last executing test programs:

46.226030393s ago: executing program 4 (id=60):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
setns(0xc9, 0x0)
r2 = socket(0x2a, 0x2, 0x5)
connect$inet6(r2, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

46.07084475s ago: executing program 4 (id=64):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in6=@local, @in=@empty, 0x4e23, 0xe, 0x4e20, 0x1, 0xa, 0x40, 0x10, 0x73}, {0x80, 0xff, 0x7, 0x10001, 0x2, 0x0, 0x0, 0x1}, {0xffffffffffffffff, 0x800, 0xfffffffffffffffe, 0x8}, 0x8000, 0x6e6bbb, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x1}, 0xa, @in6=@private2, 0x3507, 0x1, 0x3, 0x7, 0x7f, 0x2}}, 0xe8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000001240)={0xac, 0x0, &(0x7f0000000e40)="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"})
sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x2, 0x0, 0x2, 0x1, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp={0x0, 0x6}, 0x4a98, 0xa, 0x0, 0x1, 0xc68d, 0x802, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

45.21664764s ago: executing program 4 (id=76):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
r0 = syz_open_dev$MSR(0x0, 0xffff, 0x0)
read$msr(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r1 = dup(0xffffffffffffffff)
write$UHID_INPUT(r1, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x440, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

45.148766763s ago: executing program 4 (id=77):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4804)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nombcache}, {}, {@noacl}, {@resuid={'resuid', 0x3d, 0xee01}}, {@dax_always}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@grpid}, {@journal_checksum}, {@nomblk_io_submit}, {@sysvgroups}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
write(r0, &(0x7f00000000c0)='2', 0xa800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r4 = memfd_create(0x0, 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4)
write(r3, &(0x7f0000000000), 0x0)
fallocate(r2, 0x0, 0x2, 0x8ffff)

44.934857493s ago: executing program 4 (id=79):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r3 = semget$private(0x0, 0x6, 0x0)
semtimedop(r3, &(0x7f0000000000)=[{0x4, 0xfff7, 0x1000}], 0x1, &(0x7f0000000040)={0x77359400})
semctl$IPC_RMID(r3, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=r1, @ANYBLOB="096d0500251004001c0012800b00010067656e657665000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040)

44.661341356s ago: executing program 4 (id=82):
io_uring_setup(0x4e85, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_emit_ethernet(0x8a, 0x0, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/events/sched/filter\x00', 0x40c1, 0x12)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r0, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x1, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x560d, 0x1000000000003)

44.644852296s ago: executing program 32 (id=82):
io_uring_setup(0x4e85, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_emit_ethernet(0x8a, 0x0, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/events/sched/filter\x00', 0x40c1, 0x12)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r0, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x1, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x560d, 0x1000000000003)

12.334396334s ago: executing program 0 (id=403):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee00)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000400)={0x0, 0x804, 0x2, 0x3afe, 0x4cb6, 0x4})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000740), 0x1, 0x7bf, &(0x7f0000000d00)="$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")
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x401, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x1, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x4, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffff9, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x7, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffc, 0xfffffffffffffffd, 0x7fff, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0xb, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0x8, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000102, 0x4, 0x3, 0x7, 0x2c, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x804ffffffffffffe, 0xe, 0x0, 0xfffffffffffffffe, 0x2300000006, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xcc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x137b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x2c2})
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)

12.178890362s ago: executing program 0 (id=404):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, 0x0, 0x0}, 0x20)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x207, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x1000)
futex(0x0, 0x5, 0x80, 0x0, &(0x7f0000000000), 0xa5023fff)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x42)
ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
getpgid(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

12.063609487s ago: executing program 0 (id=408):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0xd322e000)
write(r1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x103801, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r2, 0x40047438, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x1, 0x2}, 0x4)
pipe(0x0)

12.037244028s ago: executing program 0 (id=410):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10003, 0x1, 0x10000, 0x3, 0x5, 0x53, 0x0, 0x0, 0x0, 0x0, 0xb39b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
syz_open_procfs(0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20080058)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x800000, 0x0)

11.048710504s ago: executing program 0 (id=420):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x7, 0xc9}, 0x14224, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1)
truncate(0x0, 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syncfs(0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x11000)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x28, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000340)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={[0x8]}, 0x8)

10.250115772s ago: executing program 0 (id=428):
r0 = syz_clone3(&(0x7f0000000700)={0x1000000, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f00000002c0), {0x26}, &(0x7f0000000500)=""/239, 0xef, &(0x7f0000000600)=""/134, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
syz_io_uring_setup(0x3eae, &(0x7f00000034c0)={0x0, 0x7648, 0x1, 0x40000003, 0x2ea}, &(0x7f0000000180), &(0x7f0000003580), &(0x7f0000000280))
r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x48180)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={0x0, 0x0, 0x31})
keyctl$set_reqkey_keyring(0xe, 0x1)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000780)='RDa\xd7B>\x7f\xc9\xd3\xa6j\xa6\xdf\xaa>\x95Q\x92_\x8c\x95%\xa07X\x9c\xdc\xb9\xd2\xf2\b\x00:R>)\x97\xb7\xab\xe4\xbd\xbe0p=fKe\x7faW\x90\x1b\xd1\x1a\xb74\x82\xbe(K\xb2\x94&\xa9 \x8a\xfe\xfe\x81\xd6Zk=X1L\xa5\x91\xfd;\xdbM\xe7\xd5\xad\xcb\x95\rYnn\xedi\x83r\xd9&q\xa4\xe0\x8dJ\x92\xd7\x9d\xd6\x9a\xe3\x89\xcb\xff\xdb\xe0\x84t\xfeOGA\xb0\x88\x1fkT\xc9<\x01B\xba?y\x04\xfc1\xe8F\xf4<\x96;}\x10\xb9\xdf\x19\xc455\xb5F*\t\x9d\x16a\x98n\x87M\xa0\xa1\xe1\f}\xccX\xb1W\xec\xdec\xe4eNx\xff\a\x01j\x10\x8d\xd0\xca\xdboN\xb3^\xe3~&u\x88\xd7\xfd&)\xddV\xf3\b\x03\xdf\x1e\x0eQ\xc7\x8eh%|\xca\vn\'\xa1\xfb\xd5|\xd2\x95#\x82\x8dC\x04`\x19\a\xb3\xad\xe1\xabo\x9f\xfd\x18\xf0-\x1c\x15q\x97i\xf5\xfeEQ\x18\xe6\x1b`\xbe\xad-\xa0EU(', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x300, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

