last executing test programs:

1m49.919593338s ago: executing program 0 (id=27):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x80, 0xfa97ae1042e2a069)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x6, 0x6, 0x4, 0x5, 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000ee0902100000fc00fe0708150000060015000c0016800500040000000000c7f554fda4c409d5725a117f12a3160fc5d932e2d7041b235cc325bf47ac96c6509e993ef825174288375765d9216c6b390d82779d12e2b4e647"], 0x30}}, 0x40044)

1m49.759609682s ago: executing program 32 (id=27):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x80, 0xfa97ae1042e2a069)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x6, 0x6, 0x4, 0x5, 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000ee0902100000fc00fe0708150000060015000c0016800500040000000000c7f554fda4c409d5725a117f12a3160fc5d932e2d7041b235cc325bf47ac96c6509e993ef825174288375765d9216c6b390d82779d12e2b4e647"], 0x30}}, 0x40044)

1m43.016447469s ago: executing program 5 (id=81):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x401, &(0x7f00000002c0)={[{@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4d0000, 0xc0)
r0 = syz_io_uring_setup(0x2613, &(0x7f0000000540)={0x0, 0x32d0, 0x10000, 0x1, 0x17f}, &(0x7f0000000740), &(0x7f0000000340), &(0x7f00000003c0))
socket$pppl2tp(0x18, 0x1, 0x1)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)}, {&(0x7f0000000740)="3f955f5755c3796fdcc30385c96689ba538b74798e417c6f658781671ee5aab17f4fbb38e520cfa9421ecf3895e195cda1cb7ca2bc62a1968f64dc923607ce8140c20c79c81181fc6039c0b3522e0c37905a354d8f856f0538ce23b3fd62eb18c183ca", 0x63}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20000081)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00017fa902b98014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000024000d8014000400200100000000000000000000000000020c000380060001004e2200"], 0xb8}}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getuid()
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xa4, 0x1, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x8e, 0x1, 0x0, 0x5, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x8101, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xefff, 0x0, 0x0, 0x0, 0x9d}, 0x0, 0xfff8000000000003, 0xffffffffffffffff, 0x1)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20004080)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0xffffff07, 0x0, &(0x7f0000000040)=[r0]}, 0x1)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r6 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x404, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_bp={0x0, 0x1}, 0x110c04, 0x200, 0x2, 0x1, 0x9, 0xb, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)

1m41.709482458s ago: executing program 5 (id=93):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, 0x0)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000100)=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0xb, 0x4, 0x3, 0x27, 0x2c, 0x64, 0x0, 0xfe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x17, 0xcb, [@remote, @empty, @private=0xa010102, @loopback, @rand_addr=0x64010102]}]}}}}})
close(r3)

1m41.197986518s ago: executing program 5 (id=97):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
listen(r1, 0x10000)

1m41.061001861s ago: executing program 5 (id=101):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x208205, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@stripe={'stripe', 0x3d, 0x86}}, {@nojournal_checksum}, {@acl}]}, 0x81, 0x63d, &(0x7f0000000600)="$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")
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0)
write$selinux_create(r2, &(0x7f0000001cc0)=@objname={'system_u:object_r:iptables_unit_file_t:s0', 0x20, 'unconfined', 0x20, 0x1, 0x20, './file1\x00'}, 0x52)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a6, 0x0, 0x0, 0x0, 0x1}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}, {0x85, 0x0, 0x0, 0xbba}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$setregs(0xd, r1, 0x8, &(0x7f0000000140)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf")
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x20}, 0x20)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
ptrace$peeksig(0x4209, r3, &(0x7f0000000080)={0x400, 0x1, 0x8}, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}])
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x2800}], 0x2, 0x0, 0x0, 0x0)

1m40.542629763s ago: executing program 5 (id=104):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100283d7000fcdbdf250c"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084)

1m40.110508102s ago: executing program 5 (id=114):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)

1m39.988278595s ago: executing program 33 (id=114):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)

1m10.357213242s ago: executing program 4 (id=310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000040)=0x401, 0x4)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setreuid(0x0, 0xee00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040)
bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10020, 0x0)
r4 = dup(r0)
fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

1m10.202309186s ago: executing program 4 (id=311):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000040000dd080000000200000000001816", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x5a, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES64=r5, @ANYRES8=r4, @ANYRESDEC=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="000000f0ffffff000008000000bc7a007ba4f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, {0xffffffffffffffff, 0x3}, 0x75}, 0x1)

1m9.623835079s ago: executing program 4 (id=314):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611130000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602feff00b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48)

1m9.411426343s ago: executing program 4 (id=316):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000f7c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000dd3000/0x4000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@resuid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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")
set_mempolicy(0x8000, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="39006440294b97eec98720c890d2d3fb752f4d61759af816b5f1a12d41b2c37b6e36d5bcd309c38bbf28ac4b81844d5a530037d5cbae9bf0e85467743a18605ce1231534fedb90f9e1a982ddf67fdc987cb97f766a3bb74dc0c545a1f2fb46cd27782199aa89d46582a193a4d49bd4b136386ad4d8788ef083ed8ce3cf996ed07b2ff770d7390f16ae16496bcac9a955bb30a87412fa6657379a116f1ed27db80bcad62bcd47942b87149b479ae97a699f21cb67ece9c76401c5cc56b41055982b67f1607c028c565b2d546e87bce61b55132a2f009bc0b01febc3403e02c781975a5a9336e9e4ea9833d89a0db0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20b2500000000000007020000f8ffffffb703000008000000b7040000000000008500000003f5a465076c0000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x84, r1}, 0x38)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r3, 0x40f, &(0x7f0000000140))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000a80)=0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
socket$inet6(0xa, 0x80001, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x20402, 0xc7d717fd6ef2819f)

1m8.752141998s ago: executing program 4 (id=324):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000040000dd080000000200000000001816", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x5a, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES64=r5, @ANYRES8=r4, @ANYRESDEC=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="000000f0ffffff000008000000bc7a007ba4f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, {0xffffffffffffffff, 0x3}, 0x75}, 0x1)

1m8.297898408s ago: executing program 4 (id=328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x1})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth0_macvtap\x00'})

1m7.964294785s ago: executing program 34 (id=328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x1})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth0_macvtap\x00'})

40.829081198s ago: executing program 3 (id=505):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x10c)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000130005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A7', 0x2}], 0x1}}], 0x1, 0x4000801)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0xc100, 0x40)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0xd, 0x9, 0x0, 0x1000, 0xc1a4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x400, 0x4, 0x7, 0x3, 0x7, 0x6, 0x5f2, 0x0, 0xa2, 0x0, 0x8000000000000001})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x804)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

40.573836463s ago: executing program 3 (id=507):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e38, 0x100005, @rand_addr=' \x01\x00', 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000280)='pim6reg\x00')
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x8000000, 0x4)
socket$inet(0x2, 0x4000000000000001, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x22080, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008d0000000000000003000000181100002c0f45217bfd849bef310a8177e4f3f42865c483b49649278984b62c51bfbfd8d888a37ce604a766008140a1163e80f3bf89e6c80ac9452af1154ed8c5be619311e8c751b51e51583b93d116901b4c06cf3282ecea60b7", @ANYRESHEX=0x0, @ANYRESHEX=r4], &(0x7f0000000080)='GPL\x00', 0x11, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4009}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28)

38.379304531s ago: executing program 3 (id=520):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
mkdir(&(0x7f0000000080)='./file0\x00', 0x100)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000001c0)={0x6, 0x5, 0x8, 0x40, 0x2})
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000100)='./file0\x00')

35.255665279s ago: executing program 3 (id=534):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) (async)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async)
r1 = socket$netlink(0x10, 0x3, 0x6)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x42200, 0x0)
read$rfkill(r2, 0x0, 0xfe57) (async)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r4 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18) (async)
fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, r5, 0xffffffffffffffff) (async)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r5, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r6, &(0x7f0000000000)='3', 0x4e) (async)
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x1c4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1b2)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

34.686627392s ago: executing program 3 (id=537):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c9e42, 0xda)
readv(r0, &(0x7f0000000940), 0x0)

34.31239658s ago: executing program 3 (id=543):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x0, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000))
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = io_uring_setup(0x5a4, &(0x7f0000000100)={0x0, 0x1216, 0x8000, 0x1, 0x1b5, 0x0, r2})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002000)={{r3}, 0x0, 0x16, @inherit={0x68, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000ac2878fe2b41893636040000000000000000940000613f3727520f5b21000004000000000000000400000000000000ffffffffffffffff000000000000e0ff5f00000000000000ff0f000000000000000000000000000000c972b1fa190ac3b2763be91ffb5ce6ffa6d8dd8cdb5d71920300000000000000a3b0948d73e6a084b2d67b9572902a0000000000000000"]}, @name="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"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x8000}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4, 0x2}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r2, 0x15, 0x0, @void}, 0x10)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)

33.951506228s ago: executing program 35 (id=543):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x0, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000))
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = io_uring_setup(0x5a4, &(0x7f0000000100)={0x0, 0x1216, 0x8000, 0x1, 0x1b5, 0x0, r2})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002000)={{r3}, 0x0, 0x16, @inherit={0x68, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000ac2878fe2b41893636040000000000000000940000613f3727520f5b21000004000000000000000400000000000000ffffffffffffffff000000000000e0ff5f00000000000000ff0f000000000000000000000000000000c972b1fa190ac3b2763be91ffb5ce6ffa6d8dd8cdb5d71920300000000000000a3b0948d73e6a084b2d67b9572902a0000000000000000"]}, @name="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"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x8000}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4, 0x2}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r2, 0x15, 0x0, @void}, 0x10)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)

28.658702554s ago: executing program 6 (id=604):
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)=""/56, &(0x7f0000000100)=0x38)

28.37425111s ago: executing program 6 (id=605):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0xc01f2c7a5fddf017, 0x108)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x14, 0x18, 0x1, 0x60bd2a, 0x25dfdbfe, {0xa, 0x0, 0xe0}}, 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4044804)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/97, 0x61}], 0x2}, 0x80000001}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0xc01f2c7a5fddf017, 0x108) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x14, 0x18, 0x1, 0x60bd2a, 0x25dfdbfe, {0xa, 0x0, 0xe0}}, 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4044804) (async)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/97, 0x61}], 0x2}, 0x80000001}], 0x1, 0x0, 0x0) (async)

27.401891771s ago: executing program 6 (id=614):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000000400000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x24044814}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r3=>0x0, 0x465b}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r4=>0x0, 0x2, 0x9, 0x4, 0x58bf09a0, 0xdb50}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r3, 0x22, 0x4, 0xfff, 0x7, 0x6, 0x3, 0x5, {r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xf, 0x7, 0x8, 0x4, 0x5c}}, &(0x7f00000001c0)=0xb0)

27.357709392s ago: executing program 6 (id=615):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000f7c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000dd3000/0x4000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@resuid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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")
set_mempolicy(0x8000, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="39006440294b97eec98720c890d2d3fb752f4d61759af816b5f1a12d41b2c37b6e36d5bcd309c38bbf28ac4b81844d5a530037d5cbae9bf0e85467743a18605ce1231534fedb90f9e1a982ddf67fdc987cb97f766a3bb74dc0c545a1f2fb46cd27782199aa89d46582a193a4d49bd4b136386ad4d8788ef083ed8ce3cf996ed07b2ff770d7390f16ae16496bcac9a955bb30a87412fa6657379a116f1ed27db80bcad62bcd47942b87149b479ae97a699f21cb67ece9c76401c5cc56b41055982b67f1607c028c565b2d546e87bce61b55132a2f009bc0b01febc3403e02c781975a5a9336e9e4ea9833d89a0db0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20b2500000000000007020000f8ffffffb703000008000000b7040000000000008500000003f5a465076c0000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0xc)
write(r2, &(0x7f0000000000)='3', 0x4e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40f, &(0x7f0000000140))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000a80)=0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
socket$inet6(0xa, 0x80001, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x20402, 0xc7d717fd6ef2819f)

26.654881828s ago: executing program 6 (id=622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe00000100000000"], 0x28}}, 0x0)

26.045590041s ago: executing program 6 (id=630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000906050000000000000000000a009a00c9d64b592c3abb0908000940000800000900020073797a300000000004000780da4ea1bc120cf1635c78c5962970110fc06f95fe72bf388b9dc8f134d97b6a3bb209"], 0x2c}}, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x7, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
socket$inet(0x2, 0x1, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007fe000/0x800000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20040080)
mmap(0x0, 0x0, 0x3, 0x32, r4, 0x4000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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")
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, 0x0, 0x0)

25.834178385s ago: executing program 36 (id=630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000906050000000000000000000a009a00c9d64b592c3abb0908000940000800000900020073797a300000000004000780da4ea1bc120cf1635c78c5962970110fc06f95fe72bf388b9dc8f134d97b6a3bb209"], 0x2c}}, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x7, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
socket$inet(0x2, 0x1, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007fe000/0x800000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20040080)
mmap(0x0, 0x0, 0x3, 0x32, r4, 0x4000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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")
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, 0x0, 0x0)

16.46246675s ago: executing program 9 (id=631):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffd}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f00000002c0)={@multicast1, @local, 0x0, "beacbd88cfb0a275784fa40a6a016067a6987667aee539413b97fe1de1505a41", 0x1, 0x9, 0x8}, 0x3c)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x306575}, 0x0, {0x3}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})

15.55951723s ago: executing program 9 (id=669):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendto(r0, 0x0, 0x0, 0x4048090, &(0x7f00000000c0)=@rxrpc=@in4={0x1d, 0x200, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80)

15.258888167s ago: executing program 9 (id=672):
socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000280)='.\x00', 0x4800, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
pipe(&(0x7f0000000140))
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001d0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000074e000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

