last executing test programs:

5.152426038s ago: executing program 1 (id=95):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x808, 0x518}, 0x200, 0xe7e, 0x4, 0x3, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x2}, {@loopback, 0x15, 0x1}}, 0x44)
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001002bbd7000ffdbdf25200100000000000000000000000000027f00000100000000000000000000000000000000000700000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000020000000c00080007000800010000000c4015010000000000010000"], 0x68}}, 0x4004040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001080004", @ANYRESOCT=r0, @ANYRESDEC=r4], 0x9c}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r5, 0x40044591, 0x0)

4.87665346s ago: executing program 1 (id=99):
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x2)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
gettid()
unshare(0x2040400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20)

4.806624476s ago: executing program 3 (id=100):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x99db2319038923ce)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100))
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, 0x0)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)={0x4000, 0x120, 0xa}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0xfffffffd, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)

4.713433647s ago: executing program 1 (id=101):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = geteuid()
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000290001002bbd7000fedbdf253300000064010102000000000000000000000000e000000200000000000000000000000007ff00034e2300000000b0a090000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="48000100626c616b6532732d3136302d67656e6572696300000000000000000000000000000000000000000000000000000000006baf9f145f2889d1e97f132037ca4a00000000000000000000000000000000000008001e0009000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x8, 0x85}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x4004550c, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x1a9}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r8, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1)
syz_mount_image$ext4(&(0x7f0000000f80)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x284801b, &(0x7f0000000100)={[], [{@smackfsroot}]}, 0x0, 0x523, &(0x7f0000001340)="$eJzs3d9rXFkdAPDvvZnZTdqsk1UfdMHdxV1Ji3aSbOxu8GGrID5ZUOp7jck0hEwyJZm0TSia4h8giKjgiz75IvgHCNI/QYSCfRcVRbTVBwvVKzNzJ6bpzDSl86NmPh84mXPuvTPf70m4N+fce5kbwNh6OyLORUSWZdn5iCjly9O8xEGrNLZ7+OD2SqMkkWVX/pZEki9rf9ar+evZ/G2TeftbydNxd/b2N5ar1cp23p6rbyaPs2z/wvrm8lplrbK1uLjw/tIHSxeX5vvSz5mI+PDLf/rh937+lQ9//bmbv7/6l3PfbnWw5Wg/+qnV9eLh76KhEBHbgwg2IoVmD1sujjgXAAB6a4z3PxoRn46I81GKieZo7gQmB50ZAAAA0C/Zpel4nLSu/wEAAACnUxoR05Gk5fx+3+lI03K5dQ/vx+NMWq3t1D+blQ7PF8xEMb22Xq3M5/cOzEQxabQX8nts2+33jrUXI+L1iPhBaarZLq/UqqsjPfMBAAAA4+Pssfn/P0ut+X9vXx1OcgAAAED/zIw6AQAAAGDgzP8BAADg9DP/BwAAgFPta5cvN0rWfv716o293Y3ajQurlZ2N8ubuykTUtq+X12q1teZ39m0+6/Oqtdr1z8fW7q25emWnPrezt391s7a7Vb+67omBAAAAMCqvv3X3fhIRB1+YSiMiS46sK0ZkE0c3Lgw/P2Bw0ufZ+I+DywMYvolRJwCMjCE9jK/iqBMARu5Zx4GuN+/8pv+5AAAAgzH7ybv3o3X9v1kaXsnXJaNMDBi4/Pp/Yl+H8eP6P4wv1/9gfBV7jQBMCuDUS0+wq7/49f8se66kAACAvptuliQt5/OA6UjTcjniteZjAYrJtfVqZT4iPhIRvysVX220F5rvTCI5vFMAAAAAAAAAAAAAAAAAAAAAAAAAAOgly5LIupjKnw7WbT0AAADw/yEi/XOSP/9rtvTu9PHzA68k/yo1XyPi5k+u/OjWcr2+vdBY/vfD5fUf58vfG/75CwAAAOBp7Xl6ex4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP308MHtlXYZZty/fikiZo7ETyKPX4jJ5utkFCPizD+SKBx5XxIRE32If3AnIj7Rqf9JI62YybM4Hj+NiKkRxz/bh/gwzu42jj9f7LT/pfF287W1/yXx5P5XyMuLeur4dyR++/g30eX491qnD0wP0zv0xr1fznWNfyfijULn4087ftIl/jsn7OM3v7G/321d9rOI2Y7/f5InYs0lhetzO3v7F9Y3l9cqa5WtxcWF95c+WLq4ND93bb1ayX92jPH9T/3qP736fyZistvxt1f/3z1h//9979aDj7WqxWOrivHTLDv3Tqf+P8qyrFm5dDx++3/fZ/I/d6M9264ftOpHvfmL3775Vpfcpu5ErHb5/T/j75+esPtx/uvf/cNJtwUABm9nb39juVqtbHestMYWvbcZciVe+HPa45aXojt9qsTLkUa3ylQMMehy9NqmPYgdQj7fyUMNse+Psq6rCs+7owEAAKfM/wb9o84EAAAAAAAAAAAAAAAAAAAAxtcwvljueMyD0XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCn/wYAAP//zWDFKw==")
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
syz_open_dev$hidraw(&(0x7f0000000340), 0x9, 0x440200)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50)

4.563008651s ago: executing program 3 (id=104):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8f, 0x0, 0x100000}, 0x20)