10.215851693s ago: executing program 33 (id=428):
r0 = syz_clone3(&(0x7f0000000700)={0x1000000, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f00000002c0), {0x26}, &(0x7f0000000500)=""/239, 0xef, &(0x7f0000000600)=""/134, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
syz_io_uring_setup(0x3eae, &(0x7f00000034c0)={0x0, 0x7648, 0x1, 0x40000003, 0x2ea}, &(0x7f0000000180), &(0x7f0000003580), &(0x7f0000000280))
r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x48180)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={0x0, 0x0, 0x31})
keyctl$set_reqkey_keyring(0xe, 0x1)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000780)='RDa\xd7B>\x7f\xc9\xd3\xa6j\xa6\xdf\xaa>\x95Q\x92_\x8c\x95%\xa07X\x9c\xdc\xb9\xd2\xf2\b\x00:R>)\x97\xb7\xab\xe4\xbd\xbe0p=fKe\x7faW\x90\x1b\xd1\x1a\xb74\x82\xbe(K\xb2\x94&\xa9 \x8a\xfe\xfe\x81\xd6Zk=X1L\xa5\x91\xfd;\xdbM\xe7\xd5\xad\xcb\x95\rYnn\xedi\x83r\xd9&q\xa4\xe0\x8dJ\x92\xd7\x9d\xd6\x9a\xe3\x89\xcb\xff\xdb\xe0\x84t\xfeOGA\xb0\x88\x1fkT\xc9<\x01B\xba?y\x04\xfc1\xe8F\xf4<\x96;}\x10\xb9\xdf\x19\xc455\xb5F*\t\x9d\x16a\x98n\x87M\xa0\xa1\xe1\f}\xccX\xb1W\xec\xdec\xe4eNx\xff\a\x01j\x10\x8d\xd0\xca\xdboN\xb3^\xe3~&u\x88\xd7\xfd&)\xddV\xf3\b\x03\xdf\x1e\x0eQ\xc7\x8eh%|\xca\vn\'\xa1\xfb\xd5|\xd2\x95#\x82\x8dC\x04`\x19\a\xb3\xad\xe1\xabo\x9f\xfd\x18\xf0-\x1c\x15q\x97i\xf5\xfeEQ\x18\xe6\x1b`\xbe\xad-\xa0EU(', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x300, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

3.742737385s ago: executing program 6 (id=497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x40000)
socket$packet(0x11, 0xa, 0x300)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0xc000)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x200004ffc000)
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x0, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}, {'timeo=1'}, {'retrans=1'}]})

3.567776193s ago: executing program 5 (id=499):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x3)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010028"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
tkill(0x0, 0x2a)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

3.542770655s ago: executing program 6 (id=500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48)
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
r1 = socket(0x1, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'sit0\x00', 0x0})
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x3f7, 0x800, 0x70bd2c, 0x25dfdbff, {0x5, 0x5, './bus', './bus'}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x408c0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r3, 0x2219, 0x4be2, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000880), 0x3, r0}, 0x38)

2.57254252s ago: executing program 6 (id=507):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@dioread_lock}, {@errors_remount}]}, 0x3, 0x7b0, &(0x7f0000000f80)="$eJzs3c9rHNcdAPDvrH5adisVCq17EhRagfGqclW7hUJdeiiFGgzt2bZYrYWrldZoV8YSAtuUQi85JOQQiC8+x4lz8zU/rsklf0MOwcZJZBOHHILC7M7aK2lXXtvaXQd9PjDSezNv9d533sybp51hN4ADazL9kYs4GjGUJsez9UlkK2Iw4nS93OPNjUK6JLG19a+vklqZR5sbhWh6TepwlvllRHz0v4hjud31VtbWF+dKpeJKlp+uLl2erqytH7+0NLdQXCgun5yZnT1x6g+nTu5frN98un7k/ut//+17p7/77y/uvPZxEqfjSLatOY79MhmT2T4ZSnfhNn/b78r6LOmoTCel6KX01Byon+VxNMZjYI8++ktPWwYAdMu1iNgCAA6YxPUfAA6YxvsAjzY3Co0l6vdzrvf1jYkeefDXiBitx9+4v1nfMli/Z/fZaO0+6NijpHaPpCGJiIl9qH8yIm7ePXc7XaJL9yEBWrl+IyIuTEzuHP/TEW7nMwvP63cdlJnckTf+Qe98kM5//rh7/heRy87/0drPnfOfkRbn7ot49vmfu7ctO7QPlTZJ539/bnq27XFT/JmJgSz3k9qcbyi5eKlUTMe2n0bEVAyNpPmZPeqYevj9w3bbmud/X7/xn3fS+tPfT0vk7g2ObH/N/Fx17mVibvbgRsSvBlvFnzzp/6TN/Pdsh3X840//f7vdtjT+NN7Gsjv+7tq6FfGblv3/9DmoZM/nE6drh8N046Bo4f3P3xprV39z/9+8m9a0UWj8L9ALaf+P7R3/RNL8vGbl+ev45Nb4h+22bY//3O20/u3xtz7+h5N/19LD2bqrc9XqykzEcPLP3etPPH1tI98on8Y/9evW5/9ex386DF3I0lvPeKxx8P6X7754/N2Vxj+f9n+SBfHM/n/+xJ3HiwPt6u+s/2drqalsze7xb3DX3+20gS+18wAAAAAAAAAAAAAAAAAAAAAAAACgQ7mIOBJJLv8kncvl8/Xv8P55jOVK5Ur12MXy6vJ81L4reyKGco2Puhxv+jzUmezz8Bv5Ezvyv4+In0XEmyOHavl8oVya73fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJA53Ob7/1NfjPS7dQBA14z2uwEAQM+5/gPAwdPm+j/cevWhrrYFAOiN2vU/Gex3MwCAHvL+PwAcPK7/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNnZM2fSZevbzY1Cmp+/sra6WL5yfL5YWcwvrRbyhfLK5fxCubxQKuYL5aW2f+h6/VepXL48G8urV6erxUp1urK2fn6pvLpcPX9paW6heL441LPIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBzlbX1xblSqbgisXfi2ivRjBtZt/V7b0i8EomRiOhWFc2jxKH+DE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwI/BAAA//9fuB/a")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x1080e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @private1, 0xb}}, 0x7d5, 0x8000, 0x6, 0x10000, 0x80, 0xad40, 0x8}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x7, 0x2, '-}\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r2, 0x6a98047402e98331, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x48c6)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x1000, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x800, 0x300, 0xe}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x97, 0x40000, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40840)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4)

