd4983b3a3641b115da91add39ce244b4d2e84f97b30a8dbd7ee7826690df19b34ba8a38f981b6ec353b4dbdf87398cb1ccbe26cef31c3cbcb5a1900f1e841bd3a4e159c31128f993820818879c2c86002896232b30d1cc5d70880e37197681c4425a1bd07409e34a6e31392d755521e33572e353b592b0337bfc83f10bac0b47aea5d8f51060a48064811c640cf1327d6793bac03891403c0", 0xa6}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)

4.697066489s ago: executing program 5 (id=992):
r0 = socket$inet(0x2, 0x1, 0xfffffffb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x46c5, 0x9ab, 0x0, 0x4, 0x763, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstatfs(0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x206)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'security.', 'REJECT\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='1', 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x55b7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_ident={0x0, 0xb, 0x6, 0x0, 0x8}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1)

3.897594807s ago: executing program 1 (id=993):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x4, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x20000000, 0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}, {0x0, 0x0, 0x4000000000, 0x8000}], 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000045b19ee3966b722e861550d33f9f9888a248d0e18a02318d64b4698c00151419a99cf71b71b0704b6702b14caeb3c504a86b606114eb60b77bc5a1d8aadff0a4e8125c29e85d9e880fe717e8aa3daa7075511d21e5920b5ed0c02b4197ec3acc09f3879cc8290b8c662ed5a07a8c2313c2cf3b833200322437a7e6e9c4342eeca93cad4e16cb827aee71e6e9fcac245eb06e9bca68192158f1", @ANYBLOB="48f080a65311240ffe3a5fd995c0968d08320d3a2d44dc6a166ff35c2d2c3a4dc03faea2c7635fcf75aab807ed203f2d5571cba3431122c021164d6184a9a75118cf7abc8dd69e1fb5ca3cbbeff3e5e47419395b23798beb6256e31024bc650896e72a417c9a95419e1bfe39e9fd1f6fc7835b925b6ccef6b08cc4535c2d33d39de5f76546ae29721e95b12a96807385c038cca0150e21453ba5bb66cd0ed12db0a4667728dbb67d0f9a26c93a2e1c1e0b96cbc82eb30f4d11af9fd6ea071e784d4d7cdf7c7bec1ec84037af1d13b42d6efcf09c7476d8699463bea4357e97ec7b3f85f746df", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$packet(0x11, 0x7, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$perf(0x0, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getpid()
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x3, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48, 0x10000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000480)={0x2, 0x4ea2, @multicast1}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000001c0)=0x7, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, 0x0)

3.897201687s ago: executing program 2 (id=994):
r0 = socket$inet(0x2, 0x1, 0xfffffffb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x46c5, 0x9ab, 0x0, 0x4, 0x763, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstatfs(0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x206)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'security.', 'REJECT\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='1', 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x55b7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_ident={0x0, 0xb, 0x6, 0x0, 0x8}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1)

3.82883988s ago: executing program 5 (id=995):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444d", 0xd2, 0x880, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x2, 0x0)

3.40462634s ago: executing program 2 (id=996):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x10000, 0x2, 0x5, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x5, 0x50, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)="f3", 0x1}], 0x1, 0x0, 0x0, 0xc804}, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x21, r2, 0x80000001, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setgroups(0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20)
getgroups(0x5, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee00, <r4=>0xffffffffffffffff])
setresgid(0x0, r4, 0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40844)

3.341314173s ago: executing program 1 (id=997):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x80800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x4000004, 0x4, 0x10000, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5)
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1c4, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf29}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x896}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x527}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x156a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}}, 0x44048)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="6a35df891be09646b62710b05dfd4983b3a3641b115da91add39ce244b4d2e84f97b30a8dbd7ee7826690df19b34ba8a38f981b6ec353b4dbdf87398cb1ccbe26cef31c3cbcb5a1900f1e841bd3a4e159c31128f993820818879c2c86002896232b30d1cc5d70880e37197681c4425a1bd07409e34a6e31392d755521e33572e353b592b0337bfc83f10bac0b47aea5d8f51060a48064811c640cf1327d6793bac03891403c0", 0xa6}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)

3.240350447s ago: executing program 5 (id=998):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x80800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x4000004, 0x4, 0x10000, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6)
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1c4, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf29}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x896}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x527}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x156a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}}, 0x44048)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1000}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000001}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4040010)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="6a35df891be09646b62710b05dfd4983b3a3641b115da91add39ce244b4d2e84f97b30a8dbd7ee7826690df19b34ba8a38f981b6ec353b4dbdf87398cb1ccbe26cef31c3cbcb5a1900f1e841bd3a4e159c31128f993820818879c2c86002896232b30d1cc5d70880e37197681c4425a1bd07409e34a6e31392d755521e33572e353b592b0337bfc83f10bac0b47aea5d8f51060a48064811c640cf1327d6793bac03891403c0", 0xa6}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)

2.807338308s ago: executing program 4 (id=999):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444d", 0xd2, 0x880, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x2, 0x0)

2.400078817s ago: executing program 2 (id=1000):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
close(r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
eventfd2(0x7, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x0, 0x58, 0x20}, 0xd)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862f01)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0)
r6 = dup(r5)
readv(r6, &(0x7f0000000240)=[{&(0x7f0000000300)=""/86, 0x56}], 0x1)
ustat(0x801, &(0x7f0000000240))
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x53, 0x1, 0x0, {0x93d1, 0x1}, {0x7, 0x431c}, @const={0x0, {0x1000, 0x1}}})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
acct(&(0x7f0000000040)='./file0\x00')
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
socket$inet6(0xa, 0x1, 0x6)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000380)={0x1, {{0x29, 0x1000, 0xfffffffe, @loopback, 0x4}}}, 0x88)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x17, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)

2.398234907s ago: executing program 0 (id=1010):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000e80)='./proc\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c)
write(r4, &(0x7f0000000200)="5c7830313032303330342032303030303030303030203020302030206b726235185c783030303030303030666666666666376630303030", 0x37)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x11, 0x1, '@:(\',&(--:@!\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r5, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
readv(r0, &(0x7f0000002300)=[{&(0x7f0000000900)=""/149, 0x95}, {0x0}], 0x2)
close(r2)
sendto(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x164)
write(r6, 0x0, 0x0)
pipe(&(0x7f00000000c0))

2.211987256s ago: executing program 1 (id=1001):
r0 = socket$inet(0x2, 0x1, 0xfffffffb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x46c5, 0x9ab, 0x0, 0x4, 0x763, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstatfs(0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x206)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'security.', 'REJECT\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='1', 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x55b7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_ident={0x0, 0xb, 0x6, 0x0, 0x8}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1)

2.177815978s ago: executing program 5 (id=1002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x800, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x103000)
r4 = eventfd(0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)
r5 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@norecovery}, {@data_err_ignore}, {@inlinecrypt}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$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")
unshare(0x28000600)
r6 = msgget$private(0x0, 0x0)
msgsnd(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0)
msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x401, 0x800)
open_tree(r5, &(0x7f0000000080)='\x00', 0x1000)
msgrcv(r6, 0x0, 0x0, 0x969edffe39095fd4, 0x3800)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x300, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x3000c085)
bind$unix(r7, 0x0, 0x0)

1.732880369s ago: executing program 0 (id=1003):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="340100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2100000000800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000030000000000000000000000000000000000060000000000fcffffffffffffff0000000000000000000000000000000000002000000000000700000100000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb050019003200000008000c000600000010000a"], 0x134}}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
shutdown(r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f00000080c0)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x8, @private2, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r5, 0x1)
getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x7)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000206010400000000000000000700000014000780080011400000000005001500810000000500010006000000050005000200000005000400030000000900020073797a30000000000d"], 0x5c}}, 0x20004000)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x800, 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x2, 0x6, 0xffffffff, r6}, 0x10)
r7 = fcntl$dupfd(r1, 0x406, r1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="a00000000a0a01030000000000000000070000070800034000000072080008400000000171000d4034a5fe17d752d3c3d0a26ba45e8291b4a97cf435e59ac816c33a5ae586de240752ab3a1704dd7cc26ff4691da7d2c8041fdc67f71ea576049190e530b1e8b5cb9aae45ad41afa2eebed2f5b41fec2fa1eb55d00987020d8a55d68dfe52059dd18b3ef7350f937c3a4b700d4ab647"], 0xa0}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x8}}]}, 0x1, 0x4c7, &(0x7f0000008740)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f0000001400))

286.884037ms ago: executing program 4 (id=1004):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x80800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x4000004, 0x4, 0x10000, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6)
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1c4, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf29}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x896}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x527}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x156a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}}, 0x44048)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1000}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000001}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4040010)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="6a35df891be09646b62710b05dfd4983b3a3641b115da91add39ce244b4d2e84f97b30a8dbd7ee7826690df19b34ba8a38f981b6ec353b4dbdf87398cb1ccbe26cef31c3cbcb5a1900f1e841bd3a4e159c31128f993820818879c2c86002896232b30d1cc5d70880e37197681c4425a1bd07409e34a6e31392d755521e33572e353b592b0337bfc83f10bac0b47aea5d8f51060a48064811c640cf1327d6793bac03891403c0", 0xa6}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)

5.74254ms ago: executing program 2 (id=1005):
r0 = socket$inet(0x2, 0x1, 0xfffffffb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x46c5, 0x9ab, 0x0, 0x4, 0x763, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstatfs(0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x206)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'security.', 'REJECT\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='1', 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x55b7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_ident={0x0, 0xb, 0x6, 0x0, 0x8}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1)