4.518406761s ago: executing program 3 (id=106):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0xc0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='cpu!=0||!')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000800020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
ioctl$FIONCLEX(r1, 0x5450)
r6 = socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00080000"], 0x1c)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
close(r6)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50)

4.407711366s ago: executing program 2 (id=108):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffd24)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7})
unshare(0xc040480)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.356242417s ago: executing program 4 (id=110):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x808, 0x518}, 0x200, 0xe7e, 0x4, 0x3, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x2}, {@loopback, 0x15, 0x1}}, 0x44)
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001002bbd7000ffdbdf25200100000000000000000000000000027f00000100000000000000000000000000000000000700000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000020000000c00080007000800010000000c4015010000000000010000"], 0x68}}, 0x4004040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001080004", @ANYRESOCT=r0, @ANYRESDEC=r4], 0x9c}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r5, 0x40044591, 0x0)

4.34554812s ago: executing program 0 (id=111):
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x2)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
unshare(0x2040400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20)

4.279731275s ago: executing program 4 (id=112):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x10ecc8, 0x1228, 0xfffffdff, 0x1, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8)
syncfs(0xffffffffffffffff)
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x541a, &(0x7f0000005480))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)

4.263103269s ago: executing program 0 (id=113):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000008)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r5 = dup(r4)
readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/30, 0x1e}], 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0x0, 0x0})
close(r6)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r7=>0x0, 0x0})
close(r7)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a00)={r4, &(0x7f0000000740)="663ab8f5809eca416a73a93580c4d616a6c0a089abbdb167e79e635c7dcc53f719cf4114578b950a051247d634128ae888d29af7da76941f2b158232245cfaccd43a36a7fb07c4db133b89d51b3030978967faea47ea420c477a42d406a6a8be4ab9cdc05b713e01057c91418ae53e47f8ece4bae1106e207deeeb717f6781c78eed2915dc5a60ea683dc9a5014654089b", &(0x7f0000000940)=""/136, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000056c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x3, 0x10001, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94)
ioctl$BLKGETDISKSEQ(r5, 0x80081280, &(0x7f00000003c0))

4.21233936s ago: executing program 2 (id=114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001500050000000000000000000a400000", @ANYRES32=0x1, @ANYBLOB="1400071320000005"], 0x34}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0xffffffffffffff43)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0xfffffffe, 0x40000000, 0x80023, 0x7})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xeffbfffd, 0x7, 0x1})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syncfs(r2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket(0x11, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xfffffff9}, {0x1c}, {0x6, 0x0, 0x0, 0x7ffffcb9}]})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
socket$kcm(0xa, 0x2, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x10000, 0x9)
openat(r4, &(0x7f0000000140)='./trace\x00', 0x302, 0x88)

4.131417828s ago: executing program 4 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x99db2319038923ce)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100))
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, 0x0)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x49813}}, 0x20}}, 0x0)
sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)={0x4000, 0x120, 0xa}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0xfffffffd, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)

4.102062495s ago: executing program 2 (id=116):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

4.055690045s ago: executing program 4 (id=117):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capget(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000040)={0x200, 0x7, 0x3d, 0x7, 0x9, 0xf})
mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8f, 0x0, 0x100000}, 0x20)

3.99229728s ago: executing program 2 (id=118):
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1b, 0x14, &(0x7f0000000cc0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xc, 0x4c032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x22020600)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r2}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x4, 0x3, [0x1, 0x1, 0x2]}, 0xe)
r3 = epoll_create1(0x80000)
vmsplice(r3, &(0x7f00000020c0)=[{0xfffffffffffffffe}], 0x1, 0x5)
r4 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x2000003)
futex(&(0x7f000000cffc)=0x2, 0x7, 0x0, 0x0, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000040)='smaps\x00')
socket(0x1a, 0x5, 0xfffffff7)
setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="080000f0ff0000000a00000000000000ff"], 0x5000)
pread64(r10, &(0x7f0000001240)=""/102384, 0x18ff0, 0xffffffff8)