2.256536074s ago: executing program 6 (id=509):
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x20)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000100060000cb"], 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)

2.169930008s ago: executing program 1 (id=510):
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\\\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$usbfs(0x0, 0xf, 0x7cc687236fa6f214)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000090542b3c5917422254e9adfa195e81bfb02520127e", @ANYRES16=r1, @ANYBLOB="010026bd7000475f00002e0000000a0001007770616e300000000c0005000200aaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)

2.100072632s ago: executing program 3 (id=511):
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1000, 0x3, 0x9, 0x8, 0x20003, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./proc\x00', 0x380c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000001180)="$eJzs3cFqE1EUBuDTNG1DN3YtLgbcuArqym3QCmJAiMxCVwaqm1aE6WZ0lcfwGXwkH6Or7kbs1CbqKIid3mTm+yDMgZ8L5xLI3ZybeXPn/fHRh9N31dfPMRplMYxYVFXEQQxiO2pbl8/BRb0bqxYBAGya2Ww+Sd0D7SqKyXwnIvZ+S/IvSRoCAAAAAAAAAADgvzXN/8e5+X8A6LIf8/+D1I3QmqKYzPcbv2Pz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA651V1q/rLJ3V/AMD1c/4DQP84/wGgf5z/ANA/L1+9fj6ZTg9nWTaKOFuUeZnXzzp/+mx6eD+7cLBcdVaW+fZV/qDOs5/zndi/zB825rtx726df88ev5j+ku/FUfvbBwAAAAAAAAAAAAAAAAAAgLUwzq403u8fj/+U19XK/wOs3N/fKst8GLeHN7YNAAAAAAAAAAAAAAAAAAAA2GinHz8dz09O3haKzhTx6J9WPRmtQc/XUESsRRtdKVL/MgEAAAAAAAAAAAAAAAAAQP8sL/2m7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0lm+/7+9IiIWVS31dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+xYAAP//OTyZRg==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
socket$unix(0x1, 0x1, 0x0)
setns(0xc9, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={<r2=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x5, @mcast1, 0xff}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.012712456s ago: executing program 3 (id=512):
socket$packet(0x11, 0xa, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x7, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0xc000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000200)=0xcca, 0x4)
r0 = socket(0x8, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000280)={'gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x26}}, 0x0)
recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_int(r2, 0x1, 0x38, 0x0, &(0x7f0000000340))

1.948509469s ago: executing program 3 (id=513):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2, 0x3}, 0x1c)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000300)="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", 0xff, 0x4048081, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24)
sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)
unshare(0xc040480)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffffeffe, 0x3, 0x8, 0x7ffffbfe, 0x8, "48b6299abd3991045b0800000013ed2ee2f4fd"})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x4006)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0xffbffe03, 0x2, 0x4000086, 0x6, 0x4, "c8d92c015db60000d3b100"})
mkdir(0x0, 0x1ff)
clock_adjtime(0x0, &(0x7f0000000d80)={0x0, 0x8a, 0x5, 0x95, 0x9, 0x4, 0x6, 0x9, 0x0, 0x3, 0x71619071, 0x9, 0x7ff, 0xc8e, 0x10003, 0xdf0, 0x100000001, 0x7fffffff, 0x4, 0x7, 0x2, 0x6, 0x83ff, 0xb, 0x5, 0x7})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000280)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6)