0s ago: executing program 1 (id=1006):
r0 = socket$inet(0x2, 0x1, 0xfffffffb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x46c5, 0x9ab, 0x0, 0x4, 0x763, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstatfs(0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x206)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@random={'security.', 'REJECT\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='1', 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x55b7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_ident={0x0, 0xb, 0x6, 0x0, 0x8}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1)

kernel console output (not intermixed with test programs):

 audit: type=1400 audit(1789603535.163:1772): avc:  denied  { ioctl } for  pid=5280 comm="syz.4.336" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  109.281296][ T5283] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  109.319038][   T29] audit: type=1400 audit(1789603535.203:1773): avc:  denied  { ioctl } for  pid=5292 comm="syz.2.338" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  109.373535][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.442277][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'.
[  109.442306][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  109.442613][ T5293] netlink: 'syz.2.338': attribute type 14 has an invalid length.
[  109.477279][   T29] audit: type=1400 audit(1789603535.363:1774): avc:  denied  { create } for  pid=5294 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  109.477549][   T29] audit: type=1400 audit(1789603535.363:1775): avc:  denied  { write } for  pid=5294 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  109.801152][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'.
[  109.846164][   T29] audit: type=1400 audit(1789603535.733:1776): avc:  denied  { name_bind } for  pid=5314 comm="syz.3.344" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  109.880221][   T29] audit: type=1400 audit(1789603535.763:1777): avc:  denied  { associate } for  pid=5314 comm="syz.3.344" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  109.910676][   T29] audit: type=1400 audit(1789603535.793:1778): avc:  denied  { append } for  pid=5314 comm="syz.3.344" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  110.432215][ T5350] loop3: detected capacity change from 0 to 512
[  110.456000][ T5350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  110.474710][ T5350] EXT4-fs (loop3): 1 truncate cleaned up
[  110.475560][ T5350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.479953][ T5355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5355 comm=syz.1.348
[  110.726719][ T5366] EXT4-fs (loop3): Online defrag not supported for non-extent files
[  111.043164][ T5349] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  111.169308][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.332591][ T5403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5403 comm=syz.3.365
[  111.379104][ T5388] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  111.397806][ T5409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5409 comm=syz.0.363
[  111.837587][ T5426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6426 sclass=netlink_route_socket pid=5426 comm=syz.3.367
[  111.979108][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.980265][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.980323][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.387435][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  112.387522][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  112.387625][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  112.387648][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  112.387707][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  112.387726][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  112.387775][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.0.375
[  113.068456][ T5470] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  113.701717][ T5457] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  113.895949][ T5477] loop4: detected capacity change from 0 to 512
[  113.953002][ T5477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.953139][ T5477] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.087135][ T5475] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  114.090320][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  114.090344][   T29] audit: type=1400 audit(1789603539.973:1866): avc:  denied  { write } for  pid=5476 comm="syz.4.378" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  114.180699][ T5488] loop2: detected capacity change from 0 to 512
[  114.186332][ T5488] EXT4-fs: quotafile must be on filesystem root
[  114.279372][ T5477] netlink: 'syz.4.378': attribute type 1 has an invalid length.
[  114.340808][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  114.537776][ T5477] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.570869][ T5489] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  114.610122][ T5489] bond1: entered allmulticast mode
[  115.005288][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.230651][ T5479] SELinux: mls:  truncated range
[  115.230664][ T5479] SELinux: error reading MLS range of context
[  115.230672][ T5479] SELinux:  invalid ocon
[  115.331467][ T5479] SELinux: failed to load policy
[  115.396765][   T29] audit: type=1400 audit(1789603541.283:1867): avc:  denied  { write } for  pid=5506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.508829][ T5540] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  115.581081][   T29] audit: type=1400 audit(1789603541.473:1868): avc:  denied  { write } for  pid=5550 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.638859][ T5549] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  115.662242][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.663517][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.663570][ T5536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.669551][ T3021] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.084619][ T5580] loop1: detected capacity change from 0 to 256
[  116.104034][ T5580] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.150636][ T5580] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.246622][ T5591] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  116.298920][ T5598] loop0: detected capacity change from 0 to 128
[  116.321010][ T5600] netlink: 'syz.4.405': attribute type 1 has an invalid length.
[  116.351608][ T5598] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.359424][ T5598] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.466497][ T5600] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.561962][   T29] audit: type=1400 audit(1789603542.443:1869): avc:  denied  { write } for  pid=5576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.630150][ T5607] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.635801][ T5607] bond1: (slave ip6gre0): The slave device specified does not support setting the MAC address
[  116.673049][ T5607] bond1: (slave ip6gre0): Error -95 calling set_mac_address
[  116.676754][ T5613] SET target dimension over the limit!
[  116.999729][   T29] audit: type=1326 audit(1789603542.883:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b80ae159 code=0x7ffc0000
[  117.000018][   T29] audit: type=1326 audit(1789603542.883:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b80ae159 code=0x7ffc0000
[  117.000940][   T29] audit: type=1326 audit(1789603542.893:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b80ae159 code=0x7ffc0000
[  117.026978][   T29] audit: type=1326 audit(1789603542.913:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f22b80ae159 code=0x7ffc0000
[  117.027027][   T29] audit: type=1326 audit(1789603542.913:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b80ae159 code=0x7ffc0000
[  117.027206][   T29] audit: type=1326 audit(1789603542.913:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.1.400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b80ae159 code=0x7ffc0000
[  117.114187][ T5620] loop4: detected capacity change from 0 to 512
[  117.115090][ T5620] ext4: Unknown parameter 'uid<00000000000000000000'
[  117.208953][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.431236][ T5626] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  117.642585][ T5640] loop2: detected capacity change from 0 to 2048
[  117.717842][ T5640]  loop2: p2 p3 p7
[  117.948563][ T5640] can0: slcan on ttyS3.
[  118.001987][ T5640] can0 (unregistered): slcan off ttyS3.
[  118.003869][ T5660] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  118.242022][ T5683] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  118.300619][ T5698] xt_connbytes: Forcing CT accounting to be enabled
[  118.497595][ T5699] selinux_netlink_send: 5 callbacks suppressed
[  118.497619][ T5699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5699 comm=syz.0.429
[  118.890098][ T5725] netlink: 72 bytes leftover after parsing attributes in process `syz.2.427'.
[  119.155025][ T5739] loop0: detected capacity change from 0 to 164
[  119.164259][ T5725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.164421][ T5725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.194232][ T5739] ISOFS: unable to read i-node block
[  119.194258][ T5739] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  119.210147][ T5739] netlink: 'syz.0.428': attribute type 12 has an invalid length.
[  119.219804][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  119.219840][   T29] audit: type=1400 audit(1789603545.103:1926): avc:  denied  { connect } for  pid=5738 comm="syz.0.428" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  119.273045][   T29] audit: type=1400 audit(1789603545.163:1927): avc:  denied  { write } for  pid=5734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  119.277384][   T29] audit: type=1400 audit(1789603545.163:1928): avc:  denied  { cpu } for  pid=5738 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  119.419997][   T29] audit: type=1400 audit(1789603545.303:1929): avc:  denied  { write } for  pid=5752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  119.682559][ T5755] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  119.700316][   T29] audit: type=1400 audit(1789603545.583:1930): avc:  denied  { watch_reads } for  pid=5767 comm="syz.0.436" path="/80" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  119.813735][ T5764] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  119.935033][   T29] audit: type=1326 audit(1789603545.823:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349413e159 code=0x7ffc0000
[  119.939301][   T29] audit: type=1326 audit(1789603545.823:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349413e159 code=0x7ffc0000
[  119.940061][   T29] audit: type=1326 audit(1789603545.823:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349413e159 code=0x7ffc0000
[  119.940319][   T29] audit: type=1326 audit(1789603545.823:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349413e159 code=0x7ffc0000
[  119.941457][   T29] audit: type=1326 audit(1789603545.833:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz.4.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34940fe98e code=0x7ffc0000
[  120.042234][ T5790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6426 sclass=netlink_route_socket pid=5790 comm=syz.1.438
[  120.124861][ T5793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5793 comm=syz.3.440
[  120.204610][ T5795] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  120.328475][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.329387][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.329484][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.975618][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'.
[  120.999234][ T5823] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  121.005150][ T5840] loop2: detected capacity change from 0 to 512
[  121.111249][ T5838] netlink: 92 bytes leftover after parsing attributes in process `syz.4.445'.
[  121.127654][ T5838] netlink: 'syz.4.445': attribute type 1 has an invalid length.
[  121.127674][ T5838] netlink: 76 bytes leftover after parsing attributes in process `syz.4.445'.
[  121.155538][ T5838] loop4: detected capacity change from 0 to 164
[  121.193160][ T5838] Unable to read rock-ridge attributes
[  121.222303][ T5838] Unable to read rock-ridge attributes
[  121.225862][ T5838] iso9660: Corrupted directory entry in block 1 of inode 1792
[  121.442406][ T5861] xt_NFQUEUE: number of total queues is 0
[  121.566315][ T5869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5869 comm=syz.1.454
[  122.499633][ T5904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6426 sclass=netlink_route_socket pid=5904 comm=syz.2.456
[  122.572658][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.593644][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.593700][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.664443][ T5918] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  122.717926][ T5928] vhci_hcd vhci_hcd.2: invalid port number 96
[  122.717953][ T5928] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[  123.057943][ T5955] loop3: detected capacity change from 0 to 128
[  123.079021][ T5943] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  123.081662][ T5955] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  123.084648][ T5955] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.206314][ T5960] loop1: detected capacity change from 0 to 2048
[  123.248931][ T5955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.468'.
[  123.305010][ T5960]  loop1: p2 p3 p7
[  123.605832][ T5960] can0: slcan on ttyS3.
[  123.681726][ T5979] can0 (unregistered): slcan off ttyS3.
[  123.923209][ T5982] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  124.116022][ T6013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6013 comm=syz.2.476
[  124.693414][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  124.693435][   T29] audit: type=1400 audit(1789603550.563:2197): avc:  denied  { write } for  pid=6022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.761637][   T29] audit: type=1400 audit(1789603550.643:2198): avc:  denied  { write } for  pid=6033 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.803841][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.079503][ T6037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6037 comm=syz.3.479