15.10626177s ago: executing program 37 (id=672):
socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000280)='.\x00', 0x4800, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
pipe(&(0x7f0000000140))
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001d0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000074e000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.918164607s ago: executing program 1 (id=731):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000082a3000000000000000c00028005000100000000000800074000000000100005800900010073797a3000000000"], 0xa4}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x2, 0x5}, {0xd, 0x6}}, [{0x8, 0xb, 0x7ad}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="002529bd7000fddbdf25080008001400068008000600ff7f00000800010001000080580001800d00010069623a776c616e30000000002c000280082002000100000008000200010000000800010009000000080004000b00000008000200041400000e0001006574687a76657468300000000800030008000000180002800400042008000200ff01000008000200060000000c0003800800020022258b4c130b3cc4bd8c43b40532fe"], 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x40)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000200000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe92, 0x0}}, 0x10)
pipe(&(0x7f0000000800))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x40, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r5, 0x6a, 0x1, 0x0, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.716852521s ago: executing program 1 (id=734):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x89e1, &(0x7f00000000c0)='lapb0')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x802420, &(0x7f0000000100), 0x0, 0x4dd, &(0x7f0000000f00)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l3rYXbgtd9F6lmXwgTVQQd3VREApuFGpMprFm0gmZSW1CF6nuunAhioK4cO9f4MauLIK4VtyKC6lgjaCCMDJnZtp8zKSxtjNpzu8HJ3POe5LzvO8Mz5tz3nPOnABS63jtRyZiMCK+jIj99cX1v3C8/rJ6++pUbcpEtbe5urbcnG/+3b6IWImIvojIRsQrmc1xy0vLs5PFYmGhsZyvzM3ny0vLpy7OTc4UZgqXRsZPT0yMD4+NTjywtl5/67XrZz95rvfjX968dfPtzz6tVWtwYztW7mPD/e1X1ZveEwfXlO2JiKfvI8xOlGu0Z4u3gB2s9vn9IyJOJPm/P3LJpwmkQbVarf5e3dtu9UoV2LWyyT5wJjvU2FcfjDPZoaH6Pvw/YyBbLJUrj18oLV6aru8rH4ie7IWLxcJw41jhQPRkassjyfzd5dENy2MRyT7wO7n+ZHloqlSc7mxXB2ywb0P+/5zLJvkPpIRDfkgv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+m1Vf73drAeQEc9f/Zsbao273+fvry0OFu6fGq6UJ4dmlucGpoqLcwPzZRKM8k9O3P32l6xVJofeSIWr+QrhXIlX15aPj9XykREcl//+UJPR1oFbMfBYze+rqXnypP9yRRr/uXLVdjdqtVMdPseZKA7ct3ugICuMfQP6fUnjvHbfkkY8Ghr8RW96/S1Ln4m5h9KOKADst2uANA1J484/wdpZfwf0sv4P6RXjx0ASL37HP+Pe43/G0OAncv4P6TX4Kbnf9Wf//O3Nc/uGo6Iv0fEV7mevc1nfQG7Qfb7TGP//+T+fw9uXNub+TUZIeiNiNc/OPfelclKZWGkVv7jnfLK+43y0W7UH9iuZp428xgASK/V21enmlMn4/7wbP0ihM3x9zTGJvuScwgDq5l11ypkHtC1CyvXIuJwq/iZxvPO62c+BlZzm+Ifarxm6ptI6rsneW56Z+IfWRP/v2viH/3L7wqkw41a/zPcKv+ySU7Hnfxb3/8MPqBzm+37v+yd/i/Xpv87tm5LK0nxSosYr374xndt41+LONoyfjNeXxJrY/xa3U5us423XnrhX+3WVT+qb6dV/LVtzVfm5vPlpeVTyffIzRQujYyfnpgYHx4bncgnY9T55kj1Zk8d/uLmVu0faBO/3t5vWra/Vvb/bbb/t/98/uLxLeL/70Trz/9Q8tr6/e+PiMe2Gf+n0W9fbreuFn+6TfuzW8SvlY1tM3753TPuHQaAHaS8tDw7WSwWFlrMnBuIaLPKTDdm+ndGNczshJl4yCHu1XO0OtIEHiV3k77bNQEAAAAAAAAAAAC2qxNXLHe7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu8EfAQAA//8OpNMF")
r2 = gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r3, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}]}]}, 0x4c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xb)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x1)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25200000003c002d80050004000100000005000100090000000500040000000000080003000600000008000200030000000500040001000000050004000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="0c5549e4fb76dd00060000000000000000000c000600020080000000000000002d800800020001000000050001004b0000000500040000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004045)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x1)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68})
tkill(r2, 0x7)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000007000010027bd7000ffdbdf2507000000b12366a73643d91684ec89b6436420fbf0f2326d92578c4c8bc0fa56aed2840bdb54a4e4239c320f0ba7", @ANYRES32=r12], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setuid(0xee01)
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

7.422795698s ago: executing program 1 (id=738):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x40000)

7.025695916s ago: executing program 1 (id=740):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e38, 0x100005, @rand_addr=' \x01\x00', 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000280)='pim6reg\x00')
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x8000000, 0x4)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x22080, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008d0000000000000003000000181100002c0f45217bfd849bef310a8177e4f3f42865c483b49649278984b62c51bfbfd8d888a37ce604a766008140a1163e80f3bf89e6c80ac9452af1154ed8c5be619311e8c751b51e51583b93d116901b4c06cf3282ecea60b7", @ANYRESHEX=0x0, @ANYRESHEX=r4], &(0x7f0000000080)='GPL\x00', 0x11, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4009}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28)

6.446713539s ago: executing program 2 (id=747):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[{0x408, 0x1, 0x1, "b1b82db5bf0ade62c11c85beec52affa7ef061a8ba1c51a8af8ff5764d72c95d5faa7a6fa8ee3ed00f4a95dfe37c9565d93639b9c361d933ac81dd95193e4c80a18d1457091f19dfefe7daa0d7d9f01c98ccf821f1846e44e13fe080b103fbf63d575db6da4d4da77fb376c40862288576e8265d91ef68cdf08955bf5cc1d540c5b844cbde85d6e3e231439a52029bf63739bb7e2c083a9726c88ac49491c80b415710944b4e6c24350560236cf15c4cac46a6d78262f4959a293dc7ff1106c1c71a6d20ca5f8f7d1a35120dfbb88c9f5e677451b79fc434bacb74daf7c8fd3c87c261ee6296c01c5ce61d450e529723e19aa125cb08aaee83a20f096e546844ff52e4c558eb12c019d46bbca14a87fb1e3a42c03bb78d9aac791343c5fef3e2259f1f5188864aa6aa20bc5cd43c7ff8e6e5b194e1719b4825e5b56a0c6ebf14ffb66179778c840df77e3a4e2ca4d41e3203503ad906f760804ad638801c3a17ad1f48019baea9722777216e6ce7a8dc9ab898c68ac8cd790887b43f770835bed3baca167036af5171ea99ce08c1f151f19ba34b54eda535e08f553e2cf89c18b4ddc0ef1fbb6fda3175f6f65b17485c9f990e0cd6c203771d8ddecd3a4decf034a9106f66a36c6dd67e97bdead6a3574ec2cc2682e5c3dbc61a0a74ef3b7f223819277b533c782a982c2e544d1b04fdb2bce8b459cbdc44673216ebedc53a70a4127baed9cbbf958c7c952c3334c1d0aef2fd37b7c6dbb5ddf61035427bc8c0229b2b20471ba7cf61c30ab2407ef716ec64afad1a62e78f8ddd71fa5c1b12a6c92ba10dc46c6748d96235f5e3e8b876631e7fd2ef1bf07e8cf32500332b6986d65fb91045b868b87c0509c28a2f17b9080ec7021ded5758021dee6ee135450886142840b5c998ddc39e6698bb0d6e0ff40c738d78496a5bd34e80b30c554293df06f3ac6a6dcd951dba2f2d181c1434e5adfeb2738dff501a12f5a7f9570d85b3fd50e8592469822a9451e73062d262d85a07a25fcf705cf72b3ef37ec016690f938eabab58c9a60d09b45c778a31b65cf49753848dd39ef323f0c2e616274555c2513302c6ef114ac75583dd4a11e7b64beafd10cd605abfc943953d39f689ea1b13c7964644f5ebf0040beecf1b262797ede3c00c50629bd59e017a3eba7ed84e531143da7f4476ab227f4cf43ff3416a516d166e5beaeae96ca3494c2db8c847e3d8be02db0952f8b0c64aba2788c0191ff4c7d25215329049cec17e113c59275f4f8968940179be79c2aa612d2ced38a90ab25112bdc2790873067a216ec65686eb19fc5761da0e9cad58e17374972f41ccb362ce4ddff3f3b04a5233c2532dae9a601dff26c83b81618fa233a73e4bc4dab0279d720adfd3c9ef6620a61da37177d90f21e14791f947b570110705"}], 0x408}, 0xc0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = gettid()
socket$inet_icmp_raw(0x2, 0x3, 0x1)
tkill(r1, 0x14)
ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f00000003c0)={[0x40000000003]}, 0x8)
syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x9a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@nogrpid}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mq_open(0x0, 0x8c2, 0x30, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
io_uring_setup(0x7, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d205cdc16001ea89d0300000000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

6.144240686s ago: executing program 0 (id=673):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44c, &(0x7f0000000b40)="$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")
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

6.122044366s ago: executing program 8 (id=750):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendto(r0, &(0x7f0000000000)="57c55994c9e7ec", 0x7, 0x4048090, &(0x7f00000000c0)=@rxrpc=@in4={0x1d, 0x200, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80)

5.94928894s ago: executing program 8 (id=751):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, <r0=>0xffffffffffffffff}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={0xffffffffffffffff, r0}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1600000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000102742529925251e2e92e3c931000000000800000020000000000000000000"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b"], 0x50)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in6={{0xa, 0x4ea2, 0x8609, @empty, 0x9}}, 0x5, 0x0, 0xe02, 0x4, 0xe2d8f2eb1d010926, 0x5, 0x4}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000040000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000004b702000000000000850c08d805fcc413c6df83b6b32a06000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xf06)
connect$inet6(r5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x22)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x304}, '\f\x00', "664f34560e7c45d5ec4523b624d4d601cbdca7519b19d50c9efe91bf1627dd33", "89bb3253", "5f1c375b1a5b7cd0"}, 0x38)
perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r8, 0x6a, 0x1, 0x0, 0xc)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x70, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
bind$can_raw(r8, &(0x7f0000001a80)={0x1d, r7}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)

5.94884807s ago: executing program 1 (id=752):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0x1, 0x49d, &(0x7f0000000540)="$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")
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

5.700228456s ago: executing program 1 (id=753):
unshare(0x6020400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mq_notify(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x2eb2, 0x4)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}])
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
setreuid(0xee01, 0xee01)

5.591344858s ago: executing program 0 (id=754):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f0000001280)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x8c)

5.511379709s ago: executing program 7 (id=755):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32, @ANYBLOB="00000000000000009500007b00000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bf07010000f8ff8d56deae"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
unshare(0x26020480)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x5)

5.214437016s ago: executing program 7 (id=756):
unshare(0x26020480)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x5)

5.113351238s ago: executing program 7 (id=757):
unshare(0x26020480)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x5) (fail_nth: 1)

4.838714654s ago: executing program 8 (id=758):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0xfffffffffffffffd, 0x0)

4.758275026s ago: executing program 0 (id=759):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x0, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x5, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0xfffffffe, 0xbed4, 0x8, 0x80000fe, 0x3, 0x0, 0x11000, 0x80000000, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x80, 0xaa, 0x81, 0x6, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0x0, 0x5, 0x5, 0x6, 0x8, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1003, 0x8, 0xffff, 0x5, 0x80, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x84, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450)

4.757787286s ago: executing program 7 (id=760):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x40000)

4.627228169s ago: executing program 8 (id=761):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendto(r0, &(0x7f0000000000)="57c55994c9e7ec60ac9a", 0xa, 0x4048090, &(0x7f00000000c0)=@rxrpc=@in4={0x1d, 0x200, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80)

4.620225659s ago: executing program 0 (id=762):
removexattr(&(0x7f0000000980)='./cgroup\x00', &(0x7f00000009c0)=@known='trusted.syz\x00')
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000021000000100800010001"], 0x1c}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000003030114fab7dc000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x20004800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x1401, 0xd1d65b06353cad27, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621, 0x70bd26}, 0x10}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x18, 0x39, 0x107, 0x70bd2d, 0x259fdbfe, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048054}, 0x48010)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg(r0, &(0x7f0000001cc0)={&(0x7f0000000080)=@l2={0x1f, 0x8001, @any, 0x1, 0x1}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000006c0)="9b50db58fe83e9cc242597de8ce9a613ac3791145e732d682db48f77125ea262bb5a9fcce0b3d40e5fb44df3fa45bcc0c67fe684744be46dcecf79cd5f0a940626b4a02911901990f4243bdf46965a77172e77d02749f2a1149079671c8aa5be3321e58b1edf3a132cc864ec607073373fd04ddc946afb174d82700961bfe3f870dbf90c3f96154f5e16", 0x8a}, {&(0x7f0000000780)="4a82de367f53bb8592e74218c47149b20cf0f3df045bf9627058ea272c5f73959a1758c21a30b7b8249f2cf58ba8da7a6cb98e12e11c72856d1c646bfa3e4b452284464c3fbdafb2c56ad0b72655e7c482", 0x51}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="264116ab28ce3f8f50f81d024f1bd3608e10b054a4f05a8e34551ffba5", 0x1d}, {&(0x7f0000001840)="4e2de477119d1e6ebf22886302e740b78561349728190e71a10392bd63c7bc9c8e5415c094cab3766bc84f667638a0b6608ff76a21deb6e3f252f3e03c36dbe876", 0x41}, {&(0x7f00000018c0)="4ca46f77f680015d4357f5c77932d1905ad27ce0db5692fb9e135f357793f48ea0d7cc5a818c5050a26fbcd7c85a91f7ff3ef82d2e431636c5f3cd4ec1b851fcfec7377ff3", 0x45}, {&(0x7f0000001940)="9c1534e62454d62e39615750564c16d2059090f77e8db913dd98877a25b49bcff557ea53bd0e60a7f75b868d6b3645d8ceca9c4d3b363a7d25b2a8f84f77f55ef9d3cc2597cba81555900bd8f07a7c21ad054d8b2475e792da7cfe48230e70b671f1d9945e376e7316208600bda687cae8f986ac95ce14c27120518c73f45e17a843b43fd74269c93197840afd96c99c9812aa5be0dcd3fb2f4a9a7222bc39d835b9c58907401cdedc482d7a6f51fb4c41358a6d8d2e765a712a296e1520ba58663f5b48c2520a9823e53094027f", 0xce}, {&(0x7f0000001a40)="d7d44c0adb2dfcf588052bea5c62ad6c32a67296e16d80d2cbb7825b900c615cbc46991a633cdd203e0c42d406bbfa9c21243a29f84c75fc85ebabebddf741b1e0b82415c1170448dd72f112e56b574ff644c15d38b5fc39d6a5", 0x5a}, {&(0x7f0000001ac0)="ac5a9eff2f116836bc2a230d0c13050c97668e8cd538a1c77413097661779df65f18dc23bcdf9635d8a7fb62e35df5e4d64b22e8", 0x34}, {&(0x7f0000001b00)="dc1e69c7d7d0f5d0795d5e1843588af0ecdb0135db572469aaf3e9afcf5fc6b9146441e96864f3faea48c70c819940f34ab09445475136ec3778cd9495eed4f4fd56479398c8fa94665195fc42d7ebca1eeb45ac1cd77d728d544a671596187e3d821b4bccb95ec3351c5fc93181a976a7c91b364253efb68be29b129a8e5aad3e72561604f9a62e7d1ac57528cf34c6aba2014a8542224aaaf7839afd73a62912ce5ebbd722fe95c8e7f730780a9aed4d3e981a6cfde22cec", 0xb9}], 0xa, &(0x7f0000001c80)}, 0x20000001)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x128, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x390ff7c1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x141c424f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)

4.56615616s ago: executing program 7 (id=763):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0x1, 0x49d, &(0x7f0000000540)="$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")
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4.449743633s ago: executing program 2 (id=764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) (async)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}])
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10004800)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2f, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd00000000", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4002}, 0x50) (rerun: 32)
r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001500000225bd7000fbdbdf25023f20d6", @ANYRES32=r5, @ANYBLOB="0800090010e2000008000100e000000108000900c31e2777130006000300000002000000a9000000000800001400060002000000f30000000200000000010000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80, 0xfffffffffffffff6}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00c67bd0129200008000e9ff", @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000a0000000000d40a0000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

4.449048403s ago: executing program 8 (id=765):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (fail_nth: 4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)

4.270322487s ago: executing program 0 (id=766):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000100)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7})
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x200, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$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")
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc02063a1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000600)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa, 0x8, &(0x7f00000000c0)="00000008e656f7490000", &(0x7f0000000300)=""/8, 0x5561, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x101a0000, 0x0, 0x44, 0x0, 0x0, 0x0)

