last executing test programs:

57.264853833s ago: executing program 4 (id=16):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000480)=<r2=>0x0)
r3 = eventfd(0x0)
io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000540)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x36}])
bind$inet(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
r4 = syz_io_uring_setup(0x3bd4, &(0x7f00000009c0)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000b40)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0)
io_uring_enter(r4, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000880)={<r7=>0xffffffffffffffff}, 0x80000)
r8 = geteuid()
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0xa20800, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@loose}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@privport}], [{@uid_lt={'uid<', r8}}]}})
flock(r6, 0x6)
ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000440)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0xf5, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0xffffffffffffffaf}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x43}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)

56.894016882s ago: executing program 4 (id=20):
unshare(0x64000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1000c40, &(0x7f0000000180), 0x1, 0x51c, &(0x7f0000000880)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX")
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)

56.690804037s ago: executing program 4 (id=23):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
add_key(0x0, 0x0, &(0x7f0000000340)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05", 0x31, 0x0)
syz_io_uring_setup(0x1b11, &(0x7f0000000380)={0x0, 0x2089ce, 0x4000, 0x1, 0x3c1}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1)
nanosleep(&(0x7f0000000640)={0x0, 0x5f5e100}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}]}, 0x50}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f0000000800), 0xc, &(0x7f0000000840)={&(0x7f0000000880)={0x14, r2, 0x301}, 0x14}}, 0x0)
r3 = socket(0x2a, 0x6, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a009be71100f4ad3722"], 0x28}, 0x1, 0x0, 0x0, 0x4c850}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000200000004"], 0x50)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000940)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4)
cachestat(r5, &(0x7f00000009c0)={0x9, 0x1}, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000bc0)="cf", 0x1}, {&(0x7f0000000c00)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000c40)="8a", 0x1}, {&(0x7f0000000c80)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="ce90bfdb", 0x68}, {&(0x7f0000000e00)="f2e659", 0x3}, {&(0x7f0000000e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000f00)="e1", 0x1}, {&(0x7f0000000f40)="fa", 0x1}, {&(0x7f0000000f80)="d8", 0x1}, {&(0x7f0000000fc0)="f2964dd1", 0x4}, {&(0x7f0000001000)="b8a2f6", 0x3}, {&(0x7f0000001040)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000001100)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="87", 0x1}, {&(0x7f00000011c0)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000001200)=0x7fffffff, 0x4)
r6 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r6, 0x0, 0x0)
r7 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom$unix(r7, 0x0, 0x0, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000000000200040000000300000041010000", @ANYRES32=r4], 0x50)

56.337848355s ago: executing program 4 (id=26):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x3)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x420, 0x330, 0x0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [0x0, 0x0, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'erspan0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0x2c731f28b040cc3c], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file0\x00', 0x8002, &(0x7f0000000c40), 0xfc, 0x4dd, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/+uOHKIhaRGOjsYWCwsEL/kk8YGLEgx6bdiFIoYbWRAiRmhg8GhLvxqNXD17Vm/Fk4hWPJoaEGC6Aicma2Z1Zdre7bbdut+J+Psm27828mTffmXm7b+fNbAADayz9k0T8JyJuRMTOWra5wFjt393bV2bu3b4yE0uVyqnfk2q5O2k+ky+3PcuMFyIKnyQtK6xZuHT53PTcXPlilp9cPP/+5MKly8+fPT99pnymfGHq+PGjRw4fe3Hqhe6DalNfGtedfR/N79/7+rvX35gp5tNHsv+NcfTKWIxFEq+0nfd0ryvbZDsa0klxEzeErgxFRHq4StX2vzOGwsGDQVGpVCrDnWcvVVok0ToFeHBp0TCoqp/ypdr33/zVv97H5rt1ovYFKI37bvaqzSlGIStTavl+20sjEfHO0h9fpK/YoOsQAACNvjuR9wRb+3+F2NNQ7r/ZGMpoRPwvInZFxP8jYndEPBRRLftwRDzSsv6xiKgsr/bPvOs51jJjef+ncLMXcXaS9v9eysa2mvt/ee8vRoey3I6IbKujfCjbJ+NRGj59dq58eIU6vn/15886zRtr6P+lr7T+vC+YbcfNYssFutnpxel1B9zi1scR+4qt8SfFiKQ+EpBExN6I2NfFekcb0mef/Wp/PVNqLrd6/FWVxiG9eroHQxWVLyOeqR3/pWg6/klTfSuMT06OxFz50GR6FhxqW8ePP117s1P9q8b/za+ti7x27NtTfzfsuvT4b2s4/yMfv70f/2gSkdTHaxe6r+PaL592/E6ztvP/atMy6fm/JXm7mt6STftwenHx4uGILcnJ5dOn7i+b5/PyafzjB9u3/13ZMumeeDQi0pP4sYh4PCKeyLb9QEQ8GREHV4j/h5efem/98W+sNP7Ztu9/Tcf//nj9wsk8cWmtiaFzB27c6/Dmsbbjf7SaGs+mtH//S5pG/de6gT3YhQAAAPCPV4jqvf+FiXq6UJiYqF0D2h3bCnPzC4vPnZ7/4MJs7RmB0SgV8itdtevBpSS//jnakJ9qyR/Jrht/PrS1mp+YmZ+b3ezgYcBtr7b5ZFn7T/021FhyhbuEgQeXR35gcK3W/vdc79OGAH3n8x8GV0P7X+pQZMmdMvDv1P7zv9T37QD6r137v7qOZYAHS0VbhoGm/cPgKsZb9XRhU7cE6Def/zCQVnlIPr/pt9tH/rNEZbj9rJE2K4yRpik7I2J9lbYkti6rKw2oF2vuMpH2rPpeaZrYup6l8l9T6FgmCqutp9h0jg3H8jJD0f+9Ub64cGbPmk7+bhKV7F75rheP7Kc2OpT5euV2mnfXN2BH9esdCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGP9FQAA//8C8tA5")
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001180)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x2, 0xfffffffd, 0x8, 0x2, 0x4, 0x7}, &(0x7f0000001240)=0x9c)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000001300)='./proc_mnt\x00', &(0x7f0000001340)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6)
perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x81780, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, r2, 0x8)
write$cgroup_netprio_ifpriomap(r5, &(0x7f0000001440)=ANY=[], 0x8)
write$binfmt_register(r4, &(0x7f0000001480)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x5c]}, 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
setgroups(0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r8 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/make-it-fail\x00', 0x1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000006c050000000000000500000000000000", @ANYRES32, @ANYBLOB="00000000000100"/28, @ANYRES32, @ANYBLOB="00000000ff0700"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB="00000000001000"/28, @ANYRES32=r8, @ANYBLOB="0000000009000000000000000000000000000000000000000000000064f718dec96880f89260ae1f1778360def7fa5df4b0766e7a01a4fb3f79f3dc74579567fd4b42ad7bf4f6fb2fcf1b78d3ac2dc93c934ef866b8cd5f59f62e7bf132bd40291cd986d53e954c85e53a60c14a3ac91762b38"])
dup2(0xffffffffffffffff, r5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x13, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x7, 0xfff, &(0x7f0000001cc0)=""/4095, 0x40f00}, 0x94)

55.953669345s ago: executing program 4 (id=29):
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x84, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20205, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r1 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x10, &(0x7f0000000840), 0x0, 0x489, &(0x7f0000000880)="$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")
ioperm(0x5, 0x2, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000e00)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000e40)={0x0, 0xffffff0a, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f00000002c0), 0x10)
mprotect(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000580)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)='?', 0x20000081}], 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000640)={0x3, 0x0, &(0x7f0000000680)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000010)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff000000002a0cffff850000007d0000001801000020646c2500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b70320000500000085000000060000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f00000003c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f0000000500)={0x1d, r10}, 0x10)
sendto$packet(r6, &(0x7f0000000000)="7dbe9e14efa53a14bac54fe558bd038778314cb3a88814560aced6cfb47c5af91be19ae4b7f0d2d3286f2f4183da5ffb65913f71b6ada09ae6a803ad683d1fe9fee41aec9947542e407f11b1357da3e31293820db759e62a35d4dc1eb7748c4914512a92312d81793b130e694c20e01ebd10cf722bf83d109698e5166eaf6e7eb9be3a6fd9", 0x85, 0x2004c090, &(0x7f0000000540)={0x11, 0xd, r10, 0x1, 0x6c, 0x6, @random="42fd807aac91"}, 0x14)

55.177843663s ago: executing program 4 (id=37):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x664b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x80000000})
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xf65, 0x9, 0x800000, 0x43, 0x4d7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000000101040000000000ebffff010000002400018015000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200e000000208000740000000001000"], 0x74}}, 0x20000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1], 0x0}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000680), 0x204, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000006c0)=0x100000001, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000740)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000780)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r4, &(0x7f00000007c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0}, &(0x7f00000008c0)=0x40)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x5, 0x99}, 'port1\x00', 0x40, 0x1000, 0x1, 0x8000, 0x2e, 0x8, 0x9, 0x0, 0x4, 0x81})
sendmmsg$inet6(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="8522", 0x2}], 0x1}}], 0x1, 0x20000000)
perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffe000000000000, 0xffffffffffffffff, 0xa)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010201030000000000000000400000000014000180080001007f00040108000200ac1414aa0c00028005000100210000007b9141151025f35e0aa1a6b456c7731f196bbcec7e3e3cb6dd61eba45b4925235c5efe6e5cc28e36"], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x40000)

55.172216614s ago: executing program 32 (id=37):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x664b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x80000000})
r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xf65, 0x9, 0x800000, 0x43, 0x4d7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000000101040000000000ebffff010000002400018015000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200e000000208000740000000001000"], 0x74}}, 0x20000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1], 0x0}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000680), 0x204, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000006c0)=0x100000001, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000740)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000780)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r4, &(0x7f00000007c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0}, &(0x7f00000008c0)=0x40)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x5, 0x99}, 'port1\x00', 0x40, 0x1000, 0x1, 0x8000, 0x2e, 0x8, 0x9, 0x0, 0x4, 0x81})
sendmmsg$inet6(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="8522", 0x2}], 0x1}}], 0x1, 0x20000000)
perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffe000000000000, 0xffffffffffffffff, 0xa)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010201030000000000000000400000000014000180080001007f00040108000200ac1414aa0c00028005000100210000007b9141151025f35e0aa1a6b456c7731f196bbcec7e3e3cb6dd61eba45b4925235c5efe6e5cc28e36"], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x40000)

42.557945024s ago: executing program 5 (id=186):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x24, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1, 0x3000000}, [@RTA_OIF={0x8, 0x4, 0x2}]}, 0x24}}, 0x44000)

42.557633084s ago: executing program 5 (id=187):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6ac0, 0x100000000}, 0x8365, 0x0, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000040)='root/proc/sys\x00', 0x10000, 0x0)
getdents64(r2, &(0x7f0000000140)=""/256, 0x100)
bind$inet(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./dev\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/kmsg\x00', 0x1, 0x0)
poll(&(0x7f0000000880)=[{r3}], 0x1, 0xa)

42.474899286s ago: executing program 5 (id=188):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac1e000108000200640101010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001400188008000240000000000800014000000000406d71a87e9cae8e2c8af3622ac906cb20c160c40bd53469ef6c"], 0x78}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0xc3, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x366, 0x10, &(0x7f0000000c80), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=r3, @ANYBLOB='\x00'/28, @ANYRESDEC=r1, @ANYRES16=r0], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000dc0), &(0x7f0000000e00)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/179, 0x33fe0}], 0x1}, 0x12)
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)='>', 0x33fe0}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, 0x0, &(0x7f0000000280)=0x2c)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=@deltaction={0x19c, 0x31, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe50}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x80f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x36}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbe}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x19c}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000104000000000001000000000000", @ANYRES32=r9, @ANYBLOB="000100006c3000001c0012800b000100697036746e6c00000c00028006000f0003"], 0x3c}}, 0xeb64d656001f6f32)
syz_create_resource$futex(&(0x7f0000000140))
syz_create_resource$futex(&(0x7f00000001c0)=0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b"], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

42.232063732s ago: executing program 5 (id=192):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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")
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100))
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
signalfd4(r2, &(0x7f0000000280)={[0x9]}, 0x8, 0x0) (async)
signalfd4(r2, &(0x7f0000000280)={[0x9]}, 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000640), 0x0}, 0x20)
setns(r1, 0x24020000)
r4 = syz_clone(0x97068100, 0x0, 0x41, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x5}) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0)
ptrace(0x10, r4) (async)
ptrace(0x10, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x39271, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x93bc}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x39271, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x93bc}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
wait4(r4, 0x0, 0x20000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x1, @perf_config_ext={0x0, 0x200000000000f60e}, 0x808, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000001, 0xffffffffffffffff, 0xb)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
dup(0xffffffffffffffff) (async)
dup(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0})
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0) (async)
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000004c0))
fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000540)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000))
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) (async)
r8 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
fdatasync(r8)

41.308120125s ago: executing program 5 (id=195):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x401, 0x0, {{0x5, 0x4, 0x1, 0x23, 0x14, 0x67, 0x0, 0xd3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010100}}}})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00')
pread64(r0, 0x0, 0x0, 0x8)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xc5}, 0x108084, 0x2, 0x7d5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x2b}}, './file0\x00'})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000320081024e81f782db44b904121d080005000000e8fe55a1180015000600142603600e4006000000036010fab94dcf5c0461c1d66d6f94007134cf6ee08000a2a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14479f30dfe1d9d322fe7c9f8775730d16bd683f5aeb4edbb57a5025ccca9e00360db7011f215ce3bb9ad809d5e1cace81ed0bffec0dd6e4edef3d93452a92954b43370e97012e33030000000000000000000000000000a521525f13c209f2ef3a427086e3a9512ce3868c54f3", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

41.049284471s ago: executing program 0 (id=198):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x100c404, &(0x7f0000000140)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3", @ANYRES16], 0x1, 0x1f5, &(0x7f0000000300)="$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")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000580)={0x2, {0xc, 0x117, 0x5, 0x101, 0x23f}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68)
r2 = io_uring_setup(0x9, &(0x7f00000005c0)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x24044800)

40.707157999s ago: executing program 0 (id=204):
unshare(0x64000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1000c40, &(0x7f0000000180), 0x1, 0x51c, &(0x7f0000000880)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX")
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000390400000000000006006e8b5700", @ANYRES32=r2, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ac1414bb0600"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)

40.539767833s ago: executing program 5 (id=206):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
syz_open_dev$tty20(0xc, 0x4, 0x1)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000003010104000000000000000180"], 0x18}}, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

40.478974905s ago: executing program 33 (id=206):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
syz_open_dev$tty20(0xc, 0x4, 0x1)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000003010104000000000000000180"], 0x18}}, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

40.119936033s ago: executing program 0 (id=210):
setns(0xc9, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01020000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000f0070002"], 0xd4}}, 0x8040)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
fcntl$lock(0xffffffffffffffff, 0x19b4a68b066d8b, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0)

38.96171375s ago: executing program 0 (id=214):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000d00), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@setneightbl={0x1c, 0x43, 0x400, 0x0, 0x0, {0xa}, [@NDTA_THRESH2={0x8}]}, 0x1c}}, 0x80)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000f00)='./file1\x00', 0x10, &(0x7f0000000f40)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f0000001880)="$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")
open(0x0, 0x4827e, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
ioctl(0xffffffffffffffff, 0xc0184d03, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000018, 0x10, 0xffffffffffffffff, 0x96e37000)
r2 = socket(0x2b, 0x2, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000500000002000000"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x6a, 0x1, 0x0, 0xc)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xa0}}, 0x0)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000000070103000000000000000005000007080005404d0f58b8e844b002000000010900010073797a3100000000"], 0x28}}, 0x24004880)

38.287085657s ago: executing program 0 (id=218):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000001300)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f00000013c0)="b9ff03076804268cb89e14f086dd47e0ffff2000002800010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x4c)

37.821752078s ago: executing program 0 (id=223):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000"], 0x50}, 0x1, 0x7}, 0x20000000)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffeff, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca40479c9d3b6fd4ccf11db01cd2836c0628ebe62439b8c5968de3ed5b06a9a595bb5dc2dedf33d2a4d2db22d3512cc445b82c77be4406327f84d2c011ac8ae7d0b1957b0f1eb7900f0960cc67de062616b4c74f0f51a4fdc6c491875f11ee01602edb8dcddc31f4a676c6d2cfa7180e936dac084e4e97b029f04facca2d5f9e99dab77d9d9991295ba6c1866f5b56b603d70178b2640382cb71b4d15321886aaeb4bb0af5d38545f5892808e478f8209852b02dde97aef54a7d2ed2c4ffb6e77075e813339186"])
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000063113400000000008510000002000000850000002300000095000000000000009500a50500000000e85c9f147326879e9bb8025f27db60bac39c7cdc349b07dfeda74783c46934"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200408c0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071181b000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_create(0x3, 0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200000, 0x0, 0x0, 0x400000, 0x7})
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
timer_gettime(r2, &(0x7f00000003c0))
timer_delete(r2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de)