[  125.158646][ T6048] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  125.164174][ T6057] loop4: detected capacity change from 0 to 1024
[  125.176097][ T6057] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  125.178449][ T6057] JBD2: no valid journal superblock found
[  125.178505][ T6057] EXT4-fs (loop4): Could not load journal inode
[  125.417629][   T29] audit: type=1326 audit(1789603551.303:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  125.417879][   T29] audit: type=1326 audit(1789603551.303:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  125.419636][   T29] audit: type=1326 audit(1789603551.303:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  125.518627][   T29] audit: type=1326 audit(1789603551.363:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f020077dec2 code=0x7ffc0000
[  125.541084][   T29] audit: type=1400 audit(1789603551.423:2203): avc:  denied  { write } for  pid=6036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.544167][   T29] audit: type=1326 audit(1789603551.433:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f020073e98e code=0x7ffc0000
[  125.555172][   T29] audit: type=1326 audit(1789603551.443:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f020077df87 code=0x7ffc0000
[  125.578717][   T29] audit: type=1326 audit(1789603551.463:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.2.485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f020073e98e code=0x7ffc0000
[  125.579073][ T6063] loop2: detected capacity change from 0 to 512
[  125.581635][ T6063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  125.765311][ T6063] EXT4-fs (loop2): 1 truncate cleaned up
[  125.798941][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.845055][ T6084] loop4: detected capacity change from 0 to 512
[  125.904774][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.905264][ T6084] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.231923][ T6078] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  126.374440][ T6095] EXT4-fs (loop2): Online defrag not supported for non-extent files
[  126.612750][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6426 sclass=netlink_route_socket pid=6099 comm=syz.3.490
[  126.949354][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.098054][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.131644][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.132257][ T6098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.185580][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.250216][ T6103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6103 comm=syz.1.491
[  127.361199][ T6117] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  127.389976][ T6120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.495'.
[  127.390102][ T6120] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  127.763583][ T6139] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  127.801670][ T6140] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  128.159428][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[  128.159457][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'.
[  128.159537][ T6148] netlink: 'syz.1.499': attribute type 14 has an invalid length.
[  128.216672][ T6165] loop4: detected capacity change from 0 to 512
[  128.232650][ T6165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  128.265842][ T6165] EXT4-fs (loop4): 1 truncate cleaned up
[  128.266458][ T6165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.442030][ T6176] EXT4-fs (loop4): Online defrag not supported for non-extent files
[  128.715156][ T6150] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  129.028228][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.074060][ T6211] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  129.309350][ T6228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6228 comm=syz.3.509
[  129.716663][ T6215] loop2: detected capacity change from 0 to 4096
[  129.930041][ T6215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.392748][   T29] kauditd_printk_skb: 73 callbacks suppressed
[  130.392791][   T29] audit: type=1400 audit(1789603556.283:2280): avc:  denied  { write } for  pid=6242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.778473][   T29] audit: type=1400 audit(1789603556.663:2281): avc:  denied  { write } for  pid=6207 comm="syz.2.507" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  130.807994][ T6209] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.507: corrupted inode contents
[  130.810343][ T6209] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #15: comm syz.2.507: mark_inode_dirty error
[  130.812416][ T6209] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.507: corrupted inode contents
[  130.815046][ T6209] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.507: mark_inode_dirty error
[  130.815774][ T6209] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.507: corrupted inode contents
[  130.817974][ T6209] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.507: mark_inode_dirty error
[  130.821680][ T6209] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.507: corrupted inode contents
[  130.822232][ T6209] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.507: mark_inode_dirty error
[  130.822843][ T6209] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem
[  130.846704][   T29] audit: type=1400 audit(1789603556.733:2282): avc:  denied  { write } for  pid=6270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.015839][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6276 comm=syz.0.516
[  131.203026][ T6269] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  131.240179][ T6252] siw: device registration error -23
[  131.366028][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.366410][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.480563][   T29] audit: type=1400 audit(1789603557.363:2283): avc:  denied  { write } for  pid=6277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.575234][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[  131.575261][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'.
[  131.575348][ T6296] netlink: 'syz.3.517': attribute type 14 has an invalid length.
[  131.608704][   T29] audit: type=1400 audit(1789603557.493:2284): avc:  denied  { write } for  pid=6297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.700681][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.725346][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.201577][ T3448] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.201910][ T3448] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.202218][ T3448] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.202279][ T3448] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.208182][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.362116][   T29] audit: type=1400 audit(1789603559.253:2285): avc:  denied  { write } for  pid=6317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.685727][   T29] audit: type=1400 audit(1789603559.573:2286): avc:  denied  { write } for  pid=6348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.930803][ T6353] gretap0: entered promiscuous mode
[  133.940351][ T6353] ip6tnl1: left allmulticast mode
[  133.966867][ T6353] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  134.450264][ T6328] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  134.453954][ T6351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6351 comm=syz.1.524
[  135.713403][ T6385] loop0: detected capacity change from 0 to 512
[  135.731912][   T29] audit: type=1400 audit(1789603561.623:2287): avc:  denied  { write } for  pid=6366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.927797][   T29] audit: type=1400 audit(1789603561.813:2288): avc:  denied  { write } for  pid=6398 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.954943][ T6394] loop3: detected capacity change from 0 to 512
[  135.998119][ T6385] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -ENXIO
[  136.066800][ T6394] rdma_rxe: rxe_newlink: failed to add bond0
[  136.264283][ T6385] loop0: detected capacity change from 0 to 512
[  136.288984][ T6385] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.531: iget: bad i_size value: 12154757448730
[  136.289022][ T6385] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  136.291337][ T6385] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.531: couldn't read orphan inode 13 (err -117)
[  136.291368][ T6385] loop0: lost filesystem error report for type 5 error -117
[  136.293036][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.440343][ T6413] netlink: 'syz.0.531': attribute type 4 has an invalid length.
[  136.617579][ T6411] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  136.647890][ T6425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6425 comm=syz.4.537
[  136.673733][   T29] audit: type=1400 audit(1789603562.533:2289): avc:  denied  { write } for  pid=6383 comm="syz.0.531" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  136.673775][   T29] audit: type=1400 audit(1789603562.533:2290): avc:  denied  { create } for  pid=6383 comm="syz.0.531" name="config" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  136.755943][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'.
[  137.001658][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.179766][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[  137.211692][   T29] audit: type=1400 audit(1789603563.103:2291): avc:  denied  { write } for  pid=6429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  137.321272][ T6448] xt_connbytes: Forcing CT accounting to be enabled
[  137.382473][   T29] audit: type=1400 audit(1789603563.273:2292): avc:  denied  { write } for  pid=6449 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  137.805136][ T6459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6459 comm=syz.4.543
[  137.910175][ T6471] loop2: detected capacity change from 0 to 128
[  137.959886][ T6471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  137.965214][ T6471] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.988024][   T29] audit: type=1400 audit(1789603563.863:2293): avc:  denied  { sys_module } for  pid=6463 comm="syz.0.544" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  138.034231][   T29] audit: type=1400 audit(1789603563.923:2294): avc:  denied  { write } for  pid=6469 comm="syz.2.547" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  138.050995][ T6482] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  138.285063][   T29] audit: type=1400 audit(1789603564.173:2295): avc:  denied  { write } for  pid=6458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  138.481421][   T29] audit: type=1400 audit(1789603564.363:2296): avc:  denied  { write } for  pid=6496 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  138.644929][ T6507] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  138.723086][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.318992][ T6533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6533 comm=syz.0.553
[  139.924561][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'.
[  139.954772][ T6532] nftables ruleset with unbound set
[  140.387279][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'.
[  140.416268][ T6546] xt_connbytes: Forcing CT accounting to be enabled
[  140.741898][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  140.741918][   T29] audit: type=1326 audit(1789603566.623:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.742571][   T29] audit: type=1326 audit(1789603566.633:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.744959][   T29] audit: type=1326 audit(1789603566.633:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.745379][   T29] audit: type=1326 audit(1789603566.633:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.747757][   T29] audit: type=1326 audit(1789603566.633:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.784222][   T29] audit: type=1326 audit(1789603566.633:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.784259][   T29] audit: type=1326 audit(1789603566.633:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.784293][   T29] audit: type=1326 audit(1789603566.633:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.784329][   T29] audit: type=1326 audit(1789603566.633:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.784424][   T29] audit: type=1326 audit(1789603566.633:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.0.565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa81c74e98e code=0x7ffc0000
[  140.844259][ T3449] Bluetooth: hci0: Frame reassembly failed (-84)
[  141.087889][ T6565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.558'.
[  141.088020][ T6565] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  141.257366][ T6580] loop2: detected capacity change from 0 to 512
[  141.265148][ T6580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  141.279513][ T6580] EXT4-fs (loop2): 1 truncate cleaned up
[  141.282775][ T6580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.900712][ T3668] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  142.975894][ T6623] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  143.029275][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.149053][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6653 comm=syz.1.566
[  144.173125][ T6699] bridge0: left promiscuous mode
[  144.185970][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.213659][ T6699] 8021q: adding VLAN 0 to HW filter on device team0
[  144.247912][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.369338][ T6666] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  145.009946][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.022110][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.033345][ T6705] loop4: detected capacity change from 0 to 512
[  145.037246][ T6699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.037272][ T6699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.058185][ T6699] veth1_vlan: left promiscuous mode