1.727747799s ago: executing program 5 (id=514):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40080)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\t\x00\b\x00', @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f3000"], 0x50}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)
getsockname$packet(r5, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104"], 0x1508}}, 0x24000880)
writev(r6, &(0x7f0000000040), 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=@delchain={0x4bc, 0x65, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0xb}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x74, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x480, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x3}}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x6}}, @TCA_FW_POLICE={0x450, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x9, 0x1, 0x9, {0x9, 0x1, 0x8, 0x400, 0x1, 0x4}, {0x2, 0x2, 0x3, 0x6, 0x6, 0x3}, 0x400, 0x7ff, 0x200}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x7, 0x7fffffff, 0x1, 0x5, 0x1ff, 0x5, 0x43, 0x8, 0x7fff, 0xee, 0x5, 0x4, 0x849, 0x0, 0x67, 0x4, 0x0, 0x400, 0xffff39c2, 0x3, 0x9, 0x4, 0xffff, 0x40b, 0x0, 0x3, 0x4, 0x7fff, 0x5, 0x1, 0x400, 0x1000, 0xffffffff, 0x5, 0x7f, 0xfffffffb, 0x2, 0x9, 0x7, 0x7, 0x3, 0x1, 0xfffffff8, 0x8, 0x80000001, 0x4, 0x8, 0x802, 0x80, 0x7f, 0x5, 0x8, 0x9, 0x7, 0x8, 0x10, 0xa07e551, 0x8, 0x2, 0x1, 0x4, 0x0, 0x9, 0x8, 0xb, 0x9, 0x2, 0x4, 0x8, 0x6, 0x9, 0x8, 0x5, 0x971a, 0x4, 0x8d, 0x1c0, 0x5, 0x80, 0xd2b7, 0xfffffe01, 0x0, 0x7, 0x3, 0x8, 0x1, 0x10, 0x7, 0x7, 0x80000001, 0x7fff, 0x1, 0x7, 0x9, 0xcc89, 0x5, 0x3, 0x400, 0x3, 0xf, 0xba07, 0x7de, 0x0, 0x4, 0x8, 0x39a8, 0x10001, 0xfff, 0xfffffff7, 0x3, 0x5, 0xfffff537, 0x67, 0x11, 0x0, 0x800, 0x1ff, 0x401, 0xffffffff, 0x4, 0xfffffff8, 0xaf, 0x2, 0x80000000, 0xf, 0x4c3, 0x4, 0x7f, 0x8, 0x400, 0x7f, 0x2, 0x63f4, 0x6, 0x7ff, 0x7, 0x7, 0x2, 0x7f, 0x7fff, 0x9, 0x5, 0x7, 0x3, 0x1, 0x4, 0x7ff, 0x1ff, 0x7, 0x2, 0xffff, 0xfffffff9, 0xffff, 0x4, 0x2, 0x3, 0x5, 0x1, 0x3, 0x9, 0x2, 0x5, 0x6, 0x101, 0x7, 0x0, 0x5, 0x5, 0x8000, 0x4, 0x10001, 0x6, 0x1, 0x2, 0x7fffffff, 0x0, 0x15, 0x2, 0xffff8001, 0xffffb6fa, 0x9, 0xd7b, 0x7, 0x5, 0x5, 0xb, 0x5, 0x1ff, 0xfffffff5, 0x6, 0x2, 0x1, 0xf423, 0xac, 0x6, 0x9, 0x80000000, 0x7fffffff, 0x9, 0x5, 0x5, 0x0, 0x5, 0x4, 0x7fffffff, 0xe, 0xff, 0x3ff, 0x36, 0xd, 0x0, 0x3, 0xcf, 0x3, 0x5, 0x3, 0x559, 0xf4e0, 0x2, 0xc, 0x0, 0x1, 0x200, 0x5, 0x3, 0x5, 0x3, 0x16b, 0x57, 0x1ff, 0xffff, 0x28c, 0x8, 0x67, 0x4, 0x1, 0x5, 0x37, 0x9, 0xaa2, 0x0, 0x8, 0x1, 0x6, 0x6, 0x3, 0x7af, 0x10000, 0x853, 0x3, 0x64f, 0x4c2b2881, 0x2, 0x40000000, 0xf36]}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0xf8}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})

1.604110255s ago: executing program 1 (id=515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r2=>0x0, 0x2f, 0x4, 0x7, 0x3, 0x1b, @empty, @loopback, 0x700, 0x700, 0x85cc, 0x472}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', <r3=>0x0, 0x1, 0x700, 0x1f9, 0xfffffffe, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0xf, 0xb5, [@multicast1, @remote, @multicast1]}]}}}}})
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x500, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "e665630fed5d8f33d2b224aa4024472921a94c40fe82dfa71e3117c3289232c6fcff0cae7f1786fedee43e9243662110ecf0278d8ccb3ce64f6398665315e00fd5ef267878c056cff8a860e11dfd8d9929efd7b3cf7c17485b02aa54509db27425d042605ece39ba947c8462e55e60b1c1dac9fce87009bf4f36dca0251adf279ac7b3d0b415775516285d7055c3eec608ff2bf09891d607e8e8dab2405c1f893dcc5758eedf63a6fdd080acc1f2c841b0737819c035f7b79044c02df3a108dd66eeafe0c8979c84"}, @ETHTOOL_A_BITSET_MASK={0xb, 0x5, "109e43ee868466"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x359e}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "333d4ee8b48ea2512fbf89a38f0558be67e5a65c8272a3f8297faddb82f34cd245d73ffc0576d264a3cd52497874e73a6bdabee7da7a9300a6b91d28a1e37cc59ba7371683c7404476e1c09aea210db753b67bfdef518b83831359d165ddac0d97fa4e4b1aeb10c0a853bda946899b162228fb5ab8b4352deab3d5f988cf44d1e33b002d9418b1e8f3a01810661f6444b078df3343f93ecb328b7141c2fde90778be0859e774770ae2d902c8ddba48c840b1033dafb2a014646ce4095839bcf9f887a86291794fd29f8cfe9fbb07c9d9df2dedb14bb78d111bd0ae03071b16627dadb1e5"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x264, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "7bd873c163aa9d718d5e17886c94d0c25bd293f77af382768051e88d02b16f06d6dd2070c71ee8b615b16397439e8c21ffa4edad1ce4f66299101aa605ed239aa7a7f2821fa29827bc42102d5921df9070bf87a29de1f4f9400dce6352f792c9f7acb0888e8675b2bf2158c274f9ad5c84450738afd8a70db6cc97a318cee8d54ca59adcfb5f4e93ff16f80bafebef1552c455264b78e4f2acc6907da6632395b77176aa1b4fb822b2ffcd8d3ad057db566fadfc"}, @ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "419d1018c0e911e45aad40393d544498d8d5500555fa31fcb32e2cc3f76fcf5ffe8a41836e5bb14f96a9173ed2f599aaec7824d6b1b38a510abef5eb4c5601d5c70abc5077d37e2a268f18660d2b1e489dcd1492cc7d8e2e19d0e1ece76ac9e64cf7eb1292a043079486bfbba3f5ee9a121e85ba41b3c604d1c279"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#&%/{.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*.]\\\x9e\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "bdfeda9d7c4604ddb33340bb43c99990da2aed134ecc681ca734405527c51564161f64107f357f63cef1fc4d8ff548d5754ac944375ca8d57f9d94b90c71c582c9d8c44f1ede8f0fd3fc027b112ddcc6a37dd3f13576815ac60c1975e01fa768a28078e50985ed16d1cb3f80518ebf2197db8c51f9f6b528800268f2986a1a957407f28ae95b3b745bdfe86986f14458faeaad7fe9245b024f8aff1aa7c5053196f402e4bb47737b2ce24fba010c1cc81d764221cf855d15d891c1b316"}]}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x500}, 0x1, 0x0, 0x0, 0x20040001}, 0xc000)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x10c, 0x1}], 0x10}, 0xfc40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0x100e, 0xfe7f, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r8, r9, &(0x7f00000001c0), 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20)