37.821475768s ago: executing program 34 (id=223):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000"], 0x50}, 0x1, 0x7}, 0x20000000)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffeff, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca40479c9d3b6fd4ccf11db01cd2836c0628ebe62439b8c5968de3ed5b06a9a595bb5dc2dedf33d2a4d2db22d3512cc445b82c77be4406327f84d2c011ac8ae7d0b1957b0f1eb7900f0960cc67de062616b4c74f0f51a4fdc6c491875f11ee01602edb8dcddc31f4a676c6d2cfa7180e936dac084e4e97b029f04facca2d5f9e99dab77d9d9991295ba6c1866f5b56b603d70178b2640382cb71b4d15321886aaeb4bb0af5d38545f5892808e478f8209852b02dde97aef54a7d2ed2c4ffb6e77075e813339186"])
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000063113400000000008510000002000000850000002300000095000000000000009500a50500000000e85c9f147326879e9bb8025f27db60bac39c7cdc349b07dfeda74783c46934"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200408c0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071181b000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_create(0x3, 0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200000, 0x0, 0x0, 0x400000, 0x7})
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
timer_gettime(r2, &(0x7f00000003c0))
timer_delete(r2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de)

13.86320178s ago: executing program 6 (id=452):
unshare(0x64000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1000c40, &(0x7f0000000180), 0x1, 0x51c, &(0x7f0000000880)="$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")
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000390400000000000006", @ANYRES32=r2, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ac"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)

13.543032657s ago: executing program 6 (id=456):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/139, &(0x7f0000000180)=0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bridge_slave_1\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x1})
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', <r6=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xffffffffffffffe5}, {0xc}}}]}]}}]}, 0x90}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x0, 0x10, &(0x7f0000001900), 0xfffffffffffffd00}, 0x48)
write(r4, &(0x7f0000000940)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a000000010000000000000104000000200000010500000001000004040000001300000001000000000000001700000002000004080000002100000001000000000000002500000002"], 0x0, 0x8e}, 0x28)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000740)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8001}, {0xfff4, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0)

13.075814588s ago: executing program 6 (id=462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x20050800)

12.16076767s ago: executing program 6 (id=470):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10000, &(0x7f0000000640)={[{@mb_optimize_scan}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x1c1040, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000cc0), 0x2, 0x5}}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
symlinkat(&(0x7f0000000d00)='./file0\x00', r0, &(0x7f0000000d40)='./file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000d80)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x7)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x303003a, &(0x7f0000000e80)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000ec0)="$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")
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)
setpgid(0x0, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10528, 0x4, 0x2, 0x5, 0xfff, 0x1}, 0x0, 0xc000000000000000, 0xffffffffffffffff, 0xa)
r3 = socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xe)
r4 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000001240), 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001280)={'sit0\x00'})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000049e376c0ac498f530000730189ff000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x5, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000000000000000000000000000000000000001f0000000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x1000, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f00000002c0), &(0x7f0000000300)=""/92}, 0x20)

11.76225073s ago: executing program 6 (id=475):
syz_open_dev$sg(0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200000, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], 0x1, 0x392, &(0x7f0000000980)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
syz_emit_ethernet(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5)
writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2)

11.464943487s ago: executing program 6 (id=478):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000"], 0x50}, 0x1, 0x7}, 0x20000000)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffeff, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca40479c9d3b6fd4ccf11db01cd2836c0628ebe62439b8c5968de3ed5b06a9a595bb5dc2dedf33d2a4d2db22d3512cc445b82c77be4406327f84d2c011ac8ae7d0b1957b0f1eb7900f0960cc67de062616b4c74f0f51a4fdc6c491875f11ee01602edb8dcddc31f4a676c6d2cfa7180e936dac084e4e97b029f04facca2d5f9e99dab77d9d9991295ba6c1866f5b56b603d70178b2640382cb71b4d15321886aaeb4bb0af5d38545f5892808e478f8209852b02dde97aef54a7d2ed2c4ffb6e77075e813339186"])
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000063113400000000008510000002000000850000002300000095000000000000009500a50500000000e85c9f147326879e9bb8025f27db60bac39c7cdc349b07dfeda74783c46934"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200408c0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071181b000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200000, 0x0, 0x0, 0x400000, 0x7})
ioctl$sock_bt_hci(r2, 0x400448cb, 0x0)
timer_gettime(0x0, &(0x7f00000003c0))
timer_delete(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

11.462007487s ago: executing program 35 (id=478):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000"], 0x50}, 0x1, 0x7}, 0x20000000)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffeff, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca40479c9d3b6fd4ccf11db01cd2836c0628ebe62439b8c5968de3ed5b06a9a595bb5dc2dedf33d2a4d2db22d3512cc445b82c77be4406327f84d2c011ac8ae7d0b1957b0f1eb7900f0960cc67de062616b4c74f0f51a4fdc6c491875f11ee01602edb8dcddc31f4a676c6d2cfa7180e936dac084e4e97b029f04facca2d5f9e99dab77d9d9991295ba6c1866f5b56b603d70178b2640382cb71b4d15321886aaeb4bb0af5d38545f5892808e478f8209852b02dde97aef54a7d2ed2c4ffb6e77075e813339186"])
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000063113400000000008510000002000000850000002300000095000000000000009500a50500000000e85c9f147326879e9bb8025f27db60bac39c7cdc349b07dfeda74783c46934"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200408c0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071181b000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200000, 0x0, 0x0, 0x400000, 0x7})
ioctl$sock_bt_hci(r2, 0x400448cb, 0x0)
timer_gettime(0x0, &(0x7f00000003c0))
timer_delete(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

1.451205366s ago: executing program 7 (id=564):
setns(0xc9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

1.324532319s ago: executing program 7 (id=567):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
clock_getres(0x2, 0x0)

1.108343044s ago: executing program 8 (id=572):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030b000000000000000000000003000600000000000000000000000000030005003c00000002000000ac1414000000000000000000000000fe0000000000ac394e9654362577263c30f425aa301587fd46474a39dd62bc64db7878949e314e5faa6502a0af7ad23aeb8d1398e46f7baa3f7b622cc71213830a32aaf153de55afd1a1d7886bc794af1e229ec91086f69e576e4a68b98e1f26d915c03072e0b8c99d7c07faf406d7e5e5050000"], 0x58}, 0x1, 0x7}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
r2 = socket$pppoe(0x18, 0x1, 0x0) (async)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x0, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = epoll_create(0x7)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x60002009}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x60000000})
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x1, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x40) (async)
sendmmsg$inet(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="f1168cfd72e8ff25ae2eb5ecdc41136c49a3c9039a13db0fa92d37c7f1e968bd5b8a91b2ccd751d7003b7e0758bd6de18777282d6966206c58fd3e9f47adbd2ad4ee277425b7da8b9b7edd597f4e92b0560c48974738da5308a6db5a555e9da204834cf283826fa09a4a443f529f446f933b363af8268c7e4edf0c5d0e138568d9eb7859c6b6b4c3d30f0b4dbed18738", 0x90}, {0x0}], 0x2}}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r8 = getpgid(0x0)
r9 = syz_pidfd_open(r8, 0x0)
pidfd_getfd(r9, r9, 0x0) (async)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file7/file0/file0\x00', &(0x7f00000003c0)=@fuse={0xc, 0x81, {0x1, 0x4, 0xa}}, 0x0, 0x1600) (async)
mkdirat(0xffffffffffffffff, 0x0, 0x1ff) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}) (async)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
splice(r10, 0x0, r12, 0x0, 0x402000784853bb, 0x0)
write$P9_RLOPEN(r11, &(0x7f0000000180)={0x18, 0xd, 0x4002, {{0x40, 0x3, 0x7}, 0xe}}, 0x18) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0)

1.106783354s ago: executing program 3 (id=573):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
readv(r0, &(0x7f0000004bc0)=[{0x0}], 0x1)
mkdir(&(0x7f00000000c0)='./sys_mount\x00', 0xfe)
mount(0x0, &(0x7f0000000100)='./sys_mount\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_mount/block/loop0/queue/rotational\x00', 0x402, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000004300)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004000)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000280), 0x3f43e4d6, 0x575800)
socket(0xa, 0x3, 0xff)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/raw6\x00')
socket(0xa, 0x3, 0xff)
mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX])
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
fchmodat(r2, 0x0, 0x169)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000580), 0x800000001fe, 0x82)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
write(r1, &(0x7f00000001c0)='5', 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x1)
syz_emit_ethernet(0x1e, &(0x7f00000006c0)={@empty, @multicast, @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x6, 0x4, 0x0, 0x0, "856eb94d532fd9bb"}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000043c0)={'ip6_vti0\x00', 0x0})
sendmsg$xdp(r1, 0x0, 0x4)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000002c0))

977.074827ms ago: executing program 8 (id=575):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

976.729487ms ago: executing program 8 (id=576):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000022c0)={0x24, {{0xa, 0x0, 0xfef, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote, 0x3}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000002400)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) (rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x30, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/35, 0x23}], 0x3, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000540)=""/46, 0x2e}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)=""/148, 0x94}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/216, 0xd8}, {&(0x7f0000001b00)=""/93, 0x5d}, {&(0x7f0000001b80)=""/21, 0x15}, {&(0x7f0000001bc0)=""/24, 0x18}], 0xa, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0x40}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/156, 0x9c}, {&(0x7f0000001e40)=""/170, 0xaa}], 0x2, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x163, &(0x7f0000002100)={0x0, 0x989680})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) (async, rerun: 64)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 64)
syz_clone3(&(0x7f0000000140)={0x210100200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002140)=[r2], 0x1}, 0x58)

975.658057ms ago: executing program 2 (id=577):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf"], 0x0, 0x5}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004, @private0, 0xfffffffd}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = inotify_init()
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x2, 0x1a5)
write(r3, &(0x7f0000000000)='3', 0x4e)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x4, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd})
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r4 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001880)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000080))
fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, r5, 0xffffffffffffffff)

945.871968ms ago: executing program 8 (id=579):
unshare(0x64000600)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200008, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000004c0)="$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")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1000c40, &(0x7f0000000180), 0x1, 0x51c, &(0x7f0000000880)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$netlink(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000e40)='ext4\x00', &(0x7f0000000e80)='./file1\x00', 0x80, &(0x7f0000000ec0)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001380)="$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")
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x4076cbba9945d516, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000390400000000000006006e8b5700", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)
sendto$packet(r2, &(0x7f0000000400)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f0000000440)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14)

943.284098ms ago: executing program 3 (id=580):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
mlockall(0x7)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @remote}, &(0x7f0000000100)=0xc)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001040000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffffffef7fffffffffffffff7fffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b0d0000000000000000000f0b00000002000410000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0)
syz_emit_ethernet(0x30, &(0x7f00000008c0)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x20}}}}}, 0x0)
fchmodat(r0, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty/file0\x00', 0x1f2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0)
unshare(0x22020600)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a80)=<r5=>0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
read$nci(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)=@delpolicy={0x3e8, 0x14, 0x100, 0x70bd2c, 0x25dfdbfe, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e24, 0x101, 0x4e23, 0xf800, 0x2, 0x20, 0x0, 0x2c, r1, 0xee01}, 0x6e6bb7}, [@srcaddr={0x14, 0xd, @in6=@mcast1}, @sec_ctx={0x4c, 0x8, {0x48, 0x8, 0x0, 0x90, 0x40, "4d403215035c5808da2045445544d1b701afa0d0d9d0becfd72a09fc632241d79d114b6b9f0e5c2f28fbaa9a630ca9f8d370bea2dffb34f87c541b9db11a3d85"}}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x8, 0x8}}, @algo_comp={0x89, 0x3, {{'lzjh\x00'}, 0x208, "b5eea51181c6671ddd29a2cfa4bec7c458e3c8882f4db68bd8b7418efea10a9de6b9b5fe25b3429e0d0e632d78320d014fd77e1325ecbe8c281d734204f4f13f16"}}, @proto={0x5, 0x19, 0x6c}, @policy={0xac, 0x7, {{@in=@multicast2, @in=@multicast1, 0x4e20, 0x4b, 0x4e21, 0x8, 0xa, 0x180, 0x80, 0x3b, 0x0, r2}, {0x5, 0x81, 0x8, 0xffffffff, 0x5622, 0xf793, 0x1, 0x8c}, {0x200, 0x7bb3bda1, 0x5, 0x1}, 0x3, 0x6e6bb0, 0x0, 0x0, 0x6, 0x2}}, @migrate={0x180, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@rand_addr=' \x01\x00', @in=@loopback, 0x2b, 0x0, 0x0, 0x3501, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, @in=@private=0xa010102, @in=@broadcast, 0x3c, 0x5, 0x0, 0x34ff, 0x2, 0x2}, {@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@multicast1, @in=@empty, 0x2b, 0x4, 0x0, 0x3507, 0xa, 0x2}, {@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@remote, 0x32, 0x0, 0x0, 0x3503, 0x2, 0x2}]}, @algo_comp={0x4f, 0x3, {{'lzs\x00'}, 0x38, "44f2667c65fed9"}}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000004}, 0x820)
setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x1)
mlockall(0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x2, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x4, 0x2}, {0x7, 0x4, 0x8}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x5, 0x5}, {0xf, 0x5}, {0xc, 0x3}, {0xa, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0xc, 0x2}, {0xd, 0x5}]}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x9, [{0x10, 0x5, 0x3}, {0x1, 0x2, 0xc0}, {0x3, 0x4, 0x25}, {0x8, 0x0, 0x4}, {0x5, 0x0, 0x3}]}]}}, 0x0, 0xe6}, 0x28)
write(r0, &(0x7f00000002c0)='0', 0x1)

860.33286ms ago: executing program 2 (id=581):
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={<r1=>0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x10, 0x8, 0x3, 0x8, 0xf133, 0x0, 0xa00, 0x8, 0x0, 0x100000001, 0xa, 0x9, 0x0, 0x100, 0x3a1]}, &(0x7f0000000340)=0x100)
getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e20, 0x20, @empty, 0x7}}, 0x4e21}, &(0x7f0000000440)=0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xfe88, &(0x7f00000000c0)=""/181}, 0x94) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) (async)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')

786.237902ms ago: executing program 2 (id=583):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0380, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x8}, 0x0, 0x10000, 0xe4f, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x2000000000000006}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff01000000000000000000000000000114000400ff0200000040000000000000000000010800074000000001"], 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000000105050000003a000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000050000000000000000000114000400fc0000000000000000000000000000010800074000000000100006"], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

784.647922ms ago: executing program 1 (id=584):
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file2\x00', 0x1000519)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r1 = socket(0x11, 0x80001, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000)
r2 = getpid()
migrate_pages(r2, 0xa7, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0xf0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000140)=ANY=[], 0xc)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000380)='E', 0x1, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x3, 0xb, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0xa)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'lo\x00'})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000540)={{0x80, 0x10}, 'port0\x00', 0x20, 0x90000, 0x2, 0x0, 0xceb9, 0x9, 0x90, 0x0, 0xd, 0x4})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000680)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000})
listen(r3, 0x39b3)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a00)=@udp6=r1}, 0xf0)
recvmmsg(r3, &(0x7f0000000a40), 0x0, 0x23, 0x0)

783.043152ms ago: executing program 8 (id=593):
syz_open_dev$sg(0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200000, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], 0x1, 0x392, &(0x7f0000000980)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
syz_emit_ethernet(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5)
writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x1d5, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB='b '], 0xb)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x10, 0x0, @in={0x3, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0xffff}, 0x19)
r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x15, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x36}, 0xa1)
sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000004200290200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x0)

697.846904ms ago: executing program 1 (id=585):
syz_open_dev$sg(0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200000, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], 0x1, 0x392, &(0x7f0000000980)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
syz_emit_ethernet(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5)
writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x1d5, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB='b '], 0xb)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x10, 0x0, @in={0x3, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0xffff}, 0x19)
r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x15, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x36}, 0xa1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r8, 0x0, 0x0}, 0x10)

691.522154ms ago: executing program 2 (id=586):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffeff, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca40479c9d3b6fd4ccf11db01cd2836c0628ebe62439b8c5968de3ed5b06a9a595bb5dc2dedf33d2a4d2db22d3512cc445b82c77be4406327f84d2c011ac8ae7d0b1957b0f1eb7900f0960cc67de062616b4c74f0f51a4fdc6c491875f11ee01602edb8dcddc31f4a676c6d2cfa7180e936dac084e4e97b029f04facca2d5f9e99dab77d9d9991295ba6c1866f5b56b603d70178b2640382cb71b4d15321886aaeb4bb0af5d38545f5892808e478f8209852b02dde97aef54a7d2ed2c4ffb6e77075e813339186"])
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000063113400000000008510000002000000850000002300000095000000000000009500a50500000000e85c9f147326879e9bb8025f27db60bac39c7cdc349b07dfeda74783c46934"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200408c0)