4.14081973s ago: executing program 7 (id=767):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x7, 0x3)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x10, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r4, 0xa)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0xffb6, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/216, 0xd8}], 0x1)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x4240)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x98, &(0x7f0000000200)={0xc, 0x3, 0x5}})
socket$xdp(0x2c, 0x3, 0x0)
pipe(&(0x7f0000000200))
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="00010400000001053dbd7000fadbdf25fe8000000000000000861897f3bccccda61414bb0000000000000000000000004e2200064e2400010200802088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d533000000fe8000000000000000000000000000bbff01000000000000a2000000000000000700000000000000fcffffffffffffff00000000000000000400000000000000ff7f000000000000fe4800000000000004000000000000000900000000000000de5f000100000000ffff00000000000005000000f8ffffff0800000026bd7000000000000a000209010000000000000003000000de00000008000b0001000000"], 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800)

1.954463167s ago: executing program 2 (id=768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)

318.482393ms ago: executing program 2 (id=769):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x238, 0xffffffff, 0x198, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@empty, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x160, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x1a, 0x2, {0x1}}}, @common=@addrtype={{0x30}, {0xf4, 0x2, 0x8001}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'veth0_vlan\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @gre_key=0x4, @gre_key=0xf801}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @private=0xa010101, @icmp_id, @gre_key=0xfff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
r1 = socket$netlink(0x10, 0x3, 0x0)
close_range(r1, r1, 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=<r4=>r2], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES16=r4, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="59c6f920bbc8b2b374ede12fa9fc2ad4d74ef216d99f9222a978d2309b89952210ef969def6f592a27f6266b7218285cc5f338026a457a2d2c28d0549855a01e370908ee0680df6d0ec25baa910bf6fea96ea42c58165f63af7d629a488a1d39f48f2afe409e48f8c9e073526bf3565a3580e3c060267e1773342cdb28a090fda533756856bea1eddfb5e0bdee47b509bd33e4edc3ff8bdfe2901b272692d3ac4678fb3a911bf79d768e94b6bbef7fc1d1ac3b733ff14375543039851b6919112326c111e280f8267d3183f30d89fe", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0xa0e8, 0xdffffffa, 0xc, 0x0, 0xb, "d0000180000000000000f200"})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
ioctl$TIOCGICOUNT(r6, 0x545d, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000000b000/0x3000)=nil)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x1, 0x8001}, 0x20, 0x10001, 0x21382424, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = syz_open_pts(r6, 0x141601)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"})
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000001040))
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

213.479245ms ago: executing program 8 (id=770):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0xb, 0x4, 0x7, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000001c0), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000020e00"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100000000000000ff"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

10.45927ms ago: executing program 2 (id=771):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0xfffffffffffffffd, 0x0)

0s ago: executing program 2 (id=772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400ed40a1ae08dc31454dc587205fb200001000010000000000000000000500000a480000001d0a010400000000000000000a0000010900010073697a31000000001c0004801800018008000162808349a7018e59849d6fe9b901baca006c6f67000c00028007000240402effe6141e13ab73797a3200000000ba2801841048c747e2050794502a0be00f0f49f2f3dbffe9b5b80befee538212b36968f6e3ed55cc8f8059cbeea6027630d3e69d"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = syz_open_pts(0xffffffffffffffff, 0x40)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0xfff8, 0x0, 0x6, 0xfff8, 0xd, "bc28fea8ca428d57"})

kernel console output (not intermixed with test programs):