3.94540463s ago: executing program 4 (id=119):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a00)=@newqdisc={0x14c, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xb, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x1ab, 0xfff, 0x1, 0xf, 0x9, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000140}, 0x8840)
r4 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r4, 0x0, 0x8000, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x25, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x31, 0x100000000}}, 0x1)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x57)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0)
mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
r7 = mq_open(&(0x7f00000001c0)='&\xaf\x12}N\xf3oW\'\x00', 0x1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r8 = io_uring_setup(0x21e3, &(0x7f0000000280)={0x0, 0xc726, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@deltfilter={0x4cc, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x0, 0xfff0}, {0xe, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x47c, 0x2, [@TCA_BASIC_POLICE={0x470, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x8, 0xffffff4e, 0x5, 0x7ff, 0x7ff, 0x3, 0xa, 0x0, 0x0, 0x7, 0x4, 0x80000001, 0x2, 0x6, 0x7, 0x9, 0x3, 0xfffffdd0, 0x1ff, 0x0, 0x7, 0x7fffffff, 0x5, 0x4, 0x4, 0x1ff, 0x200, 0x9, 0xfffffffb, 0x1, 0x7fff, 0x0, 0x7, 0xed32, 0x10001, 0x1ff, 0x100, 0xa9, 0x81, 0xe23, 0x591, 0x0, 0x2, 0xd, 0x0, 0x1000, 0x200, 0x4, 0x2d16, 0x40, 0x6, 0x6, 0x6, 0x7f0, 0x7f, 0x2000, 0x100, 0x2, 0xffffffff, 0x10, 0xff, 0x9, 0xaa7, 0x0, 0x2, 0x0, 0x6, 0x3d18, 0x6, 0x8, 0x8, 0x80, 0x9, 0x40, 0x1, 0x8001, 0x4, 0xff0, 0xffff, 0x6, 0x2, 0x6, 0x800, 0x5, 0x7, 0x40, 0x8, 0x4, 0x6, 0x4, 0x7, 0x7a000000, 0x80000000, 0x6, 0x8001, 0x1, 0x8, 0x2, 0x80000001, 0x5, 0x7ff, 0x4, 0x7, 0xfffffffc, 0xb2, 0xc1, 0x100, 0x9, 0x7, 0x62, 0x2, 0x100, 0x7fffffff, 0x6, 0x5, 0x80000001, 0xebd9, 0xa8d, 0xe, 0x6, 0x9, 0x6, 0x6, 0x200, 0xfffffffd, 0x4, 0x9, 0x1000, 0x7, 0x400, 0x2007, 0x6, 0x45ff, 0x1, 0x5, 0x2, 0x3, 0x6d, 0xffffffff, 0xfffffff7, 0x7, 0x1000, 0xffff3c55, 0x100, 0xca7, 0x10, 0x7, 0x8000, 0x5c, 0x1, 0x1005, 0x1000, 0x7, 0x0, 0xd5, 0x5c67, 0x3, 0x3, 0x0, 0xa0e, 0xfffffffc, 0x8, 0x18d0dd7c, 0x9b, 0x3, 0x9, 0x66, 0x3, 0x1, 0xffffffff, 0x2, 0xffffffff, 0x7, 0x2, 0x10000, 0x9c4, 0x6, 0x5, 0xd, 0x10000, 0x6, 0x3, 0x200, 0xa, 0xfffffffc, 0x5, 0x6, 0xfffeffff, 0x5, 0x7ff, 0x4, 0x8, 0x8, 0x4, 0x10, 0x8c, 0x80000000, 0x3, 0x7, 0x7eac, 0x691, 0x1, 0x9, 0x0, 0x4, 0x8, 0x6, 0xddb, 0xf708, 0x5, 0x8, 0x3, 0x3, 0x5, 0x4, 0x9, 0x2, 0x7c, 0x80, 0x5, 0x7, 0x12, 0xfffffff8, 0x4606, 0x5, 0xff, 0x887f, 0xd, 0x1, 0x6, 0x900, 0xf8, 0x4, 0x1, 0xfff, 0x5, 0xa4, 0x2, 0xfffffffb, 0x1, 0x1, 0x10001, 0x8, 0x80000001, 0xf, 0x7cb9, 0x1ff, 0x4, 0x2, 0xfffff740, 0x5, 0x62d, 0x7fff, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x0, 0x80, 0x0, {0xa6, 0x0, 0xc, 0xfc01, 0x100, 0x358e}, {0xa5, 0x2, 0xb, 0x1920, 0x401, 0x3}, 0x2, 0x8, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x8, 0xc4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x4cc}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0xa19, 0x0)

3.837344724s ago: executing program 2 (id=120):
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_pidfd_open(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x528, &(0x7f0000000780)="$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")
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4000001)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
clock_adjtime(0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000007c000000160a0101000b000000000000010000000900010073797a3000000000040003800900020073797a31000000000900020073797a3000000000400003800800014000000000"], 0x104}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x40, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xfac, "0000001000", @long="322e981dd4e9e4dccdb2eceabeb57be8"}}, @gcr_ga={0xbd, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890)
r5 = epoll_create(0x3eb2)
lseek(r5, 0x4, 0x3)

3.568927875s ago: executing program 3 (id=121):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00')
getdents64(r0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x7ffffffe, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x7ff}, 0x28)

3.488676253s ago: executing program 1 (id=122):
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x800000000000, 0x0, 0x1, 0x0, 0x64c, 0xbb}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
syz_open_dev$sg(0x0, 0x0, 0x8002)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x6, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x2000000}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00000002100010000000000feffffffa8d8000000e2eb53d4e6e725c29c0000008896af8b0000000000000000fe80000000802680d036bd915100000000000000001f00aa4e210028fd5b780f9324e6b8ea0c48b225f0f22313a7ba44accb88cc37175993ab1885da162c56fa6d785284f1e1f6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe80000000000000000000000000003ae000000200000000000000000000000000000000000000000000ffffac141443fe8000000000000000000000000000bb3c0000000000035002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = socket(0x8, 0x3, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000180)=0x1, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
unshare(0x6020400)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108592d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b0000000000400000020000000000000000000000f8f0755e00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={0x0, 0x0, 0x56, 0x0, 0x3}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c0003801400010077673000000000000000000000000000140001"], 0xc8}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="00090000031401002dbd7000fcdbdf250900020073797a310000000008004100736977001400330076657468315f746f5f626174616476000900020073797a3100000000080041007278650014003300776731000000000000000000000000000900020073797a310000000008004100736977001400330069705f767469300000000000000000000900020073797a30000000000800410072786500140033006e6574706369300000000000000000000900020003797a300000000008004100736977001400330076657468315f766972745f77696669000900020073797a320000000008004100736977001400330077673100"/256], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={<r7=>0x0, 0x7}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x0, 0x4, 0x9, r7}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68)