[  145.065539][ T6699] veth0_vlan: left promiscuous mode
[  145.075328][ T6699] veth0_vlan: entered promiscuous mode
[  145.081623][ T6699] veth1_vlan: entered promiscuous mode
[  145.092611][ T6699] veth1_macvtap: left promiscuous mode
[  145.094970][ T6699] veth0_macvtap: left promiscuous mode
[  145.097319][ T6699] veth0_macvtap: entered promiscuous mode
[  145.099855][ T6699] veth1_macvtap: entered promiscuous mode
[  145.116321][ T6699] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  145.127054][ T6699] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  145.137946][ T6699] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  145.149360][ T6699] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  145.164008][ T6699] gretap0: entered promiscuous mode
[  145.167352][ T6699] batman_adv: batadv0: Interface activated: macvtap1
[  145.172105][ T6699] ip6tnl1: left allmulticast mode
[  145.186966][ T6699] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  145.188426][ T3385] bridge0: entered promiscuous mode
[  145.209719][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.209761][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.216244][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.216356][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.101965][   T70] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.102166][   T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.103907][   T70] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.103935][   T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.104336][   T70] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.104408][   T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.107875][   T70] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.108295][   T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.284055][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.574'.
[  146.489282][ T6719] gretap0: entered promiscuous mode
[  146.528123][ T6719] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  146.735829][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.735983][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.034260][ T6312] lo speed is unknown, defaulting to 1000
[  147.047677][ T3449] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.071477][ T6705] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -ENXIO
[  147.236703][  T318] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.236808][  T318] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.301229][  T314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.328784][   T70] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  147.328947][   T70] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  147.456372][ T6309] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  147.670228][   T29] kauditd_printk_skb: 102 callbacks suppressed
[  147.670243][   T29] audit: type=1400 audit(1789603573.553:2512): avc:  denied  { write } for  pid=6693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.751691][ T6309] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  147.841709][ T6309] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  147.932305][   T29] audit: type=1400 audit(1789603573.813:2513): avc:  denied  { write } for  pid=6747 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.185084][ T6764] loop0: detected capacity change from 0 to 128
[  148.188154][ T6767] loop2: detected capacity change from 0 to 128
[  148.224831][ T6764] netlink: 14 bytes leftover after parsing attributes in process `syz.0.591'.
[  148.247502][ T6767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.253702][ T6767] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.280930][ T6743] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  148.310543][ T6764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.361896][ T6764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.388428][ T6764] bond0 (unregistering): Released all slaves
[  148.597404][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.699138][ T6761] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  148.771855][ T6790] netlink: 452 bytes leftover after parsing attributes in process `syz.4.586'.
[  148.771883][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.586'.
[  149.501251][   T29] audit: type=1400 audit(1789603575.383:2514): avc:  denied  { setattr } for  pid=6785 comm="syz.2.585" name="/" dev="configfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  150.879671][ T6805] geneve1: left promiscuous mode
[  150.888606][ T6805] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  150.925907][ T6805] ip6tnl1: left allmulticast mode
[  150.948367][ T6805] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.144434][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  151.172071][ T6708] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.181355][  T318] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.181778][  T318] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.183067][  T318] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.063615][ T6814] loop4: detected capacity change from 0 to 164
[  152.128348][ T6814] ISOFS: unable to read i-node block
[  152.128373][ T6814] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  152.349980][ T6810] netlink: 'syz.4.589': attribute type 12 has an invalid length.
[  152.384067][ T6812] loop1: detected capacity change from 0 to 512
[  152.477766][ T6812] rdma_rxe: rxe_newlink: failed to add bond0
[  153.266314][   T29] audit: type=1400 audit(1789603579.153:2515): avc:  denied  { write } for  pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.359865][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'.
[  153.369699][ T6846] netlink: 'syz.1.598': attribute type 10 has an invalid length.
[  153.370462][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.370850][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.431989][   T29] audit: type=1400 audit(1789603579.323:2516): avc:  denied  { write } for  pid=6855 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.453041][ T6832] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  153.615880][  T318] Bluetooth: hci0: Frame reassembly failed (-84)
[  154.356183][ T6903] loop3: detected capacity change from 0 to 512
[  154.417580][ T6877] loop1: detected capacity change from 0 to 512
[  154.443873][   T29] audit: type=1400 audit(1789603580.323:2517): avc:  denied  { write } for  pid=6867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.475297][ T6877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  154.479608][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.479738][ T6903] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.551249][   T29] audit: type=1400 audit(1789603580.443:2518): avc:  denied  { write } for  pid=6901 comm="syz.3.604" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  154.605252][ T6877] EXT4-fs (loop1): 1 truncate cleaned up
[  154.606184][ T6877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.629951][   T29] audit: type=1400 audit(1789603580.513:2519): avc:  denied  { write } for  pid=6901 comm="syz.3.604" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  154.700724][   T29] audit: type=1400 audit(1789603580.573:2520): avc:  denied  { write } for  pid=6912 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.700765][   T29] audit: type=1400 audit(1789603580.583:2521): avc:  denied  { mounton } for  pid=6901 comm="syz.3.604" path="/128/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  154.830819][ T6914] loop3: detected capacity change from 512 to 0
[  154.840539][    C0] I/O error, dev loop3, sector 60 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2
[  154.840608][    C0] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2
[  154.840725][ T6903] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  154.840805][ T6903] EXT4-fs error (device loop3): ext4_write_dquot:7049: comm syz.3.604: Failed to commit dquot type 0
[  154.840865][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.840885][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.840981][ T6903] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  154.841003][ T6903] EXT4-fs error (device loop3): ext4_write_dquot:7049: comm syz.3.604: Failed to commit dquot type 1
[  154.841140][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.841161][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.841472][ T6903] EXT4-fs error (device loop3): ext4_get_inode_loc:5054: inode #16: block 34: comm syz.3.604: unable to read itable block
[  154.841519][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.841540][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.841634][ T6903] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: IO failure
[  154.841666][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.841685][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.841703][ T6903] EXT4-fs error (device loop3): ext4_ext_truncate:4565: inode #16: comm syz.3.604: mark_inode_dirty error
[  154.841767][ T6916] EXT4-fs error (device loop3): __ext4_find_entry:1617: inode #2: comm syz.3.604: reading directory lblock 0
[  154.841780][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.841838][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.841897][ T6916] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.841909][ T6903] EXT4-fs error (device loop3): ext4_get_inode_loc:5054: inode #16: block 34: comm syz.3.604: unable to read itable block
[  154.841961][ T6903] EXT4-fs (loop3): previous I/O error to superblock detected
[  154.841972][ T6916] EXT4-fs (loop3): I/O error while writing superblock
[  154.841978][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.842068][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.842084][ T6903] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: IO failure
[  154.843040][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.843141][ T6903] EXT4-fs (loop3): I/O error while writing superblock
[  154.843160][ T6903] EXT4-fs error (device loop3): ext4_truncate:4721: inode #16: comm syz.3.604: mark_inode_dirty error
[  154.843209][ T6903] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  154.843478][ T6903] EXT4-fs warning (device loop3): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 38)
[  154.843506][ T6903] Buffer I/O error on device loop3, logical block 38
[  154.843521][ T6903] Buffer I/O error on device loop3, logical block 39
[  154.843550][ T6903] Buffer I/O error on device loop3, logical block 40
[  154.843568][ T6903] Buffer I/O error on device loop3, logical block 41
[  154.843914][ T6903] EXT4-fs warning (device loop3): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 42)
[  154.844024][ T6903] EXT4-fs warning (device loop3): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 45)
[  154.844053][ T6903] Buffer I/O error on device loop3, logical block 45
[  154.844098][ T6903] Buffer I/O error on device loop3, logical block 42
[  154.844342][ T6903] EXT4-fs warning (device loop3): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 48)
[  154.965628][ T6903] Buffer I/O error on device loop3, logical block 48
[  154.965719][ T6903] Buffer I/O error on device loop3, logical block 49
[  154.965900][ T6903] EXT4-fs warning (device loop3): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 52)
[  154.965934][ T6903] Buffer I/O error on device loop3, logical block 52
[  154.965988][ T6903] Buffer I/O error on device loop3, logical block 53
[  155.620863][ T3668] Bluetooth: hci0: command 0x1003 tx timeout
[  155.621094][ T6570] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  155.656906][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.802490][ T6948] loop2: detected capacity change from 0 to 164
[  155.818645][ T6948] ISOFS: unable to read i-node block
[  155.818845][ T6948] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  155.849746][ T3308] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  155.903147][ T6948] netlink: 'syz.2.612': attribute type 12 has an invalid length.
[  157.490954][   T29] audit: type=1400 audit(1789603583.373:2522): avc:  denied  { read write } for  pid=6971 comm="syz.1.616" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  157.665335][ T6973] loop1: detected capacity change from 0 to 512
[  157.823585][ T6973] loop1: detected capacity change from 0 to 512
[  157.830450][ T6973] EXT4-fs: Ignoring removed i_version option
[  157.890870][ T6973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.890959][ T6973] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.964520][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[  158.099616][ T6973] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.616: iget: bad i_size value: 2533274857506816
[  158.420135][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.686926][ T6974] lo speed is unknown, defaulting to 1000
[  159.031086][ T7006] loop1: detected capacity change from 0 to 1024
[  159.031926][ T7006] EXT4-fs: inline encryption not supported
[  159.054276][ T7006] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  159.060798][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  159.135385][ T7006] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.618: lblock 1 mapped to illegal pblock 1 (length 1)
[  159.135423][ T7006] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  159.136133][ T7006] __quota_error: 5 callbacks suppressed
[  159.136146][ T7006] Quota error (device loop1): write_blk: dquota write failed
[  159.136171][ T7006] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  159.136229][ T7006] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.618: Failed to acquire dquot type 0
[  159.136306][ T7006] loop1: lost filesystem error report for type 5 error -117
[  159.137699][ T7006] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.618: Freeing blocks not in datazone - block = 0, count = 4096
[  159.137822][ T7006] loop1: lost filesystem error report for type 5 error -117
[  159.140661][    C1] EXT4-fs (loop1): error count since last fsck: 3
[  159.140677][    C1] EXT4-fs (loop1): initial error at time 1789603585: ext4_map_blocks:832: inode 3: block 1
[  159.140749][    C1] EXT4-fs (loop1): last error at time 1789603585: ext4_free_blocks:6719