ntry. extent=134217760 out of volume (nzones=41)
[   75.601410][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   76.020784][ T5038] netlink: 'syz.4.288': attribute type 9 has an invalid length.
[   76.230280][ T5051] loop4: detected capacity change from 0 to 512
[   76.242281][ T5051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   76.265470][ T5051] EXT4-fs (loop4): 1 truncate cleaned up
[   76.266396][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.346926][ T5053] loop2: detected capacity change from 0 to 512
[   76.347721][ T5053] EXT4-fs: dax option not supported
[   76.402321][ T5053] loop2: detected capacity change from 0 to 512
[   76.409323][ T5053] EXT4-fs: Ignoring removed oldalloc option
[   76.409458][ T5053] EXT4-fs: Ignoring removed i_version option
[   76.413764][ T5053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.444497][ T5053] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.291: invalid block
[   76.444539][ T5053] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   76.446976][ T5053] EXT4-fs error (device loop2) in ext4_process_orphan:346: IO failure
[   76.447004][ T5053] loop2: lost filesystem error report for type 5 error -5
[   76.449023][ T5053] EXT4-fs (loop2): 2 truncates cleaned up
[   76.450044][ T5053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.525936][ T5053] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1
[   76.580496][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   76.580539][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'.
[   76.580577][ T5064] netlink: 'syz.1.295': attribute type 7 has an invalid length.
[   76.592070][ T5053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.653500][   T51] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.657470][   T38] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.657591][   T38] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.657685][   T38] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.831604][ T5066] loop3: detected capacity change from 0 to 1024
[   76.868206][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   76.868340][ T5066] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.995817][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   77.078987][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.398672][ T5082] loop3: detected capacity change from 0 to 2048
[   77.430578][ T5082]  loop3: p2 p3 p7
[   77.443401][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   77.443487][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   77.443551][ T5089] netlink: 'syz.2.304': attribute type 13 has an invalid length.
[   77.443572][ T5089] netlink: 'syz.2.304': attribute type 11 has an invalid length.
[   77.677710][ T5082] can0: slcan on ttyS3.
[   77.833264][ T5081] can0 (unregistered): slcan off ttyS3.
[   78.070899][ T5104] FAULT_INJECTION: forcing a failure.
[   78.070899][ T5104] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   78.070931][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(lazy) 
[   78.070964][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.071000][ T5104] Call Trace:
[   78.071013][ T5104]  <TASK>
[   78.071028][ T5104]  __dump_stack+0x1d/0x30
[   78.071063][ T5104]  dump_stack_lvl+0x95/0xd0
[   78.071093][ T5104]  dump_stack+0x15/0x1b
[   78.071186][ T5104]  should_fail_ex+0x262/0x280
[   78.071214][ T5104]  should_fail_alloc_page+0xf2/0x100
[   78.071248][ T5104]  __alloc_frozen_pages_noprof+0x157/0x400
[   78.071372][ T5104]  alloc_pages_mpol+0xaf/0x1d0
[   78.071399][ T5104]  vma_alloc_folio_noprof+0x1b3/0x300
[   78.071478][ T5104]  do_wp_page+0x64d/0x1ed0
[   78.071510][ T5104]  ? sched_clock+0x41/0x60
[   78.071554][ T5104]  ? __rb_reserve_next+0x420/0x6c0
[   78.071605][ T5104]  ? __rcu_read_lock+0x36/0x50
[   78.071648][ T5104]  handle_mm_fault+0xe29/0x3bb0
[   78.071752][ T5104]  do_user_addr_fault+0x636/0x1060
[   78.071790][ T5104]  ? trace_page_fault_user+0x88/0xa0
[   78.071832][ T5104]  exc_page_fault+0x62/0xa0
[   78.071898][ T5104]  asm_exc_page_fault+0x26/0x30
[   78.071931][ T5104] RIP: 0033:0x7f26c970df45
[   78.071957][ T5104] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[   78.071987][ T5104] RSP: 002b:00007f26c8184de0 EFLAGS: 00010293
[   78.072031][ T5104] RAX: 0000000000000008 RBX: 00007f26ca507e20 RCX: 0000000000000000
[   78.072054][ T5104] RDX: 0000000000000000 RSI: 00007f26c97e2778 RDI: 00007f26ca507e20
[   78.072076][ T5104] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[   78.072094][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26c9802477
[   78.072109][ T5104] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007f26c97e2778
[   78.072172][ T5104]  </TASK>
[   78.272524][ T5104] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   78.359796][ T4977] netdevsim netdevsim10: probe with driver netdevsim failed with error -12
[   78.671427][ T5111] loop2: detected capacity change from 0 to 512
[   78.688647][ T5111] netlink: 'syz.2.313': attribute type 4 has an invalid length.
[   78.823177][ T5116] loop6: detected capacity change from 0 to 1024
[   78.861732][ T5116] EXT4-fs (loop6): orphan cleanup on readonly fs
[   78.872931][ T5116] EXT4-fs error (device loop6): ext4_quota_enable:7260: inode #4: comm syz.6.312: iget: bad extended attribute block 196608
[   78.872990][ T5116] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[   78.877737][ T5116] EXT4-fs error (device loop6): ext4_quota_enable:7263: comm syz.6.312: Bad quota inode: 4, type: 1
[   78.877772][ T5116] loop6: lost filesystem error report for type 5 error -117
[   78.879843][ T5116] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   78.882546][    C1] EXT4-fs (loop6): error count since last fsck: 2
[   78.882570][    C1] EXT4-fs (loop6): initial error at time 1789008262: ext4_quota_enable:7260: inode 4
[   78.882679][    C1] EXT4-fs (loop6): last error at time 1789008262: ext4_quota_enable:7263
[   78.907352][ T5116] EXT4-fs (loop6): Cannot turn on quotas: error -117
[   78.978640][ T5116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.097405][   T29] kauditd_printk_skb: 25 callbacks suppressed
[   79.097506][   T29] audit: type=1400 audit(1789008262.462:1360): avc:  denied  { write } for  pid=5112 comm="syz.6.312" lport=55873 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   79.100116][   T29] audit: type=1400 audit(1789008262.462:1361): avc:  denied  { setopt } for  pid=5112 comm="syz.6.312" lport=55873 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   79.235942][ T5129] loop4: detected capacity change from 0 to 1024
[   79.247772][ T5129] EXT4-fs: inline encryption not supported
[   79.247904][ T5129] EXT4-fs: Ignoring removed bh option
[   79.258138][ T5129] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   79.286675][ T5129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.309229][   T29] audit: type=1400 audit(1789008262.672:1362): avc:  denied  { write } for  pid=5124 comm="syz.4.316" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.354359][ T5131] usb usb8: usbfs: process 5131 (syz.2.319) did not claim interface 0 before use
[   79.355261][ T5131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5131 comm=syz.2.319
[   79.514355][   T29] audit: type=1400 audit(1789008262.872:1363): avc:  denied  { write } for  pid=3297 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   79.516316][ T3297] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   79.518100][ T3297] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 0(0), depth 0(0)
[   79.519478][ T3297] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 0(0), depth 0(0)
[   79.690669][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.794570][ T5146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.325'.
[   79.829913][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.857097][   T29] audit: type=1400 audit(1789008263.222:1364): avc:  denied  { read write } for  pid=5150 comm="syz.3.327" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   79.857153][   T29] audit: type=1400 audit(1789008263.222:1365): avc:  denied  { open } for  pid=5150 comm="syz.3.327" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   79.919590][ T5152] loop3: detected capacity change from 0 to 512
[   79.920790][ T5152] EXT4-fs: Ignoring removed oldalloc option
[   79.921652][ T5152] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   79.966067][ T5152] EXT4-fs (loop3): 1 orphan inode deleted
[   79.966091][ T5152] EXT4-fs (loop3): 1 truncate cleaned up
[   79.967308][ T5152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.003328][ T5152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.004323][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.004437][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.081705][   T29] audit: type=1400 audit(1789008263.442:1366): avc:  denied  { write } for  pid=5150 comm="syz.3.327" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   80.231756][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.231807][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.345570][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.345727][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.431929][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.431968][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.600977][ T5178] loop3: detected capacity change from 0 to 128
[   80.619098][   T29] audit: type=1400 audit(1789008263.982:1367): avc:  denied  { write } for  pid=5164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.699545][   T29] audit: type=1400 audit(1789008264.062:1368): avc:  denied  { write } for  pid=5186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.720470][ T5166] netlink: 52 bytes leftover after parsing attributes in process `syz.2.331'.
[   80.800629][   T29] audit: type=1400 audit(1789008264.162:1369): avc:  denied  { connect } for  pid=5165 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   80.870337][ T5166] loop2: detected capacity change from 0 to 164
[   81.012951][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.013014][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.013350][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.013493][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.195974][ T5194] loop6: detected capacity change from 0 to 2048
[   81.239741][ T5194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.413687][ T4348] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0003/input/input7
[   81.420290][ T4348] hid-generic 0005:0009:0040.0003: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 
[   81.499782][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.514944][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.601026][ T5201] fido_id[5201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   81.934907][   T12] bridge_slave_1: left allmulticast mode
[   81.934934][   T12] bridge_slave_1: left promiscuous mode
[   81.935205][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.967847][   T12] bridge_slave_0: left allmulticast mode
[   81.967945][   T12] bridge_slave_0: left promiscuous mode
[   81.968100][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.151582][ T5210] loop2: detected capacity change from 0 to 1024
[   82.201066][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.538926][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.540142][   T12] bond_slave_0: left allmulticast mode
[   82.565127][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.585672][   T12] bond_slave_1: left allmulticast mode
[   82.604346][   T12] bond0 (unregistering): Released all slaves
[   82.787271][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[   82.787303][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[   82.821456][   T12] hsr_slave_0: left promiscuous mode
[   82.830247][   T12] hsr_slave_1: left promiscuous mode
[   82.840612][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.840632][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.841145][ T5227] loop3: detected capacity change from 0 to 128
[   82.847969][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.848082][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.034798][   T12] veth1_macvtap: left promiscuous mode
[   83.034865][   T12] veth0_macvtap: left promiscuous mode
[   83.035006][   T12] veth1_vlan: left promiscuous mode
[   83.035103][   T12] veth0_vlan: left promiscuous mode
[   83.092186][ T5233] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   83.729754][ T5245] loop2: detected capacity change from 0 to 128
[   83.749839][ T5245] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   83.762248][ T5245] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.771934][   T12] team0 (unregistering): Port device team_slave_1 removed
[   83.780760][ T5245] ext2 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.879119][   T12] team0 (unregistering): Port device team_slave_0 removed
[   84.237092][ T5234] Q±6ã�`Ò˜: renamed from lo (while UP)
[   84.729195][ T5257] loop3: detected capacity change from 0 to 128
[   85.648220][   T29] kauditd_printk_skb: 332 callbacks suppressed
[   85.648241][   T29] audit: type=1400 audit(1789008269.012:1702): avc:  denied  { write } for  pid=5258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.768879][ T5271] FAULT_INJECTION: forcing a failure.
[   85.768879][ T5271] name failslab, interval 1, probability 0, space 0, times 0
[   85.768948][ T5271] CPU: 1 UID: 0 PID: 5271 Comm: syz.6.348 Not tainted syzkaller #0 PREEMPT(lazy) 
[   85.769041][ T5271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   85.769063][ T5271] Call Trace:
[   85.769076][ T5271]  <TASK>
[   85.769090][ T5271]  __dump_stack+0x1d/0x30
[   85.769121][ T5271]  dump_stack_lvl+0x95/0xd0
[   85.769230][ T5271]  dump_stack+0x15/0x1b
[   85.769261][ T5271]  should_fail_ex+0x262/0x280
[   85.769297][ T5271]  ? __send_signal_locked+0x14d/0x750
[   85.769363][ T5271]  should_failslab+0x8c/0xb0
[   85.769492][ T5271]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   85.769548][ T5271]  ? __send_signal_locked+0x14d/0x750
[   85.769669][ T5271]  __send_signal_locked+0x14d/0x750
[   85.769716][ T5271]  ? __rcu_read_unlock+0x33/0x70
[   85.769764][ T5271]  do_notify_parent+0x55f/0x600
[   85.769899][ T5271]  release_task+0x9bf/0xb90
[   85.769947][ T5271]  do_exit+0xd79/0x1510
[   85.770045][ T5271]  ? pv_queued_spin_unlock_traced+0x2d/0xb0
[   85.770096][ T5271]  do_group_exit+0xfe/0x140
[   85.770138][ T5271]  ? get_signal+0xe00/0xf10
[   85.770254][ T5271]  get_signal+0xe07/0xf10
[   85.770306][ T5271]  arch_do_signal_or_restart+0x96/0x480
[   85.770375][ T5271]  exit_to_user_mode_loop+0x15d/0x8c0
[   85.770427][ T5271]  ? trace_syscall_exit+0xfe/0x120
[   85.770458][ T5271]  do_syscall_64+0x212/0x360
[   85.770515][ T5271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.770564][ T5271] RIP: 0033:0x7fa73d1ee159
[   85.770583][ T5271] Code: Unable to access opcode bytes at 0x7fa73d1ee12f.
[   85.770600][ T5271] RSP: 002b:00007fa73bc470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   85.770649][ T5271] RAX: fffffffffffffe00 RBX: 00007fa73d475fa8 RCX: 00007fa73d1ee159
[   85.770742][ T5271] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa73d475fa8
[   85.770764][ T5271] RBP: 00007fa73d475fa0 R08: 0000000000000000 R09: 0000000000000000
[   85.770786][ T5271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.770807][ T5271] R13: 00007fa73d476038 R14: 00007ffee73589b0 R15: 00007ffee7358a98
[   85.770838][ T5271]  </TASK>
[   86.101860][   T29] audit: type=1400 audit(1789008269.462:1703): avc:  denied  { write } for  pid=5274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.184295][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9
[   86.411475][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.411565][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.411896][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.412069][ T5189] bridge_slave_0: entered allmulticast mode
[   86.449365][ T5189] bridge_slave_0: entered promiscuous mode
[   86.471002][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.471164][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.471610][ T5189] bridge_slave_1: entered allmulticast mode
[   86.497237][ T5189] bridge_slave_1: entered promiscuous mode
[   86.703260][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.730489][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.896823][ T5296] loop6: detected capacity change from 0 to 1024
[   86.897475][ T5296] ext4: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ'
[   86.947193][ T5189] team0: Port device team_slave_0 added
[   86.988204][ T5189] team0: Port device team_slave_1 added
[   87.161825][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.161848][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.161884][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.179432][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.179494][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.179736][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.506958][ T5189] hsr_slave_0: entered promiscuous mode
[   87.528320][ T5189] hsr_slave_1: entered promiscuous mode
[   87.547431][ T5189] debugfs: 'hsr0' already exists in 'hsr'
[   87.547451][ T5189] Cannot create hsr debugfs directory
[   87.615214][   T29] audit: type=1400 audit(1789008270.982:1704): avc:  denied  { write } for  pid=5298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.935766][   T29] audit: type=1400 audit(1789008271.302:1705): avc:  denied  { write } for  pid=5320 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.968953][   T29] audit: type=1400 audit(1789008271.332:1706): avc:  denied  { bind } for  pid=5321 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.995350][   T29] audit: type=1400 audit(1789008271.332:1707): avc:  denied  { setopt } for  pid=5321 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.032654][   T29] audit: type=1400 audit(1789008271.392:1708): avc:  denied  { listen } for  pid=5321 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.102077][ T5322] loop2: detected capacity change from 0 to 2048
[   88.141939][   T29] audit: type=1400 audit(1789008271.502:1709): avc:  denied  { connect } for  pid=5321 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.198257][   T29] audit: type=1400 audit(1789008271.552:1710): avc:  denied  { accept } for  pid=5321 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.245016][   T29] audit: type=1400 audit(1789008271.612:1711): avc:  denied  { write } for  pid=5321 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.247832][ T5322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.365025][ T5327] loop6: detected capacity change from 0 to 512
[   88.406447][ T5327] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.361: corrupted in-inode xattr: invalid ea_ino
[   88.406486][ T5327] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   88.411720][ T5327] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.361: couldn't read orphan inode 15 (err -117)
[   88.411758][ T5327] loop6: lost filesystem error report for type 5 error -117
[   88.412410][    C0] EXT4-fs (loop6): error count since last fsck: 2
[   88.412438][    C0] EXT4-fs (loop6): initial error at time 1789008271: ext4_iget_extra_inode:5210: inode 15
[   88.412491][    C0] EXT4-fs (loop6): last error at time 1789008271: ext4_orphan_get:1408
[   88.438872][ T5327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.486148][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10
[   88.536125][ T1041] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0004/input/input8
[   88.564304][ T1041] hid-generic 0005:0009:0040.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 
[   88.683261][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.683527][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.776059][ T5327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5327 comm=syz.6.361
[   88.899811][ T5341] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   88.958225][ T5189] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   88.985907][ T5338] fido_id[5338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   89.030958][ T5189] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.043109][ T5189] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   89.091450][ T5189] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.100368][ T5189] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   89.139761][ T5189] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.150819][ T5189] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   89.191548][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.193314][ T5189] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.347156][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.661723][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'.
[   89.678015][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.788981][ T5189] 8021q: adding VLAN 0 to HW filter on device team0
[   89.863140][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.863199][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.941944][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.941990][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.086171][ T5365] loop2: detected capacity change from 0 to 4096
[   90.143577][ T5365] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   90.143777][ T5365] EXT4-fs (loop2): mount failed
[   90.878966][   T29] kauditd_printk_skb: 5 callbacks suppressed
[   90.878988][   T29] audit: type=1400 audit(1789008274.242:1716): avc:  denied  { write } for  pid=5375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.192534][   T29] audit: type=1400 audit(1789008274.552:1717): avc:  denied  { write } for  pid=5411 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.346129][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.346333][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.383580][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.434977][ T5418] loop6: detected capacity change from 0 to 512
[   91.489389][ T5418] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.374: corrupted in-inode xattr: invalid ea_ino
[   91.489425][ T5418] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.492696][    C1] EXT4-fs (loop6): error count since last fsck: 1
[   91.492783][    C1] EXT4-fs (loop6): initial error at time 1789008274: ext4_iget_extra_inode:5210: inode 15
[   91.493023][    C1] EXT4-fs (loop6): last error at time 1789008274: ext4_iget_extra_inode:5210: inode 15
[   91.508406][ T5418] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.374: couldn't read orphan inode 15 (err -117)
[   91.508528][ T5418] loop6: lost filesystem error report for type 5 error -117
[   91.549883][ T5418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.577894][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11