1.566071897s ago: executing program 5 (id=516):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0)
socket$key(0xf, 0x3, 0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x4b, 0x1, [0xffffffc0]}})

1.474236311s ago: executing program 1 (id=517):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x84840)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r5)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000d40)={[{@data_journal}, {@resuid={'resuid', 0x3d, r3}}, {@resgid={'resgid', 0x3d, r5}}, {@nombcache}, {@delalloc}, {@quota}], [{@permit_directio}, {@appraise_type}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'resuid'}}, {@fowner_lt={'fowner<', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x64, 0x32, 0x65, 0x4, 0x37, 0x30], 0x2d, [0x34, 0x37, 0x38, 0x62], 0x2d, [0x38, 0x37, 0x31, 0x61], 0x2d, [0x61, 0x37, 0x63, 0x64], 0x2d, [0x38, 0x62, 0x65, 0xa0, 0x63, 0x32, 0x52, 0x38]}}}, {@fowner_gt={'fowner>', r3}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '\'\\/+^\xfd}\x18,!{*'}}]}, 0x7f, 0x469, &(0x7f0000000580)="$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")
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@afid={'afid', 0x3d, 0x8}}, {@noxattr}], [{@smackfsdef={'smackfsdef', 0x3d, '/&@'}}, {@fsname={'fsname', 0x3d, '/_,'}}, {@measure}]}})
io_setup(0x8, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
r6 = socket(0xa, 0x3, 0xff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
connect$inet6(r6, 0x0, 0x0)
vmsplice(r6, &(0x7f0000000bc0)=[{&(0x7f0000000a00)}, {0x0}, {&(0x7f0000000b80)="81053da6384478c71b5c1d2b43768d533b9e2f7c3ad158d8356d8ba38a49ede068dd1b6aa5caea77f3", 0x29}], 0x3, 0x7)
r8 = socket(0x6, 0x3, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x40000)
fcntl$dupfd(r8, 0x406, r8)

1.473567361s ago: executing program 2 (id=518):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1080e8, 0x0, 0x4, 0x4, 0x806, 0x8001, 0x7ffc, 0x0, 0xfc, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4040050)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000000)='.\x02\x00', 0xa04000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa286262375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbaaba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbdcc7c4fe7792a92ed768396cb55799ea6a5c97e8c6c6a8e976c16b9acdb89702cf7ec4cf0a207f439a606964ae5a60bd9d6e11588250f5810af6ba83ce548123c91753e1bc19f5516b29a1a2e06fbb640308910ea6180059c9ef26f1e8a085ef2ce9ce82e7cc3046b10501cbbf48f2d1b"], 0x1, 0x11f0, &(0x7f0000001b00)="$eJzs209rY1UYB+C3mdR2MrZT/43ObDzoRjcXZxauZlOkBZmAMjMRZgThDk01JCYhN4tkcDHgzpWfQ1y6E8Qv0G/hrgiim3FjpE1a2xq1BZtYfJ7NfcnvnNxz4CZwQt7d219+2twusu28H6WFhSh3FyM9TZGiFJdi7Em8+fnmL1/ce/Dwznq1unE3pc31+zffTimtvvrdh599/dr3/SsffLP67VLsrH20+9OtH3au7Vzf/e3+J40iNYrU7vRTnh51Ov38UauethpFM0vp/VY9L+qp0S7qvWP5dqvT7Q5T3t5aqXR79aJIeXuYmvVh6ndSvzdM+cd5o52yLEsrleCk0Wg0Ou3Y2ldP90b/Wjmcevl2Ja7Es7ESq3E11uK5eD5eiBfjpbgWL8crcf1M7w8AAAAAAAAAAAAAAAAAAACcxn7/f4xGi/HMfmf/5dD/DwAAAAAAAAAAAAAAAAAAALOm/x8AAAAAAAAAAAAAAAAAAADmT/8/AAAAAAAAAAAAAAAAAAAAzN+9Bw/vrFerG3dTWo748cmgNqiNr+N8893qxltp39ofs34eDGqXDvOb4zwdz5eiMslvTc2X443Xx/le9s571aN5KWo3Yuv8tw8AAAD/C1k6NPV8n2V/lY+rI78PnDjfl+NGedodlyfX0dXz2A9nUwwfN/NWq94rhosHxeN/uSjHaQcvTFZ1LstQXPBiafJ07L1yUP8nFnakKMc/jCn93fQpn8q5FbP/LmL2/vzsAQAAAAAAAAAAcBHM4u+EJ+9Zms9WAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5nB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE4BAAD//z4uiDQ=")
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'lo\x00'})

1.135047977s ago: executing program 6 (id=519):
openat$full(0xffffffffffffff9c, 0x0, 0x12b282, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)

1.044817721s ago: executing program 3 (id=520):
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x7f, 0x1)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0)
keyctl$assume_authority(0x10, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000003d1d78a5a43bf457d9377b595b5db4a2e5ab60fc68da438dc943a280465cafe025f185537663336c4c32cf97e92bbbf57da37b3000fcc6636463b124203cf46e0486ff89d7b4f03ccf2dbae9b8387018a41ccf8daaef1353e5f5fac93f8037a9ead046013f49b27e4442c8bde1efc3cdf66df7c0390293c908f514ca6150d11bcb18f680abf58d5814d6a1a87533460fb01dfc91f6867cdc99b2b33cb59138f6a3475c9d65a9f7030cbfe4695a345b135523bcbf6c8321993f88f30a111e", @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c00040014000100"], 0x54}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x40, 0x0, 0x1}, 0x10)