[  159.140994][ T7006] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.618: Invalid inode bitmap blk 0 in block_group 0
[  159.141038][ T7006] loop1: lost filesystem error report for type 5 error -117
[  159.158583][ T7006] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[  159.158606][ T7006] loop1: lost filesystem error report for type 5 error -117
[  159.160298][ T7006] EXT4-fs (loop1): 1 orphan inode deleted
[  159.237163][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.863434][   T51] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  159.863810][   T51] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  159.863837][   T51] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0
[  160.463564][   T29] audit: type=1400 audit(1789603586.353:2528): avc:  denied  { write } for  pid=7010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.563571][   T29] audit: type=1400 audit(1789603586.453:2529): avc:  denied  { write } for  pid=7036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.564512][   T29] audit: type=1400 audit(1789603586.453:2530): avc:  denied  { getopt } for  pid=7031 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.805318][ T7035] xt_NFQUEUE: number of total queues is 0
[  160.828371][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.828411][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.828454][ T6974] bridge_slave_0: entered allmulticast mode
[  160.851370][ T6974] bridge_slave_0: entered promiscuous mode
[  160.859936][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.859965][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.860040][ T6974] bridge_slave_1: entered allmulticast mode
[  160.885280][ T6974] bridge_slave_1: entered promiscuous mode
[  160.927202][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.942970][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.963338][   T29] audit: type=1400 audit(1789603586.853:2531): avc:  denied  { checkpoint_restore } for  pid=7031 comm="syz.2.621" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.014632][ T6974] team0: Port device team_slave_0 added
[  161.017626][ T6974] team0: Port device team_slave_1 added
[  161.072022][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.072036][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.072069][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.072653][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.072665][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.072689][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.184991][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.243901][ T6974] hsr_slave_0: entered promiscuous mode
[  161.244250][ T6974] hsr_slave_1: entered promiscuous mode
[  161.244507][ T6974] debugfs: 'hsr0' already exists in 'hsr'
[  161.244521][ T6974] Cannot create hsr debugfs directory
[  161.431716][ T7035] Process accounting resumed
[  161.507873][ T6974] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  161.509487][   T29] audit: type=1400 audit(1789603587.393:2532): avc:  denied  { write } for  pid=7062 comm="syz.4.627" name="target" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  161.517312][   T29] audit: type=1400 audit(1789603587.403:2533): avc:  denied  { write } for  pid=7062 comm="syz.4.627" name="usb_gadget" dev="configfs" ino=13730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  161.564544][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  161.565061][ T6974] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  161.577635][   T29] audit: type=1400 audit(1789603587.463:2534): avc:  denied  { write } for  pid=7062 comm="syz.4.627" name="naa.1234567890abcdef" dev="configfs" ino=13732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  161.605805][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  161.606574][ T6974] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  161.619785][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  161.624191][ T6974] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  161.635568][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  161.783988][ T7086] alloc_netdev: Unable to allocate device with zero queues
[  161.863624][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.897827][ T6974] 8021q: adding VLAN 0 to HW filter on device team0
[  161.908941][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.908974][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.945632][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.945662][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.247966][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.324121][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'.
[  162.494974][ T6974] veth0_vlan: entered promiscuous mode
[  162.497817][ T6974] veth1_vlan: entered promiscuous mode
[  162.522998][ T6974] veth0_macvtap: entered promiscuous mode
[  162.528013][ T6974] veth1_macvtap: entered promiscuous mode
[  162.545858][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.553883][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.571102][   T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.571159][   T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.571247][   T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.571309][   T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.953430][ T7190] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  163.286274][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'.
[  163.488000][ T7256] xt_NFQUEUE: number of total queues is 0
[  163.911140][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'.
[  164.049816][ T7273] FAULT_INJECTION: forcing a failure.
[  164.049816][ T7273] name failslab, interval 1, probability 0, space 0, times 1
[  164.049850][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.0.650 Not tainted syzkaller #0 PREEMPT(lazy) 
[  164.049905][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.049920][ T7273] Call Trace:
[  164.049928][ T7273]  <TASK>
[  164.049937][ T7273]  __dump_stack+0x1d/0x30
[  164.049968][ T7273]  dump_stack_lvl+0x95/0xd0
[  164.049993][ T7273]  dump_stack+0x15/0x1b
[  164.050072][ T7273]  should_fail_ex+0x262/0x280
[  164.050108][ T7273]  should_failslab+0x8c/0xb0
[  164.050187][ T7273]  __kmalloc_node_noprof+0xdb/0x500
[  164.050220][ T7273]  ? crypto_create_tfm_node+0x5b/0x230
[  164.050279][ T7273]  ? crypto_create_tfm_node+0x5b/0x230
[  164.050362][ T7273]  crypto_create_tfm_node+0x5b/0x230
[  164.050391][ T7273]  crypto_spawn_tfm2+0x43/0x80
[  164.050419][ T7273]  ? __pfx_crypto_authenc_init_tfm+0x10/0x10
[  164.050527][ T7273]  crypto_authenc_init_tfm+0x2f/0x100
[  164.050561][ T7273]  ? __pfx_crypto_authenc_init_tfm+0x10/0x10
[  164.050600][ T7273]  crypto_aead_init_tfm+0xb7/0xd0
[  164.050632][ T7273]  crypto_create_tfm_node+0xcf/0x230
[  164.050707][ T7273]  crypto_spawn_tfm2+0x43/0x80
[  164.050733][ T7273]  aead_init_geniv+0x71/0xe0
[  164.050767][ T7273]  ? __pfx_aead_init_geniv+0x10/0x10
[  164.050797][ T7273]  crypto_aead_init_tfm+0xb7/0xd0
[  164.050847][ T7273]  crypto_create_tfm_node+0xcf/0x230
[  164.050867][ T7273]  crypto_alloc_tfm_node+0xb8/0x280
[  164.050890][ T7273]  crypto_alloc_aead+0x2d/0x40
[  164.050946][ T7273]  esp6_init_state+0x3ec/0xa00
[  164.051083][ T7273]  ? should_failslab+0x8c/0xb0
[  164.051204][ T7273]  __xfrm_init_state+0x6b9/0xb40
[  164.051303][ T7273]  xfrm_init_state+0x1e/0x80
[  164.051382][ T7273]  pfkey_add+0xfc5/0x12b0
[  164.051422][ T7273]  pfkey_sendmsg+0x839/0x970
[  164.051523][ T7273]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  164.051571][ T7273]  ____sys_sendmsg+0x532/0x580
[  164.051598][ T7273]  ___sys_sendmsg+0x195/0x1e0
[  164.051634][ T7273]  __x64_sys_sendmsg+0xd4/0x160
[  164.051708][ T7273]  x64_sys_call+0x22ab/0x2550
[  164.051736][ T7273]  do_syscall_64+0x112/0x360
[  164.051846][ T7273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.051871][ T7273] RIP: 0033:0x7fa81c78e159
[  164.051890][ T7273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.051990][ T7273] RSP: 002b:00007fa81b1a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.052014][ T7273] RAX: ffffffffffffffda RBX: 00007fa81ca16180 RCX: 00007fa81c78e159
[  164.052103][ T7273] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  164.052118][ T7273] RBP: 00007fa81c82506b R08: 0000000000000000 R09: 0000000000000000
[  164.052133][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.052148][ T7273] R13: 00007fa81ca16218 R14: 00007fa81ca16180 R15: 00007ffc3d220098
[  164.052183][ T7273]  </TASK>
[  164.485419][ T7086] netdevsim netdevsim10: probe with driver netdevsim failed with error -12
[  164.821840][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7301 comm=syz.0.655
[  164.947959][   T29] kauditd_printk_skb: 15 callbacks suppressed
[  164.947976][   T29] audit: type=1400 audit(1789603590.833:2550): avc:  denied  { write } for  pid=7300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.991115][ T7283] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  165.017082][   T29] audit: type=1400 audit(1789603590.903:2551): avc:  denied  { write } for  pid=7313 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.163118][   T29] audit: type=1400 audit(1789603591.053:2552): avc:  denied  { write } for  pid=7319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.219466][   T29] audit: type=1400 audit(1789603591.103:2553): avc:  denied  { write } for  pid=7331 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.545973][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'.
[  165.548666][ T7349] netlink: 72 bytes leftover after parsing attributes in process `syz.2.661'.
[  165.607446][   T29] audit: type=1400 audit(1789603591.493:2554): avc:  denied  { write } for  pid=7333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.669576][   T29] audit: type=1400 audit(1789603591.553:2555): avc:  denied  { write } for  pid=7362 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.823119][ T7376] loop1: detected capacity change from 0 to 1024
[  165.887349][   T29] audit: type=1400 audit(1789603591.773:2556): avc:  denied  { accept } for  pid=7366 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  165.906350][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.912462][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.934615][   T29] audit: type=1400 audit(1789603591.823:2557): avc:  denied  { write } for  pid=7369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.987895][   T29] audit: type=1400 audit(1789603591.873:2558): avc:  denied  { write } for  pid=7383 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.100476][   T29] audit: type=1400 audit(1789603591.983:2559): avc:  denied  { write } for  pid=7390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.201521][ T7376] loop1: detected capacity change from 0 to 512
[  166.303629][ T7403] loop5: detected capacity change from 0 to 164
[  166.336512][ T7403] ISOFS: unable to read i-node block
[  166.336962][ T7403] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  166.348947][ T7376] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  166.349003][ T7376] FAT-fs (loop1): Filesystem has been set read-only
[  166.368376][ T7403] netlink: 'syz.5.659': attribute type 12 has an invalid length.
[  166.870825][ T7409] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  166.899067][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'.
[  166.962578][ T7445] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.966682][ T7445] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.994215][ T7467] lo speed is unknown, defaulting to 1000
[  168.582585][ T7520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7520 comm=syz.5.679
[  168.771825][ T7530] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  168.927965][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.686'.
[  168.927998][ T7541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.686'.
[  168.957129][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'.
[  169.223897][ T7493] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  169.260633][ T7585] loop5: detected capacity change from 0 to 256
[  169.261841][ T7585] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  169.302510][ T7585] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.335803][ T7591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7591 comm=syz.0.693
[  169.561380][ T7531] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  169.567523][ T7603] SET target dimension over the limit!
[  169.647140][ T7613] loop2: detected capacity change from 0 to 1024
[  169.960704][ T7613] loop2: detected capacity change from 0 to 512
[  169.990750][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  169.990766][   T29] audit: type=1400 audit(1789603595.873:2593): avc:  denied  { write } for  pid=7640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.570558][   T29] audit: type=1400 audit(1789603596.403:2594): avc:  denied  { name_connect } for  pid=7628 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  171.202827][   T29] audit: type=1400 audit(1789603597.093:2595): avc:  denied  { write } for  pid=7649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.277389][   T29] audit: type=1400 audit(1789603597.163:2596): avc:  denied  { write } for  pid=7678 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.475695][   T29] audit: type=1400 audit(1789603597.363:2597): avc:  denied  { write } for  pid=7688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.521838][   T29] audit: type=1400 audit(1789603597.413:2598): avc:  denied  { write } for  pid=7702 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.912034][ T7662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  171.912074][ T7675] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  172.170248][ T7730] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  172.197537][ T7730] loop1: detected capacity change from 0 to 512
[  172.207262][ T7730] EXT4-fs: Ignoring removed i_version option
[  172.207388][ T7730] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.234450][ T7730] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.713: corrupted in-inode xattr: e_value size too large