3.432240396s ago: executing program 3 (id=123):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs={0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchdir(r2)
mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2000006, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2d8, &(0x7f00000004c0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101040, 0x0)
pwrite64(r6, &(0x7f0000000300), 0x0, 0x8080c60)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$kcm(r5, &(0x7f0000000bc0)={&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/226, 0xe2}, {&(0x7f0000000900)=""/214, 0xd6}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)=""/44, 0x2c}], 0x7, &(0x7f0000000b00)=""/149, 0x95}, 0x40000040)
ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e22, @private=0x7f000003}})

3.01215928s ago: executing program 4 (id=124):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x5)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="cd", 0x1}, {0x0}], 0x2, 0x4, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
dup(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0))
creat(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2.278357596s ago: executing program 1 (id=125):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f79bbe3719f9fbe1eba9aaf08544c96236415f38b4a104b6322407000000b15d9252a1231a02f44cc97389614eed6040ce1521e3bd39de8c57a558e91f"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000000)=0x1, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)

2.244500044s ago: executing program 0 (id=126):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.228857688s ago: executing program 2 (id=127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0xcc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2b11700f, 0xffffffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x8}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x4}}]}}}]}, 0xcc}}, 0x0)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d62753a6f626a58fc12f787812fa766e002dcbac1ec6563723a707463686f776e5f657835d2cbeb4e587ae673797374656d5f753a6f626a6563745ffb117cf26d616e617ed44ca9fbb53cdb5f6c6f636b5f743a7330203030303030303030303030303030303030303032202f7573"], 0x73)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000))

1.216297505s ago: executing program 3 (id=128):
socket$can_j1939(0x1d, 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffe73}, 0x28)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
unshare(0x8000400)
socket$inet_smc(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffb1315ec0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x114107, 0x4, 0x9, 0x1, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x400000000000000, 0x5}, 0x114245, 0x0, 0xafea, 0x2, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = getpgrp(0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0xff, 0x0, 0xb, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x302d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, r4, 0xd, r3, 0x0)
syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd00000000000000004305", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

984.796088ms ago: executing program 0 (id=129):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x40000, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1000, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x4, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xfa, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x6f, '\x00', r2}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'gre0\x00', 0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x400c841)
msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x1008, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0)
socket$inet(0x2, 0x5, 0x84)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$netlink(0x10, 0x3, 0x7)
setns(0xc9, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "00000000000000000000000000000001"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "00000001"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xfc}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket(0xa, 0x5, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x401, 0x0)

88.72082ms ago: executing program 0 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x99db2319038923ce)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100))
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, 0x0)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x49813}}, 0x20}}, 0x0)
sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)={0x4000, 0x120, 0xa}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0xfffffffd, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)

42.17357ms ago: executing program 1 (id=131):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x10ecc8, 0x1228, 0xfffffdff, 0x1, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8)
syncfs(0xffffffffffffffff)
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x541a, &(0x7f0000005480))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)