[   91.935028][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.379031][ T5419] loop2: detected capacity change from 0 to 8192
[   92.414245][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.378'.
[   92.414303][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.378'.
[   92.441884][ T5419]  loop2: p1 p2 p3 p4
[   92.469119][ T5443] team0: entered promiscuous mode
[   92.469146][ T5443] team_slave_0: entered promiscuous mode
[   92.469290][ T5443] team_slave_1: entered promiscuous mode
[   92.494084][ T5419] loop2: p3 start 34078720 is beyond EOD, truncated
[   92.494115][ T5419] loop2: p4 start 16842752 is beyond EOD, truncated
[   92.594953][   T29] audit: type=1400 audit(1789008275.962:1718): avc:  denied  { write } for  pid=5429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.658314][ T5443] bond0: entered promiscuous mode
[   92.658343][ T5443] bond_slave_0: entered promiscuous mode
[   92.658506][ T5443] bond_slave_1: entered promiscuous mode
[   92.747582][   T29] audit: type=1400 audit(1789008276.112:1719): avc:  denied  { write } for  pid=5463 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.845826][ T5443] 8021q: adding VLAN 0 to HW filter on device hsr1
[   92.873540][ T5444] loop6: detected capacity change from 0 to 512
[   92.922165][ T5444] ext4: Unknown parameter 'ÿÿÿÿ ¨ü'
[   93.087160][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12
[   93.097530][ T5471] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   93.287690][ T5189] veth0_vlan: entered promiscuous mode
[   93.369497][ T5189] veth1_vlan: entered promiscuous mode
[   93.583148][ T5189] veth0_macvtap: entered promiscuous mode
[   93.620804][ T5189] veth1_macvtap: entered promiscuous mode
[   93.703180][   T29] audit: type=1400 audit(1789008277.072:1720): avc:  denied  { ioctl } for  pid=5482 comm="syz.6.384" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=10949 ioctlcmd=0x5403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   93.781368][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.898261][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.903557][ T4884] udevd[4884]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   93.924504][ T4874] udevd[4874]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   94.043451][   T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.064268][  T561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.065585][  T561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.066601][  T561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.304374][   T29] audit: type=1400 audit(1789008277.662:1721): avc:  denied  { mounton } for  pid=5189 comm="syz-executor" path="/root/syzkaller.749C8b/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   94.344638][   T29] audit: type=1400 audit(1789008277.712:1722): avc:  denied  { mount } for  pid=5189 comm="syz-executor" name="/" dev="gadgetfs" ino=4734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   94.725019][   T29] audit: type=1326 audit(1789008278.092:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.3.389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26c974e159 code=0x0
[   94.858639][ T5513] loop3: detected capacity change from 0 to 128
[   94.891331][ T5513] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   94.920269][ T5513] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.921576][ T5513] ext2 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.058132][   T29] audit: type=1400 audit(1789008278.422:1724): avc:  denied  { write } for  pid=5503 comm="syz.3.389" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.127998][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.7.393'.
[   95.196145][   T29] audit: type=1326 audit(1789008278.562:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.1.394" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d0b6de159 code=0x0
[   95.293347][ T5524] loop7: detected capacity change from 0 to 512
[   95.399779][ T5524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.599773][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.677166][ T5535] loop6: detected capacity change from 0 to 1024
[   95.702427][ T5535] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[   95.902154][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.096624][ T5544] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   96.210902][ T5549] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   96.782562][ T5564] sctp: [Deprecated]: syz.1.407 (pid 5564) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.782562][ T5564] Use struct sctp_sack_info instead
[   96.953372][ T5571] loop6: detected capacity change from 0 to 512
[   96.969807][ T5571] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.409: corrupted in-inode xattr: invalid ea_ino
[   96.969854][ T5571] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   96.970286][ T5571] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.409: couldn't read orphan inode 15 (err -117)
[   96.970323][ T5571] loop6: lost filesystem error report for type 5 error -117
[   96.971537][ T5571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.118035][ T5571] netlink: 'syz.6.409': attribute type 3 has an invalid length.
[   97.118075][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.409'.
[   97.272208][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.288050][ T5587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.415'.
[   97.388050][   T29] kauditd_printk_skb: 1 callbacks suppressed
[   97.388071][   T29] audit: type=1400 audit(1789008280.752:1727): avc:  denied  { bind } for  pid=5586 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.550031][   T29] audit: type=1400 audit(1789008280.912:1728): avc:  denied  { read } for  pid=5593 comm="syz.6.419" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   97.550085][   T29] audit: type=1400 audit(1789008280.912:1729): avc:  denied  { open } for  pid=5593 comm="syz.6.419" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   97.619809][   T29] audit: type=1400 audit(1789008280.982:1730): avc:  denied  { ioctl } for  pid=5593 comm="syz.6.419" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   97.827662][ T5604] loop7: detected capacity change from 0 to 1024
[   97.918248][ T5606] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   98.210496][   T29] audit: type=1400 audit(1789008281.572:1731): avc:  denied  { bind } for  pid=5610 comm="syz.6.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   98.241800][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.241947][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.130031][ T5631] syzkaller0: entered promiscuous mode
[   99.130061][ T5631] syzkaller0: entered allmulticast mode
[   99.438411][   T29] audit: type=1400 audit(1789008282.802:1732): avc:  denied  { write } for  pid=5622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   99.498685][ T5641] loop7: detected capacity change from 0 to 1024
[   99.537081][ T5641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   99.537182][ T5641] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.594232][   T29] audit: type=1400 audit(1789008282.962:1733): avc:  denied  { write } for  pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   99.629407][ T5647] netlink: 56 bytes leftover after parsing attributes in process `syz.6.433'.
[   99.769776][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   99.986857][ T5671] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  100.183679][ T5677] hub 1-0:1.0: USB hub found
[  100.187844][ T5677] hub 1-0:1.0: 8 ports detected
[  100.235188][   T29] audit: type=1400 audit(1789008283.602:1734): avc:  denied  { write } for  pid=5674 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  100.399845][ T5686] x_tables: duplicate underflow at hook 2
[  100.473589][ T5686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.473736][ T5686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.529777][ T5686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  100.529813][ T5686] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  100.529924][ T5686] vhci_hcd vhci_hcd.0: Device attached
[  100.548227][ T5688] vhci_hcd: cannot find the pending unlink 9
[  100.567189][ T5688] vhci_hcd: connection closed
[  100.571489][   T38] vhci_hcd vhci_hcd.3: stop threads
[  100.571515][   T38] vhci_hcd vhci_hcd.3: release socket
[  100.571536][   T38] vhci_hcd vhci_hcd.3: disconnect device
[  100.895617][ T5699] netlink: 56 bytes leftover after parsing attributes in process `syz.2.447'.
[  101.165512][ T5707] loop7: detected capacity change from 0 to 1024
[  101.209031][ T5707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  101.209200][ T5707] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.265146][ T5715] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  101.320307][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  101.473184][ T5723] loop3: detected capacity change from 0 to 512
[  101.505360][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.457: inode has both inline data and extents flags
[  101.505403][ T5723] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  101.506757][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.457: couldn't read orphan inode 15 (err -117)
[  101.506790][ T5723] loop3: lost filesystem error report for type 5 error -117
[  101.508259][ T5723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.525792][ T5723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.796980][ T5729] loop2: detected capacity change from 0 to 512
[  101.808571][ T5729] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  102.120240][ T5741] netlink: 56 bytes leftover after parsing attributes in process `syz.6.460'.
[  102.233012][ T5746] bond1: (slave bond_slave_1): Device is not our slave
[  102.233046][ T5746] bond1: option active_slave: invalid value (bond_slave_1)
[  102.247988][ T5746] bond1 (unregistering): Released all slaves
[  102.477586][   T29] audit: type=1400 audit(1789008285.842:1735): avc:  denied  { ioctl } for  pid=5761 comm="syz.6.469" path="socket:[12402]" dev="sockfs" ino=12402 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  102.507857][   T29] audit: type=1400 audit(1789008285.852:1736): avc:  denied  { open } for  pid=5757 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  102.507930][   T29] audit: type=1400 audit(1789008285.852:1737): avc:  denied  { kernel } for  pid=5757 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  102.545005][ T5762] 9pnet: p9_errstr2errno: server reported unknown error 
[  102.566362][ T5765] FAULT_INJECTION: forcing a failure.
[  102.566362][ T5765] name failslab, interval 1, probability 0, space 0, times 0
[  102.566457][ T5765] CPU: 1 UID: 0 PID: 5765 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(lazy) 
[  102.566496][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.566517][ T5765] Call Trace:
[  102.566529][ T5765]  <TASK>
[  102.566542][ T5765]  __dump_stack+0x1d/0x30
[  102.566676][ T5765]  dump_stack_lvl+0x95/0xd0
[  102.566712][ T5765]  dump_stack+0x15/0x1b
[  102.566744][ T5765]  should_fail_ex+0x262/0x280
[  102.566774][ T5765]  ? do_inotify_init+0x91/0x280
[  102.566876][ T5765]  should_failslab+0x8c/0xb0
[  102.566950][ T5765]  __kmalloc_cache_noprof+0x7a/0x400
[  102.567002][ T5765]  ? do_inotify_init+0x91/0x280
[  102.567044][ T5765]  ? mutex_init_generic+0x3e/0x50
[  102.567094][ T5765]  do_inotify_init+0x91/0x280
[  102.567172][ T5765]  __x64_sys_inotify_init1+0x1e/0x30
[  102.567204][ T5765]  x64_sys_call+0x188d/0x2550
[  102.567264][ T5765]  do_syscall_64+0x112/0x360
[  102.567356][ T5765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.567386][ T5765] RIP: 0033:0x7fe6f17de159
[  102.567405][ T5765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.567429][ T5765] RSP: 002b:00007fe6f0237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  102.567508][ T5765] RAX: ffffffffffffffda RBX: 00007fe6f1a65fa0 RCX: 00007fe6f17de159
[  102.567525][ T5765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  102.567543][ T5765] RBP: 00007fe6f187503b R08: 0000000000000000 R09: 0000000000000000
[  102.567563][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.567643][ T5765] R13: 00007fe6f1a66038 R14: 00007fe6f1a65fa0 R15: 00007ffc39fc5328
[  102.567744][ T5765]  </TASK>
[  102.700490][ T5762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.469'.
[  102.770367][   T29] audit: type=1400 audit(1789008286.132:1738): avc:  denied  { ioctl } for  pid=5761 comm="syz.6.469" path="socket:[12409]" dev="sockfs" ino=12409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  102.854640][ T5759] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  102.916339][ T5776] loop7: detected capacity change from 0 to 512
[  102.951043][ T5776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.046850][ T5776] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  103.047730][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.047987][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.149178][ T5783] netlink: 56 bytes leftover after parsing attributes in process `syz.6.475'.
[  103.149619][ T5789] FAULT_INJECTION: forcing a failure.
[  103.149619][ T5789] name failslab, interval 1, probability 0, space 0, times 0
[  103.149731][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.2.477 Not tainted syzkaller #0 PREEMPT(lazy) 
[  103.149768][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.149789][ T5789] Call Trace:
[  103.149800][ T5789]  <TASK>
[  103.149810][ T5789]  __dump_stack+0x1d/0x30
[  103.149929][ T5789]  dump_stack_lvl+0x95/0xd0
[  103.150000][ T5789]  dump_stack+0x15/0x1b
[  103.150033][ T5789]  should_fail_ex+0x262/0x280
[  103.150070][ T5789]  should_failslab+0x8c/0xb0
[  103.150113][ T5789]  __kvmalloc_node_noprof+0x168/0x5c0
[  103.150242][ T5789]  ? traverse+0x9c/0x3b0
[  103.150283][ T5789]  ? traverse+0x9c/0x3b0
[  103.150430][ T5789]  traverse+0x9c/0x3b0
[  103.150474][ T5789]  seq_read_iter+0x7dc/0x8f0
[  103.150517][ T5789]  seq_read+0x279/0x2c0
[  103.150616][ T5789]  ? __pfx_seq_read+0x10/0x10
[  103.150656][ T5789]  proc_reg_read+0x128/0x1c0
[  103.150692][ T5789]  ? __pfx_proc_reg_read+0x10/0x10
[  103.150792][ T5789]  vfs_read+0x18e/0x7c0
[  103.150871][ T5789]  ? __rcu_read_unlock+0x4e/0x70
[  103.150916][ T5789]  ? __fget_files+0x184/0x1c0
[  103.151022][ T5789]  ? trace_event_raw_event_sys_enter+0x195/0x1f0
[  103.151076][ T5789]  __x64_sys_pread64+0xfd/0x150
[  103.151112][ T5789]  x64_sys_call+0xd2e/0x2550
[  103.151152][ T5789]  do_syscall_64+0x112/0x360
[  103.151194][ T5789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.151227][ T5789] RIP: 0033:0x7fe6f17de159
[  103.151248][ T5789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.151303][ T5789] RSP: 002b:00007fe6f0237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  103.151338][ T5789] RAX: ffffffffffffffda RBX: 00007fe6f1a65fa0 RCX: 00007fe6f17de159
[  103.151360][ T5789] RDX: 0000000000019000 RSI: 000020000001a240 RDI: 0000000000000003
[  103.151399][ T5789] RBP: 00007fe6f0237090 R08: 0000000000000000 R09: 0000000000000000
[  103.151415][ T5789] R10: 000000000000041e R11: 0000000000000246 R12: 0000000000000001
[  103.151438][ T5789] R13: 00007fe6f1a66038 R14: 00007fe6f1a65fa0 R15: 00007ffc39fc5328
[  103.151467][ T5789]  </TASK>
[  103.412448][   T29] audit: type=1400 audit(1789008286.772:1739): avc:  denied  { sys_module } for  pid=5781 comm="syz.6.475" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  103.497696][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.501226][   T29] audit: type=1400 audit(1789008286.862:1740): avc:  denied  { tracepoint } for  pid=5799 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  103.797843][   T29] audit: type=1400 audit(1789008287.162:1741): avc:  denied  { write } for  pid=5816 comm="syz.7.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  103.843764][ T5818] loop7: detected capacity change from 0 to 2048
[  103.886623][ T5818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.970351][ T5828] program syz.6.491 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.005812][    T9] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0005/input/input9
[  104.052060][    T9] hid-generic 0005:0009:0040.0005: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 
[  104.106853][   T29] audit: type=1400 audit(1789008287.472:1742): avc:  denied  { write } for  pid=5816 comm="syz.7.489" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  104.107167][ T5837] loop6: detected capacity change from 0 to 512
[  104.135362][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.135968][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.185459][ T5838] fido_id[5838]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  104.221946][ T5837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.354683][ T5848] netlink: 56 bytes leftover after parsing attributes in process `syz.2.495'.
[  106.961576][ T5837] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  106.962417][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.963038][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.994590][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.015961][ T5847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.109846][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.282730][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.498'.
[  107.471287][   T29] audit: type=1400 audit(1789008290.832:1743): avc:  denied  { read } for  pid=5881 comm="syz.7.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  107.597299][ T5891] netlink: 'syz.7.506': attribute type 1 has an invalid length.
[  107.597327][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.506'.
[  107.643556][   T29] audit: type=1400 audit(1789008291.012:1744): avc:  denied  { write } for  pid=5853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.704945][ T5894] loop6: detected capacity change from 0 to 512
[  107.753300][   T29] audit: type=1400 audit(1789008291.112:1745): avc:  denied  { write } for  pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.803665][ T5894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.803838][ T5894] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.938124][   T29] audit: type=1400 audit(1789008291.302:1746): avc:  denied  { mounton } for  pid=5883 comm="syz.6.504" path="/proc/213/task" dev="proc" ino=13491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  108.151255][ T5910] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  108.259044][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'.
[  108.357910][   T29] audit: type=1400 audit(1789008291.722:1747): avc:  denied  { write } for  pid=5902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.424168][ T5920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.510'.
[  108.462425][   T29] audit: type=1400 audit(1789008291.822:1748): avc:  denied  { write } for  pid=5921 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.782397][   T29] audit: type=1400 audit(1789008292.142:1749): avc:  denied  { write } for  pid=5924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.814245][ T5938] netlink: 120 bytes leftover after parsing attributes in process `syz.7.511'.
[  108.899552][   T29] audit: type=1400 audit(1789008292.262:1750): avc:  denied  { write } for  pid=5943 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.936781][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.998180][ T5946] netlink: 52 bytes leftover after parsing attributes in process `syz.7.514'.
[  109.024560][ T5949] netlink: 'syz.6.515': attribute type 4 has an invalid length.
[  109.030842][ T5942] loop2: detected capacity change from 0 to 512
[  109.032052][ T5949] netlink: 'syz.6.515': attribute type 4 has an invalid length.
[  109.050744][ T5942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.079893][ T5942] EXT4-fs (loop2): 1 truncate cleaned up
[  109.080893][ T5942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.101831][   T29] audit: type=1400 audit(1789008292.452:1751): avc:  denied  { name_bind } for  pid=5944 comm="syz.7.514" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  109.129920][   T29] audit: type=1400 audit(1789008292.492:1752): avc:  denied  { write } for  pid=5941 comm="syz.2.513" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  109.542674][   T29] audit: type=1400 audit(1789008292.852:1753): avc:  denied  { write } for  pid=5957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.552407][ T5981] sctp: [Deprecated]: syz.1.517 (pid 5981) Use of int in maxseg socket option.
[  109.552407][ T5981] Use struct sctp_assoc_value instead
[  109.774578][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.370173][ T6010] netlink: 'syz.1.521': attribute type 13 has an invalid length.
[  111.449540][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.521'.
[  111.687435][ T6012] bond0: (slave bond_slave_0): Releasing backup interface
[  111.736236][ T6012] bond_slave_0: entered promiscuous mode
[  111.736362][ T6012] bond_slave_0: entered allmulticast mode
[  111.742673][ T6018] netlink: 56 bytes leftover after parsing attributes in process `syz.6.522'.
[  112.065778][ T6026] FAULT_INJECTION: forcing a failure.
[  112.065778][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.065810][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT(lazy) 
[  112.065839][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.065868][ T6026] Call Trace:
[  112.065878][ T6026]  <TASK>
[  112.065891][ T6026]  __dump_stack+0x1d/0x30
[  112.065933][ T6026]  dump_stack_lvl+0x95/0xd0
[  112.066035][ T6026]  dump_stack+0x15/0x1b
[  112.066071][ T6026]  should_fail_ex+0x262/0x280
[  112.066107][ T6026]  should_fail+0xb/0x20
[  112.066147][ T6026]  should_fail_usercopy+0x1a/0x20
[  112.066178][ T6026]  _copy_to_user+0x20/0xa0
[  112.066214][ T6026]  simple_read_from_buffer+0xb5/0x130
[  112.066329][ T6026]  proc_fail_nth_read+0x10e/0x150
[  112.066385][ T6026]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  112.066437][ T6026]  vfs_read+0x18e/0x7c0
[  112.066476][ T6026]  ? __rcu_read_unlock+0x4e/0x70
[  112.066584][ T6026]  ? __fget_files+0x184/0x1c0
[  112.066615][ T6026]  ? mutex_lock+0x57/0x90
[  112.066653][ T6026]  ksys_read+0xdc/0x1a0
[  112.066722][ T6026]  __x64_sys_read+0x40/0x50
[  112.066758][ T6026]  x64_sys_call+0x2135/0x2550
[  112.066797][ T6026]  do_syscall_64+0x112/0x360
[  112.066890][ T6026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.066917][ T6026] RIP: 0033:0x7fe6f179e98e
[  112.066936][ T6026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  112.067008][ T6026] RSP: 002b:00007fe6f0236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  112.067057][ T6026] RAX: ffffffffffffffda RBX: 00007fe6f02376c0 RCX: 00007fe6f179e98e
[  112.067078][ T6026] RDX: 000000000000000f RSI: 00007fe6f02370a0 RDI: 0000000000000003