[  172.234504][ T7730] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  172.234636][ T7730] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.713: couldn't read orphan inode 15 (err -117)
[  172.234669][ T7730] loop1: lost filesystem error report for type 5 error -117
[  172.235202][ T7730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.296539][   T29] audit: type=1400 audit(1789603598.123:2599): avc:  denied  { write } for  pid=7729 comm="syz.1.713" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  172.329490][ T7738] loop4: detected capacity change from 0 to 512
[  172.343877][   T29] audit: type=1400 audit(1789603598.233:2600): avc:  denied  { write } for  pid=7729 comm="syz.1.713" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  172.346909][   T29] audit: type=1400 audit(1789603598.233:2601): avc:  denied  { lock } for  pid=7729 comm="syz.1.713" path="/159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/freezer.state" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  172.460849][   T29] audit: type=1400 audit(1789603598.343:2602): avc:  denied  { write } for  pid=7731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  172.576241][ T7751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7751 comm=syz.5.714
[  172.579067][ T7727] loop4: detected capacity change from 0 to 512
[  172.603076][ T7727] EXT4-fs: Ignoring removed i_version option
[  172.620260][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.671956][ T7727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.679739][ T7727] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.697603][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'.
[  172.809784][ T7727] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.712: iget: bad i_size value: 2533274857506816
[  172.857378][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.987848][ T7764] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  173.071255][ T7782] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  173.094939][   T31] IPVS: starting estimator thread 0...
[  173.194372][ T7803] IPVS: using max 2304 ests per chain, 115200 per kthread
[  173.403461][ T7832] netlink: 72 bytes leftover after parsing attributes in process `syz.0.725'.
[  173.427893][ T7800] loop2: detected capacity change from 0 to 512
[  173.492518][ T7800] EXT4-fs (loop2): 1 truncate cleaned up
[  173.505797][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.569690][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.745001][ T7862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7862 comm=syz.1.728
[  173.749244][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.754654][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.780660][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  173.987182][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.987351][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.056042][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.058577][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.113244][   T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.113288][   T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.113453][   T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.113538][   T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.612126][ T7927] netlink: 108 bytes leftover after parsing attributes in process `syz.5.735'.
[  174.656052][ T7914] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  174.742065][ T7939] kernel profiling enabled (shift: 9)
[  174.770980][ T7932] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  174.802505][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.807319][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.115165][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  175.115181][   T29] audit: type=1400 audit(1789603601.003:2717): avc:  denied  { write } for  pid=7957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.191986][   T29] audit: type=1400 audit(1789603601.083:2718): avc:  denied  { write } for  pid=7971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.247658][ T7970] loop1: detected capacity change from 0 to 164
[  175.255576][ T7976] netlink: 72 bytes leftover after parsing attributes in process `syz.4.744'.
[  175.271873][ T7970] ISOFS: unable to read i-node block
[  175.271952][ T7970] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  175.404197][   T29] audit: type=1400 audit(1789603601.293:2719): avc:  denied  { write } for  pid=7977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.419247][ T7970] netlink: 'syz.1.743': attribute type 12 has an invalid length.
[  175.433687][   T29] audit: type=1400 audit(1789603601.303:2720): avc:  denied  { create } for  pid=7986 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  175.487435][   T29] audit: type=1400 audit(1789603601.373:2721): avc:  denied  { write } for  pid=7994 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.627987][ T7989] loop0: detected capacity change from 0 to 512
[  175.655560][   T29] audit: type=1400 audit(1789603601.543:2722): avc:  denied  { write } for  pid=7997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.674678][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.682909][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.698050][ T7989] EXT4-fs (loop0): invalid #clusters per group: 95
[  175.799245][   T29] audit: type=1400 audit(1789603601.683:2723): avc:  denied  { write } for  pid=8008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.978915][   T29] audit: type=1400 audit(1789603601.863:2724): avc:  denied  { write } for  pid=8011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.033398][   T29] audit: type=1400 audit(1789603601.923:2725): avc:  denied  { write } for  pid=8033 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.035139][ T8022] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  176.202446][   T29] audit: type=1400 audit(1789603602.093:2726): avc:  denied  { write } for  pid=8044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.243028][ T8041] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  176.928311][ T8040] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  177.156303][ T8139] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  177.408727][ T8183] device-mapper: ioctl: only supply one of name or uuid, cmd(9)
[  177.821870][ T8210] loop4: detected capacity change from 0 to 128
[  178.071063][ T8240] loop2: detected capacity change from 0 to 512
[  178.089746][ T8240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.089925][ T8240] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.202417][ T8240] netlink: 'syz.2.777': attribute type 1 has an invalid length.
[  178.202436][ T8240] netlink: 220 bytes leftover after parsing attributes in process `syz.2.777'.
[  178.301112][ T8245] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  178.731891][ T8290] loop0: detected capacity change from 0 to 1024
[  178.732802][ T8290] EXT4-fs: inline encryption not supported
[  178.735712][ T8290] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  178.841695][ T8290] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #3: block 1: comm syz.0.783: lblock 1 mapped to illegal pblock 1 (length 1)
[  178.841729][ T8290] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  178.844342][ T8290] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.783: Failed to acquire dquot type 0
[  178.844386][ T8290] loop0: lost filesystem error report for type 5 error -117
[  178.844599][ T8290] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.783: Freeing blocks not in datazone - block = 0, count = 4096
[  178.844703][ T8290] loop0: lost filesystem error report for type 5 error -117
[  178.849102][ T8290] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.783: Invalid inode bitmap blk 0 in block_group 0
[  178.849177][ T8290] loop0: lost filesystem error report for type 5 error -117
[  178.849338][ T8290] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem
[  178.849427][ T8290] loop0: lost filesystem error report for type 5 error -117
[  178.849499][ T8290] EXT4-fs (loop0): 1 orphan inode deleted
[  178.850366][ T8290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.160172][   T51] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  179.160462][   T51] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0
[  179.209392][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.231515][ T8291] 9p: Could not find request transport: f
[  179.384093][ T8313] loop4: detected capacity change from 0 to 164
[  179.408744][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.433484][ T8313] ISOFS: unable to read i-node block
[  179.433635][ T8313] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  179.466482][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'.
[  179.490838][ T8313] netlink: 'syz.4.789': attribute type 12 has an invalid length.
[  179.781088][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.793'.
[  179.827165][ T8328] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  179.835694][ T8322] loop5: detected capacity change from 0 to 512
[  179.909434][ T8322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  179.909521][ T8322] System zones: 1-12
[  179.913749][ T8322] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.790: missing EA_INODE flag
[  179.913841][ T8322] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  179.916561][ T8322] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.790: error while reading EA inode 12 err=-117
[  179.916631][ T8322] loop5: lost filesystem error report for type 5 error -117
[  179.917533][ T8322] EXT4-fs (loop5): 1 orphan inode deleted
[  179.934276][ T8322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.026333][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.790'.
[  180.213523][   T29] kauditd_printk_skb: 138 callbacks suppressed
[  180.213537][   T29] audit: type=1400 audit(1789603606.160:2862): avc:  denied  { write } for  pid=8357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.283241][   T29] audit: type=1400 audit(1789603606.230:2863): avc:  denied  { write } for  pid=8373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.314070][   T29] audit: type=1400 audit(1789603606.260:2864): avc:  denied  { read } for  pid=8320 comm="syz.5.790" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  180.314133][   T29] audit: type=1400 audit(1789603606.260:2865): avc:  denied  { ioctl } for  pid=8320 comm="syz.5.790" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  180.333849][ T8370] random: crng reseeded on system resumption
[  180.414722][ T8376] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  180.445919][ T8388] xt_NFQUEUE: number of total queues is 0
[  180.473004][ T6974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.987812][ T8417] loop4: detected capacity change from 0 to 1024
[  180.988608][ T8417] EXT4-fs: inline encryption not supported
[  181.044105][ T8417] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  181.063850][ T8417] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.803: lblock 1 mapped to illegal pblock 1 (length 1)
[  181.063995][ T8417] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  181.064143][ T8417] Quota error (device loop4): write_blk: dquota write failed
[  181.064157][ T8417] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  181.064229][ T8417] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.803: Failed to acquire dquot type 0
[  181.064248][ T8417] loop4: lost filesystem error report for type 5 error -117
[  181.064429][ T8417] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.803: Freeing blocks not in datazone - block = 0, count = 4096
[  181.064523][ T8417] loop4: lost filesystem error report for type 5 error -117
[  181.064733][ T8417] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.803: Invalid inode bitmap blk 0 in block_group 0
[  181.064755][ T8417] loop4: lost filesystem error report for type 5 error -117
[  181.064930][ T8417] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem
[  181.064957][ T8417] loop4: lost filesystem error report for type 5 error -117
[  181.065196][ T8417] EXT4-fs (loop4): 1 orphan inode deleted
[  181.065984][ T8417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.083661][   T31] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  181.083892][   T31] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  181.083928][   T31] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0
[  181.274672][ T8421] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  181.478357][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.807'.
[  181.481162][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'.
[  181.763249][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.815858][ T8439] loop0: detected capacity change from 0 to 164
[  181.881560][   T29] audit: type=1400 audit(1789603607.820:2866): avc:  denied  { write } for  pid=8412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.890889][ T8439] ISOFS: unable to read i-node block
[  181.891328][ T8439] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  181.959150][   T29] audit: type=1400 audit(1789603607.900:2867): avc:  denied  { write } for  pid=8451 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.985405][ T8439] netlink: 'syz.0.809': attribute type 12 has an invalid length.
[  182.169610][   T29] audit: type=1400 audit(1789603608.110:2868): avc:  denied  { write } for  pid=8456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  182.735103][ T8457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  182.771415][ T8527] FAULT_INJECTION: forcing a failure.
[  182.771415][ T8527] name failslab, interval 1, probability 0, space 0, times 0
[  182.771460][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.2.820 Not tainted syzkaller #0 PREEMPT(lazy) 
[  182.771483][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.771520][ T8527] Call Trace:
[  182.771566][ T8527]  <TASK>
[  182.771574][ T8527]  __dump_stack+0x1d/0x30
[  182.771680][ T8527]  dump_stack_lvl+0x95/0xd0
[  182.771700][ T8527]  dump_stack+0x15/0x1b
[  182.771774][ T8527]  should_fail_ex+0x262/0x280
[  182.771800][ T8527]  ? __alloc_skb+0x2e0/0x6f0
[  182.771833][ T8527]  should_failslab+0x8c/0xb0
[  182.771891][ T8527]  kmem_cache_alloc_node_noprof+0x82/0x400
[  182.771923][ T8527]  ? __wake_up+0x88/0xb0