0s ago: executing program 0 (id=132):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0xc0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='cpu!=0||!')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000800020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
ioctl$FIONCLEX(r1, 0x5450)
r6 = socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00080000"], 0x1c)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
close(r6)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts.
[   28.245246][   T29] kauditd_printk_skb: 16 callbacks suppressed
[   28.245263][   T29] audit: type=1400 audit(1790463893.589:126): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.245517][   T29] audit: type=1400 audit(1790463893.589:127): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.245991][ T3286] cgroup: Unknown subsys name 'net'
[   28.246208][   T29] audit: type=1400 audit(1790463893.589:128): avc:  denied  { unmount } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.385576][ T3286] cgroup: Unknown subsys name 'cpuset'
[   28.386196][ T3286] cgroup: Unknown subsys name 'rlimit'
[   28.520889][   T29] audit: type=1400 audit(1790463893.859:129): avc:  denied  { setattr } for  pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.521639][   T29] audit: type=1400 audit(1790463893.859:130): avc:  denied  { create } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.521788][   T29] audit: type=1400 audit(1790463893.859:131): avc:  denied  { write } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.522043][   T29] audit: type=1400 audit(1790463893.859:132): avc:  denied  { read } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.539510][   T29] audit: type=1400 audit(1790463893.879:133): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.539566][   T29] audit: type=1400 audit(1790463893.879:134): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.549507][   T29] audit: type=1400 audit(1790463893.889:135): avc:  denied  { read } for  pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   28.580988][ T3291] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.697852][ T3286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.099900][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.099933][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.100035][ T3298] bridge_slave_0: entered allmulticast mode
[   30.100465][ T3298] bridge_slave_0: entered promiscuous mode
[   30.101048][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.101084][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.101202][ T3297] bridge_slave_0: entered allmulticast mode
[   30.101647][ T3297] bridge_slave_0: entered promiscuous mode
[   30.105200][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.105346][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.105400][ T3297] bridge_slave_1: entered allmulticast mode
[   30.106033][ T3297] bridge_slave_1: entered promiscuous mode
[   30.137266][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.138409][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.165356][ T3297] team0: Port device team_slave_0 added
[   30.178003][ T3297] team0: Port device team_slave_1 added
[   30.182061][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.182093][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.182146][ T3298] bridge_slave_1: entered allmulticast mode
[   30.182727][ T3298] bridge_slave_1: entered promiscuous mode
[   30.220162][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.220177][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.220245][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.226717][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.226749][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.226822][ T3303] bridge_slave_0: entered allmulticast mode
[   30.227329][ T3303] bridge_slave_0: entered promiscuous mode
[   30.233297][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.233311][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.233338][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.236608][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.236647][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.236735][ T3306] bridge_slave_0: entered allmulticast mode
[   30.237846][ T3306] bridge_slave_0: entered promiscuous mode
[   30.238471][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.238496][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.238639][ T3306] bridge_slave_1: entered allmulticast mode
[   30.239041][ T3306] bridge_slave_1: entered promiscuous mode
[   30.240144][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.240172][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.240227][ T3303] bridge_slave_1: entered allmulticast mode
[   30.240755][ T3303] bridge_slave_1: entered promiscuous mode
[   30.259146][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.266525][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.277338][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.288039][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.289192][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.291311][ T3297] hsr_slave_0: entered promiscuous mode
[   30.291781][ T3297] hsr_slave_1: entered promiscuous mode
[   30.306968][ T3298] team0: Port device team_slave_0 added
[   30.308048][ T3298] team0: Port device team_slave_1 added
[   30.331358][ T3303] team0: Port device team_slave_0 added
[   30.332187][ T3303] team0: Port device team_slave_1 added
[   30.342195][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.342210][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.342277][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.345771][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.345784][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.345820][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.356055][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.356069][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.356139][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.356649][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.356739][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.356765][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.388225][ T3298] hsr_slave_0: entered promiscuous mode
[   30.388587][ T3298] hsr_slave_1: entered promiscuous mode
[   30.388814][ T3298] debugfs: 'hsr0' already exists in 'hsr'
[   30.388827][ T3298] Cannot create hsr debugfs directory
[   30.421303][ T3303] hsr_slave_0: entered promiscuous mode
[   30.421699][ T3303] hsr_slave_1: entered promiscuous mode
[   30.421873][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   30.421886][ T3303] Cannot create hsr debugfs directory
[   30.428822][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.428853][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.428975][ T3304] bridge_slave_0: entered allmulticast mode
[   30.429427][ T3304] bridge_slave_0: entered promiscuous mode
[   30.455231][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.455264][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.455315][ T3304] bridge_slave_1: entered allmulticast mode
[   30.455771][ T3304] bridge_slave_1: entered promiscuous mode
[   30.488621][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.500301][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.501418][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.512881][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.517383][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.531824][ T3304] team0: Port device team_slave_0 added
[   30.534774][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.543706][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.544418][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.554097][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.555318][ T3306] team0: Port device team_slave_0 added
[   30.556472][ T3306] team0: Port device team_slave_1 added
[   30.557104][ T3304] team0: Port device team_slave_1 added
[   30.572318][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.586994][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.600094][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.600108][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.600137][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.608125][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.608140][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.608168][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.613293][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.613307][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.613406][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.616682][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.616695][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.616799][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.680389][ T3304] hsr_slave_0: entered promiscuous mode
[   30.680887][ T3304] hsr_slave_1: entered promiscuous mode
[   30.681244][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   30.681257][ T3304] Cannot create hsr debugfs directory
[   30.692515][ T3306] hsr_slave_0: entered promiscuous mode
[   30.692880][ T3306] hsr_slave_1: entered promiscuous mode
[   30.693198][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   30.693211][ T3306] Cannot create hsr debugfs directory