958.745665ms ago: executing program 1 (id=521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de32e1738b8ef9c, @perf_config_ext={0x52, 0x9b7f}, 0x22d264327e9e8aaf, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
sendmsg$tipc(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000280)={0x4, 0x8020000000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x2004c804}, 0x4008000)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x20008800)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x28)
shutdown(r4, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="020cfaadc1f40ac7586000000000000000000000646900ea726c0ddb5514b9abd1dd0000", @ANYRES32=0x0, @ANYBLOB="9380000068820000140012800c0001006d616376746170000400028008000a", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

844.10096ms ago: executing program 1 (id=522):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x2, @perf_bp={0x0, 0xe}, 0x18011, 0x1, 0x10000, 0x2, 0x5, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x11, 0xa, 0x300, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1, 0x88, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
request_key(0x0, &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0xfffffffffffffffb)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x400c8d4}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'geneve0\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0x7}})
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/current_tracer\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)="bf", 0x1}], 0x1)
write(0xffffffffffffffff, &(0x7f0000000480), 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xec, 0x4, 0x7, 0x6, 0x0, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9f, 0x5, @perf_config_ext={0x8, 0xfffffffffffff56f}, 0xa061, 0x8, 0xe, 0x9, 0x7, 0x6, 0x80, 0x0, 0xffffffff, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a01002312010064001280080001007369740058000280060010000104000008000c000600000008000300ffffffff14000b00fc01000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="05000008000100"/19, @ANYRES32, @ANYBLOB="060012004e22000008000400fc44"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

841.96121ms ago: executing program 2 (id=523):
r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0xb, 0x42, 0x3a, 0x42}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x9, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x9}, 0x1000, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000000000)='6', 0x32)
close_range(r0, r0, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x24048000}, 0x2000c0c1)
fcntl$setstatus(r5, 0x4, 0x40000)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x3000)

732.434376ms ago: executing program 2 (id=524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x9da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0xa)
io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
r3 = open_tree(r2, &(0x7f0000000300)='./cgroup\x00', 0x89801)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0xd}})
move_mount(r3, 0x0, r3, 0x0, 0x46)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000140))
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000a5cdb086d74271d9eca0869c2d038b9e46365f66bb9c8928a3e75d1421acdcbbe55f63794dbc198acfd18a5f1de530827302ea6119d58e7caedc60a0099aa424bd6e4d7261c90f8f842c6f84b663f7c6b88fc72677a74c0a7389a1a5fa0832f6a6f5895e7d66e541db69e63dca387f8d654453f3af193475825a2e3bb33bbb0520fe1963f7fbb20fa172230f31bdf02f3c964b2bb622ee000000000000000000001ff56b049f74bf0272f1ecb79a9bd0805c071d02830e5447c74a359ac3fe020b50b58aa1055336c7e8ca4de05a70c5c231f1249d11447066a02a3010a05d8415", @ANYRESHEX=r0], 0x50)
recvmsg$unix(r2, &(0x7f0000001900)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/232, 0xe8}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/80, 0x50}, {&(0x7f00000016c0)=""/99, 0x63}, {&(0x7f0000001740)=""/94, 0x5e}], 0x6, &(0x7f0000001840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x20)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

686.959958ms ago: executing program 5 (id=525):
listen(0xffffffffffffffff, 0x7d4165c9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r1 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x3, 'macsec0\x00', {0x8c4}, 0x2})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x400000, 0x0, 0x0, 0xa, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setitimer(0x1, &(0x7f00000011c0)={{0x77359400}, {0x77359400}}, 0x0)
getitimer(0x1, &(0x7f0000001580))
socket$kcm(0x2, 0x5, 0x84)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f0000000000)=ANY=[], 0x23)
splice(r3, 0x0, r2, 0x0, 0x10500, 0x1)
sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="a21cc03d19e387f8f1b235cd9cce05aa7b6f8b33f4f8612b75d8d05f13ff0c69bb84bb402be042bfa13eb2dfb6829f56c0237e74153fd08128dcbce6b8eb94b7d9bd9420bb64aaf3883e506e922404c92fba1cac48bd9874caf1f9881e1de736946c6e26a947a417", 0x68, 0x8012, &(0x7f0000000140)={0x2, 0x0, @private=0xa010100, 0x1}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100)

659.814349ms ago: executing program 2 (id=526):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x0, 0x83625fc5352ba305, 0x0, 0x25dfdbfd}, 0x14}}, 0x20088c4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00009d1000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00002c8000/0x1000)=nil, &(0x7f000069b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000263, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffeec, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

331.517704ms ago: executing program 5 (id=527):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4205, r0, 0x202, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80002, 0x60)
openat(r2, &(0x7f0000000340)='./file1\x00', 0x80, 0x5)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='\a\x00\x00\x00', 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
setns(0xc9, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100"/31)
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
sendmsg$inet(r3, 0x0, 0x3000c041)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

315.812265ms ago: executing program 2 (id=528):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
setreuid(0xee00, 0x0)
listen(0xffffffffffffffff, 0x5)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb43b, 0xb}, {0x9, 0x4, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1996}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000000901"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x48000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3100}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
keyctl$session_to_parent(0x12)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x18, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x4, 0x73}]}, 0x18}}, 0x0)

249.764868ms ago: executing program 1 (id=529):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$selinux_access(r0, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0xa}, 0x8040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0x1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)

223.41746ms ago: executing program 2 (id=530):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x0, {0x1c, 0x14, 0x0, 0x4, 0xfe, 0x3, 0xfe, 0x1}}, 0x1c}}, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, &(0x7f0000000340)=0x45fb7f3a1a7686c6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4000410000002)
write(r2, &(0x7f0000000400)='!*:', 0x3)