[  182.771946][ T8527]  ? __alloc_skb+0x2e0/0x6f0
[  182.772055][ T8527]  __alloc_skb+0x2e0/0x6f0
[  182.772102][ T8527]  ? __alloc_skb+0x209/0x6f0
[  182.772132][ T8527]  __pfkey_xfrm_state2msg+0x33f/0x13d0
[  182.772162][ T8527]  ? xfrm_send_state_notify+0xd62/0xfa0
[  182.772268][ T8527]  pfkey_send_notify+0x172/0x5c0
[  182.772312][ T8527]  ? __pfx_pfkey_send_notify+0x10/0x10
[  182.772344][ T8527]  km_state_notify+0x5d/0xa0
[  182.772372][ T8527]  pfkey_add+0x1198/0x12b0
[  182.772435][ T8527]  pfkey_sendmsg+0x839/0x970
[  182.772479][ T8527]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  182.772507][ T8527]  ____sys_sendmsg+0x532/0x580
[  182.772528][ T8527]  ___sys_sendmsg+0x195/0x1e0
[  182.772608][ T8527]  __x64_sys_sendmsg+0xd4/0x160
[  182.772629][ T8527]  x64_sys_call+0x22ab/0x2550
[  182.772705][ T8527]  do_syscall_64+0x112/0x360
[  182.772806][ T8527]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  182.772832][ T8527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.772858][ T8527] RIP: 0033:0x7f020077e159
[  182.772877][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.772898][ T8527] RSP: 002b:00007f01ff195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.772983][ T8527] RAX: ffffffffffffffda RBX: 00007f0200a06180 RCX: 00007f020077e159
[  182.772997][ T8527] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  182.773011][ T8527] RBP: 00007f020081506b R08: 0000000000000000 R09: 0000000000000000
[  182.773027][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.773042][ T8527] R13: 00007f0200a06218 R14: 00007f0200a06180 R15: 00007ffeb1da9d68
[  182.773085][ T8527]  </TASK>
[  183.095374][ T8529] loop5: detected capacity change from 0 to 164
[  183.201274][ T8535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'.
[  183.314872][ T8543] loop5: detected capacity change from 0 to 1024
[  183.315686][ T8543] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  183.316309][ T8543] JBD2: no valid journal superblock found
[  183.316325][ T8543] EXT4-fs (loop5): Could not load journal inode
[  183.457960][ T8525] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  183.685530][ T8555] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  183.927971][ T8584] netlink: 'syz.2.830': attribute type 10 has an invalid length.
[  183.971459][ T8576] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  183.990725][ T8602] xt_IDLETIMER: timeout value is zero
[  184.032334][ T8584] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  184.264901][ T8609] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  184.462739][ T8628] FAULT_INJECTION: forcing a failure.
[  184.462739][ T8628] name failslab, interval 1, probability 0, space 0, times 0
[  184.462804][ T8628] CPU: 0 UID: 0 PID: 8628 Comm: syz.4.838 Not tainted syzkaller #0 PREEMPT(lazy) 
[  184.462831][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.462843][ T8628] Call Trace:
[  184.462851][ T8628]  <TASK>
[  184.462860][ T8628]  __dump_stack+0x1d/0x30
[  184.462888][ T8628]  dump_stack_lvl+0x95/0xd0
[  184.462988][ T8628]  dump_stack+0x15/0x1b
[  184.463012][ T8628]  should_fail_ex+0x262/0x280
[  184.463035][ T8628]  ? __alloc_skb+0x2e0/0x6f0
[  184.463073][ T8628]  should_failslab+0x8c/0xb0
[  184.463107][ T8628]  kmem_cache_alloc_node_noprof+0x82/0x400
[  184.463162][ T8628]  ? __wake_up+0x88/0xb0
[  184.463184][ T8628]  ? __alloc_skb+0x2e0/0x6f0
[  184.463212][ T8628]  __alloc_skb+0x2e0/0x6f0
[  184.463264][ T8628]  ? __alloc_skb+0x209/0x6f0
[  184.463294][ T8628]  __pfkey_xfrm_state2msg+0x33f/0x13d0
[  184.463323][ T8628]  ? xfrm_send_state_notify+0xd62/0xfa0
[  184.463384][ T8628]  pfkey_send_notify+0x172/0x5c0
[  184.463560][ T8628]  ? __pfx_pfkey_send_notify+0x10/0x10
[  184.463591][ T8628]  km_state_notify+0x5d/0xa0
[  184.463646][ T8628]  pfkey_add+0x1198/0x12b0
[  184.463719][ T8628]  pfkey_sendmsg+0x839/0x970
[  184.463768][ T8628]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  184.463804][ T8628]  ____sys_sendmsg+0x532/0x580
[  184.463851][ T8628]  ___sys_sendmsg+0x195/0x1e0
[  184.463879][ T8628]  __x64_sys_sendmsg+0xd4/0x160
[  184.463905][ T8628]  x64_sys_call+0x22ab/0x2550
[  184.463983][ T8628]  do_syscall_64+0x112/0x360
[  184.464067][ T8628]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  184.464093][ T8628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.464118][ T8628] RIP: 0033:0x7f349413e159
[  184.464136][ T8628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.464157][ T8628] RSP: 002b:00007f3492b55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.464303][ T8628] RAX: ffffffffffffffda RBX: 00007f34943c6180 RCX: 00007f349413e159
[  184.464319][ T8628] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  184.464334][ T8628] RBP: 00007f34941d506b R08: 0000000000000000 R09: 0000000000000000
[  184.464350][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.464438][ T8628] R13: 00007f34943c6218 R14: 00007f34943c6180 R15: 00007ffd42622018
[  184.464460][ T8628]  </TASK>
[  184.576033][ T8639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8639 comm=syz.2.840
[  184.613419][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.839'.
[  185.315971][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  185.315987][   T29] audit: type=1400 audit(1789603611.260:2883): avc:  denied  { write } for  pid=8677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.354833][ T8640] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  185.363672][   T29] audit: type=1400 audit(1789603611.310:2884): avc:  denied  { write } for  pid=8697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.488014][ T8705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.848'.
[  185.498638][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.848'.
[  185.516060][   T29] audit: type=1400 audit(1789603611.460:2885): avc:  denied  { write } for  pid=8706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.589553][   T29] audit: type=1400 audit(1789603611.530:2886): avc:  denied  { write } for  pid=8721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.621883][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[  185.621954][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.848'.
[  185.773702][   T29] audit: type=1400 audit(1789603611.720:2887): avc:  denied  { write } for  pid=8730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.845779][   T29] audit: type=1400 audit(1789603611.790:2888): avc:  denied  { write } for  pid=8745 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.971082][   T29] audit: type=1400 audit(1789603611.920:2889): avc:  denied  { write } for  pid=8752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  186.002731][   T29] audit: type=1400 audit(1789603611.950:2890): avc:  denied  { write } for  pid=8767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  186.054056][ T8764] loop0: detected capacity change from 0 to 164
[  186.058471][ T8771] 
: renamed from bond_slave_0 (while UP)
[  186.078551][ T8679] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  186.477403][ T8771] lo speed is unknown, defaulting to 1000
[  186.646174][ T8764] ISOFS: unable to read i-node block
[  186.646472][ T8764] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  186.649692][ T8729] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  186.684437][ T8764] netlink: 'syz.0.855': attribute type 12 has an invalid length.
[  187.031975][   T29] audit: type=1400 audit(1789603612.980:2891): avc:  denied  { write } for  pid=8770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  187.080817][   T29] audit: type=1400 audit(1789603613.030:2892): avc:  denied  { write } for  pid=8797 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  187.150256][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.150410][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.197916][ T8803] netlink: 'syz.5.860': attribute type 1 has an invalid length.
[  187.210197][ T8803] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.700051][ T8782] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  187.886224][ T8875] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  187.907285][ T8888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8888 comm=syz.4.869
[  188.023812][ T8901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8901 comm=syz.1.871
[  188.455559][ T8906] loop0: detected capacity change from 0 to 512
[  188.606633][ T8916] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  188.902886][ T8949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8949 comm=syz.5.879
[  188.907417][ T8945] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  188.950104][ T8906] loop0: detected capacity change from 0 to 512
[  189.084999][ T8906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.085758][ T8906] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.123579][ T8906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.247521][ T8955] netlink: 'syz.4.881': attribute type 10 has an invalid length.
[  189.398350][ T8955] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  189.442912][ T8956] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  189.900589][ T8977] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  190.392764][ T8998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8998 comm=syz.0.888
[  191.010343][   T29] kauditd_printk_skb: 15 callbacks suppressed
[  191.010438][   T29] audit: type=1400 audit(1789603616.950:2908): avc:  denied  { write } for  pid=9005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.128433][   T29] audit: type=1400 audit(1789603617.070:2909): avc:  denied  { write } for  pid=9017 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.451825][   T29] audit: type=1400 audit(1789603617.400:2910): avc:  denied  { write } for  pid=9021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.545755][   T29] audit: type=1400 audit(1789603617.490:2911): avc:  denied  { write } for  pid=9032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.627041][ T9034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9034 comm=syz.0.890
[  192.164798][ T9003] Process accounting paused
[  192.213801][ T9045] loop2: detected capacity change from 0 to 512
[  192.232771][ T9045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  192.232909][ T9045] System zones: 1-12
[  192.235237][ T9045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.894: missing EA_INODE flag
[  192.235262][ T9045] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  192.235429][ T9041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  192.236900][ T9045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.894: error while reading EA inode 12 err=-117
[  192.236928][ T9045] loop2: lost filesystem error report for type 5 error -117
[  192.237534][ T9045] EXT4-fs (loop2): 1 orphan inode deleted
[  192.238655][ T9045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.298133][   T29] audit: type=1400 audit(1789603618.230:2912): avc:  denied  { write } for  pid=9044 comm="syz.2.894" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  192.343380][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'.
[  192.470461][ T9045] random: crng reseeded on system resumption
[  192.488538][ T9051] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  192.529584][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.814176][ T9084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9084 comm=syz.4.901
[  192.879898][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9087 comm=syz.1.903
[  192.935647][   T29] audit: type=1400 audit(1789603618.880:2913): avc:  denied  { write } for  pid=9065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  193.014117][   T29] audit: type=1400 audit(1789603618.960:2914): avc:  denied  { write } for  pid=9096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  193.321586][   T29] audit: type=1400 audit(1789603619.270:2915): avc:  denied  { write } for  pid=9098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  193.372593][ T9108] loop5: detected capacity change from 0 to 512
[  193.392623][ T9108] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  193.402937][ T9108] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  193.403206][ T9108] EXT4-fs (loop5): orphan cleanup on readonly fs
[  193.410154][ T9108] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.906: Allocating blocks 41-42 which overlap fs metadata
[  193.410188][ T9108] loop5: lost filesystem error report for type 5 error -117
[  193.410722][ T9108] EXT4-fs (loop5): Remounting filesystem read-only
[  193.411073][ T9108] Quota error (device loop5): write_blk: dquota write failed
[  193.411102][ T9108] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  193.411288][ T9108] EXT4-fs (loop5): 1 truncate cleaned up
[  193.413414][ T9108] EXT4-fs (loop5): pa ffff888100641460: logic 1, phys. 41, len 23
[  193.415728][ T9108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.566112][ T9117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  193.584926][ T6974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.811468][ T9125] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  193.941895][ T9142] loop2: detected capacity change from 0 to 512
[  193.979156][ T9142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.201616][ T9142] tmpfs: Unknown parameter 'dmask'
[  194.211012][ T9152] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  194.465745][ T9184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9184 comm=syz.0.920
[  195.337474][ T9211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9211 comm=syz.0.923
[  195.662820][ T9217] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  196.049332][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  196.049471][   T29] audit: type=1400 audit(1789603621.990:2927): avc:  denied  { write } for  pid=9242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.015335][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.163300][ T9256] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  197.372015][   T29] audit: type=1400 audit(1789603623.320:2928): avc:  denied  { write } for  pid=9257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.605336][   T29] audit: type=1400 audit(1789603623.550:2929): avc:  denied  { write } for  pid=9288 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.608065][ T9281] loop4: detected capacity change from 0 to 512