[  112.067099][ T6026] RBP: 00007fe6f0237090 R08: 0000000000000000 R09: 0000000000000000
[  112.067120][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.067213][ T6026] R13: 00007fe6f1a66038 R14: 00007fe6f1a65fa0 R15: 00007ffc39fc5328
[  112.067244][ T6026]  </TASK>
[  112.630387][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'.
[  112.749878][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  112.749899][   T29] audit: type=1400 audit(1789008296.112:1761): avc:  denied  { bind } for  pid=6043 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  112.750021][   T29] audit: type=1400 audit(1789008296.112:1762): avc:  denied  { node_bind } for  pid=6043 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  112.750607][   T29] audit: type=1400 audit(1789008296.112:1763): avc:  denied  { write } for  pid=6043 comm="syz.2.528" laddr=fe80::b faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  112.864388][ T6045] loop2: detected capacity change from 0 to 512
[  112.888472][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.888592][ T6045] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.060640][   T29] audit: type=1400 audit(1789008296.422:1764): avc:  denied  { write } for  pid=6069 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.135185][ T6075] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  113.157028][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.532'.
[  113.181098][ T6078] loop3: detected capacity change from 0 to 512
[  113.206795][   T29] audit: type=1400 audit(1789008296.572:1765): avc:  denied  { write } for  pid=6070 comm="syz.7.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  113.393814][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.533'.
[  113.403066][ T6078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.403210][ T6078] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.425285][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.444880][   T29] audit: type=1400 audit(1789008296.772:1766): avc:  denied  { write } for  pid=6076 comm="syz.3.534" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.445071][   T29] audit: type=1400 audit(1789008296.772:1767): avc:  denied  { create } for  pid=6076 comm="syz.3.534" name="sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.445178][   T29] audit: type=1400 audit(1789008296.782:1768): avc:  denied  { mounton } for  pid=6076 comm="syz.3.534" path="/98/file1/sys" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.449984][   T29] audit: type=1400 audit(1789008296.812:1769): avc:  denied  { write } for  pid=6076 comm="syz.3.534" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.585201][   T29] audit: type=1400 audit(1789008296.952:1770): avc:  denied  { write } for  pid=3299 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.588967][ T3299] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  113.602308][ T3299] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  113.665557][ T6092] futex_wake_op: syz.2.536 tries to shift op by 144; fix this program
[  113.682817][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'.
[  113.903866][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.069670][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  114.109882][ T6116] loop7: detected capacity change from 0 to 512
[  114.122223][ T6116] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.122246][ T6116] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  114.156196][ T6116] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  114.168093][ T6116] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  114.168299][ T6116] System zones: 0-2, 18-18, 34-35
[  114.190208][ T6116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.253579][ T6116] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.544: bg 0: block 353: padding at end of block bitmap is not set
[  114.255393][ T6116] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  114.277503][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.7.544'.
[  114.277616][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.544'.
[  114.441810][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[  114.685183][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.981847][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.556'.
[  115.084414][ T6165] loop2: detected capacity change from 0 to 512
[  115.120745][ T6165] EXT4-fs (loop2): orphan cleanup on readonly fs
[  115.120775][ T6165] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  115.140154][ T6165] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  115.142433][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  115.142458][    C1] EXT4-fs (loop2): initial error at time 1789008298: ext4_mb_generate_buddy:1317
[  115.142493][    C1] EXT4-fs (loop2): last error at time 1789008298: ext4_mb_generate_buddy:1317
[  115.187958][ T6165] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.559: attempt to clear invalid blocks 33619980 len 1
[  115.188024][ T6165] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  115.207129][ T6165] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.559: invalid indirect mapped block 1819239214 (level 0)
[  115.207179][ T6165] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  115.212290][ T6165] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.559: invalid indirect mapped block 1819239214 (level 1)
[  115.212366][ T6165] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  115.240190][ T6165] EXT4-fs (loop2): 1 truncate cleaned up
[  115.253355][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.369847][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.525299][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.525366][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.527599][ T6123] bridge_slave_0: entered allmulticast mode
[  115.531440][ T6123] bridge_slave_0: entered promiscuous mode
[  115.565068][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.565127][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.567568][ T6123] bridge_slave_1: entered allmulticast mode
[  115.570860][ T6123] bridge_slave_1: entered promiscuous mode
[  115.741267][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.781234][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.927250][ T6123] team0: Port device team_slave_0 added
[  115.971378][ T6123] team0: Port device team_slave_1 added
[  116.062459][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.062483][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.062529][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.071112][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.071135][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.071222][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.272692][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  116.332015][ T6123] hsr_slave_0: entered promiscuous mode
[  116.339863][ T6123] hsr_slave_1: entered promiscuous mode
[  116.341312][ T6123] debugfs: 'hsr0' already exists in 'hsr'
[  116.341335][ T6123] Cannot create hsr debugfs directory
[  116.687523][ T6213] syz.7.574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  116.812987][ T6123] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  116.833507][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  116.837330][ T6123] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  116.865644][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  116.896513][ T6123] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  116.911865][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  116.919934][ T6123] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  116.937987][ T6123] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  117.095398][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.131573][ T6123] 8021q: adding VLAN 0 to HW filter on device team0
[  117.165369][  T561] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.165441][  T561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.221147][  T561] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.221202][  T561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.404824][ T6249] loop6: detected capacity change from 0 to 128
[  117.433490][ T6249] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.438057][ T6249] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.521993][ T4145] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.734665][ T6271] __nla_validate_parse: 7 callbacks suppressed
[  117.734713][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  117.783317][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.317341][ T6123] veth0_vlan: entered promiscuous mode
[  118.358432][ T6123] veth1_vlan: entered promiscuous mode
[  118.390995][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  118.391018][   T29] audit: type=1400 audit(1789008301.752:1782): avc:  denied  { mount } for  pid=6295 comm="syz.6.593" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  118.424576][ T6298] netlink: 44 bytes leftover after parsing attributes in process `syz.6.593'.
[  118.456352][ T6123] veth0_macvtap: entered promiscuous mode
[  118.466809][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.7.595'.
[  118.505235][ T6123] veth1_macvtap: entered promiscuous mode
[  118.545429][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.566512][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.7.599'.
[  118.596123][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.103268][   T38] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.103322][   T38] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.103368][   T38] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.103445][   T38] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.314874][ T6326] FAULT_INJECTION: forcing a failure.
[  119.314874][ T6326] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.314954][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.7.602 Not tainted syzkaller #0 PREEMPT(lazy) 
[  119.314988][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.315004][ T6326] Call Trace:
[  119.315014][ T6326]  <TASK>
[  119.315024][ T6326]  __dump_stack+0x1d/0x30
[  119.315074][ T6326]  dump_stack_lvl+0x95/0xd0
[  119.315162][ T6326]  dump_stack+0x15/0x1b
[  119.315217][ T6326]  should_fail_ex+0x262/0x280
[  119.315254][ T6326]  should_fail+0xb/0x20
[  119.315361][ T6326]  should_fail_usercopy+0x1a/0x20
[  119.315399][ T6326]  strncpy_from_user+0x27/0x250
[  119.315454][ T6326]  do_getname+0x59/0x1c0
[  119.315493][ T6326]  user_path_at+0x28/0x100
[  119.315532][ T6326]  __se_sys_mount+0x25b/0x2e0
[  119.315567][ T6326]  __x64_sys_mount+0x67/0x80
[  119.315632][ T6326]  x64_sys_call+0xc3b/0x2550
[  119.315717][ T6326]  do_syscall_64+0x112/0x360
[  119.315762][ T6326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.315792][ T6326] RIP: 0033:0x7f17d496e159
[  119.315818][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.315896][ T6326] RSP: 002b:00007f17d33c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  119.315938][ T6326] RAX: ffffffffffffffda RBX: 00007f17d4bf5fa0 RCX: 00007f17d496e159
[  119.315955][ T6326] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100
[  119.315975][ T6326] RBP: 00007f17d33c7090 R08: 0000200000000100 R09: 0000000000000000
[  119.315997][ T6326] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001
[  119.316064][ T6326] R13: 00007f17d4bf6038 R14: 00007f17d4bf5fa0 R15: 00007fff1032cd48
[  119.316095][ T6326]  </TASK>
[  119.599904][ T6332] loop2: detected capacity change from 0 to 128
[  119.610366][ T6332] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.632125][ T6332] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.647514][ T6328] loop8: detected capacity change from 0 to 512
[  119.668519][ T6328] EXT4-fs (loop8): orphan cleanup on readonly fs
[  119.668545][ T6328] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  119.677958][ T6328] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  119.692513][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  119.692606][    C1] EXT4-fs (loop8): initial error at time 1789008303: ext4_mb_generate_buddy:1317
[  119.692734][    C1] EXT4-fs (loop8): last error at time 1789008303: ext4_mb_generate_buddy:1317
[  119.720353][ T6328] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.545: attempt to clear invalid blocks 33619980 len 1
[  119.720398][ T6328] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.744964][ T6328] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.545: invalid indirect mapped block 1819239214 (level 0)
[  119.745019][ T6328] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.768944][ T6328] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.545: invalid indirect mapped block 1819239214 (level 1)
[  119.769021][ T6328] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.798155][ T6328] EXT4-fs (loop8): 1 truncate cleaned up
[  119.809051][ T6328] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.865009][ T6123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.920418][ T6339] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  119.980420][   T29] audit: type=1326 audit(1789008303.342:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70220ce159 code=0x7ffc0000
[  119.980937][   T29] audit: type=1326 audit(1789008303.342:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70220ce159 code=0x7ffc0000
[  119.981136][   T29] audit: type=1326 audit(1789008303.342:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70220ce159 code=0x7ffc0000
[  119.981185][   T29] audit: type=1326 audit(1789008303.342:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70220ce159 code=0x7ffc0000
[  119.981222][   T29] audit: type=1326 audit(1789008303.342:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70220cdec2 code=0x7ffc0000
[  119.981369][   T29] audit: type=1326 audit(1789008303.342:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70220cdf57 code=0x7ffc0000
[  119.982026][   T29] audit: type=1326 audit(1789008303.342:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f702208ae51 code=0x7ffc0000
[  119.982072][   T29] audit: type=1326 audit(1789008303.342:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f70220cef49 code=0x7ffc0000
[  119.982200][   T29] audit: type=1326 audit(1789008303.342:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.8.608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70220ce159 code=0x7ffc0000
[  120.339790][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'.
[  120.415514][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.610'.
[  121.086615][ T6376] loop6: detected capacity change from 0 to 1024
[  121.089403][ T6376] EXT4-fs: inline encryption not supported
[  121.089449][ T6376] EXT4-fs: Ignoring removed bh option
[  121.122197][ T6376] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  121.149476][ T6376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.224596][ T6376] FAULT_INJECTION: forcing a failure.
[  121.224596][ T6376] name fail_futex, interval 1, probability 0, space 0, times 1
[  121.224630][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.6.615 Not tainted syzkaller #0 PREEMPT(lazy) 
[  121.224678][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  121.224739][ T6376] Call Trace:
[  121.224750][ T6376]  <TASK>
[  121.224760][ T6376]  __dump_stack+0x1d/0x30
[  121.224829][ T6376]  dump_stack_lvl+0x95/0xd0
[  121.224865][ T6376]  dump_stack+0x15/0x1b
[  121.224898][ T6376]  should_fail_ex+0x262/0x280
[  121.224928][ T6376]  should_fail+0xb/0x20
[  121.224951][ T6376]  get_futex_key+0x12d/0xb10
[  121.225057][ T6376]  futex_wake+0x89/0x400
[  121.225125][ T6376]  do_futex+0x3f8/0x460
[  121.225168][ T6376]  __se_sys_futex+0x2f6/0x370
[  121.225216][ T6376]  __x64_sys_futex+0x78/0x90
[  121.225291][ T6376]  x64_sys_call+0x22e2/0x2550
[  121.225331][ T6376]  do_syscall_64+0x112/0x360
[  121.225449][ T6376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.225615][ T6376] RIP: 0033:0x7fa73d1ee159
[  121.225639][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.225667][ T6376] RSP: 002b:00007fa73bc260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.225692][ T6376] RAX: ffffffffffffffda RBX: 00007fa73d476098 RCX: 00007fa73d1ee159
[  121.225716][ T6376] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa73d47609c
[  121.225735][ T6376] RBP: 00007fa73d476090 R08: 3fffffffffffffff R09: 0000000000000000
[  121.225758][ T6376] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  121.225779][ T6376] R13: 00007fa73d476128 R14: 00007ffee73589b0 R15: 00007ffee7358a98
[  121.225811][ T6376]  </TASK>
[  121.472042][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.8.618'.
[  121.609956][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'.
[  121.624793][ T4145] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /95/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  121.625672][ T4145] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 0(0), depth 0(0)
[  121.626370][ T4145] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 0(0), depth 0(0)
[  122.164050][ T4145] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.173828][  T561] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.202931][ T6402] netlink: 52 bytes leftover after parsing attributes in process `syz.2.626'.
[  122.226815][ T6402] loop2: detected capacity change from 0 to 164
[  122.270821][  T561] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.319317][  T561] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.381560][  T561] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.707632][  T561] bridge_slave_1: left allmulticast mode
[  122.707664][  T561] bridge_slave_1: left promiscuous mode
[  122.707864][  T561] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.723799][  T561] bridge_slave_0: left allmulticast mode
[  122.723908][  T561] bridge_slave_0: left promiscuous mode
[  122.724385][  T561] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.952195][  T561] bond0 (unregistering): left promiscuous mode
[  122.952221][  T561] bond_slave_0: left promiscuous mode
[  122.952307][  T561] bond_slave_1: left promiscuous mode
[  122.979047][  T561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.998422][ T6424] netlink: 'syz.2.634': attribute type 29 has an invalid length.
[  122.998451][ T6424] netlink: 'syz.2.634': attribute type 3 has an invalid length.
[  122.998470][ T6424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.634'.
[  123.040983][  T561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.048134][ T6422] loop8: detected capacity change from 0 to 4096
[  123.069580][ T6422] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.069620][ T6422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.069681][ T6422] ext4: Unknown parameter 'subj_type'
[  123.101206][  T561] bond0 (unregistering): Released all slaves
[  123.212868][  T561] team0: left promiscuous mode
[  123.212928][  T561] team_slave_0: left promiscuous mode
[  123.213100][  T561] team_slave_1: left promiscuous mode
[  123.250053][  T561] hsr_slave_0: left promiscuous mode
[  123.262850][  T561] hsr_slave_1: left promiscuous mode
[  123.266187][  T561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.266279][  T561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.303884][  T561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.303907][  T561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.373409][  T561] veth1_macvtap: left promiscuous mode
[  123.373447][  T561] veth0_macvtap: left promiscuous mode
[  123.373552][  T561] veth1_vlan: left promiscuous mode
[  123.373670][  T561] veth0_vlan: left promiscuous mode
[  123.491086][   T29] kauditd_printk_skb: 481 callbacks suppressed
[  123.491111][   T29] audit: type=1400 audit(1789008306.852:2273): avc:  denied  { watch watch_reads } for  pid=6433 comm="syz.1.637" path="/145/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  123.652451][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'.
[  123.902025][  T561] team0 (unregistering): Port device team_slave_1 removed
[  123.951997][  T561] team0 (unregistering): Port device team_slave_0 removed
[  124.021800][   T29] audit: type=1400 audit(1789008307.382:2274): avc:  denied  { cpu } for  pid=6456 comm="syz.7.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  124.162618][ T6465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.643'.
[  124.188890][ T6465] loop2: detected capacity change from 0 to 164
[  124.223326][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.223720][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.351975][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.367101][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.381219][   T29] audit: type=1400 audit(1789008307.742:2275): avc:  denied  { ioctl } for  pid=6469 comm="syz.1.647" path="socket:[14756]" dev="sockfs" ino=14756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  124.474488][  T136] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.474562][  T136] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.474685][  T136] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.474743][  T136] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.916156][   T29] audit: type=1400 audit(1789008308.282:2276): avc:  denied  { write } for  pid=6473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.000878][   T29] audit: type=1400 audit(1789008308.362:2277): avc:  denied  { write } for  pid=6493 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.074048][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13
[  125.324881][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.324939][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.325634][ T6417] bridge_slave_0: entered allmulticast mode
[  125.327775][ T6417] bridge_slave_0: entered promiscuous mode
[  125.331649][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.331757][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.332209][ T6417] bridge_slave_1: entered allmulticast mode
[  125.393420][ T6417] bridge_slave_1: entered promiscuous mode
[  125.436534][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.463158][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.570521][ T6417] team0: Port device team_slave_0 added
[  125.593628][ T6417] team0: Port device team_slave_1 added
[  126.607579][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.607599][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.607647][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.609414][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.609437][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  127.609483][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.707681][ T6563] netlink: 56 bytes leftover after parsing attributes in process `syz.7.658'.
[  127.867789][   T29] audit: type=1400 audit(1789008311.232:2278): avc:  denied  { write } for  pid=6564 comm="syz.7.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.889193][ T6417] hsr_slave_0: entered promiscuous mode