126.193254ms ago: executing program 6 (id=531):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4004)
socket$pppl2tp(0x18, 0x1, 0x1)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$kcm(0x1e, 0x5, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ppoll(&(0x7f0000003840)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./trace\x00', 0x0, 0x0, 0x0)

89.829305ms ago: executing program 5 (id=532):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x402, 0xa}, 0x100480, 0xe7e, 0x0, 0x3, 0x80000001, 0x43, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000380)='logfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3327, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
mkdir(0x0, 0x1ff)
lseek(r1, 0x9a, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000380)={0x5, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0xe308, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff010000000000000000000000000001080400000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90)

83.712326ms ago: executing program 3 (id=533):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x9, 0x0, 0x0, 0x0, "0c6876b2c022574ea04d6a11034f5922d978634ba3aef901dfd047f78be6e63be3f540334d489bfff1d28704b9ceec5dd51ff647060750764f9a8a01e130acea"}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='1', 0x1)
ioprio_set$uid(0x3, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32], 0x94}}, 0x20008841)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080))

0s ago: executing program 3 (id=534):
close(0x3)
mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0)
openat$pidfd(0xffffff9c, &(0x7f00000002c0), 0x608201, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
socket(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

kernel console output (not intermixed with test programs):

 [1, 0] type 2 family 0 port 6081 - 0
[   32.807013][  T364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.848857][ T3300] veth1_vlan: entered promiscuous mode
[   32.879629][ T3300] veth0_macvtap: entered promiscuous mode
[   32.889237][ T3303] veth0_vlan: entered promiscuous mode
[   32.902199][ T3300] veth1_macvtap: entered promiscuous mode
[   32.903591][ T3304] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.904253][ T3303] veth1_vlan: entered promiscuous mode
[   32.924461][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.932209][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.941472][ T3296] veth0_vlan: entered promiscuous mode
[   32.953193][ T3296] veth1_vlan: entered promiscuous mode
[   32.956064][ T3303] veth0_macvtap: entered promiscuous mode
[   32.957494][   T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.957706][   T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.957851][   T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.957985][   T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.969233][ T3303] veth1_macvtap: entered promiscuous mode
[   33.013390][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.036592][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.038085][ T3297] veth0_vlan: entered promiscuous mode
[   33.041180][ T3296] veth0_macvtap: entered promiscuous mode
[   33.047746][ T3296] veth1_macvtap: entered promiscuous mode
[   33.053505][ T3297] veth1_vlan: entered promiscuous mode
[   33.062710][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.066781][ T3503] syzkaller0: entered promiscuous mode
[   33.066804][ T3503] syzkaller0: entered allmulticast mode
[   33.072821][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.075899][   T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.075951][   T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.076066][   T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.076099][   T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.158892][ T3297] veth0_macvtap: entered promiscuous mode
[   33.162127][ T3297] veth1_macvtap: entered promiscuous mode
[   33.162449][ T3506] loop1: detected capacity change from 0 to 512
[   33.165648][   T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.166093][   T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.166126][   T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.166158][   T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.178071][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.184726][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.266182][   T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.268854][   T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.269017][   T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.297555][ T3514] loop3: detected capacity change from 0 to 512
[   33.301673][   T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.323991][ T3514] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.4: inode has both inline data and extents flags
[   33.324020][ T3514] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   33.324385][ T3514] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4: couldn't read orphan inode 15 (err -117)
[   33.324540][ T3514] loop3: lost filesystem error report for type 5 error -117
[   33.325040][    C0] EXT4-fs (loop3): error count since last fsck: 2
[   33.325057][    C0] EXT4-fs (loop3): initial error at time 1789975876: ext4_orphan_get:1403: inode 15
[   33.325089][    C0] EXT4-fs (loop3): last error at time 1789975876: ext4_orphan_get:1408
[   33.328680][ T3514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.398813][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.407908][ T3521] loop0: detected capacity change from 0 to 512
[   33.408277][ T3521] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   33.569127][ T3527] syzkaller0: entered promiscuous mode
[   33.569143][ T3527] syzkaller0: entered allmulticast mode
[   33.697343][ T3540] process 'syz.3.12' launched './file0' with NULL argv: empty string added
[   33.728023][ T3536] xt_hashlimit: size too large, truncated to 1048576
[   33.963634][ T3548] syz.3.15 (3548) used greatest stack depth: 10696 bytes left
[   34.098407][ T3565] syzkaller0: entered promiscuous mode
[   34.098424][ T3565] syzkaller0: entered allmulticast mode
[   34.184674][ T3569] Zero length message leads to an empty skb
[   34.244868][ T3577] FAULT_INJECTION: forcing a failure.
[   34.244868][ T3577] name fail_futex, interval 1, probability 0, space 0, times 1
[   34.244926][ T3577] CPU: 1 UID: 0 PID: 3577 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(lazy) 
[   34.244952][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   34.245089][ T3577] Call Trace:
[   34.245096][ T3577]  <TASK>
[   34.245102][ T3577]  __dump_stack+0x1d/0x30
[   34.245143][ T3577]  dump_stack_lvl+0x95/0xd0
[   34.245166][ T3577]  dump_stack+0x15/0x1b
[   34.245187][ T3577]  should_fail_ex+0x262/0x280
[   34.245210][ T3577]  should_fail+0xb/0x20
[   34.245232][ T3577]  get_futex_key+0x12d/0xb10
[   34.245304][ T3577]  futex_wait_setup+0x49/0x3e0
[   34.245324][ T3577]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[   34.245364][ T3577]  ? hrtimer_active+0xe4/0x110
[   34.245462][ T3577]  __futex_wait+0xa9/0x260
[   34.245481][ T3577]  ? __pfx_futex_wake_mark+0x10/0x10
[   34.245505][ T3577]  futex_wait+0x98/0x1c0
[   34.245525][ T3577]  do_futex+0x391/0x460
[   34.245566][ T3577]  __se_sys_futex+0x2f6/0x370