618.636785ms ago: executing program 8 (id=587):
r0 = openat(0xffffffffffffff9c, 0x0, 0xc8442, 0x11)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r2, &(0x7f00000003c0)="89", 0xffe3)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000440), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000500)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000540)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="948bfa8781", 0x5}], 0x1}, 0x8040)
recvfrom(r1, &(0x7f00000006c0)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
timer_create(0x0, &(0x7f00000016c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000001700)=<r3=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0x14, &(0x7f0000001800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000001900)={0x0, 0x0, 0xfffe, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000001940)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x268, @loopback, 0x1ff}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0xffffffffffffffff, {[0x1c00, 0xfafc, 0x5, 0x1e, 0x8, 0x2e6, 0x1, 0x1]}}, 0x5c)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000900002537a940240012800b0001006772657461700000140002800600020022000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)

610.923305ms ago: executing program 1 (id=588):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=")
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x8000)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0)
r1 = syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x204818, &(0x7f0000001480)=ANY=[@ANYBLOB="6d61703df39913bdda20f87e6f66662c636865636b3d7374726963742c646d6f64653d3078303030303030303030303030303030362c6d61703d6f66662c756e686964652c696f636861727365743d63703433372c6d61703d6f66662c756e686964652c0044ac48749de5d4b91eeb2fcc9e854b5da3c011cc07fa9b047f7e74d690aad9d36a51db048fb80a2d174bd66aaffab8e5518cadf77debbaa89f9bff31b00f98ddb7c75f948e8a5aee112539f9064ea322b8142d229af030da407052444953f48f8d418b813f863ca617d44d99d1fcd92654"], 0x1, 0x54a, &(0x7f0000000800)="$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")
r2 = openat$incfs(r1, 0x0, 0xa0401, 0x1a4)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x10000, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000002127726f37783809ffff00000000108e645c2231b2487fbc46a1300dab104ed448e29b44944571c2857f288f324269c3f6a7c395a724201550c23b00acb29982e55db5d39c4e5d0557f21c3b7f89e447944fc29b8575ce50f766b667de81bba1597cb79899c44a9e4780c4a96c400147e5a3be1fed9de195f7dfac22ba1965aacf90def58401d697c61b473393e8f5904c99e8c7cba9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xd, &(0x7f0000001240)=ANY=[@ANYBLOB="008600fcffffff00000000000000000000000000000000000000001146ba208d4262c93af275f23707b75e1ece2cf53188a4ac5dcea675fe1ab2015c189aaf720143b46eacf70ae3918d6a84c2a1b11a4e45b081e31b565198dca68d9244200654e3d6d88535ab39f5403fb12b0819579093413bff0844a6b6dcc83e6914765e0e3aa5800ce6be7759963ea0a5c76c241abe5ae6c3c820622e82cba817e38a1a97d5c3e4d6c6fb94a56236c12c1e1107ac0c027be4c9c5", @ANYRES32=r3, @ANYBLOB="00000000000000000000bfa200000000000007020000f8dfffffb703000008000000b70400000200000085000000a600003bf913bf6e23c5fe0000009ac5d828f62c776e00000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x810, 0x0}}], 0x34000, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000b00000000000007000000000d0000000000001202000000006100c101a2809b22b65e796011e26374a9cdf1ea7109cbaee375ad42bab21ce7887c1cdfb262289795bb4b847632a9c915"], &(0x7f0000001040)=""/255, 0x33, 0xff, 0x1, 0x1}, 0x28)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000000000000000000000000916ff23c05328dea"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xc, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7040000080000008500000049"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, &(0x7f0000000280))
ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000001180))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x12)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=<r9=>0x0)
move_pages(r9, 0xa, &(0x7f0000000680)=[&(0x7f000008b000/0x2000)=nil, &(0x7f0000a03000/0x2000)=nil, &(0x7f0000b1d000/0x1000)=nil, &(0x7f0000acf000/0x4000)=nil, &(0x7f0000285000/0x4000)=nil, &(0x7f0000cb9000/0x2000)=nil, &(0x7f0000c2f000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000046d000/0x5000)=nil, &(0x7f0000560000/0x2000)=nil], &(0x7f0000000d80)=[0x101, 0x0, 0xc, 0x2, 0xc, 0xcb, 0x5, 0x6], &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x2)
timerfd_create(0x9, 0x80800)

571.213817ms ago: executing program 3 (id=589):
syz_emit_ethernet(0x0, 0x0, 0x0)

484.209969ms ago: executing program 3 (id=590):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000001640)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6)

474.953979ms ago: executing program 3 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf"], 0x0, 0x5}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004, @private0, 0xfffffffd}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = inotify_init()
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x2, 0x1a5)
write(r3, &(0x7f0000000000)='3', 0x4e)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x4, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd})
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r4 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001880)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000080))
fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, r5, 0xffffffffffffffff)

439.61234ms ago: executing program 1 (id=592):
setns(0xc9, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

381.926081ms ago: executing program 7 (id=594):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{}, 0xb, 0x7b6, 0x5})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x7e8, &(0x7f0000000080)=[{&(0x7f00000000c0)='>', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
capset(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x3, 0x6, 0xdd6, 0x7fff, 0x9, 0x3})
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)

381.667051ms ago: executing program 1 (id=595):
unshare(0x64000600)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200008, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000004c0)="$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")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1000c40, &(0x7f0000000180), 0x1, 0x51c, &(0x7f0000000880)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$netlink(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000e40)='ext4\x00', &(0x7f0000000e80)='./file1\x00', 0x80, &(0x7f0000000ec0)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001380)="$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")
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x4076cbba9945d516, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000390400000000000006006e8b5700", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)
sendto$packet(r2, &(0x7f0000000400)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f0000000440)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14)

377.623271ms ago: executing program 2 (id=596):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf"], 0x0, 0x5}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004, @private0, 0xfffffffd}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = inotify_init()
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x2, 0x1a5)
write(r3, &(0x7f0000000000)='3', 0x4e)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r4 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001880)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000080))
fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, r5, 0xffffffffffffffff)

370.598891ms ago: executing program 3 (id=597):
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000540)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000006c0)=@in6={0xa, 0x4001, 0x0, @local}, 0x80, 0x0}, 0x20004001)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000740))
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4b4, 0x1}, 0x1050a9, 0x0, 0x9, 0x3, 0x6, 0x8001, 0x7ff7}, 0x0, 0xff6fbffffffffffb, 0xffffffffffffffff, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = gettid()
timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000840))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x869, 0x0)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000880)=""/187, 0x869)
write(0xffffffffffffffff, &(0x7f0000000940), 0xffffff4a)
getdents(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000980)={0x0, 0xd5e, 0xd96, 0x0, 0x10001, 0xfffff4e6}, &(0x7f00000009c0)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="200026bd7000fedbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0a58d377479c38bdc9517633f83a9a83ae064e8a89deb8fde8c"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000)

359.658382ms ago: executing program 7 (id=598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f00000003c0)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000020"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

324.182803ms ago: executing program 7 (id=599):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x100}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x2008002, &(0x7f0000000940), 0x1, 0x558, &(0x7f0000000980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./mnt\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x26e1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
clock_nanosleep(0x7, 0x1, &(0x7f0000000280), 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff88, 0x6f, 0x8, 0x0, 0x0}}, 0x4e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xd, 0x1, {0xc5, '\x00', 0x6, 0x9, 0xa, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

237.359015ms ago: executing program 1 (id=600):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
mlockall(0x7)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @remote}, &(0x7f0000000100)=0xc)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001040000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffffffef7fffffffffffffff7fffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b0d0000000000000000000f0b00000002000410000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0)
syz_emit_ethernet(0x30, &(0x7f00000008c0)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x20}}}}}, 0x0)
fchmodat(r0, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty/file0\x00', 0x1f2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0)
unshare(0x22020600)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a80)=<r5=>0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
read$nci(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)=@delpolicy={0x3e8, 0x14, 0x100, 0x70bd2c, 0x25dfdbfe, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e24, 0x101, 0x4e23, 0xf800, 0x2, 0x20, 0x0, 0x2c, r1, 0xee01}, 0x6e6bb7}, [@srcaddr={0x14, 0xd, @in6=@mcast1}, @sec_ctx={0x4c, 0x8, {0x48, 0x8, 0x0, 0x90, 0x40, "4d403215035c5808da2045445544d1b701afa0d0d9d0becfd72a09fc632241d79d114b6b9f0e5c2f28fbaa9a630ca9f8d370bea2dffb34f87c541b9db11a3d85"}}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x8, 0x8}}, @algo_comp={0x89, 0x3, {{'lzjh\x00'}, 0x208, "b5eea51181c6671ddd29a2cfa4bec7c458e3c8882f4db68bd8b7418efea10a9de6b9b5fe25b3429e0d0e632d78320d014fd77e1325ecbe8c281d734204f4f13f16"}}, @proto={0x5, 0x19, 0x6c}, @policy={0xac, 0x7, {{@in=@multicast2, @in=@multicast1, 0x4e20, 0x4b, 0x4e21, 0x8, 0xa, 0x180, 0x80, 0x3b, 0x0, r2}, {0x5, 0x81, 0x8, 0xffffffff, 0x5622, 0xf793, 0x1, 0x8c}, {0x200, 0x7bb3bda1, 0x5, 0x1}, 0x3, 0x6e6bb0, 0x0, 0x0, 0x6, 0x2}}, @migrate={0x180, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@rand_addr=' \x01\x00', @in=@loopback, 0x2b, 0x0, 0x0, 0x3501, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, @in=@private=0xa010102, @in=@broadcast, 0x3c, 0x5, 0x0, 0x34ff, 0x2, 0x2}, {@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@multicast1, @in=@empty, 0x2b, 0x4, 0x0, 0x3507, 0xa, 0x2}, {@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@remote, 0x32, 0x0, 0x0, 0x3503, 0x2, 0x2}]}, @algo_comp={0x4f, 0x3, {{'lzs\x00'}, 0x38, "44f2667c65fed9"}}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000004}, 0x820)
setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x1)
mlockall(0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x2, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x4, 0x2}, {0x7, 0x4, 0x8}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x5, 0x5}, {0xf, 0x5}, {0xc, 0x3}, {0xa, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0xc, 0x2}, {0xd, 0x5}]}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x9, [{0x10, 0x5, 0x3}, {0x1, 0x2, 0xc0}, {0x3, 0x4, 0x25}, {0x8, 0x0, 0x4}, {0x5, 0x0, 0x3}]}]}}, 0x0, 0xe6}, 0x28)
write(r0, &(0x7f00000002c0)='0', 0x1)

212.928055ms ago: executing program 2 (id=601):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@grpquota}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x1, 0x500, &(0x7f0000000c40)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x10000007, 0x43a1bd76, 0x9, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x80004000000000, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31e7d, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0586300}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x20040040)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000003e34e0601020000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48080)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
fstat(r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000c400000000000000"], &(0x7f0000000500)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x8, 0xb, 0x0, r1}, 0x50)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r4, r2, 0x4}, 0x5)
r5 = socket$kcm(0x2, 0x6, 0x84)
sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)='{', 0x1}, {&(0x7f0000000980)="471aa0eab2603ad05170513078b2b4c6e791016a5e3a09ecd45316700c6f37d3cdbeb70b9e9e9558523ad8ab18eb033718fbb5017738d4b97ce812ec4d90213451ae97a9757d804af3e4fc4fdcd4ebc7d9b11ece544ea494ce63eb30ea00e73af0b1da0c6432ea2ffcbe3d5c41682b3fc3ff77e5e8f42806e1655025be1e93fdd49bc6f6e86e87f819d7d2a72d832d5384c885406d5cc2e464fcc099fa19a8e1bf1cf4300ec8b7", 0xa7}, {&(0x7f0000000a40)="d431a733d3b03ed679552bbe73d6dfd1c2e38fc934c58fc5651937e93933bfd39a5d515a009d93ffbce41ac66e85fa26a530f9b157be8e", 0x37}], 0x3}, 0x880)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@migrate={0x50, 0x27, 0x1, 0x4, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa5}, 0x7}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1080)
sendmsg$inet(r5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x2f8}, 0x20000094)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1478}, 0x810)
setsockopt$sock_attach_bpf(r7, 0x6, 0x19, &(0x7f0000002040)=r7, 0x78)
perf_event_open(&(0x7f0000002080)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x200, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="20000000360001002bfd7004fcdbdf2504000900000004000200000004000500693322a22955a8f5f25ee075f0a8a5fe1034c60b4a02d9b21f8c71e3bb5ba6ae17b2ab0c4902476db51eeefcd711205c3013470a974a6f4527e5"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x24040050}, 0x24000080)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000002200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x6, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

0s ago: executing program 7 (id=602):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0x154, 0x24, 0x605, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) (async)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, @perf_bp={0x0, 0xc}, 0x2c00, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x8001, 0x0, 0x1, 0xa000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080)="2799092534afcdce1602d7acd9ae30f248117ebc3cc51d133a7604216e3d920e7061bb5fca9820f02baa9e9496f960ea8545aa30665f1332bf144bee5cd6a95538a11d5bd7da3d91c9ba5dc92e67518cfa79cf8361bb661db4349fd0fe01de6e02b173c104d0cc2352263da7e1fd", &(0x7f0000000100)=""/15}, 0x20) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000550001002abd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESHEX=0x0, @ANYBLOB="00020200e0000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)

kernel console output (not intermixed with test programs):