[  197.822264][ T9281] loop4: detected capacity change from 0 to 512
[  197.887584][ T9281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.887740][ T9281] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.898063][ T9281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.919943][ T9295] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  197.928763][ T9295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'.
[  197.931725][ T9295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'.
[  198.280118][ T9312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9312 comm=syz.4.941
[  198.303748][ T9309] loop2: detected capacity change from 0 to 512
[  198.427089][ T9310] netlink: 'syz.5.942': attribute type 10 has an invalid length.
[  198.435669][   T29] audit: type=1400 audit(1789603624.380:2930): avc:  denied  { create } for  pid=9301 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  198.539299][ T9309] loop2: detected capacity change from 0 to 512
[  198.589593][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.597491][ T9309] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.601865][ T9309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.823243][   T29] audit: type=1400 audit(1789603624.770:2931): avc:  denied  { ioctl } for  pid=9301 comm="syz.1.939" path="socket:[18260]" dev="sockfs" ino=18260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  198.898800][ T9310] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  198.998926][ T9326] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  199.132398][   T29] audit: type=1400 audit(1789603625.080:2932): avc:  denied  { getopt } for  pid=9301 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  199.192433][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.946'.
[  199.198190][ T9336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.946'.
[  199.316197][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'.
[  199.316317][ T9336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.946'.
[  199.772199][   T29] audit: type=1400 audit(1789603625.720:2933): avc:  denied  { write } for  pid=9352 comm="syz.2.951" name="g1" dev="configfs" ino=14055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  199.876287][ T9333] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  199.932421][   T29] audit: type=1400 audit(1789603625.880:2934): avc:  denied  { write } for  pid=9358 comm="syz.0.955" name="idVendor" dev="configfs" ino=18348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  199.932505][   T29] audit: type=1400 audit(1789603625.880:2935): avc:  denied  { open } for  pid=9358 comm="syz.0.955" path="/181/config/usb_gadget/g1/idVendor" dev="configfs" ino=18348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  199.985484][   T29] audit: type=1400 audit(1789603625.930:2936): avc:  denied  { write } for  pid=9358 comm="syz.0.955" name="strings" dev="configfs" ino=14058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  200.180232][ T9362] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  200.212145][ T9371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9371 comm=syz.5.957
[  201.315161][ T9403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.964'.
[  201.320015][ T9403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.964'.
[  201.384030][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  201.384119][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.964'.
[  202.636034][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  202.636051][   T29] audit: type=1400 audit(1789603628.580:2941): avc:  denied  { mounton } for  pid=9418 comm="syz.1.970" path="/sys/debug" dev="proc" ino=19503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1
[  203.220731][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  203.413066][ T9422] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  204.541697][ T9431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9431 comm=syz.5.972
[  207.170089][ T9450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9450 comm=syz.2.973
[  207.297767][   T29] audit: type=1400 audit(1789603633.240:2942): avc:  denied  { connect } for  pid=9446 comm="syz.5.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  207.352078][ T9454] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13)
[  207.352107][ T9454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  207.352192][ T9454] vhci_hcd vhci_hcd.0: Device attached
[  207.429910][   T29] audit: type=1400 audit(1789603633.370:2943): avc:  denied  { setopt } for  pid=9441 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  207.544763][ T3573] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  207.600719][ T3573] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  207.687246][ T9455] vhci_hcd: connection reset by peer
[  207.687745][   T70] vhci_hcd vhci_hcd.5: stop threads
[  207.687767][   T70] vhci_hcd vhci_hcd.5: release socket
[  207.687873][   T70] vhci_hcd vhci_hcd.5: disconnect device
[  208.154791][ T9482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9482 comm=syz.1.983
[  208.202505][   T29] audit: type=1326 audit(1789603634.150:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.202880][   T29] audit: type=1326 audit(1789603634.150:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.203005][   T29] audit: type=1326 audit(1789603634.150:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.203477][   T29] audit: type=1326 audit(1789603634.150:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.203796][   T29] audit: type=1326 audit(1789603634.150:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.203841][   T29] audit: type=1326 audit(1789603634.150:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.203877][   T29] audit: type=1326 audit(1789603634.150:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.203975][   T29] audit: type=1326 audit(1789603634.150:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.204184][   T29] audit: type=1326 audit(1789603634.150:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.204229][   T29] audit: type=1326 audit(1789603634.150:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.0.984" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81c78e159 code=0x7ffc0000
[  208.210464][ T9481] syz_tun: entered allmulticast mode
[  208.327960][ T9481] tmpfs: Bad value for 'mpol'
[  208.428918][ T9485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9485 comm=syz.5.986
[  208.624827][ T9488] xt_hashlimit: size too large, truncated to 1048576
[  209.142845][ T9498] loop2: detected capacity change from 0 to 512
[  209.150078][ T9498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  209.187210][ T9498] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.990: bad orphan inode 131083
[  209.187245][ T9498] loop2: lost filesystem error report for type 5 error -117
[  209.212548][ T9498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.486325][ T9512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9512 comm=syz.1.991
[  210.098703][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.197269][ T9559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9559 comm=syz.1.997
[  211.237854][ T9565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9565 comm=syz.5.998
[  212.008182][ T9595] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  212.462400][ T9608] loop5: detected capacity change from 0 to 1024
[  212.463022][ T9608] EXT4-fs: inline encryption not supported
[  212.464644][ T9608] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  212.518622][ T9608] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #3: block 1: comm syz.5.1002: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.518667][ T9608] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  212.519103][ T9608] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1002: Failed to acquire dquot type 0
[  212.519131][ T9608] loop5: lost filesystem error report for type 5 error -117
[  212.519938][ T9608] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.1002: Freeing blocks not in datazone - block = 0, count = 4096
[  212.519963][ T9608] loop5: lost filesystem error report for type 5 error -117
[  212.520599][    C1] EXT4-fs (loop5): error count since last fsck: 3
[  212.520623][    C1] EXT4-fs (loop5): initial error at time 1789603638: ext4_map_blocks:832: inode 3: block 1
[  212.520682][    C1] EXT4-fs (loop5): last error at time 1789603638: ext4_free_blocks:6719
[  212.520985][ T9608] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.1002: Invalid inode bitmap blk 0 in block_group 0
[  212.521087][ T9608] loop5: lost filesystem error report for type 5 error -117
[  212.594657][ T9608] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  212.594686][ T9608] loop5: lost filesystem error report for type 5 error -117
[  212.595081][ T9608] EXT4-fs (loop5): 1 orphan inode deleted
[  212.595901][ T9608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.291283][ T3573] usb 11-1: enqueue for inactive port 0
[  213.291391][ T3573] usb 11-1: enqueue for inactive port 0
[  213.294446][   T51] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  213.294893][   T51] __quota_error: 285 callbacks suppressed
[  213.294913][   T51] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  213.294939][   T51] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0
[  213.357217][   T29] audit: type=1326 audit(1789603639.240:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.2.1000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  213.357359][   T29] audit: type=1326 audit(1789603639.240:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.2.1000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  213.466761][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1003'.
[  213.484015][   T29] audit: type=1326 audit(1789603639.430:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.2.1000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  213.639056][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'.
[  213.655334][ T9615] loop0: detected capacity change from 0 to 512
[  213.688218][ T3573] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  213.762348][ T9615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.762457][ T9615] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.934313][ T9615] EXT4-fs error (device loop0): __ext4_new_inode:1289: comm syz.0.1003: failed to insert inode 16: doubly allocated?
[  213.936862][   T29] audit: type=1400 audit(1789603639.870:3240): avc:  denied  { write } for  pid=9612 comm="syz.0.1003" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  213.936904][   T29] audit: type=1400 audit(1789603639.880:3241): avc:  denied  { write } for  pid=9612 comm="syz.0.1003" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  213.939716][ T9615] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.1003: corrupted xattr block 32: bad e_name length
[  213.941469][   T29] audit: type=1326 audit(1789603639.890:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.2.1000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f020077e159 code=0x7ffc0000
[  214.011308][   T29] audit: type=1400 audit(1789603639.960:3243): avc:  denied  { getopt } for  pid=9612 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  214.057450][ T9615] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  214.057670][ T9615] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.1003: corrupted xattr block 32: bad e_name length
[  214.059138][   T29] audit: type=1400 audit(1789603640.000:3244): avc:  denied  { write } for  pid=9612 comm="syz.0.1003" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  214.059201][   T29] audit: type=1400 audit(1789603640.000:3245): avc:  denied  { write } for  pid=9612 comm="syz.0.1003" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  214.059764][ T9615] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  214.436720][ T9628] ==================================================================
[  214.436753][ T9628] BUG: KCSAN: data-race in probe_sched_switch / tracing_stop_cmdline_record
[  214.436785][ T9628] 
[  214.436791][ T9628] read-write to 0xffffffff895fb1e0 of 4 bytes by task 9607 on cpu 1:
[  214.436806][ T9628]  tracing_stop_cmdline_record+0x28/0xc0
[  214.436839][ T9628]  __ftrace_event_enable_disable+0x323/0x4b0
[  214.436867][ T9628]  ftrace_event_set_open+0xe6/0x200
[  214.436886][ T9628]  do_dentry_open+0x49f/0xa60
[  214.436904][ T9628]  vfs_open+0x37/0x1e0
[  214.436920][ T9628]  path_openat+0xc01/0x10d0
[  214.436944][ T9628]  do_file_open+0x16c/0x290
[  214.436966][ T9628]  do_sys_openat2+0xa0/0x130
[  214.436984][ T9628]  __x64_sys_openat+0xf2/0x120
[  214.437003][ T9628]  x64_sys_call+0x1f72/0x2550
[  214.437026][ T9628]  do_syscall_64+0x112/0x360
[  214.437054][ T9628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.437072][ T9628] 
[  214.437077][ T9628] read to 0xffffffff895fb1e0 of 4 bytes by task 9628 on cpu 0:
[  214.437092][ T9628]  probe_sched_switch+0x46/0xa0
[  214.437108][ T9628]  __traceiter_sched_switch+0x3f/0x60
[  214.437131][ T9628]  __schedule+0xc34/0xd20
[  214.437148][ T9628]  schedule+0x5b/0xa0
[  214.437164][ T9628]  do_nanosleep+0xc5/0x360
[  214.437194][ T9628]  hrtimer_nanosleep+0xf2/0x290
[  214.437212][ T9628]  common_nsleep+0x62/0x80
[  214.437229][ T9628]  __se_sys_clock_nanosleep+0x223/0x260
[  214.437246][ T9628]  __x64_sys_clock_nanosleep+0x55/0x70
[  214.437263][ T9628]  x64_sys_call+0x244d/0x2550
[  214.437285][ T9628]  do_syscall_64+0x112/0x360
[  214.437309][ T9628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.437327][ T9628] 
[  214.437332][ T9628] value changed: 0x000001ec -> 0x000001eb
[  214.437342][ T9628] 
[  214.437346][ T9628] Reported by Kernel Concurrency Sanitizer on:
[  214.437356][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.1.1006 Not tainted syzkaller #0 PREEMPT(lazy) 
[  214.437378][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  214.437389][ T9628] ==================================================================
[  214.816817][ T6974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.911309][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.