[   30.694153][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.694216][ T3297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.694322][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.694353][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.741810][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.751217][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.773982][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.776723][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.777333][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.782849][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.801627][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.810834][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.816967][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.825575][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.835485][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.837503][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.851092][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.858758][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.871178][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.876672][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.878067][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.939661][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.965583][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.260378][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   31.276834][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.276868][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.278196][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.278225][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.324176][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.326180][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.336024][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.339132][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.341703][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.367687][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.369703][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.370232][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.372486][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.374257][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.384381][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.387848][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.393335][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.432293][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.440499][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.446149][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.446749][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.450866][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.473327][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   31.484756][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.484785][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.492118][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.492150][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.501982][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.521852][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   31.547591][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.547628][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.559628][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.559662][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.596210][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.606888][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.623360][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.623392][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.653330][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.653364][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.680661][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.690632][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.701691][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   31.718518][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.718556][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.719672][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.719784][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.899922][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.914845][ T3297] veth0_vlan: entered promiscuous mode
[   31.923484][ T3297] veth1_vlan: entered promiscuous mode
[   31.955478][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.957163][ T3297] veth0_macvtap: entered promiscuous mode
[   31.962406][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.964509][ T3297] veth1_macvtap: entered promiscuous mode
[   31.982421][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.985354][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.009788][   T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.009838][   T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.009954][   T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.009987][   T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.063172][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.098628][ T3298] veth0_vlan: entered promiscuous mode
[   32.112267][ T3298] veth1_vlan: entered promiscuous mode
[   32.133426][ T3298] veth0_macvtap: entered promiscuous mode
[   32.138289][ T3298] veth1_macvtap: entered promiscuous mode
[   32.151119][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.159875][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.177713][ T3297] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.206081][   T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.230192][ T3304] veth0_vlan: entered promiscuous mode
[   32.235147][ T3497] loop2: detected capacity change from 0 to 1024
[   32.245388][   T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.245557][   T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.245706][   T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.259529][ T3304] veth1_vlan: entered promiscuous mode
[   32.271213][ T3306] veth0_vlan: entered promiscuous mode
[   32.281780][ T3306] veth1_vlan: entered promiscuous mode
[   32.283940][ T3304] veth0_macvtap: entered promiscuous mode
[   32.293063][ T3304] veth1_macvtap: entered promiscuous mode
[   32.310534][ T3497] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   32.311326][ T3497] JBD2: no valid journal superblock found
[   32.311338][ T3497] EXT4-fs (loop2): Could not load journal inode
[   32.338163][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.348433][ T3306] veth0_macvtap: entered promiscuous mode
[   32.351369][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.363652][ T3306] veth1_macvtap: entered promiscuous mode
[   32.388031][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.406034][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.517577][   T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.517620][   T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.518293][ T3505] loop2: detected capacity change from 0 to 512
[   32.518487][ T3505] ext2: Unknown parameter 'posixacl'
[   32.521041][ T3303] veth0_vlan: entered promiscuous mode
[   32.525196][ T3434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.526357][ T3434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.531060][ T3303] veth1_vlan: entered promiscuous mode
[   32.545194][   T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.545522][   T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.571599][ T3303] veth0_macvtap: entered promiscuous mode
[   32.575881][   T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.580267][ T3303] veth1_macvtap: entered promiscuous mode
[   32.601837][ T3513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   32.605056][   T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.609026][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.641193][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.699089][ T3434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.699216][ T3434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.699500][ T3434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.735647][ T3434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.923660][ T3523] loop0: detected capacity change from 0 to 512
[   32.926793][ T3523] EXT4-fs: Ignoring removed nomblk_io_submit option
[   32.970814][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.970875][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.996643][ T3523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.998272][ T3523] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.013140][ T3520] syz.4.5 (3520) used greatest stack depth: 10784 bytes left
[   33.058668][ T3532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8'.
[   33.241918][ T3538] geneve2: entered promiscuous mode
[   33.358541][   T29] kauditd_printk_skb: 71 callbacks suppressed
[   33.358555][   T29] audit: type=1400 audit(1790463898.689:207): avc:  denied  { allowed } for  pid=3539 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   33.358575][   T29] audit: type=1326 audit(1790463898.699:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.2.9" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821b56e159 code=0x7ffc0000
[   33.358630][   T29] audit: type=1326 audit(1790463898.699:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.2.9" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f821b56e159 code=0x7ffc0000
[   33.358657][   T29] audit: type=1326 audit(1790463898.699:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.2.9" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821b56e159 code=0x7ffc0000
[   33.415556][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.445696][ T3532] syz.4.8 (3532) used greatest stack depth: 10176 bytes left
[   33.482671][   T29] audit: type=1400 audit(1790463898.819:211): avc:  denied  { read append } for  pid=3543 comm="syz.4.11" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.482701][   T29] audit: type=1400 audit(1790463898.819:212): avc:  denied  { open } for  pid=3543 comm="syz.4.11" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.542486][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   33.562739][   T29] audit: type=1400 audit(1790463898.899:213): avc:  denied  { create } for  pid=3545 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.562767][   T29] audit: type=1400 audit(1790463898.899:214): avc:  denied  { bind } for  pid=3545 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.598073][   T29] audit: type=1400 audit(1790463898.939:215): avc:  denied  { read } for  pid=3545 comm="syz.0.10" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   33.600210][   T29] audit: type=1400 audit(1790463898.939:216): avc:  denied  { open } for  pid=3545 comm="syz.0.10" path="/2/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   33.710397][ T3544] loop4: detected capacity change from 0 to 764
[   33.727441][ T3544] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   33.873583][   T51] IPVS: starting estimator thread 0...
[   33.889399][   T51] IPVS: starting estimator thread 0...
[   33.965266][ T3565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[   34.005110][ T3566] IPVS: using max 2352 ests per chain, 117600 per kthread
[   34.039634][ T3560] IPVS: using max 2544 ests per chain, 127200 per kthread
[   34.101205][ T3574] loop2: detected capacity change from 0 to 1024
[   34.119749][ T3574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   34.121773][ T3574] JBD2: no valid journal superblock found