   31.363436][ T3712] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   31.363499][ T3712] R13: 00007f4cf8b66038 R14: 00007f4cf8b65fa0 R15: 00007ffc8af28478
[   31.363516][ T3712]  </TASK>
[   31.372015][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.373460][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.376768][ T3712] process 'syz.1.52' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added
[   31.379606][   T29] kauditd_printk_skb: 411 callbacks suppressed
[   31.379620][   T29] audit: type=1400 audit(1791778940.011:567): avc:  denied  { read write } for  pid=3711 comm="syz.1.52" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.379676][   T29] audit: type=1400 audit(1791778940.011:568): avc:  denied  { open } for  pid=3711 comm="syz.1.52" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.379699][   T29] audit: type=1400 audit(1791778940.011:569): avc:  denied  { ioctl } for  pid=3711 comm="syz.1.52" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.379724][   T29] audit: type=1400 audit(1791778940.021:570): avc:  denied  { execute_no_trans } for  pid=3711 comm="syz.1.52" path="/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   31.397452][ T3639] hsr_slave_0: entered promiscuous mode
[   31.397878][ T3639] hsr_slave_1: entered promiscuous mode
[   31.398161][ T3639] debugfs: 'hsr0' already exists in 'hsr'
[   31.398174][ T3639] Cannot create hsr debugfs directory
[   31.427081][   T29] audit: type=1400 audit(1791778940.071:571): avc:  denied  { ioctl } for  pid=3709 comm="syz.3.51" path="socket:[6418]" dev="sockfs" ino=6418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   31.429208][ T3710] sctp: [Deprecated]: syz.3.51 (pid 3710) Use of struct sctp_assoc_value in delayed_ack socket option.
[   31.429208][ T3710] Use struct sctp_sack_info instead
[   31.651780][   T29] audit: type=1400 audit(1791778940.271:572): avc:  denied  { create } for  pid=3717 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   31.651808][   T29] audit: type=1400 audit(1791778940.271:573): avc:  denied  { map } for  pid=3721 comm="syz.3.55" path="socket:[6482]" dev="sockfs" ino=6482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   31.651871][   T29] audit: type=1400 audit(1791778940.301:574): avc:  denied  { write } for  pid=3717 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   31.858230][ T3736] set_capacity_and_notify: 1 callbacks suppressed
[   31.858254][ T3736] loop0: detected capacity change from 0 to 128
[   31.868969][   T29] audit: type=1400 audit(1791778940.491:575): avc:  denied  { setopt } for  pid=3733 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.874198][ T3736] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   31.891440][ T3639] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   31.898350][   T29] audit: type=1400 audit(1791778940.541:576): avc:  denied  { write } for  pid=3720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   31.906598][ T3639] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.911209][ T3639] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   31.929270][ T3639] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.937054][ T3639] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   31.947557][ T3639] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.951127][ T3639] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   31.964225][ T3639] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.025502][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.198208][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.221437][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2
[   32.227957][ T3639] 8021q: adding VLAN 0 to HW filter on device team0
[   32.234913][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.234946][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.242346][  T324] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.242377][  T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.616306][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   32.675504][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[   32.746554][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3
[   32.750158][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.916957][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4
[   33.011696][ T3851] loop3: detected capacity change from 0 to 128
[   33.051721][ T3639] veth0_vlan: entered promiscuous mode
[   33.063553][ T3639] veth1_vlan: entered promiscuous mode
[   33.082356][  T324] Bluetooth: hci0: Frame reassembly failed (-84)
[   33.096478][ T3639] veth0_macvtap: entered promiscuous mode
[   33.101441][ T3639] veth1_macvtap: entered promiscuous mode
[   33.111780][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.115522][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.121748][   T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.121828][   T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.121865][   T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.121909][   T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.172647][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[   33.342860][ T3870] loop5: detected capacity change from 0 to 512
[   33.352149][ T3870] EXT4-fs: Ignoring removed nobh option
[   33.367663][ T3870] EXT4-fs (loop5): orphan cleanup on readonly fs
[   33.367693][ T3870] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   33.371761][ T3870] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.38: attempt to clear invalid blocks 2 len 1
[   33.371870][ T3870] fserror_report: 5 callbacks suppressed
[   33.371880][ T3870] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   33.372041][ T3870] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   33.372118][ T3870] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.38: invalid indirect mapped block 1819239214 (level 0)
[   33.372163][ T3870] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   33.372449][ T3870] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.38: invalid indirect mapped block 1819239214 (level 1)
[   33.372536][ T3870] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   33.373025][ T3870] EXT4-fs (loop5): 1 truncate cleaned up
[   33.373469][ T3870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   33.523995][ T3884] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[   33.524232][ T3825] Set syz1 is full, maxelem 65536 reached
[   33.656931][ T3891] loop2: detected capacity change from 0 to 512
[   33.687276][ T3891] capability: warning: `syz.2.82' uses deprecated v2 capabilities in a way that may be insecure
[   33.725417][ T3639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.858925][ T3917] loop0: detected capacity change from 0 to 128
[   33.933974][ T3930] loop5: detected capacity change from 0 to 512
[   33.935708][ T3930] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   33.935721][ T3930] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.935734][ T3930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   33.940246][ T3930] EXT4-fs (loop5): 1 truncate cleaned up
[   33.940617][ T3930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.148922][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   35.934248][ T3843] syz.3.70 (3843) used greatest stack depth: 10240 bytes left
[   36.946321][   T29] kauditd_printk_skb: 681 callbacks suppressed
[   36.946337][   T29] audit: type=1400 audit(1791778945.591:1256): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   36.958200][   T29] audit: type=1400 audit(1791778945.601:1257): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   36.999672][   T29] audit: type=1400 audit(1791778945.651:1258): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   37.023466][   T29] audit: type=1400 audit(1791778945.671:1259): avc:  denied  { unmount } for  pid=3639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.036264][   T29] audit: type=1400 audit(1791778945.671:1260): avc:  denied  { read } for  pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   37.036424][   T29] audit: type=1400 audit(1791778945.671:1261): avc:  denied  { open } for  pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   37.036621][   T29] audit: type=1400 audit(1791778945.671:1262): avc:  denied  { ioctl } for  pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   37.066811][   T29] audit: type=1400 audit(1791778945.691:1263): avc:  denied  { create } for  pid=3950 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.067050][   T29] audit: type=1400 audit(1791778945.691:1264): avc:  denied  { ioctl } for  pid=3950 comm="syz.0.97" path="socket:[7351]" dev="sockfs" ino=7351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.067858][   T29] audit: type=1400 audit(1791778945.691:1265): avc:  denied  { execmem } for  pid=3950 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.094027][ T3639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.295857][ T3966] syz.5.102 uses obsolete (PF_INET,SOCK_PACKET)
[   37.416217][ T3976] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   37.452074][ T3978] loop5: detected capacity change from 0 to 512
[   37.558635][ T3985] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   37.614701][ T3985] xt_hashlimit: size too large, truncated to 1048576
[   37.614869][ T3985] xt_hashlimit: overflow, try lower: 629/0
[   37.616263][ T3989] loop5: detected capacity change from 0 to 512
[   37.642828][ T3989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   37.643004][ T3989] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.717132][ T3639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   37.773892][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   37.813307][ T3997] batadv1: entered promiscuous mode
[   37.813459][ T3997] batadv1: entered allmulticast mode
[   37.872967][ T4003] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   37.872967][ T4003] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   38.021491][ T4017] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   38.021491][ T4017] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   38.130274][ T4019] loop5: detected capacity change from 0 to 512
[   38.149877][ T4019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.149990][ T4019] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.152369][ T4019] netlink: 40 bytes leftover after parsing attributes in process `syz.5.121'.
[   38.198818][ T3639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.403255][ T4064] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   38.403295][ T4064] Cannot find add_set index 0 as target
[   38.602024][ T4069] loop5: detected capacity change from 0 to 128
[   38.714919][ T4069] syz.5.138: attempt to access beyond end of device
[   38.714919][ T4069] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128
[   38.736374][ T4069] syz.5.138: attempt to access beyond end of device
[   38.736374][ T4069] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128
[   38.736622][ T4069] Buffer I/O error on dev loop5, logical block 80, lost async page write
[   38.774236][ T4069] syz.5.138: attempt to access beyond end of device
[   38.774236][ T4069] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128
[   38.930536][ T4077] loop2: detected capacity change from 0 to 512
[   38.957033][ T4077] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.975587][ T4077] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.142: corrupted in-inode xattr: e_value size too large
[   38.975644][ T4077] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   38.976187][ T4077] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.142: couldn't read orphan inode 15 (err -117)
[   38.976247][ T4077] loop2: lost filesystem error report for type 5 error -117
[   38.982556][ T4077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.034204][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.138'.
[   39.062922][ T4089] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   39.062922][ T4089] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   39.102406][ T4077] ALSA: seq fatal error: cannot create timer (-19)
[   39.200463][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[   39.200481][ T4092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.146'.
[   39.264293][ T4097] 9p: Bad value for 'source'
[   39.287843][ T4069] syz.5.138: attempt to access beyond end of device
[   39.287843][ T4069] loop5: rw=8390657, sector=154, nr_sectors = 2 limit=128
[   39.287877][ T4069] Buffer I/O error on dev loop5, logical block 77, lost async page write
[   39.287893][ T4069] syz.5.138: attempt to access beyond end of device
[   39.287893][ T4069] loop5: rw=8390657, sector=156, nr_sectors = 2 limit=128
[   39.287912][ T4069] Buffer I/O error on dev loop5, logical block 78, lost async page write
[   39.287997][ T4069] syz.5.138: attempt to access beyond end of device
[   39.287997][ T4069] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128
[   39.288020][ T4069] Buffer I/O error on dev loop5, logical block 79, lost async page write
[   39.288037][ T4069] syz.5.138: attempt to access beyond end of device
[   39.288037][ T4069] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128
[   39.288061][ T4069] Buffer I/O error on dev loop5, logical block 80, lost async page write
[   39.288119][ T4069] syz.5.138: attempt to access beyond end of device
[   39.288119][ T4069] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128
[   39.302705][ T4107] loop0: detected capacity change from 0 to 512
[   39.303121][ T4107] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   39.433741][ T4116] SELinux: syz.0.150 (4116) wrote to checkreqprot. This is no longer supported.
[   39.453586][ T4109] loop1: detected capacity change from 0 to 512
[   39.453996][ T4109] EXT4-fs: Invalid want_extra_isize 1969
[   39.489693][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'.
[   39.551026][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.613891][ T4124] loop1: detected capacity change from 0 to 512
[   39.652123][ T4124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.652503][ T4124] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.749166][ T4135] loop3: detected capacity change from 0 to 512
[   39.753704][ T4135] EXT4-fs: Ignoring removed nobh option
[   39.754105][ T4135] EXT4-fs (loop3): unsupported inode size: 0
[   39.754120][ T4135] EXT4-fs (loop3): blocksize: 1024
[   40.406696][ T4124] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.428568][ T4152] FAULT_INJECTION: forcing a failure.
[   40.428568][ T4152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.428608][ T4152] CPU: 0 UID: 0 PID: 4152 Comm: syz.5.162 Not tainted syzkaller #0 PREEMPT(lazy) 
[   40.428677][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.428690][ T4152] Call Trace:
[   40.428697][ T4152]  <TASK>
[   40.428727][ T4152]  __dump_stack+0x1d/0x30
[   40.428751][ T4152]  dump_stack_lvl+0x95/0xd0
[   40.428788][ T4152]  dump_stack+0x15/0x1b
[   40.428816][ T4152]  should_fail_ex+0x262/0x280
[   40.428842][ T4152]  should_fail+0xb/0x20
[   40.428865][ T4152]  should_fail_usercopy+0x1a/0x20
[   40.428898][ T4152]  _copy_to_user+0x20/0xa0
[   40.428929][ T4152]  simple_read_from_buffer+0xb5/0x130
[   40.428958][ T4152]  proc_fail_nth_read+0x10e/0x150
[   40.428986][ T4152]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   40.429159][ T4152]  vfs_read+0x18e/0x7c0
[   40.429193][ T4152]  ? __rcu_read_unlock+0x4e/0x70
[   40.429260][ T4152]  ? __fget_files+0x184/0x1c0
[   40.429284][ T4152]  ? mutex_lock+0x57/0x90
[   40.429316][ T4152]  ksys_read+0xdc/0x1a0
[   40.429394][ T4152]  __x64_sys_read+0x40/0x50
[   40.429424][ T4152]  x64_sys_call+0x2135/0x2550
[   40.429525][ T4152]  do_syscall_64+0x112/0x360
[   40.429556][ T4152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.429581][ T4152] RIP: 0033:0x7f4b63aaea0e
[   40.429596][ T4152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   40.429672][ T4152] RSP: 002b:00007f4b62546fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   40.429765][ T4152] RAX: ffffffffffffffda RBX: 00007f4b625476c0 RCX: 00007f4b63aaea0e
[   40.429786][ T4152] RDX: 000000000000000f RSI: 00007f4b625470a0 RDI: 0000000000000005
[   40.429801][ T4152] RBP: 00007f4b62547090 R08: 0000000000000000 R09: 0000000000000000
[   40.429816][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.429829][ T4152] R13: 00007f4b63d76038 R14: 00007f4b63d75fa0 R15: 00007fff6a0d2618
[   40.429849][ T4152]  </TASK>
[   40.442674][ T4154] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   40.442674][ T4154] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   40.499278][ T4162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   40.722253][ T4170] loop5: detected capacity change from 0 to 512
[   40.772666][ T4170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.772782][ T4170] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.033534][ T4170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.169'.
[   41.120037][ T3639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.221359][ T4192] netlink: 'syz.2.178': attribute type 2 has an invalid length.
[   41.267424][ T4194] netlink: 284 bytes leftover after parsing attributes in process `syz.5.177'.
[   41.284286][ T4192] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   41.284303][ T4192] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[   41.473595][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   41.743240][ T4213] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   41.944269][ T4216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.944455][ T4216] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.007130][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.101386][   T29] kauditd_printk_skb: 649 callbacks suppressed
[   42.101404][   T29] audit: type=1400 audit(1791778950.731:1915): avc:  denied  { kexec_image_load } for  pid=4221 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   42.187115][   T29] audit: type=1400 audit(1791778950.831:1916): avc:  denied  { write } for  pid=4225 comm="syz.5.187" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   42.188720][   T29] audit: type=1400 audit(1791778950.831:1917): avc:  denied  { open } for  pid=4225 comm="syz.5.187" path="/31/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   42.281072][   T29] audit: type=1326 audit(1791778950.931:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.281109][   T29] audit: type=1326 audit(1791778950.931:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.282486][   T29] audit: type=1326 audit(1791778950.931:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.282517][   T29] audit: type=1326 audit(1791778950.931:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.282567][   T29] audit: type=1326 audit(1791778950.931:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.282670][   T29] audit: type=1326 audit(1791778950.931:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.282697][   T29] audit: type=1326 audit(1791778950.931:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df030e1d9 code=0x7ffc0000
[   42.366629][ T4234] FAULT_INJECTION: forcing a failure.
[   42.366629][ T4234] name failslab, interval 1, probability 0, space 0, times 0
[   42.366734][ T4234] CPU: 0 UID: 0 PID: 4234 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(lazy) 
[   42.366763][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   42.366836][ T4234] Call Trace:
[   42.366842][ T4234]  <TASK>
[   42.366850][ T4234]  __dump_stack+0x1d/0x30
[   42.366878][ T4234]  dump_stack_lvl+0x95/0xd0
[   42.366911][ T4234]  dump_stack+0x15/0x1b
[   42.366935][ T4234]  should_fail_ex+0x262/0x280
[   42.366967][ T4234]  ? usb_alloc_urb+0x42/0xc0
[   42.367026][ T4234]  should_failslab+0x8c/0xb0
[   42.367063][ T4234]  __kmalloc_noprof+0xd0/0x4d0
[   42.367099][ T4234]  ? usb_control_msg+0x58/0x240
[   42.367209][ T4234]  ? usb_alloc_urb+0x42/0xc0
[   42.367264][ T4234]  ? usb_control_msg+0x58/0x240
[   42.367290][ T4234]  usb_alloc_urb+0x42/0xc0
[   42.367311][ T4234]  usb_control_msg+0xc0/0x240
[   42.367337][ T4234]  hub_ext_port_status+0xb4/0x410
[   42.367395][ T4234]  hub_activate+0x4d4/0x11b0
[   42.367458][ T4234]  hub_resume+0x47/0x1e0
[   42.367487][ T4234]  usb_resume_both+0x3ea/0x5b0
[   42.367550][ T4234]  ? __pfx_usb_runtime_resume+0x10/0x10
[   42.367659][ T4234]  usb_runtime_resume+0x21/0x30
[   42.367766][ T4234]  __rpm_callback+0x2e6/0x6d0
[   42.367806][ T4234]  ? __pfx_usb_runtime_resume+0x10/0x10
[   42.367964][ T4234]  rpm_resume+0x94e/0xce0
[   42.368002][ T4234]  __pm_runtime_resume+0xd6/0x100
[   42.368036][ T4234]  usb_autoresume_device+0x23/0xc0
[   42.368101][ T4234]  usbdev_open+0x102/0x450
[   42.368132][ T4234]  chrdev_open+0x2eb/0x3a0
[   42.368154][ T4234]  do_dentry_open+0x49f/0xa60
[   42.368192][ T4234]  ? __pfx_chrdev_open+0x10/0x10
[   42.368276][ T4234]  vfs_open+0x37/0x1e0
[   42.368299][ T4234]  path_openat+0xc01/0x10d0
[   42.368341][ T4234]  do_file_open+0x16c/0x290
[   42.368376][ T4234]  do_sys_openat2+0xa0/0x130
[   42.368405][ T4234]  __x64_sys_openat+0xf2/0x120
[   42.368434][ T4234]  x64_sys_call+0x1f72/0x2550