[  127.892134][ T6417] hsr_slave_1: entered promiscuous mode
[  127.894597][ T6417] debugfs: 'hsr0' already exists in 'hsr'
[  127.894620][ T6417] Cannot create hsr debugfs directory
[  128.251592][ T6417] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  128.257240][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  128.260544][ T6417] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  128.273462][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  128.275400][ T6417] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  128.298718][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  128.300126][ T6417] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  128.311007][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  128.483474][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.525586][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[  128.540786][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.540842][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.555469][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.555526][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.827631][   T29] audit: type=1400 audit(1789008312.192:2279): avc:  denied  { write } for  pid=6515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.996771][   T29] audit: type=1400 audit(1789008312.362:2280): avc:  denied  { write } for  pid=6584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.138138][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14
[  129.587887][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.990037][   T29] audit: type=1400 audit(1789008313.352:2281): avc:  denied  { write } for  pid=6589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.207982][   T29] audit: type=1400 audit(1789008313.572:2282): avc:  denied  { write } for  pid=6614 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.895145][ T6417] veth0_vlan: entered promiscuous mode
[  130.943003][ T6417] veth1_vlan: entered promiscuous mode
[  131.032800][   T29] audit: type=1400 audit(1789008314.402:2283): avc:  denied  { mount } for  pid=6621 comm="syz.1.661" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  131.112009][ T6417] veth0_macvtap: entered promiscuous mode
[  131.144884][ T6417] veth1_macvtap: entered promiscuous mode
[  131.221642][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.287802][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.383728][   T38] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.383789][   T38] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.383872][   T38] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.383924][   T38] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.438583][   T29] audit: type=1400 audit(1789008314.802:2284): avc:  denied  { write } for  pid=6624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.605090][ T6646] loop8: detected capacity change from 0 to 512
[  131.665246][ T6646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.729139][ T6641] netlink: 'syz.7.663': attribute type 10 has an invalid length.
[  131.770250][   T29] audit: type=1400 audit(1789008315.132:2285): avc:  denied  { write } for  pid=6648 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.833900][ T6641] team0 (unregistering): Port device team_slave_0 removed
[  131.873172][ T6641] team0 (unregistering): Port device team_slave_1 removed
[  131.903139][ T6646] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  131.934465][ T6658] loop9: detected capacity change from 0 to 512
[  131.938187][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'.
[  131.938312][ T6659] bond0: entered allmulticast mode
[  131.938335][ T6659] bond_slave_0: entered allmulticast mode
[  131.938358][ T6659] bond_slave_1: entered allmulticast mode
[  131.993299][ T6659] loop2: detected capacity change from 0 to 512
[  132.017804][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15
[  132.037606][ T6658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.037775][ T6658] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.085293][   T29] audit: type=1400 audit(1789008315.452:2286): avc:  denied  { write } for  pid=6656 comm="syz.9.631" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  132.134485][   T29] audit: type=1400 audit(1789008315.502:2287): avc:  denied  { write } for  pid=6656 comm="syz.9.631" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  132.179790][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.8.664'.
[  132.199955][   T29] audit: type=1400 audit(1789008315.562:2288): avc:  denied  { mounton } for  pid=6656 comm="syz.9.631" path="/0/bus/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  132.222856][ T6659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.223261][ T6659] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.321360][ T6668] loop9: detected capacity change from 512 to 0
[  132.336647][ T6658] EXT4-fs error (device loop9): ext4_get_inode_loc:5054: inode #16: block 34: comm syz.9.631: unable to read itable block
[  132.336736][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.336766][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.336785][ T6658] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6522: IO failure
[  132.336862][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.336891][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.336957][ T6658] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.631: mark_inode_dirty error
[  132.337010][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.337108][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.337421][ T6658] EXT4-fs error (device loop9): ext4_get_inode_loc:5054: inode #16: block 34: comm syz.9.631: unable to read itable block
[  132.337622][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.337645][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.337666][ T6658] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6522: IO failure
[  132.337781][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.337802][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.337819][ T6658] EXT4-fs error (device loop9): ext4_ext_truncate:4565: inode #16: comm syz.9.631: mark_inode_dirty error
[  132.338120][    C0] I/O error, dev loop9, sector 140 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  132.373591][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.373674][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.374005][ T6658] EXT4-fs error (device loop9): ext4_get_inode_loc:5054: inode #16: block 34: comm syz.9.631: unable to read itable block
[  132.374183][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.374246][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.374299][ T6658] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6522: IO failure
[  132.374601][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.374664][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.374726][ T6658] EXT4-fs error (device loop9): ext4_truncate:4721: inode #16: comm syz.9.631: mark_inode_dirty error
[  132.411310][ T6658] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.411406][ T6658] EXT4-fs (loop9): I/O error while writing superblock
[  132.411819][ T6658] EXT4-fs warning (device loop9): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 38)
[  132.411937][ T6658] Buffer I/O error on device loop9, logical block 38
[  132.411988][ T6658] Buffer I/O error on device loop9, logical block 39
[  132.412064][ T6658] Buffer I/O error on device loop9, logical block 40
[  132.412079][ T6658] Buffer I/O error on device loop9, logical block 41
[  132.437144][ T6658] EXT4-fs warning (device loop9): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 42)
[  132.437543][ T6658] EXT4-fs warning (device loop9): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 45)
[  132.437648][ T6658] Buffer I/O error on device loop9, logical block 45
[  132.437731][ T6658] Buffer I/O error on device loop9, logical block 42
[  132.679828][ T6123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.717213][ T6671] netlink: 56 bytes leftover after parsing attributes in process `syz.1.668'.
[  132.825585][ T6674] loop7: detected capacity change from 0 to 256
[  132.848665][ T6678] loop8: detected capacity change from 0 to 512
[  132.898033][ T6674] syzkaller0: entered promiscuous mode
[  132.898108][ T6674] syzkaller0: entered allmulticast mode
[  132.922504][ T6678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.951979][ T6674] tipc: Started in network mode
[  132.952014][ T6674] tipc: Node identity f6be62b81623, cluster identity 4711
[  132.952227][ T6674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.979152][ T6417] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  132.981971][ T6672] tipc: Resetting bearer <eth:syzkaller0>
[  133.017326][ T6672] tipc: Disabling bearer <eth:syzkaller0>
[  133.044909][   T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.047194][ T6678] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  133.123383][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.184578][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.8.667'.
[  133.275013][   T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.290028][ T6123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.399094][   T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.418215][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.676'.
[  133.420975][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16
[  133.590995][ T6716] netlink: 52 bytes leftover after parsing attributes in process `syz.2.674'.
[  133.624040][ T6716] loop2: detected capacity change from 0 to 164
[  133.768750][   T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.800437][ T6715] tipc: Started in network mode
[  133.800460][ T6715] tipc: Node identity 1000001, cluster identity 4369
[  133.800479][ T6715] tipc: Node number set to 16777217
[  133.825678][ T6725] tipc: New replicast peer: 127.0.0.1
[  133.826111][ T6725] tipc: Enabled bearer <udp:syz0>, priority 10
[  133.858105][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  133.858200][   T29] audit: type=1400 audit(1789008317.222:2294): avc:  denied  { write } for  pid=6706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.951365][   T29] audit: type=1400 audit(1789008317.312:2295): avc:  denied  { write } for  pid=6735 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  133.965210][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.678'.
[  134.048226][ T6739] loop7: detected capacity change from 0 to 1024
[  134.105078][ T6739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.164984][   T51] bridge_slave_1: left allmulticast mode
[  134.165014][   T51] bridge_slave_1: left promiscuous mode
[  134.165232][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.201978][   T51] bridge_slave_0: left allmulticast mode
[  134.202007][   T51] bridge_slave_0: left promiscuous mode
[  134.202192][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.471892][   T29] audit: type=1400 audit(1789008317.832:2296): avc:  denied  { write } for  pid=6742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.507852][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.536324][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.559360][   T51] bond0 (unregistering): Released all slaves
[  134.607902][   T29] audit: type=1400 audit(1789008317.972:2297): avc:  denied  { write } for  pid=6767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.755546][   T29] audit: type=1400 audit(1789008318.122:2298): avc:  denied  { execute } for  pid=6771 comm="syz.1.683" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  134.777978][   T51] hsr_slave_0: left promiscuous mode
[  134.808213][   T51] hsr_slave_1: left promiscuous mode
[  134.810008][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.810028][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.869333][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.869364][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.975894][   T29] audit: type=1400 audit(1789008318.342:2299): avc:  denied  { write } for  pid=6769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.013877][   T51] veth1_macvtap: left promiscuous mode
[  135.013991][   T51] veth0_macvtap: left promiscuous mode
[  135.014136][   T51] veth1_vlan: left promiscuous mode
[  135.014188][   T51] veth0_vlan: left promiscuous mode
[  135.120934][   T29] audit: type=1400 audit(1789008318.482:2300): avc:  denied  { setopt } for  pid=6738 comm="syz.7.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  135.217533][   T29] audit: type=1400 audit(1789008318.582:2301): avc:  denied  { write } for  pid=6793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.296270][   T51] team0 (unregistering): Port device team_slave_1 removed
[  135.320331][   T51] team0 (unregistering): Port device team_slave_0 removed
[  135.828889][   T29] audit: type=1400 audit(1789008319.192:2302): avc:  denied  { write } for  pid=6800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.979602][   T29] audit: type=1400 audit(1789008319.342:2303): avc:  denied  { write } for  pid=6825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.097524][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.235845][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.235896][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.236366][ T6694] bridge_slave_0: entered allmulticast mode
[  136.241890][ T6694] bridge_slave_0: entered promiscuous mode
[  136.278932][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.279147][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.281435][ T6694] bridge_slave_1: entered allmulticast mode
[  136.306626][ T6694] bridge_slave_1: entered promiscuous mode
[  136.374230][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.393881][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.443295][ T6694] team0: Port device team_slave_0 added
[  136.464394][ T6694] team0: Port device team_slave_1 added
[  136.492120][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.492143][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.492185][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.538570][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.538656][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.538789][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.803818][ T6861] macvtap1: entered promiscuous mode
[  136.811485][ T6861] macvtap1: entered allmulticast mode
[  136.811513][ T6861] veth1_vlan: entered allmulticast mode
[  136.877259][ T6694] hsr_slave_0: entered promiscuous mode
[  136.898751][ T6694] hsr_slave_1: entered promiscuous mode
[  136.921057][ T6694] debugfs: 'hsr0' already exists in 'hsr'
[  136.921079][ T6694] Cannot create hsr debugfs directory
[  136.963473][ T6867] loop2: detected capacity change from 0 to 512
[  136.987475][ T6867] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.699: corrupted in-inode xattr: invalid ea_ino
[  136.987521][ T6867] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  136.987861][ T6867] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.699: couldn't read orphan inode 15 (err -117)
[  136.987896][ T6867] loop2: lost filesystem error report for type 5 error -117
[  136.989143][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.319090][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.354532][ T6872] bridge1: entered promiscuous mode
[  137.354590][ T6872] bridge1: entered allmulticast mode
[  138.095581][ T6926] loop2: detected capacity change from 0 to 512
[  138.115947][ T6926] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.711: corrupted in-inode xattr: invalid ea_ino
[  138.115999][ T6926] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  138.117816][ T6926] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.711: couldn't read orphan inode 15 (err -117)
[  138.117998][ T6926] loop2: lost filesystem error report for type 5 error -117
[  138.133158][    C0] EXT4-fs (loop2): error count since last fsck: 2
[  138.133189][    C0] EXT4-fs (loop2): initial error at time 1700006401: ext4_iget_extra_inode:5210: inode 15
[  138.133234][    C0] EXT4-fs (loop2): last error at time 1700006401: ext4_orphan_get:1408
[  138.170925][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.180180][ T6694] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  138.228837][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  138.237380][ T6694] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  138.260234][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  138.288419][ T6694] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  138.311059][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  138.324498][ T6694] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.356300][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  138.500506][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.662784][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6947 comm=syz.8.714
[  138.827505][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.861315][ T6965] loop8: detected capacity change from 0 to 512
[  138.889313][ T6965] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  138.889708][ T6965] EXT4-fs (loop8): orphan cleanup on readonly fs
[  138.905957][ T6965] __quota_error: 17 callbacks suppressed
[  138.906036][ T6965] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  138.906119][ T6965] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  138.908762][ T6965] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  138.909249][ T6965] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #16: comm syz.8.718: inode has both inline data and extents flags
[  138.909286][ T6965] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  138.912230][ T6965] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.718: couldn't read orphan inode 16 (err -117)
[  138.912278][ T6965] loop8: lost filesystem error report for type 5 error -117
[  138.992917][ T6965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  139.024971][ T6968] can: request_module (can-proto-0) failed.
[  139.042544][ T6964] loop2: detected capacity change from 0 to 1024
[  139.052878][ T6964] EXT4-fs: dax option not supported
[  139.116347][   T29] audit: type=1400 audit(1700006402.040:2321): avc:  denied  { write } for  pid=6981 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.205690][ T6694] 8021q: adding VLAN 0 to HW filter on device team0
[  139.270994][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.8.718'.
[  139.292002][  T561] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.292072][  T561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.321695][  T561] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.321750][  T561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.405939][   T29] audit: type=1326 audit(1700006402.330:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.2.722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f17de159 code=0x0
[  139.447036][ T6123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.584554][ T6997] loop8: detected capacity change from 0 to 512
[  139.613093][ T6997] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.725: corrupted in-inode xattr: invalid ea_ino
[  139.613141][ T6997] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  139.614649][ T6997] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.725: couldn't read orphan inode 15 (err -117)
[  139.614686][ T6997] loop8: lost filesystem error report for type 5 error -117
[  139.616098][ T6997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.757830][ T6123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.887953][   T29] audit: type=1326 audit(1700006402.810:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.7.729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17d496e159 code=0x0
[  139.959966][ T7023] loop7: detected capacity change from 0 to 128
[  139.979920][ T7023] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  139.996187][ T7023] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.004928][ T7023] ext2 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.030509][   T29] audit: type=1400 audit(1700006402.950:2324): avc:  denied  { write } for  pid=7018 comm="syz.7.729" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.068266][   T29] audit: type=1400 audit(1700006402.990:2325): avc:  denied  { write } for  pid=6999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.114137][   T29] audit: type=1326 audit(1700006403.040:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.8.730" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70220ce159 code=0x0
[  140.195063][ T7033] loop8: detected capacity change from 0 to 128
[  140.205403][ T7033] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  140.211521][   T29] audit: type=1400 audit(1700006403.130:2327): avc:  denied  { write } for  pid=7034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.236166][ T7033] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.256338][ T7033] ext2 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.328361][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17
[  140.381892][   T29] audit: type=1400 audit(1700006403.300:2328): avc:  denied  { write } for  pid=7028 comm="syz.8.730" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.435263][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7040 comm=syz.1.731
[  140.462244][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.732'.
[  140.589817][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.836152][ T5189] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.917182][ T7057] netlink: 'syz.2.736': attribute type 12 has an invalid length.
[  140.917214][ T7057] netlink: 'syz.2.736': attribute type 29 has an invalid length.
[  140.917234][ T7057] netlink: 148 bytes leftover after parsing attributes in process `syz.2.736'.
[  140.917323][ T7057] netlink: 'syz.2.736': attribute type 1 has an invalid length.
[  140.917342][ T7057] netlink: 'syz.2.736': attribute type 2 has an invalid length.
[  140.917356][ T7057] netlink: 11 bytes leftover after parsing attributes in process `syz.2.736'.
[  140.977096][ T7057] netlink: 'syz.2.736': attribute type 12 has an invalid length.
[  140.977119][ T7057] netlink: 'syz.2.736': attribute type 29 has an invalid length.
[  140.977134][ T7057] netlink: 148 bytes leftover after parsing attributes in process `syz.2.736'.
[  140.977242][ T7057] netlink: 'syz.2.736': attribute type 1 has an invalid length.
[  140.977263][ T7057] netlink: 'syz.2.736': attribute type 2 has an invalid length.
[  140.977281][ T7057] netlink: 11 bytes leftover after parsing attributes in process `syz.2.736'.
[  141.085230][ T7071] loop7: detected capacity change from 0 to 512
[  141.102768][ T7071] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.737: corrupted in-inode xattr: invalid ea_ino