[   34.121785][ T3574] EXT4-fs (loop2): Could not load journal inode
[   34.192693][ T3575] loop3: detected capacity change from 0 to 128
[   35.679496][ T3572] loop0: detected capacity change from 0 to 128
[   35.703804][ T3572] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.704910][ T3572] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   35.827523][ T3583] loop2: detected capacity change from 0 to 512
[   35.827906][ T3583] ext2: Unknown parameter 'posixacl'
[   36.162411][ T3572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=172 sclass=netlink_route_socket pid=3572 comm=syz.0.22
[   36.178669][ T3588] loop3: detected capacity change from 0 to 1024
[   36.212969][ T3588] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   36.213978][ T3588] JBD2: no valid journal superblock found
[   36.213987][ T3588] EXT4-fs (loop3): Could not load journal inode
[   36.336508][ T3591] loop4: detected capacity change from 0 to 1024
[   36.392421][ T3591] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   36.393778][ T3591] JBD2: no valid journal superblock found
[   36.393800][ T3591] EXT4-fs (loop4): Could not load journal inode
[   36.498859][ T3595] ext2: Unknown parameter 'posixacl'
[   36.561025][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.617882][ T3597] netlink: 80 bytes leftover after parsing attributes in process `syz.2.28'.
[   36.653682][ T3599] EXT4-fs: Ignoring removed nomblk_io_submit option
[   36.666594][ T3600] ext2: Unknown parameter 'posixacl'
[   37.099459][ T3599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.100885][ T3599] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.210800][ T3608] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   37.214636][ T3608] JBD2: no valid journal superblock found
[   37.214650][ T3608] EXT4-fs (loop1): Could not load journal inode
[   37.506390][ T3615] set_capacity_and_notify: 4 callbacks suppressed
[   37.506681][ T3615] loop1: detected capacity change from 0 to 512
[   37.507340][ T3615] ext2: Unknown parameter 'posixacl'
[   38.039784][ T3625] netlink: 80 bytes leftover after parsing attributes in process `syz.3.32'.
[   38.059830][ T3626] loop1: detected capacity change from 0 to 512
[   38.072627][ T3626] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.096928][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.097078][ T3626] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.243316][ T3631] loop4: detected capacity change from 0 to 128
[   38.400524][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   38.400540][   T29] audit: type=1400 audit(1790463903.739:267): avc:  denied  { write } for  pid=3624 comm="syz.1.34" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.947687][ T3639] loop3: detected capacity change from 0 to 1024
[   38.968345][ T3639] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   38.968884][ T3639] JBD2: no valid journal superblock found
[   38.968894][ T3639] EXT4-fs (loop3): Could not load journal inode
[   39.634194][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.786427][   T29] audit: type=1400 audit(1790463905.129:268): avc:  denied  { name_bind } for  pid=3646 comm="syz.1.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   39.827089][ T3649] loop1: detected capacity change from 0 to 1024
[   39.827900][ T3649] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   39.830246][ T3649] JBD2: no valid journal superblock found
[   39.830268][ T3649] EXT4-fs (loop1): Could not load journal inode
[   39.843131][   T29] audit: type=1400 audit(1790463905.179:269): avc:  denied  { write } for  pid=3644 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.916833][   T29] audit: type=1400 audit(1790463905.259:270): avc:  denied  { create } for  pid=3644 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   39.919208][   T29] audit: type=1400 audit(1790463905.259:271): avc:  denied  { bind } for  pid=3644 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   39.919478][   T29] audit: type=1400 audit(1790463905.259:272): avc:  denied  { write } for  pid=3644 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   40.051882][ T3654] loop3: detected capacity change from 0 to 512
[   40.073449][ T3654] ext2: Unknown parameter 'posixacl'
[   40.117234][ T3655] netlink: 80 bytes leftover after parsing attributes in process `syz.2.38'.
[   40.502422][   T29] audit: type=1400 audit(1790463905.839:273): avc:  denied  { setopt } for  pid=3661 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   40.506061][   T29] audit: type=1400 audit(1790463905.849:274): avc:  denied  { map } for  pid=3663 comm="syz.3.41" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   40.507631][   T29] audit: type=1400 audit(1790463905.849:275): avc:  denied  { read write } for  pid=3663 comm="syz.3.41" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   40.548111][   T29] audit: type=1400 audit(1790463905.889:276): avc:  denied  { wake_alarm } for  pid=3663 comm="syz.3.41" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   40.637825][ T3667] Zero length message leads to an empty skb
[   40.696314][ T3673] loop4: detected capacity change from 0 to 1024
[   40.704272][ T3673] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   40.705166][ T3673] JBD2: no valid journal superblock found
[   40.705179][ T3673] EXT4-fs (loop4): Could not load journal inode
[   40.908486][ T3681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.47'.
[   40.969386][ T3686] loop4: detected capacity change from 0 to 512
[   40.969848][ T3686] ext2: Unknown parameter 'posixacl'
[   41.614996][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   41.615021][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   41.653538][ T3694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.51'.
[   41.826934][ T3694] geneve2: entered promiscuous mode
[   41.882799][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'.
[   42.071451][ T3685] syz.2.48 (3685) used greatest stack depth: 9800 bytes left
[   42.203430][ T3704] loop1: detected capacity change from 0 to 764
[   42.228996][ T3716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'.
[   42.238747][ T3704] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   42.351094][ T3720] loop3: detected capacity change from 0 to 1024
[   42.372200][ T3720] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   42.372895][ T3720] JBD2: no valid journal superblock found
[   42.372906][ T3720] EXT4-fs (loop3): Could not load journal inode
[   42.400882][   T51] IPVS: starting estimator thread 0...
[   42.544985][ T3722] IPVS: using max 2016 ests per chain, 100800 per kthread
[   42.600481][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.637272][ T3728] loop3: detected capacity change from 0 to 512
[   42.637815][ T3728] ext2: Unknown parameter 'posixacl'
[   43.083422][ T3733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.64'.
[   43.100186][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'.
[   43.206578][ T3747] geneve2: entered promiscuous mode
[   43.319424][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'.
[   43.319447][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'.
[   43.389566][ T3753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'.
[   43.593170][ T3750] loop3: detected capacity change from 0 to 764
[   43.615819][ T3750] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   43.717819][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   43.717833][   T29] audit: type=1326 audit(1790463909.059:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.77" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033dcfe159 code=0x7ffc0000
[   43.719146][   T29] audit: type=1326 audit(1790463909.059:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.77" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f033dcfe159 code=0x7ffc0000
[   43.719487][   T29] audit: type=1326 audit(1790463909.059:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.77" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033dcfe159 code=0x7ffc0000
[   43.813451][ T3779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   44.069810][ T3786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.86'.
[   44.295647][   T29] audit: type=1400 audit(1790463909.639:298): avc:  denied  { bind } for  pid=3801 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   44.332269][ T3800] loop4: detected capacity change from 0 to 128
[   44.394944][   T29] audit: type=1400 audit(1790463909.729:299): avc:  denied  { write } for  pid=3805 comm="syz.1.95" name="event2" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   44.397627][   T29] audit: type=1400 audit(1790463909.739:300): avc:  denied  { ioctl } for  pid=3805 comm="syz.1.95" path="/dev/input/event2" dev="devtmpfs" ino=250 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   44.802156][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   44.850244][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'.
[   45.007216][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.102'.
[   45.208383][   T31] IPVS: starting estimator thread 0...
[   45.294970][ T3845] IPVS: using max 2304 ests per chain, 115200 per kthread
[   45.295479][ T3846] loop1: detected capacity change from 0 to 512
[   45.493138][   T29] audit: type=1326 audit(1790463910.829:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.2.118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821b56e159 code=0x7ffc0000
[   45.493272][   T29] audit: type=1326 audit(1790463910.829:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.2.118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821b56e159 code=0x7ffc0000
[   45.494024][   T29] audit: type=1400 audit(1790463910.829:303): avc:  denied  { create } for  pid=3859 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   45.494050][   T29] audit: type=1326 audit(1790463910.829:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.2.118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821b56e159 code=0x7ffc0000
[   45.528240][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.551264][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.698646][ T3870] loop2: detected capacity change from 0 to 512
[   45.699005][ T3870] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.722260][ T3870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.722419][ T3870] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.352683][ T3886] loop3: detected capacity change from 0 to 256
[   46.483083][ T3890] loop4: detected capacity change from 0 to 128