[   42.368484][ T4234]  do_syscall_64+0x112/0x360
[   42.368514][ T4234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.368578][ T4234] RIP: 0033:0x7f4cf889ea0e
[   42.368664][ T4234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   42.368684][ T4234] RSP: 002b:00007f4cf7336b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   42.368706][ T4234] RAX: ffffffffffffffda RBX: 00007f4cf73376c0 RCX: 00007f4cf889ea0e
[   42.368722][ T4234] RDX: 0000000000000002 RSI: 00007f4cf7336c00 RDI: ffffffffffffff9c
[   42.368737][ T4234] RBP: 00007f4cf7336c00 R08: 0000000000000000 R09: 0000000000000000
[   42.368751][ T4234] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   42.368765][ T4234] R13: 00007f4cf8b66038 R14: 00007f4cf8b65fa0 R15: 00007ffc8af28478
[   42.368835][ T4234]  </TASK>
[   42.375492][ T4234] usb usb5: usbfs: process 4234 (syz.1.190) did not claim interface 0 before use
[   42.565978][ T4238] set_capacity_and_notify: 2 callbacks suppressed
[   42.565994][ T4238] loop5: detected capacity change from 0 to 8192
[   42.566590][ T4238] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   42.762471][ T4248] loop1: detected capacity change from 0 to 164
[   43.022415][ T4260] netlink: 'syz.1.193': attribute type 16 has an invalid length.
[   43.022455][ T4260] netlink: 'syz.1.193': attribute type 17 has an invalid length.
[   43.370952][ T3639] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[   43.370975][ T3639] FAT-fs (loop5): Filesystem has been set read-only
[   43.441663][ T4269] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   43.441663][ T4269] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   43.575229][ T4284] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   43.575229][ T4284] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   43.676830][ T4289] FAULT_INJECTION: forcing a failure.
[   43.676830][ T4289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.676906][ T4289] CPU: 0 UID: 0 PID: 4289 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.676933][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   43.676947][ T4289] Call Trace:
[   43.676954][ T4289]  <TASK>
[   43.676965][ T4289]  __dump_stack+0x1d/0x30
[   43.677035][ T4289]  dump_stack_lvl+0x95/0xd0
[   43.677060][ T4289]  dump_stack+0x15/0x1b
[   43.677103][ T4289]  should_fail_ex+0x262/0x280
[   43.677154][ T4289]  should_fail+0xb/0x20
[   43.677201][ T4289]  should_fail_usercopy+0x1a/0x20
[   43.677230][ T4289]  _copy_to_user+0x20/0xa0
[   43.677312][ T4289]  simple_read_from_buffer+0xb5/0x130
[   43.677386][ T4289]  proc_fail_nth_read+0x10e/0x150
[   43.677414][ T4289]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   43.677442][ T4289]  vfs_read+0x18e/0x7c0
[   43.677490][ T4289]  ? __rcu_read_unlock+0x4e/0x70
[   43.677604][ T4289]  ? __fget_files+0x184/0x1c0
[   43.677632][ T4289]  ? mutex_lock+0x57/0x90
[   43.677670][ T4289]  ksys_read+0xdc/0x1a0
[   43.677731][ T4289]  __x64_sys_read+0x40/0x50
[   43.677765][ T4289]  x64_sys_call+0x2135/0x2550
[   43.677790][ T4289]  do_syscall_64+0x112/0x360
[   43.677814][ T4289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.677851][ T4289] RIP: 0033:0x7f4cf889ea0e
[   43.677868][ T4289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   43.677887][ T4289] RSP: 002b:00007f4cf7336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   43.677931][ T4289] RAX: ffffffffffffffda RBX: 00007f4cf73376c0 RCX: 00007f4cf889ea0e
[   43.677947][ T4289] RDX: 000000000000000f RSI: 00007f4cf73370a0 RDI: 0000000000000004
[   43.677961][ T4289] RBP: 00007f4cf7337090 R08: 0000000000000000 R09: 0000000000000000
[   43.677975][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   43.677989][ T4289] R13: 00007f4cf8b66038 R14: 00007f4cf8b65fa0 R15: 00007ffc8af28478
[   43.678010][ T4289]  </TASK>
[   43.739163][   T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.835436][   T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.935943][ T4286] loop0: detected capacity change from 0 to 256
[   43.936608][   T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.036978][   T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.062352][ T4308] loop3: detected capacity change from 0 to 512
[   44.100653][ T4308] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.203: Unimplemented hash flags: 0x0001
[   44.100743][ T4308] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.203: Corrupt directory, running e2fsck is recommended
[   44.103864][ T4308] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   44.106836][ T4308] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.203: corrupted in-inode xattr: invalid ea_ino
[   44.106904][ T4308] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   44.108225][ T4308] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.203: couldn't read orphan inode 15 (err -117)
[   44.108353][ T4308] loop3: lost filesystem error report for type 5 error -117
[   44.108881][    C1] EXT4-fs (loop3): error count since last fsck: 2
[   44.108899][    C1] EXT4-fs (loop3): initial error at time 1791778952: ext4_iget_extra_inode:5210: inode 15
[   44.108946][    C1] EXT4-fs (loop3): last error at time 1791778952: ext4_orphan_get:1408
[   44.128597][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.180962][ T4321] loop0: detected capacity change from 0 to 512
[   44.200899][ T4322] loop1: detected capacity change from 0 to 512
[   44.239040][ T4321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.239133][ T4321] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.247378][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.247547][ T4322] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.401225][   T51] bridge_slave_1: left allmulticast mode
[   44.401246][   T51] bridge_slave_1: left promiscuous mode
[   44.401402][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.402228][   T51] bridge_slave_0: left allmulticast mode
[   44.402247][   T51] bridge_slave_0: left promiscuous mode
[   44.402412][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.426262][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.434077][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.508230][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   44.510945][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   44.512370][   T51] bond0 (unregistering): Released all slaves
[   44.597300][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.602306][ T4344] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   44.602335][ T4344] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   44.602366][ T4344] vhci_hcd vhci_hcd.0: Device attached
[   44.608665][   T51] hsr_slave_0: left promiscuous mode
[   44.614699][   T51] hsr_slave_1: left promiscuous mode
[   44.615102][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.615116][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.622725][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.622740][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   44.637234][   T51] veth1_macvtap: left promiscuous mode
[   44.637260][   T51] veth0_macvtap: left promiscuous mode
[   44.637392][   T51] veth1_vlan: left promiscuous mode
[   44.637425][   T51] veth0_vlan: left promiscuous mode
[   44.713122][ T4351] __nla_validate_parse: 3 callbacks suppressed
[   44.713136][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[   44.713151][ T4351] netlink: 'syz.0.210': attribute type 2 has an invalid length.
[   44.732127][  T866] Process accounting resumed
[   44.839333][ T3384] usb 5-1: new high-speed USB device number 2 using vhci_hcd
[   45.368059][ T4365] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   45.602510][   T51] team0 (unregistering): Port device team_slave_1 removed
[   45.607162][   T51] team0 (unregistering): Port device team_slave_0 removed
[   45.636588][ T4376] loop2: detected capacity change from 0 to 512
[   45.644113][ T4378] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   45.650376][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.650522][ T4376] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.695666][ T4345] vhci_hcd: cannot find a urb of seqnum 150 max seqnum 1
[   45.695920][  T324] vhci_hcd vhci_hcd.2: stop threads
[   45.695935][  T324] vhci_hcd vhci_hcd.2: release socket
[   45.695956][  T324] vhci_hcd vhci_hcd.2: disconnect device
[   45.696872][ T4351] tipc: Started in network mode
[   45.696898][ T4351] tipc: Node identity 7f000001, cluster identity 4711
[   45.696992][ T4351] tipc: New replicast peer: 127.0.0.1
[   45.697133][ T4351] tipc: Enabled bearer <udp:syz0>, priority 10
[   45.702288][ T4355] tipc: Disabling bearer <udp:syz0>
[   45.705361][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5
[   45.860184][ T4400] loop1: detected capacity change from 0 to 512
[   45.873718][ T4400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   45.873748][ T4400] System zones: 1-12
[   45.874305][ T4400] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.215: missing EA_INODE flag
[   45.874331][ T4400] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   45.874751][ T4400] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.215: error while reading EA inode 12 err=-117
[   45.874807][ T4400] loop1: lost filesystem error report for type 5 error -117
[   45.875106][ T4400] EXT4-fs (loop1): 1 orphan inode deleted
[   45.875522][ T4400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.906064][ T4401] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   45.990202][ T4406] ieee802154 phy0 wpan0: encryption failed: -22
[   46.047065][ T4400] Illegal XDP return value 4294967277 on prog  (id 32) dev N/A, expect packet loss!
[   46.241479][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.241513][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.241674][ T4332] bridge_slave_0: entered allmulticast mode
[   46.242217][ T4332] bridge_slave_0: entered promiscuous mode
[   46.270414][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.270447][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.270541][ T4332] bridge_slave_1: entered allmulticast mode
[   46.270899][ T4332] bridge_slave_1: entered promiscuous mode
[   46.318672][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6
[   46.331568][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.332825][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.350004][ T4387] loop0: detected capacity change from 0 to 2048
[   46.377644][ T4332] team0: Port device team_slave_0 added
[   46.386119][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.386511][ T4332] team0: Port device team_slave_1 added
[   46.447137][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.447150][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.447247][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.453659][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.453672][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.453701][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.483922][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.498235][ T4332] hsr_slave_0: entered promiscuous mode
[   46.498698][ T4332] hsr_slave_1: entered promiscuous mode
[   46.499334][ T4332] debugfs: 'hsr0' already exists in 'hsr'
[   46.499347][ T4332] Cannot create hsr debugfs directory
[   46.566973][ T4440] loop3: detected capacity change from 0 to 512
[   46.692981][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.762236][ T4457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.762356][ T4457] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.812610][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7
[   46.821542][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.885862][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.904861][ T4440] syz.3.219 (4440) used greatest stack depth: 9952 bytes left
[   46.924603][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.074435][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.082185][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8
[   47.085408][ T4332] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   47.129095][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.142484][ T4488] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   47.159794][ T4332] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   47.242545][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.258163][ T4332] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   47.271123][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.277397][ T4332] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   47.309656][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.331045][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.493946][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.575219][   T51] bridge_slave_1: left allmulticast mode
[   47.575238][   T51] bridge_slave_1: left promiscuous mode
[   47.575340][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.576107][   T51] bridge_slave_0: left allmulticast mode
[   47.576124][   T51] bridge_slave_0: left promiscuous mode
[   47.576218][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.576640][   T29] kauditd_printk_skb: 334 callbacks suppressed
[   47.576663][   T29] audit: type=1400 audit(1791778956.221:2259): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   47.667642][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.679464][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.683306][   T51] bond0 (unregistering): Released all slaves
[   47.690069][ T4508] set_capacity_and_notify: 1 callbacks suppressed
[   47.690096][ T4508] loop1: detected capacity change from 0 to 512
[   47.696056][ T4508] EXT4-fs: Ignoring removed bh option
[   47.696796][ T4508] EXT4-fs: quotafile must be on filesystem root
[   47.775807][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.787729][ T4332] 8021q: adding VLAN 0 to HW filter on device team0
[   47.825312][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.825348][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.826707][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.826741][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.877588][   T51] hsr_slave_0: left promiscuous mode
[   47.879746][   T51] hsr_slave_1: left promiscuous mode
[   47.880152][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.880166][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.884887][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.884902][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.919665][   T51] veth1_macvtap: left promiscuous mode
[   47.919696][   T51] veth0_macvtap: left promiscuous mode
[   47.919770][   T51] veth1_vlan: left promiscuous mode
[   47.919851][   T51] veth0_vlan: left promiscuous mode
[   47.949175][ T4517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'.
[   47.972823][ T4508] loop1: detected capacity change from 0 to 1024
[   47.974574][ T4508] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   48.036502][   T29] audit: type=1400 audit(1791778956.681:2260): avc:  denied  { setopt } for  pid=4506 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.090152][   T29] audit: type=1400 audit(1791778956.741:2261): avc:  denied  { write } for  pid=4516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.090772][   T51] team0 (unregistering): Port device team_slave_1 removed
[   48.098647][   T51] team0 (unregistering): Port device team_slave_0 removed
[   48.098834][ T4532] loop1: detected capacity change from 0 to 512
[   48.124961][ T4532] FAT-fs (loop1): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[   48.125019][ T4532] FAT-fs (loop1): bogus number of directory entries (65535)
[   48.125034][ T4532] FAT-fs (loop1): Can't find a valid FAT filesystem
[   48.154881][   T29] audit: type=1400 audit(1791778956.801:2262): avc:  denied  { write } for  pid=4534 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.230925][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9
[   48.288225][   T29] audit: type=1400 audit(1791778956.931:2263): avc:  denied  { bind } for  pid=4542 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.303172][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.303204][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.303252][ T4466] bridge_slave_0: entered allmulticast mode
[   48.303676][ T4466] bridge_slave_0: entered promiscuous mode
[   48.304558][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.304587][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.304645][ T4466] bridge_slave_1: entered allmulticast mode
[   48.305109][ T4466] bridge_slave_1: entered promiscuous mode
[   48.326916][ T4466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.327992][ T4466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.349835][ T4466] team0: Port device team_slave_0 added
[   48.350852][ T4466] team0: Port device team_slave_1 added
[   48.394287][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.394302][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.394346][ T4466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.457203][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.457220][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.457251][ T4466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.553291][ T4466] hsr_slave_0: entered promiscuous mode
[   48.553769][ T4466] hsr_slave_1: entered promiscuous mode
[   48.557177][ T4466] debugfs: 'hsr0' already exists in 'hsr'
[   48.557194][ T4466] Cannot create hsr debugfs directory
[   48.573519][   T29] audit: type=1400 audit(1791778957.221:2264): avc:  denied  { write } for  pid=4552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.628558][   T29] audit: type=1400 audit(1791778957.271:2265): avc:  denied  { write } for  pid=4569 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.733464][ T4551] syzkaller0: entered promiscuous mode
[   48.733573][ T4551] syzkaller0: entered allmulticast mode
[   48.778907][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10
[   48.837411][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.957343][ T4466] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   48.962799][ T4466] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.966662][ T4466] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   48.981369][ T4466] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.984952][ T4466] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   48.990611][ T4466] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.991675][ T4466] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   48.993951][ T4466] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.091776][   T29] audit: type=1400 audit(1791778957.741:2266): avc:  denied  { write } for  pid=4578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.139571][ T4466] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.165369][   T29] audit: type=1400 audit(1791778957.811:2267): avc:  denied  { write } for  pid=4605 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.202625][ T4332] veth0_vlan: entered promiscuous mode
[   49.204766][ T4466] 8021q: adding VLAN 0 to HW filter on device team0
[   49.207636][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.207687][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.211442][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.211477][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.221662][ T4332] veth1_vlan: entered promiscuous mode
[   49.241220][ T4609] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   49.241220][ T4609] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   49.256048][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11
[   49.266195][ T4332] veth0_macvtap: entered promiscuous mode
[   49.272449][ T4332] veth1_macvtap: entered promiscuous mode
[   49.290627][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.307495][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.354789][   T29] audit: type=1400 audit(1791778958.001:2268): avc:  denied  { mounton } for  pid=4332 comm="syz-executor" path="/root/syzkaller.eZ51cH/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   49.359600][   T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.362151][   T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.362186][   T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.362215][   T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.440855][ T4613] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   49.440855][ T4613] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   49.474514][ T4627] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   49.591853][ T4466] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.602743][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12
[   49.654485][ T4641] loop2: detected capacity change from 0 to 2048
[   49.697485][ T4641]  loop2: p2 p3 p7
[   49.712869][ T2983]  loop2: p2 p3 p7
[   49.882114][ T4466] veth0_vlan: entered promiscuous mode
[   49.897477][ T4466] veth1_vlan: entered promiscuous mode
[   49.927278][ T4466] veth0_macvtap: entered promiscuous mode
[   49.928970][ T3384] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   49.943902][ T4466] veth1_macvtap: entered promiscuous mode