[  141.102918][ T7071] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  141.106902][ T7071] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.737: couldn't read orphan inode 15 (err -117)
[  141.106965][ T7071] loop7: lost filesystem error report for type 5 error -117
[  141.112569][    C0] EXT4-fs (loop7): error count since last fsck: 2
[  141.112621][    C0] EXT4-fs (loop7): initial error at time 1700006404: ext4_iget_extra_inode:5210: inode 15
[  141.112671][    C0] EXT4-fs (loop7): last error at time 1700006404: ext4_orphan_get:1408
[  141.148623][ T7071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.276544][   T29] audit: type=1400 audit(1700006404.200:2329): avc:  denied  { write } for  pid=7058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.367738][ T6123] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.371127][ T6694] veth0_vlan: entered promiscuous mode
[  141.406789][ T6694] veth1_vlan: entered promiscuous mode
[  141.458355][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.585281][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.8.744'.
[  141.603782][ T6694] veth0_macvtap: entered promiscuous mode
[  141.611821][ T7085] syzkaller0: entered promiscuous mode
[  141.611848][ T7085] syzkaller0: entered allmulticast mode
[  141.637072][ T6694] veth1_macvtap: entered promiscuous mode
[  141.639363][ T7085] tipc: Started in network mode
[  141.639416][ T7085] tipc: Node identity 5a6e9080733, cluster identity 4711
[  141.639553][ T7085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.678429][ T7085] syzkaller0: mtu less than device minimum
[  141.693027][ T7084] tipc: Resetting bearer <eth:syzkaller0>
[  141.716460][ T7084] tipc: Disabling bearer <eth:syzkaller0>
[  141.747878][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18
[  141.765543][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.802559][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.856919][ T7103] loop7: detected capacity change from 0 to 128
[  141.859679][ T7103] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  141.887246][ T7103] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.890216][ T7103] ext2 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.917927][ T3484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.917982][ T3484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.918091][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.993299][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.253935][ T7121] loop0: detected capacity change from 0 to 512
[  142.266986][ T7121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  142.275835][ T7121] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock
[  142.408116][ T7121] veth0_to_bridge: entered promiscuous mode
[  142.408313][ T7121] macvtap1: entered allmulticast mode
[  142.408384][ T7121] veth0_to_bridge: entered allmulticast mode
[  142.469431][ T7121] veth0_to_bridge: left allmulticast mode
[  142.469466][ T7121] veth0_to_bridge: left promiscuous mode
[  142.756749][ T5189] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.836182][ T7140] loop2: detected capacity change from 0 to 512
[  142.913249][ T7140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.913478][ T7140] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.932117][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19
[  143.192016][ T7138] loop0: detected capacity change from 0 to 8192
[  143.225302][ T7151] FAULT_INJECTION: forcing a failure.
[  143.225302][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.225339][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.7.757 Not tainted syzkaller #0 PREEMPT(lazy) 
[  143.225366][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.225383][ T7151] Call Trace:
[  143.225394][ T7151]  <TASK>
[  143.225472][ T7151]  __dump_stack+0x1d/0x30
[  143.225508][ T7151]  dump_stack_lvl+0x95/0xd0
[  143.225539][ T7151]  dump_stack+0x15/0x1b
[  143.225571][ T7151]  should_fail_ex+0x262/0x280
[  143.225686][ T7151]  should_fail+0xb/0x20
[  143.225775][ T7151]  should_fail_usercopy+0x1a/0x20
[  143.225885][ T7151]  _copy_from_user+0x1c/0xb0
[  143.225917][ T7151]  __sys_connect+0xd0/0x2a0
[  143.225955][ T7151]  __x64_sys_connect+0x3f/0x50
[  143.225997][ T7151]  x64_sys_call+0x1c0b/0x2550
[  143.226043][ T7151]  do_syscall_64+0x112/0x360
[  143.226091][ T7151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.226125][ T7151] RIP: 0033:0x7f17d496e159
[  143.226149][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.226228][ T7151] RSP: 002b:00007f17d33c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  143.226264][ T7151] RAX: ffffffffffffffda RBX: 00007f17d4bf5fa0 RCX: 00007f17d496e159
[  143.226307][ T7151] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000003
[  143.226327][ T7151] RBP: 00007f17d33c7090 R08: 0000000000000000 R09: 0000000000000000
[  143.226393][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.226415][ T7151] R13: 00007f17d4bf6038 R14: 00007f17d4bf5fa0 R15: 00007fff1032cd48
[  143.226442][ T7151]  </TASK>
[  143.772839][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.805728][ T7171] loop7: detected capacity change from 0 to 512
[  143.825845][ T7167] tipc: Started in network mode
[  143.825864][ T7167] tipc: Node identity 2007ff, cluster identity 4711
[  143.825882][ T7167] tipc: Node number set to 2099199
[  143.854292][ T7171] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.763: corrupted in-inode xattr: invalid ea_ino
[  143.854337][ T7171] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  143.854665][ T7171] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.763: couldn't read orphan inode 15 (err -117)
[  143.854697][ T7171] loop7: lost filesystem error report for type 5 error -117
[  143.855737][ T7171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.923432][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  143.923489][   T29] audit: type=1400 audit(1700006406.850:2336): avc:  denied  { write } for  pid=7149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  144.010590][ T7179] program syz.2.764 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.116125][ T5189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.224562][   T29] audit: type=1400 audit(1700006407.150:2337): avc:  denied  { write } for  pid=7186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  144.356033][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20
[  147.008034][ T7202] loop0: detected capacity change from 0 to 1024
[  147.234236][   T29] audit: type=1400 audit(1700006409.930:2338): avc:  denied  { read } for  pid=7187 comm="syz.7.767" path="socket:[17670]" dev="sockfs" ino=17670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  147.663265][ T7202] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  147.688943][ T7202] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.766: lblock 2 mapped to illegal pblock 2 (length 1)
[  147.689019][ T7202] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  147.689284][ T7202] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  147.689328][ T7202] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.766: lblock 0 mapped to illegal pblock 48 (length 1)
[  147.689390][ T7202] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  147.690122][ T7202] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  147.690250][ T7202] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.766: Failed to acquire dquot type 0
[  147.690281][ T7202] loop0: lost filesystem error report for type 5 error -117
[  147.690723][ T7202] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  147.690774][ T7202] loop0: lost filesystem error report for type 5 error -117
[  147.690934][ T7202] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.766: mark_inode_dirty error
[  147.691002][ T7202] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  147.691105][ T7202] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  147.691185][ T7202] EXT4-fs (loop0): 1 orphan inode deleted
[  147.691693][ T7202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.717246][   T12] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  147.722975][   T12] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  147.723058][   T12] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0
[  147.964644][ T7210] Cannot find del_set index 2 as target
[  147.967708][ T7210] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  147.980997][ T7210] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.982440][ T7176] ==================================================================
[  147.982475][ T7176] BUG: KCSAN: data-race in probe_sched_switch / tracing_stop_cmdline_record
[  147.982517][ T7176] 
[  147.982523][ T7176] read-write to 0xffffffff895f91e0 of 4 bytes by task 7201 on cpu 1:
[  147.982540][ T7176]  tracing_stop_cmdline_record+0x28/0xc0
[  147.982576][ T7176]  __ftrace_event_enable_disable+0x323/0x4b0
[  147.982612][ T7176]  ftrace_event_set_open+0xe6/0x200
[  147.982634][ T7176]  do_dentry_open+0x49f/0xa60
[  147.982656][ T7176]  vfs_open+0x37/0x1e0
[  147.982675][ T7176]  path_openat+0xc01/0x10d0
[  147.982703][ T7176]  do_file_open+0x16c/0x290
[  147.982730][ T7176]  do_sys_openat2+0xa0/0x130
[  147.982751][ T7176]  __x64_sys_openat+0xf2/0x120
[  147.982774][ T7176]  x64_sys_call+0x1f72/0x2550
[  147.982800][ T7176]  do_syscall_64+0x112/0x360
[  147.982832][ T7176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.982854][ T7176] 
[  147.982859][ T7176] read to 0xffffffff895f91e0 of 4 bytes by task 7176 on cpu 0:
[  147.982876][ T7176]  probe_sched_switch+0x46/0xa0
[  147.982895][ T7176]  __traceiter_sched_switch+0x3f/0x60
[  147.982922][ T7176]  __schedule+0xc34/0xd20
[  147.982940][ T7176]  preempt_schedule_notrace+0x31/0x50
[  147.982962][ T7176]  preempt_schedule_notrace_thunk+0x16/0x30
[  147.982996][ T7176]  trace_event_raw_event_io_uring_file_get+0x16c/0x1a0
[  147.983033][ T7176]  io_file_get_normal+0x13a/0x160
[  147.983059][ T7176]  io_issue_sqe+0xa6/0xb80
[  147.983084][ T7176]  io_submit_sqes+0x7e1/0x1180
[  147.983110][ T7176]  __se_sys_io_uring_enter+0x25c/0xf90
[  147.983137][ T7176]  __x64_sys_io_uring_enter+0x78/0x90
[  147.983172][ T7176]  x64_sys_call+0x1780/0x2550
[  147.983198][ T7176]  do_syscall_64+0x112/0x360
[  147.983229][ T7176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.983250][ T7176] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  147.983254][ T7176] value changed: 0x00000704 -> 0x00000703
[  147.983266][ T7176] 
[  147.983270][ T7176] Reported by Kernel Concurrency Sanitizer on:
[  147.983281][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.8.765 Not tainted syzkaller #0 PREEMPT(lazy) 
[  147.983307][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  147.983321][ T7176] ==================================================================
[  148.003834][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.769'.
[  148.101414][ T7212] bond1 (unregistering): Released all slaves
[  148.182728][   T29] audit: type=1400 audit(1700006411.060:2339): avc:  denied  { connect } for  pid=7213 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  148.182847][   T29] audit: type=1400 audit(1700006411.070:2340): avc:  denied  { write } for  pid=7190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.194172][   T29] audit: type=1400 audit(1700006411.120:2341): avc:  denied  { write } for  pid=7220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.565268][ T6694] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.565936][ T6694] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  148.566086][ T6694] loop0: lost filesystem error report for type 5 error -117
[  148.566300][ T6694] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  148.566363][ T6694] loop0: lost filesystem error report for type 5 error -117
[  148.566597][ T6694] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  148.566670][ T6694] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  148.567104][ T6694] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  148.567173][ T6694] loop0: lost filesystem error report for type 5 error -117
[  148.800911][   T29] audit: type=1400 audit(1700006411.720:2342): avc:  denied  { write } for  pid=7224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.025203][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  149.025291][   T29] audit: type=1400 audit(1700006411.950:2344): avc:  denied  { write } for  pid=7239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.075890][   T29] audit: type=1400 audit(1700006412.000:2345): avc:  denied  { write } for  pid=7250 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.241571][   T29] audit: type=1400 audit(1700006412.160:2346): avc:  denied  { write } for  pid=7253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.268327][   T12] bridge_slave_1: left allmulticast mode
[  149.268348][   T12] bridge_slave_1: left promiscuous mode
[  149.268462][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.269060][   T12] bridge_slave_0: left allmulticast mode
[  149.269140][   T12] bridge_slave_0: left promiscuous mode
[  149.269219][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.324943][   T29] audit: type=1400 audit(1700006412.250:2347): avc:  denied  { write } for  pid=7264 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.356508][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.357430][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.359310][   T12] bond0 (unregistering): Released all slaves
[  149.394391][   T12] hsr_slave_0: left promiscuous mode
[  149.394868][   T12] hsr_slave_1: left promiscuous mode
[  149.395278][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.395761][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.449268][   T12] team0 (unregistering): Port device team_slave_1 removed
[  149.452201][   T12] team0 (unregistering): Port device team_slave_0 removed
[  149.497941][   T29] audit: type=1400 audit(1700006412.420:2348): avc:  denied  { write } for  pid=7266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.534803][   T29] audit: type=1400 audit(1700006412.460:2349): avc:  denied  { write } for  pid=7277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.627571][   T29] audit: type=1400 audit(1700006412.550:2350): avc:  denied  { write } for  pid=7279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.664962][   T29] audit: type=1400 audit(1700006412.590:2351): avc:  denied  { write } for  pid=7290 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.745643][  T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.767362][   T29] audit: type=1400 audit(1700006412.690:2352): avc:  denied  { write } for  pid=7292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.798753][  T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.813147][   T29] audit: type=1400 audit(1700006412.730:2353): avc:  denied  { write } for  pid=7303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.846198][  T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.883744][  T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.951095][  T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.978227][  T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.025711][  T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.075748][  T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.161179][  T136] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.206917][  T136] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.245866][  T136] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.295707][  T136] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.387463][  T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.407131][  T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.445657][  T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.486741][  T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.547859][  T136] bridge0: port 3(team0) entered disabled state
[  150.548489][  T136] bridge_slave_1: left allmulticast mode
[  150.548572][  T136] bridge_slave_1: left promiscuous mode
[  150.548663][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.549398][  T136] bridge_slave_0: left allmulticast mode
[  150.549413][  T136] bridge_slave_0: left promiscuous mode
[  150.549495][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.568120][  T136] bridge_slave_1: left allmulticast mode
[  150.568192][  T136] bridge_slave_1: left promiscuous mode
[  150.568546][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.581212][  T136] bridge_slave_0: left allmulticast mode
[  150.581277][  T136] bridge_slave_0: left promiscuous mode
[  150.581655][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.596054][  T136] dvmrp6: left allmulticast mode
[  150.612612][  T136] bridge_slave_1: left allmulticast mode
[  150.612690][  T136] bridge_slave_1: left promiscuous mode
[  150.613071][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.627951][  T136] bridge_slave_0: left allmulticast mode
[  150.628052][  T136] bridge_slave_0: left promiscuous mode
[  150.628292][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.655076][  T136] bridge_slave_1: left allmulticast mode
[  150.655188][  T136] bridge_slave_1: left promiscuous mode
[  150.655467][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.668610][  T136] bridge_slave_0: left allmulticast mode
[  150.668680][  T136] bridge_slave_0: left promiscuous mode
[  150.668954][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.787860][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.788219][  T136] bond0 (unregistering): Released all slaves
[  150.820869][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.821045][  T136] bond_slave_0: left allmulticast mode
[  150.822188][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.824143][  T136] bond_slave_1: left allmulticast mode
[  150.825831][  T136] bond0 (unregistering): Released all slaves
[  150.866626][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.867856][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.868896][  T136] bond0 (unregistering): Released all slaves
[  150.902996][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.904388][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.905213][  T136] bond0 (unregistering): Released all slaves
[  150.906880][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2
[  150.949985][  T136] tipc: Left network mode
[  150.950232][  T136] tipc: Left network mode
[  150.950350][  T136] tipc: Left network mode
[  150.967691][  T136] hsr_slave_0: left promiscuous mode
[  150.968074][  T136] hsr_slave_1: left promiscuous mode
[  150.968532][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.968820][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.971285][  T136] hsr_slave_0: left promiscuous mode
[  150.971612][  T136] hsr_slave_1: left promiscuous mode
[  150.972113][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.972127][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.016400][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.016468][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.025404][  T136] batman_adv: batadv0: Removing interface: ipvlan2
[  151.033512][  T136] batman_adv: batadv0: Removing interface: ipvlan3
[  151.055778][  T136] hsr_slave_0: left promiscuous mode
[  151.056211][  T136] hsr_slave_1: left promiscuous mode
[  151.056713][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.056730][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.057060][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.057077][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.060610][  T136] hsr_slave_0: left promiscuous mode
[  151.060969][  T136] hsr_slave_1: left promiscuous mode
[  151.061405][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.061425][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.061878][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.061985][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.090317][  T136] veth1_macvtap: left promiscuous mode
[  151.090373][  T136] veth0_macvtap: left promiscuous mode
[  151.090491][  T136] veth1_vlan: left promiscuous mode
[  151.090664][  T136] veth0_vlan: left promiscuous mode
[  151.108851][  T136] veth1_vlan: left allmulticast mode
[  151.109182][  T136] veth1_macvtap: left promiscuous mode
[  151.109266][  T136] veth0_macvtap: left promiscuous mode
[  151.109433][  T136] veth1_vlan: left promiscuous mode
[  151.109571][  T136] veth0_vlan: left promiscuous mode
[  151.137704][  T136] veth1_macvtap: left promiscuous mode
[  151.137790][  T136] veth0_macvtap: left promiscuous mode
[  151.137964][  T136] veth1_vlan: left promiscuous mode
[  151.138095][  T136] veth0_vlan: left promiscuous mode
[  151.318716][  T136] team_slave_1 (unregistering): left promiscuous mode
[  151.318779][  T136] team_slave_1 (unregistering): left allmulticast mode
[  151.319182][  T136] team0 (unregistering): Port device team_slave_1 removed
[  151.321355][  T136] team_slave_0 (unregistering): left promiscuous mode
[  151.321383][  T136] team_slave_0 (unregistering): left allmulticast mode
[  151.321796][  T136] team0 (unregistering): Port device team_slave_0 removed
[  151.412143][  T136] team0 (unregistering): Port device team_slave_1 removed
[  151.420255][  T136] team0 (unregistering): Port device team_slave_0 removed
[  151.528092][  T136] team0 (unregistering): Port device team_slave_1 removed
[  151.530684][  T136] team0 (unregistering): Port device team_slave_0 removed
[  151.567534][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1
[  151.680386][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3
[  151.804606][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4
[  151.916922][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21
[  152.042776][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22
[  152.153848][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23
[  152.267304][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24
[  152.381378][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25
[  152.491632][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26
[  152.604163][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27
[  152.719899][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28
[  152.833163][ T3022] 8021q: adding VLAN 0 to HW filter on device eth29
[  152.944356][ T3022] 8021q: adding VLAN 0 to HW filter on device eth30
[  153.057253][ T3022] 8021q: adding VLAN 0 to HW filter on device eth31
[  153.169032][ T3022] 8021q: adding VLAN 0 to HW filter on device eth32
[  153.284215][ T3022] 8021q: adding VLAN 0 to HW filter on device eth33
[  153.397121][ T3022] 8021q: adding VLAN 0 to HW filter on device eth34
[  153.508402][ T3022] 8021q: adding VLAN 0 to HW filter on device eth35
[  153.619615][ T3022] 8021q: adding VLAN 0 to HW filter on device eth36