syzkaller
syzkaller login: [   47.201014][ T3886] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   47.206966][ T3886] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   47.207085][ T3886] FAT-fs (loop3): Filesystem has been set read-only
[   47.642947][ T3895] loop1: detected capacity change from 0 to 128
[   48.265340][ T3897] __nla_validate_parse: 5 callbacks suppressed
[   48.265359][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'.
[   49.332134][ T3896] ==================================================================
[   49.332169][ T3896] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru
[   49.332205][ T3896] 
[   49.332211][ T3896] write to 0xffff888237c277e0 of 8 bytes by task 3306 on cpu 0:
[   49.332226][ T3896]  invalidate_bh_lru+0x8a/0xf0
[   49.332255][ T3896]  smp_call_function_many_cond+0x72e/0xbc0
[   49.332279][ T3896]  on_each_cpu_cond_mask+0x35/0x50
[   49.332301][ T3896]  invalidate_bh_lrus+0x2a/0x30
[   49.332325][ T3896]  blkdev_flush_mapping+0x94/0x1a0
[   49.332344][ T3896]  bdev_release+0x2c1/0x3d0
[   49.332374][ T3896]  blkdev_release+0x15/0x20
[   49.332391][ T3896]  __fput+0x29e/0x630
[   49.332411][ T3896]  ____fput+0x1c/0x30
[   49.332430][ T3896]  task_work_run+0x130/0x1a0
[   49.332452][ T3896]  exit_to_user_mode_loop+0x1e4/0x8c0
[   49.332482][ T3896]  do_syscall_64+0x212/0x360
[   49.332500][ T3896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.332520][ T3896] 
[   49.332525][ T3896] read to 0xffff888237c277e0 of 8 bytes by task 3896 on cpu 1:
[   49.332540][ T3896]  has_bh_in_lru+0x35/0x1f0
[   49.332563][ T3896]  __lru_add_drain_all+0x2c1/0x520
[   49.332594][ T3896]  lru_cache_disable+0x1f/0x30
[   49.332618][ T3896]  __se_sys_mbind+0x6cd/0xdd0
[   49.332634][ T3896]  __x64_sys_mbind+0x78/0x90
[   49.332650][ T3896]  x64_sys_call+0x1d78/0x2550
[   49.332674][ T3896]  do_syscall_64+0x112/0x360
[   49.332691][ T3896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.332711][ T3896] 
[   49.332715][ T3896] value changed: 0xffff888100419960 -> 0x0000000000000000
[   49.332726][ T3896] 
[   49.332730][ T3896] Reported by Kernel Concurrency Sanitizer on:
[   49.332753][ T3896] CPU: 1 UID: 0 PID: 3896 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(lazy) 
[   49.332777][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.332789][ T3896] ==================================================================
[   49.369538][ T3907] loop3: detected capacity change from 0 to 1024
[   49.379194][ T3907] EXT4-fs: Ignoring removed nobh option
[   49.379329][ T3907] EXT4-fs: Ignoring removed bh option
[   49.381196][ T3907] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   49.386133][ T3907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[   49.386183][ T3907] System zones: 0-1, 3-12
[   49.386991][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.406800][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.442023][   T29] kauditd_printk_skb: 160 callbacks suppressed
[   49.442039][   T29] audit: type=1400 audit(1790463914.779:465): avc:  denied  { write } for  pid=3906 comm="syz.3.128" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.442061][   T29] audit: type=1400 audit(1790463914.779:466): avc:  denied  { create } for  pid=3906 comm="syz.3.128" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   49.443184][ T3913] EXT4-fs error (device loop3): ext4_check_all_de:675: inode #12: block 7: comm syz.3.128: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   49.443441][ T3913] EXT4-fs (loop3): Remounting filesystem read-only
[   49.553695][   T29] audit: type=1400 audit(1790463914.889:467): avc:  denied  { validate_trans } for  pid=3914 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   49.592576][   T29] audit: type=1400 audit(1790463914.929:468): avc:  denied  { create } for  pid=3906 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   49.703895][   T29] audit: type=1400 audit(1790463915.039:469): avc:  denied  { sqpoll } for  pid=3906 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   49.899877][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   49.899902][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   49.987759][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.443203][ T3920] syz.0.132 (3920) used greatest stack depth: 9544 bytes left