[   49.945519][ T4675] loop3: detected capacity change from 0 to 2048
[   49.967420][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.975182][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.989993][ T4675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.990124][ T4675] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.991451][ T4675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.246: bg 0: block 345: padding at end of block bitmap is not set
[   49.999237][   T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.999275][   T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.999441][   T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.999534][   T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.044993][ T4661] loop6: detected capacity change from 0 to 512
[   50.055529][ T4661] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[   50.055562][ T4661] EXT4-fs (loop6): group descriptors corrupted!
[   50.066352][ T4677] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   50.066352][ T4677] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   50.246831][ T4689] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   50.322860][ T4694] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   50.322860][ T4694] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   50.431563][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.465800][ T4699] loop3: detected capacity change from 0 to 512
[   50.557637][ T4702] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[   50.557659][ T4702] FAT-fs (loop3): Filesystem has been set read-only
[   50.557898][ T4702] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[   50.576207][ T4704] loop6: detected capacity change from 0 to 128
[   50.601887][ T4703] syz.6.254: attempt to access beyond end of device
[   50.601887][ T4703] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128
[   50.618453][ T4706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'.
[   50.630666][ T4706] loop1: detected capacity change from 0 to 512
[   50.638087][ T4706] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.255: Unrecognised inode hash code 255
[   50.638112][ T4706] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.255: Corrupt directory, running e2fsck is recommended
[   50.656121][ T4706] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   50.658414][ T4706] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.255: corrupted in-inode xattr: invalid ea_ino
[   50.658443][ T4706] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.658725][ T4706] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.255: couldn't read orphan inode 15 (err -117)
[   50.658753][ T4706] loop1: lost filesystem error report for type 5 error -117
[   50.658975][    C0] EXT4-fs (loop1): error count since last fsck: 2
[   50.658992][    C0] EXT4-fs (loop1): initial error at time 1791778959: ext4_iget_extra_inode:5210: inode 15
[   50.659025][    C0] EXT4-fs (loop1): last error at time 1791778959: ext4_orphan_get:1408
[   50.664220][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.697473][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.842775][ T4716] loop1: detected capacity change from 0 to 512
[   50.861942][ T4716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.862106][ T4716] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.893821][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.953790][ T4732] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   50.953790][ T4732] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   51.041588][ T4739] FAULT_INJECTION: forcing a failure.
[   51.041588][ T4739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.041622][ T4739] CPU: 0 UID: 0 PID: 4739 Comm: syz.7.266 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.041705][ T4739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.041720][ T4739] Call Trace:
[   51.041731][ T4739]  <TASK>
[   51.041793][ T4739]  __dump_stack+0x1d/0x30
[   51.041822][ T4739]  dump_stack_lvl+0x95/0xd0
[   51.041852][ T4739]  dump_stack+0x15/0x1b
[   51.041876][ T4739]  should_fail_ex+0x262/0x280
[   51.041910][ T4739]  should_fail+0xb/0x20
[   51.041979][ T4739]  should_fail_usercopy+0x1a/0x20
[   51.042029][ T4739]  _copy_from_user+0x1c/0xb0
[   51.042064][ T4739]  ___sys_sendmsg+0xc1/0x1e0
[   51.042100][ T4739]  __x64_sys_sendmsg+0xd4/0x160
[   51.042127][ T4739]  x64_sys_call+0x22ab/0x2550
[   51.042215][ T4739]  do_syscall_64+0x112/0x360
[   51.042247][ T4739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.042304][ T4739] RIP: 0033:0x7f3844b6e1d9
[   51.042319][ T4739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.042338][ T4739] RSP: 002b:00007f38435c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.042368][ T4739] RAX: ffffffffffffffda RBX: 00007f3844df5fa0 RCX: 00007f3844b6e1d9
[   51.042436][ T4739] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000004
[   51.042451][ T4739] RBP: 00007f3844c05888 R08: 0000000000000000 R09: 0000000000000000
[   51.042472][ T4739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.042487][ T4739] R13: 00007f3844df6038 R14: 00007f3844df5fa0 R15: 00007fff23f03198
[   51.042511][ T4739]  </TASK>
[   51.245706][ T4756] netlink: 60 bytes leftover after parsing attributes in process `syz.7.271'.
[   51.291134][ T4763] FAULT_INJECTION: forcing a failure.
[   51.291134][ T4763] name failslab, interval 1, probability 0, space 0, times 0
[   51.291164][ T4763] CPU: 0 UID: 0 PID: 4763 Comm: syz.7.274 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.291192][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.291209][ T4763] Call Trace:
[   51.291216][ T4763]  <TASK>
[   51.291224][ T4763]  __dump_stack+0x1d/0x30
[   51.291248][ T4763]  dump_stack_lvl+0x95/0xd0
[   51.291351][ T4763]  dump_stack+0x15/0x1b
[   51.291370][ T4763]  should_fail_ex+0x262/0x280
[   51.291397][ T4763]  should_failslab+0x8c/0xb0
[   51.291513][ T4763]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[   51.291550][ T4763]  ? __d_alloc+0x34/0x320
[   51.291580][ T4763]  ? __d_alloc+0x34/0x320
[   51.291638][ T4763]  __d_alloc+0x34/0x320
[   51.291667][ T4763]  ? d_alloc_pseudo+0x13/0x80
[   51.291699][ T4763]  d_alloc_pseudo+0x1e/0x80
[   51.291804][ T4763]  alloc_path_pseudo+0xa4/0x140
[   51.291836][ T4763]  alloc_file_pseudo+0x55/0x120
[   51.291861][ T4763]  __shmem_file_setup+0x226/0x260
[   51.291944][ T4763]  shmem_file_setup+0x3b/0x50
[   51.291980][ T4763]  memfd_alloc_file+0x4e/0x300
[   51.292011][ T4763]  __se_sys_memfd_create+0x2e1/0x3b0
[   51.292114][ T4763]  __x64_sys_memfd_create+0x31/0x40
[   51.292148][ T4763]  x64_sys_call+0x1955/0x2550
[   51.292174][ T4763]  do_syscall_64+0x112/0x360
[   51.292204][ T4763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.292231][ T4763] RIP: 0033:0x7f3844b6e1d9
[   51.292246][ T4763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.292345][ T4763] RSP: 002b:00007f38435c6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   51.292367][ T4763] RAX: ffffffffffffffda RBX: 0000000000000467 RCX: 00007f3844b6e1d9
[   51.292381][ T4763] RDX: 00007f38435c6ee0 RSI: 0000000000000000 RDI: 00007f3844c05a68
[   51.292393][ T4763] RBP: 0000200000000500 R08: 00000000ffffffff R09: 0000000000000000
[   51.292454][ T4763] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000c80
[   51.292470][ T4763] R13: 00007f38435c6ee0 R14: 00007f38435c6ea0 R15: 0000200000000300
[   51.292491][ T4763]  </TASK>
[   51.384822][ T4770] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   51.384822][ T4770] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   51.519986][   T51] IPVS: starting estimator thread 0...
[   51.599448][ T4775] IPVS: using max 2496 ests per chain, 124800 per kthread
[   51.675104][ T4779] EXT4-fs: test_dummy_encryption option not supported
[   52.654508][   T29] kauditd_printk_skb: 1029 callbacks suppressed
[   52.654536][   T29] audit: type=1400 audit(1791778961.301:3298): avc:  denied  { create } for  pid=4810 comm="syz.6.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   52.658265][   T29] audit: type=1400 audit(1791778961.301:3299): avc:  denied  { setopt } for  pid=4810 comm="syz.6.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   52.834102][ T4816] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   52.834102][ T4816] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   52.874930][   T29] audit: type=1400 audit(1791778961.521:3300): avc:  denied  { allowed } for  pid=4817 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   52.876030][   T29] audit: type=1400 audit(1791778961.521:3301): avc:  denied  { create } for  pid=4817 comm="syz.3.291" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   52.876058][   T29] audit: type=1400 audit(1791778961.521:3302): avc:  denied  { map } for  pid=4817 comm="syz.3.291" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   52.876081][   T29] audit: type=1400 audit(1791778961.521:3303): avc:  denied  { read write } for  pid=4817 comm="syz.3.291" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   52.877051][   T29] audit: type=1400 audit(1791778961.521:3304): avc:  denied  { unmount } for  pid=4332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   52.877383][   T29] audit: type=1400 audit(1791778961.521:3305): avc:  denied  { unmount } for  pid=4332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   55.564338][ T4831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=4831 comm=syz.2.296
[   55.566617][   T29] audit: type=1400 audit(1791778964.211:3306): avc:  denied  { mount } for  pid=4829 comm="syz.2.296" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   55.569235][   T29] audit: type=1400 audit(1791778964.221:3307): avc:  denied  { bind } for  pid=4829 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   55.632606][ T4840] set_capacity_and_notify: 3 callbacks suppressed
[   55.632624][ T4840] loop6: detected capacity change from 0 to 512
[   55.639437][ T4841] loop1: detected capacity change from 0 to 512
[   55.661741][ T4840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.661847][ T4840] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.669669][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.298'.
[   55.860294][ T4854] loop2: detected capacity change from 0 to 512
[   55.885472][ T4828] syzkaller0: entered promiscuous mode
[   55.885614][ T4828] syzkaller0: entered allmulticast mode
[   56.191549][ T4332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.230793][ T4861] loop3: detected capacity change from 0 to 4096
[   56.248519][ T4861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.261839][ T4865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'.
[   56.261873][ T4865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'.
[   56.293358][ T4865] gretap0: entered promiscuous mode
[   56.295296][ T4865] gretap0: left promiscuous mode
[   56.327938][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.349606][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'.
[   56.892431][ T4862] syzkaller0: entered promiscuous mode
[   56.892780][ T4862] syzkaller0: entered allmulticast mode
[   56.974778][ T4892] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   56.974778][ T4892] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   57.112130][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.310'.
[   57.186529][ T4900] Set syz1 is full, maxelem 6117 reached
[   57.205701][ T4903] sg_write: data in/out 96/136 bytes for SCSI command 0x0-- guessing data in;
[   57.205701][ T4903]    program syz.1.309 not setting count and/or reply_len properly
[   57.272974][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'.
[   57.290347][ T4914] loop6: detected capacity change from 0 to 4096
[   57.310346][ T4914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.481687][ T4332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.001678][ T4930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   58.001705][ T4930] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   58.004623][ T4930] vhci_hcd vhci_hcd.0: Device attached
[   58.099121][   T29] kauditd_printk_skb: 22 callbacks suppressed
[   58.099138][   T29] audit: type=1400 audit(1791778966.741:3330): avc:  denied  { mounton } for  pid=4929 comm="syz.1.321" path="/70/sys" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   58.107112][ T4919] syzkaller0: entered promiscuous mode
[   58.107352][ T4919] syzkaller0: entered allmulticast mode
[   58.108889][   T29] audit: type=1400 audit(1791778966.751:3331): avc:  denied  { mount } for  pid=4929 comm="syz.1.321" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   58.145577][ T4930] loop1: detected capacity change from 0 to 164
[   58.208342][ T4930] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   58.220020][   T29] audit: type=1400 audit(1791778966.871:3332): avc:  denied  { mount } for  pid=4929 comm="syz.1.321" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   58.264590][   T29] audit: type=1400 audit(1791778966.911:3333): avc:  denied  { setopt } for  pid=4929 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   58.264617][   T29] audit: type=1400 audit(1791778966.911:3334): avc:  denied  { bind } for  pid=4929 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   58.266001][   T29] audit: type=1400 audit(1791778966.911:3335): avc:  denied  { name_bind } for  pid=4929 comm="syz.1.321" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   58.266618][   T29] audit: type=1400 audit(1791778966.911:3336): avc:  denied  { node_bind } for  pid=4929 comm="syz.1.321" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   58.268203][   T29] audit: type=1400 audit(1791778966.911:3337): avc:  denied  { getopt } for  pid=4929 comm="syz.1.321" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   58.268949][   T29] audit: type=1400 audit(1791778966.911:3338): avc:  denied  { connect } for  pid=4929 comm="syz.1.321" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   58.268976][   T29] audit: type=1400 audit(1791778966.911:3339): avc:  denied  { name_connect } for  pid=4929 comm="syz.1.321" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   58.368956][  T866] usb 3-1: new high-speed USB device number 2 using vhci_hcd
[   58.522771][ T4935] syzkaller0: entered promiscuous mode
[   58.522978][ T4935] syzkaller0: entered allmulticast mode
[   58.785560][ T4948] netlink: 'syz.3.326': attribute type 19 has an invalid length.
[   58.827955][ T4931] vhci_hcd: connection reset by peer
[   58.828360][   T70] vhci_hcd vhci_hcd.1: stop threads
[   58.828389][   T70] vhci_hcd vhci_hcd.1: release socket
[   58.828408][   T70] vhci_hcd vhci_hcd.1: disconnect device
[   59.309745][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'.
[   59.312081][ T4956] loop3: detected capacity change from 0 to 512
[   59.313720][ T4956] EXT4-fs: Ignoring removed bh option
[   59.313835][ T4956] EXT4-fs: Ignoring removed i_version option
[   59.319234][ T4956] EXT4-fs (loop3): failed to initialize system zone (-117)
[   59.319381][ T4956] EXT4-fs (loop3): mount failed
[   59.438579][ T4964] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   59.438579][ T4964] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   59.829343][ T4970] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   60.172687][ T4976] netlink: 'syz.7.334': attribute type 1 has an invalid length.
[   60.265825][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.334'.
[   60.302010][ T4982] loop2: detected capacity change from 0 to 2048
[   60.445990][ T4992] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   60.445990][ T4992] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   60.570617][ T5002] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   60.849195][ T5006] loop3: detected capacity change from 0 to 512
[   60.890506][ T5006] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   60.891415][ T5006] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   60.922340][ T5006] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   60.923358][ T5006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   60.923697][ T5006] System zones: 0-2, 18-18, 34-34
[   60.927530][ T4982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.966918][ T5006] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.338: bad orphan inode 15
[   60.966977][ T5006] loop3: lost filesystem error report for type 5 error -117
[   60.968900][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   60.968939][    C0] EXT4-fs (loop3): initial error at time 1791778969: ext4_orphan_get:1429
[   60.969099][    C0] EXT4-fs (loop3): last error at time 1791778969: ext4_orphan_get:1429
[   60.972658][ T5006] ext4_test_bit(bit=14, block=18) = 1
[   60.972706][ T5006] is_bad_inode(inode)=0
[   60.972727][ T5006] NEXT_ORPHAN(inode)=2264924160
[   60.972746][ T5006] max_ino=32
[   60.972807][ T5006] i_nlink=0
[   60.977347][ T5006] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.338: corrupted inode contents
[   60.977397][ T5006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.979858][ T5006] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #15: comm syz.3.338: mark_inode_dirty error
[   60.979951][ T5006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.982165][ T5006] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.338: corrupted inode contents
[   60.983927][ T5006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.985624][ T5006] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.338: mark_inode_dirty error
[   60.985726][ T5006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.988821][ T5006] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #15: comm syz.3.338: mark inode dirty (error -117)
[   60.989097][ T5006] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.991837][ T5006] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[   61.023069][ T5006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.120220][ T5006] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.338: bg 0: block 80: padding at end of block bitmap is not set
[   61.210010][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.277736][ T5008] syzkaller0: entered promiscuous mode
[   61.277816][ T5008] syzkaller0: entered allmulticast mode
[   61.330526][ T5027] loop3: detected capacity change from 0 to 512
[   61.349470][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.353170][ T5027] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   61.353185][ T5027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   61.454339][ T5027] EXT4-fs (loop3): 1 truncate cleaned up
[   61.454762][ T5027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.888626][ T5050] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   62.027710][ T5054] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   62.027710][ T5054] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   62.068741][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'.
[   62.412499][ T5080] loop1: detected capacity change from 0 to 512
[   62.471873][ T5080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.471935][ T5080] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.572737][ T5086] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   62.715013][ T5079] syzkaller0: entered promiscuous mode
[   62.715094][ T5079] syzkaller0: entered allmulticast mode
[   62.793542][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.876383][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.995444][ T5102] x_tables: duplicate entry at hook 1
[   63.040333][ T5109] loop1: detected capacity change from 0 to 512
[   63.057740][ T5111] loop3: detected capacity change from 0 to 128
[   63.132949][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.7.355'.
[   63.133189][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.7.355'.
[   63.164145][   T29] kauditd_printk_skb: 49 callbacks suppressed
[   63.164161][   T29] audit: type=1400 audit(1791778971.811:3389): avc:  denied  { write } for  pid=5112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.208818][   T29] audit: type=1400 audit(1791778971.851:3390): avc:  denied  { write } for  pid=5125 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.268556][   T29] audit: type=1400 audit(1791778971.921:3391): avc:  denied  { read append } for  pid=5128 comm="syz.6.356" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.268664][   T29] audit: type=1400 audit(1791778971.921:3392): avc:  denied  { open } for  pid=5128 comm="syz.6.356" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.344424][   T29] audit: type=1400 audit(1791778971.991:3393): avc:  denied  { create } for  pid=5132 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.344596][ T5133] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   63.345982][   T29] audit: type=1400 audit(1791778971.991:3394): avc:  denied  { bind } for  pid=5132 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.469136][  T866] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   63.473311][ T5140] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   63.473311][ T5140] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   63.561834][   T29] audit: type=1400 audit(1791778972.171:3395): avc:  denied  { write } for  pid=5137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.561865][   T29] audit: type=1400 audit(1791778972.191:3396): avc:  denied  { write } for  pid=5154 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.575432][ T5144] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   63.575432][ T5144] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   63.714643][ T5161] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   63.871058][ T5169] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   63.871058][ T5169] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   64.122095][   T29] audit: type=1400 audit(1791778972.771:3397): avc:  denied  { write } for  pid=5163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.187228][   T29] audit: type=1400 audit(1791778972.831:3398): avc:  denied  { write } for  pid=5187 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.277743][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.368'.
[   64.277824][ T5201] xt_cgroup: path and classid specified
[   64.418822][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.368'.
[   64.494903][ T5221] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   64.494903][ T5221] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   64.674710][ T5204] syzkaller0: entered promiscuous mode
[   64.674816][ T5204] syzkaller0: entered allmulticast mode
[   64.765570][ T5236] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   64.765570][ T5236] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   64.798333][ T5232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.374'.
[   64.798635][ T5232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.374'.
[   64.966539][ T5253] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   65.300617][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.383'.
[   65.301145][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.383'.
[   65.323194][ T5269] loop3: detected capacity change from 0 to 512
[   65.364692][ T5269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.364808][ T5269] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.399917][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.486286][ T5278] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   65.486286][ T5278] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   65.670802][ T5291] loop1: detected capacity change from 0 to 512
[   65.993756][ T5313] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   65.993756][ T5313] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   66.065078][ T5314] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   66.164609][ T5318] loop6: detected capacity change from 0 to 512
[   66.397147][ T5318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.397214][ T5318] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.408512][ T5323] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   66.408512][ T5323] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   66.476043][ T4332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.521955][ T5328] loop3: detected capacity change from 0 to 512
[   66.535866][ T5328] vfat: Unknown parameter '���������'
[   66.587027][ T5332] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   66.587027][ T5332] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   66.645676][ T5333] loop6: detected capacity change from 0 to 512
[   66.842290][ T5346] netlink: 268 bytes leftover after parsing attributes in process `syz.2.407'.
[   66.842685][ T5346] netlink: zone id is out of range
[   66.842692][ T5346] netlink: zone id is out of range
[   66.842698][ T5346] netlink: zone id is out of range
[   66.842762][ T5346] netlink: zone id is out of range
[   66.842770][ T5346] netlink: zone id is out of range
[   66.842800][ T5346] netlink: zone id is out of range
[   66.842806][ T5346] netlink: zone id is out of range
[   66.842812][ T5346] netlink: zone id is out of range
[   66.842817][ T5346] netlink: zone id is out of range
[   67.027775][ T5355] loop3: detected capacity change from 0 to 512
[   67.054307][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.054468][ T5355] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.096332][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.260294][ T5373] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   67.260294][ T5373] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   67.320554][ T5376] loop6: detected capacity change from 0 to 512
[   67.440014][ T5380] xt_hashlimit: size too large, truncated to 1048576
[   67.602897][ T5379] xt_hashlimit: size too large, truncated to 1048576
[   67.619366][ T5384] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   67.619366][ T5384] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   67.817101][ T5396] FAULT_INJECTION: forcing a failure.
[   67.817101][ T5396] name failslab, interval 1, probability 0, space 0, times 0
[   67.817218][ T5396] CPU: 0 UID: 0 PID: 5396 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(lazy) 
[   67.817248][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.817261][ T5396] Call Trace:
[   67.817267][ T5396]  <TASK>
[   67.817309][ T5396]  __dump_stack+0x1d/0x30
[   67.817341][ T5396]  dump_stack_lvl+0x95/0xd0
[   67.817365][ T5396]  dump_stack+0x15/0x1b
[   67.817385][ T5396]  should_fail_ex+0x262/0x280
[   67.817490][ T5396]  ? __netlink_kernel_create+0x1d0/0x550
[   67.817514][ T5396]  should_failslab+0x8c/0xb0
[   67.817596][ T5396]  __kmalloc_noprof+0xd0/0x4d0
[   67.817629][ T5396]  ? __netlink_kernel_create+0x1d0/0x550
[   67.817654][ T5396]  __netlink_kernel_create+0x1d0/0x550
[   67.817712][ T5396]  ? ops_init+0x4b/0x2e0
[   67.817730][ T5396]  rtnetlink_net_init+0x4b/0xa0
[   67.817759][ T5396]  ? __pfx_rtnetlink_rcv+0x10/0x10
[   67.817788][ T5396]  ? __pfx_rtnetlink_bind+0x10/0x10
[   67.817881][ T5396]  ops_init+0x22a/0x2e0
[   67.817901][ T5396]  setup_net+0x9f/0x230
[   67.817938][ T5396]  copy_net_ns+0x333/0x490
[   67.818019][ T5396]  create_new_namespaces+0x1f6/0x420
[   67.818052][ T5396]  unshare_nsproxy_namespaces+0x115/0x150
[   67.818155][ T5396]  ksys_unshare+0x3fd/0x6f0
[   67.818241][ T5396]  __x64_sys_unshare+0x1f/0x30
[   67.818322][ T5396]  x64_sys_call+0x1e33/0x2550
[   67.818421][ T5396]  do_syscall_64+0x112/0x360
[   67.818450][ T5396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.818472][ T5396] RIP: 0033:0x7fee4474e1d9
[   67.818492][ T5396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.818543][ T5396] RSP: 002b:00007fee43186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   67.818567][ T5396] RAX: ffffffffffffffda RBX: 00007fee449d6090 RCX: 00007fee4474e1d9
[   67.818604][ T5396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   67.818620][ T5396] RBP: 00007fee447e5888 R08: 0000000000000000 R09: 0000000000000000
[   67.818635][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.818723][ T5396] R13: 00007fee449d6128 R14: 00007fee449d6090 R15: 00007ffc6c368e68
[   67.818745][ T5396]  </TASK>
[   67.894591][ T5398] __nla_validate_parse: 4 callbacks suppressed
[   67.894608][ T5398] netlink: 40 bytes leftover after parsing attributes in process `syz.7.424'.
[   68.020458][ T5405] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   68.672893][ T5419] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   68.672893][ T5419] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   68.786956][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   68.786972][   T29] audit: type=1400 audit(1791778977.431:3438): avc:  denied  { mount } for  pid=5420 comm="syz.2.430" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   68.795103][   T29] audit: type=1400 audit(1791778977.441:3439): avc:  denied  { search } for  pid=5420 comm="syz.2.430" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.795237][   T29] audit: type=1400 audit(1791778977.441:3440): avc:  denied  { search } for  pid=5420 comm="syz.2.430" name="usb_gadget" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.800200][ T5426] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   68.800200][ T5426] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   69.358219][   T29] audit: type=1400 audit(1791778978.001:3441): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   69.427578][ T5438] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   69.427578][ T5438] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   69.551434][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'.
[   69.578892][   T29] audit: type=1400 audit(1791778978.221:3442): avc:  denied  { ioctl } for  pid=5439 comm="syz.3.435" path="socket:[12682]" dev="sockfs" ino=12682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   69.658755][   T29] audit: type=1400 audit(1791778978.301:3443): avc:  denied  { mount } for  pid=5439 comm="syz.3.435" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   69.723864][ T5449] loop1: detected capacity change from 0 to 512
[   69.732507][   T29] audit: type=1400 audit(1791778978.371:3444): avc:  denied  { unmount } for  pid=4332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   69.786898][ T5454] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   69.878590][ T5458] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   69.878590][ T5458] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   69.967156][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'.
[   69.967175][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'.
[   70.042446][ T5460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'.
[   70.042605][ T5460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'.
[   70.143293][ T5462] loop6: detected capacity change from 0 to 512
[   70.160162][ T5462] EXT4-fs: Ignoring removed bh option
[   70.186399][ T5462] EXT4-fs: quotafile must be on filesystem root
[   70.256407][ T5476] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   70.256407][ T5476] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   70.316403][ T5474] loop2: detected capacity change from 0 to 512
[   70.359893][ T5474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.360044][ T5474] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.394358][   T29] audit: type=1400 audit(1791778979.041:3445): avc:  denied  { write } for  pid=5473 comm="syz.2.446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.395178][   T29] audit: type=1400 audit(1791778979.041:3446): avc:  denied  { write } for  pid=5473 comm="syz.2.446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.595825][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.803740][ T5492] loop3: detected capacity change from 0 to 512
[   70.879689][ T5492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.879821][ T5492] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   70.889917][ T5492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.450'.
[   70.925636][   T29] audit: type=1400 audit(1791778979.571:3447): avc:  denied  { watch } for  pid=5498 comm="syz.2.449" path="/84" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   70.952341][ T5501] loop6: detected capacity change from 0 to 512
[   70.980785][ T5501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.980850][ T5501] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.024444][ T5501] netlink: 40 bytes leftover after parsing attributes in process `syz.6.452'.
[   71.055647][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.090055][ T5507] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   71.090055][ T5507] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   71.161332][ T4332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.416524][ T5514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.456'.
[   71.416573][ T5514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.456'.
[   71.606525][ T5532] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   71.606525][ T5532] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   71.658132][ T5524] usb usb1: usbfs: process 5524 (syz.3.460) did not claim interface 0 before use
[   71.764555][ T5540] set_capacity_and_notify: 1 callbacks suppressed
[   71.764586][ T5540] loop2: detected capacity change from 0 to 512
[   71.768694][ T5540] vfat: Unknown parameter '���������'
[   71.786676][ T5541] netlink: 'syz.7.463': attribute type 10 has an invalid length.
[   71.858132][ T5545] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   71.858132][ T5545] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   71.873547][ T5546] loop3: detected capacity change from 0 to 2048
[   72.093980][ T5541] team0 (unregistering): Port device team_slave_0 removed
[   72.364352][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.582940][ T5558] loop6: detected capacity change from 0 to 512
[   72.619302][ T5558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.623665][ T5558] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.470: iget: bad i_size value: 38620345925642
[   72.623701][ T5558] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.624288][ T5558] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.470: couldn't read orphan inode 15 (err -117)
[   72.624322][ T5558] loop6: lost filesystem error report for type 5 error -117
[   72.625786][ T5558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.695715][ T5541] team0 (unregistering): Port device team_slave_1 removed
[   72.910836][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.016297][ T5575] __nla_validate_parse: 3 callbacks suppressed
[   73.016321][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'.
[   73.016452][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'.
[   73.182702][ T5567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.226928][  T324] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.278552][  T324] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.326324][ T5593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'.
[   73.340755][ T5593] netlink: 'syz.3.482': attribute type 10 has an invalid length.
[   73.342680][  T324] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.376002][ T5599] loop2: detected capacity change from 0 to 512
[   73.386857][ T5599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.386929][ T5599] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.565727][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.604777][ T5593] team0 (unregistering): Port device team_slave_0 removed
[   73.683418][ T5593] team0 (unregistering): Port device team_slave_1 removed
[   73.737050][  T324] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.778569][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'.
[   73.871381][  T324] bridge_slave_1: left allmulticast mode
[   73.871413][  T324] bridge_slave_1: left promiscuous mode
[   73.871506][  T324] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.891554][   T29] kauditd_printk_skb: 15 callbacks suppressed
[   73.891569][   T29] audit: type=1400 audit(1791778982.541:3463): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   73.928516][  T324] bridge_slave_0: left allmulticast mode
[   73.928535][  T324] bridge_slave_0: left promiscuous mode
[   73.928736][  T324] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.969306][ T5616] loop2: detected capacity change from 0 to 2048
[   74.050332][ T5616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.050985][  T324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.056584][  T324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.057686][  T324] bond0 (unregistering): Released all slaves
[   74.106035][  T324] hsr_slave_0: left promiscuous mode
[   74.106765][  T324] hsr_slave_1: left promiscuous mode
[   74.107740][  T324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.107752][  T324] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.108303][  T324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.108325][  T324] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.155854][  T324] veth1_macvtap: left promiscuous mode
[   74.171545][ T5621] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   74.257531][  T324] veth0_macvtap: left promiscuous mode
[   74.257676][  T324] veth1_vlan: left promiscuous mode
[   74.257728][  T324] veth0_vlan: left promiscuous mode
[   74.418000][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.576975][  T324] team0 (unregistering): Port device team_slave_1 removed
[   74.582691][  T324] team0 (unregistering): Port device team_slave_0 removed
[   74.689387][ T5630] loop2: detected capacity change from 0 to 512
[   74.691221][ T5630] vfat: Unknown parameter '���������'
[   75.133499][   T29] audit: type=1400 audit(1791778983.751:3464): avc:  denied  { read } for  pid=5635 comm="syz.3.490" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   75.133537][   T29] audit: type=1400 audit(1791778983.761:3465): avc:  denied  { ioctl } for  pid=5635 comm="syz.3.490" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   75.258836][   T29] audit: type=1400 audit(1791778983.901:3466): avc:  denied  { write } for  pid=5634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.264031][ T5654] loop5: detected capacity change from 0 to 7
[   75.327145][   T29] audit: type=1400 audit(1791778983.971:3467): avc:  denied  { write } for  pid=5662 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.371330][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.371364][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.371420][ T5585] bridge_slave_0: entered allmulticast mode
[   75.371961][ T5585] bridge_slave_0: entered promiscuous mode
[   75.373180][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.373271][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.373389][ T5585] bridge_slave_1: entered allmulticast mode
[   75.374059][ T5585] bridge_slave_1: entered promiscuous mode
[   75.436519][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13
[   75.438005][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.457044][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.466324][   T29] audit: type=1400 audit(1791778984.111:3468): avc:  denied  { create } for  pid=5670 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   75.469938][   T29] audit: type=1400 audit(1791778984.121:3469): avc:  denied  { write } for  pid=5670 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   75.515317][ T5585] team0: Port device team_slave_0 added
[   75.516045][ T5585] team0: Port device team_slave_1 added
[   75.528178][ T5660] loop2: detected capacity change from 0 to 512
[   75.548404][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.548418][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.548445][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.551195][ T5660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.551315][ T5660] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.554205][   T29] audit: type=1400 audit(1791778984.201:3470): avc:  denied  { write } for  pid=5659 comm="syz.2.493" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.582056][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.582071][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.582100][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.630624][ T5585] hsr_slave_0: entered promiscuous mode
[   75.632161][ T5585] hsr_slave_1: entered promiscuous mode
[   75.632442][ T5585] debugfs: 'hsr0' already exists in 'hsr'
[   75.632455][ T5585] Cannot create hsr debugfs directory
[   75.760767][ T5585] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   75.806615][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.832954][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.833502][ T5585] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   75.896837][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.899178][ T5585] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   75.917090][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.927762][ T5585] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   75.961196][ T5673] infiniband syz0: set active
[   75.961211][ T5673] infiniband syz0: added veth0_virt_wifi
[   75.961667][   T29] audit: type=1400 audit(1791778984.511:3471): avc:  denied  { write } for  pid=5683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.961767][   T29] audit: type=1400 audit(1791778984.531:3472): avc:  denied  { write } for  pid=5696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.966541][ T5701] usb usb1: usbfs: process 5701 (syz.7.499) did not claim interface 0 before use
[   76.046789][ T5704] loop1: detected capacity change from 0 to 164
[   76.122404][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.139580][ T5673] RDS/IB: syz0: added
[   76.139605][ T5673] smc: adding ib device syz0 with port count 1
[   76.139619][ T5673] smc:    ib device syz0 port 1 has no pnetid
[   76.184252][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15
[   76.201504][ T5710] loop2: detected capacity change from 0 to 2048
[   76.207406][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.207434][ T5585] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.207502][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.207526][ T5585] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.239439][ T5710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.259248][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.259949][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.298761][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.308161][ T5585] 8021q: adding VLAN 0 to HW filter on device team0
[   76.314878][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.314911][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.319596][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.319628][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.402445][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.600366][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16
[   76.650094][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.784020][ T5769] No source specified
[   77.342685][ T5779] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   77.674816][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14
[   77.754751][ T5796] usb usb1: usbfs: process 5796 (syz.2.509) did not claim interface 0 before use
[   77.776077][ T5585] veth0_vlan: entered promiscuous mode
[   77.778763][ T5585] veth1_vlan: entered promiscuous mode
[   77.785958][ T5784] loop1: detected capacity change from 0 to 512
[   77.794443][ T5800] loop2: detected capacity change from 0 to 2048
[   77.807712][ T5784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.808372][ T5784] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.998898][ T5804] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   78.073723][ T5810] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.102542][ T5800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.230074][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.262882][ T5585] veth0_macvtap: entered promiscuous mode
[   78.267435][ T5585] veth1_macvtap: entered promiscuous mode
[   78.290871][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.307090][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.349077][   T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.351133][   T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.351204][   T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.351270][   T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.395040][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.500519][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz.8.479'.
[   78.500960][ T5822] random: crng reseeded on system resumption
[   78.508842][ T5821] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   78.508842][ T5821] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   78.510283][ T5822] Restarting kernel threads ...
[   78.511932][ T5822] Done restarting kernel threads.
[   78.734481][ T5833] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   78.734481][ T5833] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   78.990633][ T5843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'.
[   79.348071][   T29] kauditd_printk_skb: 17 callbacks suppressed
[   79.348085][   T29] audit: type=1400 audit(1791778987.991:3490): avc:  denied  { relabelfrom } for  pid=5851 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   79.348218][   T29] audit: type=1400 audit(1791778987.991:3491): avc:  denied  { relabelto } for  pid=5851 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   79.351602][ T5852] sch_tbf: peakrate 3 is lower than or equals to rate 6 !
[   79.413965][ T5854] loop8: detected capacity change from 0 to 2048
[   79.431755][ T5854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.538798][   T29] audit: type=1400 audit(1791778988.181:3492): avc:  denied  { cpu } for  pid=5865 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   79.643027][ T5871] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   79.676503][ T5870] loop2: detected capacity change from 0 to 512
[   80.040267][ T5585] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.074055][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'.
[   80.074347][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'.
[   80.114776][ T5883] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   80.114776][ T5883] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   80.157441][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'.
[   80.164481][   T29] audit: type=1400 audit(1791778988.811:3493): avc:  denied  { listen } for  pid=5880 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.165229][   T29] audit: type=1400 audit(1791778988.811:3494): avc:  denied  { connect } for  pid=5880 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.165556][   T29] audit: type=1400 audit(1791778988.811:3495): avc:  denied  { shutdown } for  pid=5880 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.169389][   T29] audit: type=1400 audit(1791778988.821:3496): avc:  denied  { shutdown } for  pid=5880 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.343012][ T5899] loop2: detected capacity change from 0 to 512
[   81.392408][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.392524][ T5899] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.433064][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.492289][   T29] audit: type=1400 audit(1791778990.131:3497): avc:  denied  { bind } for  pid=5905 comm="syz.7.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   81.495194][ T5908] loop3: detected capacity change from 0 to 2048
[   81.522016][ T5911] FAULT_INJECTION: forcing a failure.
[   81.522016][ T5911] name failslab, interval 1, probability 0, space 0, times 0
[   81.522045][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.2.539 Not tainted syzkaller #0 PREEMPT(lazy) 
[   81.522085][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.522099][ T5911] Call Trace:
[   81.522109][ T5911]  <TASK>
[   81.522117][ T5911]  __dump_stack+0x1d/0x30
[   81.522169][ T5911]  dump_stack_lvl+0x95/0xd0
[   81.522209][ T5911]  dump_stack+0x15/0x1b
[   81.522231][ T5911]  should_fail_ex+0x262/0x280
[   81.522283][ T5911]  ? xprt_alloc+0x31/0x4a0
[   81.522302][ T5911]  should_failslab+0x8c/0xb0
[   81.522381][ T5911]  __kmalloc_noprof+0xd0/0x4d0
[   81.522425][ T5911]  ? xprt_alloc+0x31/0x4a0
[   81.522446][ T5911]  xprt_alloc+0x31/0x4a0
[   81.522470][ T5911]  xs_setup_xprt+0x68/0x250
[   81.522511][ T5911]  xs_setup_tcp+0x70/0x4b0
[   81.522540][ T5911]  xprt_create_transport+0xf7/0x340
[   81.522635][ T5911]  rpc_create+0x3c6/0x570
[   81.522678][ T5911]  nfs_create_rpc_client+0x4d4/0x590
[   81.522711][ T5911]  nfs4_alloc_client+0x4aa/0x6e0
[   81.522751][ T5911]  ? pcpu_block_update+0x24e/0x3b0
[   81.522843][ T5911]  ? pcpu_block_refresh_hint+0x157/0x170
[   81.522909][ T5911]  ? pcpu_block_update_hint_alloc+0x637/0x650
[   81.523016][ T5911]  nfs_get_client+0x829/0xb80
[   81.523045][ T5911]  ? nfs_alloc_server+0x27a/0x360
[   81.523109][ T5911]  ? timer_init_key+0x75/0x130
[   81.523145][ T5911]  nfs4_set_client+0x28a/0x320
[   81.523173][ T5911]  nfs4_create_server+0x373/0x960
[   81.523282][ T5911]  nfs4_try_get_tree+0x29/0xc0
[   81.523310][ T5911]  nfs_get_tree+0xb81/0xc60
[   81.523338][ T5911]  vfs_get_tree+0x57/0x1d0
[   81.523372][ T5911]  do_new_mount+0x288/0x730
[   81.523397][ T5911]  path_mount+0x4ad/0xb90
[   81.523433][ T5911]  __se_sys_mount+0x28c/0x2e0
[   81.523458][ T5911]  __x64_sys_mount+0x67/0x80
[   81.523481][ T5911]  x64_sys_call+0xc3b/0x2550
[   81.523571][ T5911]  do_syscall_64+0x112/0x360
[   81.523600][ T5911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.523691][ T5911] RIP: 0033:0x7feeea4ae1d9
[   81.523708][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.523728][ T5911] RSP: 002b:00007feee8f07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   81.523807][ T5911] RAX: ffffffffffffffda RBX: 00007feeea735fa0 RCX: 00007feeea4ae1d9
[   81.523822][ T5911] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080
[   81.523917][ T5911] RBP: 00007feeea545888 R08: 0000200000000140 R09: 0000000000000000
[   81.523932][ T5911] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000
[   81.523946][ T5911] R13: 00007feeea736038 R14: 00007feeea735fa0 R15: 00007ffca02653a8
[   81.523965][ T5911]  </TASK>
[   81.659881][ T5908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.675287][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[   81.787414][ T5923] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   81.909852][ T5929] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   81.909852][ T5929] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   82.164978][   T29] audit: type=1400 audit(1791778990.801:3498): avc:  denied  { write } for  pid=5931 comm="syz.1.547" path="socket:[14751]" dev="sockfs" ino=14751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   82.219545][ T5939] loop8: detected capacity change from 0 to 512
[   82.219860][ T5939] vfat: Unknown parameter '���������'
[   82.251893][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.302486][   T29] audit: type=1400 audit(1791778990.951:3499): avc:  denied  { read } for  pid=5943 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   82.302532][ T5938] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   82.302532][ T5938] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   82.598988][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.556'.
[   82.611902][ T5950] usb usb1: usbfs: process 5950 (syz.8.553) did not claim interface 0 before use
[   82.631536][ T5958] xt_SECMARK: invalid security context 'system_u:object_r:updpwd_exec_t:s0'
[   83.134833][ T5976] loop1: detected capacity change from 0 to 512
[   83.135196][ T5976] vfat: Unknown parameter '���������'
[   83.189893][ T5979] loop8: detected capacity change from 0 to 512
[   83.282649][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.8.563'.
[   83.324730][ T5984] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   83.324730][ T5984] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   83.536265][ T5993] usb usb1: usbfs: process 5993 (syz.8.569) did not claim interface 0 before use
[   83.553770][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'.
[   83.553881][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'.
[   83.616170][ T6000] Cannot find add_set index 2 as target
[   83.675145][ T6011] loop1: detected capacity change from 0 to 2048
[   83.693312][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.759955][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.828739][ T6032] loop8: detected capacity change from 0 to 512
[   83.895235][ T6036] usb usb1: usbfs: process 6036 (syz.1.582) did not claim interface 0 before use
[   83.902192][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.8.579'.
[   83.943531][ T6045] loop8: detected capacity change from 0 to 512
[   83.945222][ T6045] vfat: Unknown parameter '���������'
[   83.963939][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'.
[   83.993149][ T6047] loop1: detected capacity change from 0 to 512
[   83.993431][ T6047] vfat: Unknown parameter '���������'
[   84.033803][ T6049] SELinux: security_context_str_to_sid (}o�b��?3b��l��@G��;o����҃l(��$9�Ŗ���[����]���3Ҥ���Q,�E�,w�D2������б�{��	`�g�&��OQ���đ�_�
`.ۍ��1��v��ϧ�m�NN��)�O��-_��ڷ}���)[���o[V��
x�d��q��S!�j���
[   84.033803][ T6049] �ӅE��(�x� �R�-ޗ��J}.�����pu�3��) failed with errno=-22
[   84.124261][ T6052] loop1: detected capacity change from 0 to 2048
[   84.144232][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.267399][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.384769][ T6076] loop1: detected capacity change from 0 to 512
[   84.421347][ T6071] loop2: detected capacity change from 0 to 512
[   84.435200][ T6069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.595'.
[   84.457558][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.457682][ T6071] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.472129][   T29] kauditd_printk_skb: 2 callbacks suppressed
[   84.472142][   T29] audit: type=1400 audit(1791778993.111:3502): avc:  denied  { write } for  pid=6070 comm="syz.2.596" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.472164][   T29] audit: type=1400 audit(1791778993.111:3503): avc:  denied  { write } for  pid=6070 comm="syz.2.596" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.537323][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.583156][ T6089] loop2: detected capacity change from 0 to 512
[   84.617042][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.617159][ T6089] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.652022][ T6089] ipip0: entered allmulticast mode
[   84.674873][   T29] audit: type=1400 audit(1791778993.321:3504): avc:  denied  { write } for  pid=6087 comm="syz.2.601" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.676321][   T29] audit: type=1400 audit(1791778993.321:3505): avc:  denied  { append } for  pid=6087 comm="syz.2.601" path="/119/file1/blkio.bfq.idle_time" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   84.678922][ T6086] ==================================================================
[   84.678955][ T6086] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[   84.678992][ T6086] 
[   84.678995][ T6086] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 0:
[   84.679011][ T6086]  tick_do_update_jiffies64+0x113/0x1c0
[   84.679039][ T6086]  tick_nohz_handler+0x88/0x380
[   84.679065][ T6086]  __hrtimer_run_queues+0x1f8/0x510
[   84.679090][ T6086]  hrtimer_interrupt+0x27b/0x860
[   84.679114][ T6086]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[   84.679141][ T6086]  sysvec_apic_timer_interrupt+0x32/0x80
[   84.679177][ T6086]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   84.679198][ T6086] 
[   84.679202][ T6086] read to 0xffffffff86e07a00 of 8 bytes by task 6086 on cpu 1:
[   84.679217][ T6086]  mem_cgroup_flush_stats_ratelimited+0x29/0x50
[   84.679240][ T6086]  count_shadow_nodes+0x6a/0x250
[   84.679264][ T6086]  do_shrink_slab+0x61/0x650
[   84.679293][ T6086]  shrink_slab+0x53b/0x8e0
[   84.679322][ T6086]  shrink_node+0x6b8/0x2000
[   84.679350][ T6086]  do_try_to_free_pages+0x408/0xca0
[   84.679371][ T6086]  try_to_free_mem_cgroup_pages+0x201/0x420
[   84.679391][ T6086]  mem_cgroup_force_empty_write+0x77/0x100
[   84.679417][ T6086]  cgroup_file_write+0x197/0x350
[   84.679444][ T6086]  kernfs_fop_write_iter+0x1d2/0x2e0
[   84.679473][ T6086]  vfs_write+0x57f/0x9a0
[   84.679507][ T6086]  ksys_write+0xdc/0x1a0
[   84.679539][ T6086]  __x64_sys_write+0x40/0x50
[   84.679570][ T6086]  x64_sys_call+0x154e/0x2550
[   84.679600][ T6086]  do_syscall_64+0x112/0x360
[   84.679622][ T6086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.679651][ T6086] 
[   84.679655][ T6086] value changed: 0x00000000ffffabb1 -> 0x00000000ffffabb2
[   84.679668][ T6086] 
[   84.679671][ T6086] Reported by Kernel Concurrency Sanitizer on:
[   84.679682][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.1.600 Not tainted syzkaller #0 PREEMPT(lazy) 
[   84.679706][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   84.679718][ T6086] ==================================================================
[   84.696818][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'.
[   84.733922][   T29] audit: type=1400 audit(1791778993.371:3506): avc:  denied  { firmware_load } for  pid=6072 comm="syz.3.597" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   84.737727][ T6099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.601'.
[   84.738056][ T6099] unsupported nlmsg_type 40
[   84.740364][   T29] audit: type=1400 audit(1791778993.391:3507): avc:  denied  { write } for  pid=6087 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   85.047179][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.116882][ T6072] syz.3.597 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   85.116985][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(lazy) 
[   85.117016][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   85.117029][ T6072] Call Trace:
[   85.117036][ T6072]  <TASK>
[   85.117043][ T6072]  __dump_stack+0x1d/0x30
[   85.117116][ T6072]  dump_stack_lvl+0x95/0xd0
[   85.117202][ T6072]  dump_stack+0x15/0x1b
[   85.117250][ T6072]  dump_header+0x80/0x240
[   85.117277][ T6072]  oom_kill_process+0x294/0x420
[   85.117304][ T6072]  out_of_memory+0x981/0xbc0
[   85.117328][ T6072]  try_charge_memcg+0x6ba/0xae0
[   85.117523][ T6072]  charge_memcg+0x16f/0x220
[   85.117550][ T6072]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[   85.117636][ T6072]  swap_cache_alloc_folio+0x47b/0x610
[   85.117683][ T6072]  swap_cluster_readahead+0x2b7/0x460
[   85.117717][ T6072]  swapin_readahead+0xd8/0x8a0
[   85.117761][ T6072]  ? _raw_spin_unlock+0x9/0x30
[   85.117847][ T6072]  ? swap_put_entries_cluster+0x49c/0x4c0
[   85.117872][ T6072]  ? __entry_text_end+0x13098/0x1020f9
[   85.117900][ T6072]  ? __rcu_read_unlock+0x4e/0x70
[   85.117993][ T6072]  ? swap_cache_get_folio+0x1f7/0x200
[   85.118021][ T6072]  do_swap_page+0x2b7/0x1e40
[   85.118115][ T6072]  ? __css_rstat_updated+0xbb/0x280
[   85.118137][ T6072]  ? __rcu_read_lock+0x36/0x50
[   85.118195][ T6072]  ? pte_offset_map_rw_nolock+0x19e/0x200
[   85.118228][ T6072]  handle_mm_fault+0xb29/0x3bb0
[   85.118263][ T6072]  do_user_addr_fault+0x636/0x1060
[   85.118360][ T6072]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[   85.118381][ T6072]  ? trace_page_fault_user+0x1f/0xa0
[   85.118482][ T6072]  exc_page_fault+0x62/0xa0
[   85.118501][ T6072]  asm_exc_page_fault+0x26/0x30
[   85.118520][ T6072] RIP: 0033:0x7fee4461ba2c
[   85.118585][ T6072] Code: 8e 9c ee 00 e8 03 00 00 48 8d 1d 8f a5 3b 00 e8 da 32 13 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   85.118602][ T6072] RSP: 002b:00007ffc6c368fd0 EFLAGS: 00010202
[   85.118617][ T6072] RAX: 0000000000000000 RBX: 00007fee449d6090 RCX: 00005555664c6808
[   85.118632][ T6072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   85.118646][ T6072] RBP: 00007fee449d7da0 R08: 0000000000000000 R09: 0000000000000000
[   85.118722][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000014ca8
[   85.118737][ T6072] R13: 00007fee449d5fac R14: 0000000000014b31 R15: 00007fee449d5fa0
[   85.118908][ T6072]  </TASK>
[   85.126188][ T6072] memory: usage 307200kB, limit 307200kB, failcnt 199
[   85.126203][ T6072] memory+swap: usage 309048kB, limit 9007199254740988kB, failcnt 0
[   85.126218][ T6072] kmem: usage 299000kB, limit 9007199254740988kB, failcnt 0
[   85.126231][ T6072] Memory cgroup stats for /syz3:
[   85.126595][ T6072] cache 0
[   85.126604][ T6072] rss 8388608
[   85.126611][ T6072] shmem 0
[   85.126618][ T6072] mapped_file 0
[   85.126626][ T6072] dirty 0
[   85.126633][ T6072] writeback 0
[   85.126640][ T6072] workingset_refault_anon 1329
[   85.126654][ T6072] workingset_refault_file 670
[   85.126662][ T6072] swap 1892352
[   85.126670][ T6072] swapcached 7348224
[   85.126677][ T6072] pgpgin 50009
[   85.126684][ T6072] pgpgout 47959
[   85.126691][ T6072] pgfault 59698
[   85.126758][ T6072] pgmajfault 190
[   85.126765][ T6072] inactive_anon 4096
[   85.126773][ T6072] active_anon 4096
[   85.126780][ T6072] inactive_file 0
[   85.126788][ T6072] active_file 0
[   85.126795][ T6072] unevictable 8388608
[   85.126837][ T6072] hierarchical_memory_limit 314572800
[   85.126846][ T6072] hierarchical_memsw_limit 9223372036854771712
[   85.126878][ T6072] total_cache 0
[   85.126886][ T6072] total_rss 8388608
[   85.126893][ T6072] total_shmem 0
[   85.126901][ T6072] total_mapped_file 0
[   85.126908][ T6072] total_dirty 0
[   85.126929][ T6072] total_writeback 0
[   85.126937][ T6072] total_workingset_refault_anon 1329
[   85.126982][ T6072] total_workingset_refault_file 670
[   85.126991][ T6072] total_swap 1892352
[   85.126999][ T6072] total_swapcached 7348224
[   85.127007][ T6072] total_pgpgin 50009
[   85.127015][ T6072] total_pgpgout 47959
[   85.127023][ T6072] total_pgfault 59698
[   85.127030][ T6072] total_pgmajfault 190
[   85.127039][ T6072] total_inactive_anon 4096
[   85.127047][ T6072] total_active_anon 4096
[   85.127128][ T6072] total_inactive_file 0
[   85.127135][ T6072] total_active_file 0
[   85.127141][ T6072] total_unevictable 8388608
[   85.127150][ T6072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.597,pid=6072,uid=0
[   85.127224][ T6072] Memory cgroup out of memory: Killed process 6072 (syz.3.597) total-vm:94328kB, anon-rss:9436kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[   85.219552][ T6073] syz.3.597 (6073) used greatest stack depth: 9688 bytes left
[   85.231272][ T6094] syz.3.597 (6094) used greatest stack depth: 9096 bytes left
[   87.938187][   T29] audit: type=1400 audit(1791778996.581:3508): avc:  denied  { write } for  pid=6102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.962119][   T29] audit: type=1400 audit(1791778996.591:3509): avc:  denied  { write } for  pid=6113 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.083589][   T29] audit: type=1400 audit(1791778996.731:3510): avc:  denied  { write } for  pid=6116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.118363][   T29] audit: type=1400 audit(1791778996.761:3511): avc:  denied  { write } for  pid=6127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1