[   34.245598][ T3577]  ? xfd_validate_state+0x45/0xf0
[   34.245702][ T3577]  __x64_sys_futex+0x78/0x90
[   34.245728][ T3577]  x64_sys_call+0x22e2/0x2550
[   34.245791][ T3577]  do_syscall_64+0x112/0x360
[   34.245813][ T3577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.245846][ T3577] RIP: 0033:0x7fb32b20e159
[   34.246012][ T3577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.246029][ T3577] RSP: 002b:00007fb329c670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   34.246048][ T3577] RAX: ffffffffffffffda RBX: 00007fb32b495fa8 RCX: 00007fb32b20e159
[   34.246125][ T3577] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb32b495fa8
[   34.246140][ T3577] RBP: 00007fb32b495fa0 R08: 0000000000000000 R09: 0000000000000000
[   34.246155][ T3577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.246250][ T3577] R13: 00007fb32b496038 R14: 00007ffe5414e440 R15: 00007ffe5414e528
[   34.246268][ T3577]  </TASK>
[   34.268899][   T29] kauditd_printk_skb: 68 callbacks suppressed
[   34.268914][   T29] audit: type=1400 audit(1789975877.683:195): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   34.296965][   T29] audit: type=1400 audit(1789975877.713:196): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   34.298412][   T29] audit: type=1400 audit(1789975877.713:197): avc:  denied  { create } for  pid=3579 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   34.300939][   T29] audit: type=1400 audit(1789975877.713:198): avc:  denied  { create } for  pid=3579 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   34.429187][ T3582] syzkaller0: entered promiscuous mode
[   34.429208][ T3582] syzkaller0: entered allmulticast mode
[   35.095724][ T3596] loop2: detected capacity change from 0 to 512
[   35.111251][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.111485][ T3596] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.133586][   T29] audit: type=1400 audit(1789975878.543:199): avc:  denied  { write } for  pid=3595 comm="syz.2.33" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.133835][   T29] audit: type=1400 audit(1789975878.543:200): avc:  denied  { add_name } for  pid=3595 comm="syz.2.33" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.134150][   T29] audit: type=1400 audit(1789975878.543:201): avc:  denied  { create } for  pid=3595 comm="syz.2.33" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   35.228830][   T29] audit: type=1400 audit(1789975878.633:202): avc:  denied  { create } for  pid=3595 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   35.229617][ T3596] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.33: corrupted xattr block 32: bad e_name length
[   35.236718][ T3596] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   35.236902][   T29] audit: type=1400 audit(1789975878.633:203): avc:  denied  { write } for  pid=3595 comm="syz.2.33" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.236939][   T29] audit: type=1400 audit(1789975878.633:204): avc:  denied  { write } for  pid=3595 comm="syz.2.33" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.309620][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.422927][ T3612] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   35.533644][ T3612] veth3: entered allmulticast mode
[   35.585573][ T3620] loop0: detected capacity change from 0 to 256
[   35.750279][ T3629] loop3: detected capacity change from 0 to 512
[   35.764442][ T3629] EXT4-fs warning (device loop3): read_mmp_block:110: Error -117 while reading MMP block 12
[   35.802481][ T3625] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   35.803620][ T3638] netlink: 168 bytes leftover after parsing attributes in process `syz.4.47'.
[   35.883898][ T3642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.49'.
[   35.896594][ T3645] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET)
[   35.911865][ T3647] syzkaller0: entered promiscuous mode
[   35.911882][ T3647] syzkaller0: entered allmulticast mode
[   35.979864][ T3651] loop4: detected capacity change from 0 to 128
[   35.992320][ T3651] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.992610][ T3651] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   36.044405][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.082848][ T3654] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   36.299954][ T3669] loop1: detected capacity change from 0 to 128
[   36.302187][ T3669] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.303121][ T3669] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.381775][ T3656] syz.2.55 (3656) used greatest stack depth: 9944 bytes left
[   36.469127][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.645863][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   36.649795][ T3688] loop2: detected capacity change from 0 to 512
[   36.685867][ T3688] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.740410][ T3684] loop1: detected capacity change from 0 to 1764
[   36.777197][ T3688] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   36.779647][ T3688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.65: bg 0: block 248: padding at end of block bitmap is not set
[   36.779685][ T3688] loop2: lost filesystem error report for type 5 error -117
[   36.820795][ T3688] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.65: Failed to acquire dquot type 1
[   36.820896][ T3688] loop2: lost filesystem error report for type 5 error -28
[   36.832555][ T3688] EXT4-fs (loop2): 1 truncate cleaned up
[   36.835979][ T3688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   36.850940][ T3696] =======================================================
[   36.850940][ T3696] WARNING: The mand mount option has been deprecated and
[   36.850940][ T3696]          and is ignored by this kernel. Remove the mand
[   36.850940][ T3696]          option from the mount to silence this warning.
[   36.850940][ T3696] =======================================================
[   36.876543][ T3696] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.67: Failed to acquire dquot type 1
[   36.876570][ T3696] loop0: lost filesystem error report for type 5 error -117
[   36.877338][ T3696] EXT4-fs (loop0): 1 truncate cleaned up
[   36.877670][ T3696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.877724][ T3696] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.933080][ T3688] syz.2.65 (3688) used greatest stack depth: 8840 bytes left
[   36.943592][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   37.017222][ T3706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3706 comm=syz.2.70
[   37.097916][ T3711] bonding: bond1 is being created...
[   37.116718][ T3711] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   37.237847][ T3710] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   37.238190][ T3710] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   37.240259][ T3710] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.71: iget: special inode unallocated
[   37.240298][ T3710] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[   37.240645][ T3710] EXT4-fs (loop1): Remounting filesystem read-only
[   37.240794][ T3710] EXT4-fs (loop1): no journal found
[   37.240831][ T3710] EXT4-fs (loop1): can't get journal size
[   37.244253][ T3710] EXT4-fs (loop1): filesystem is read-only
[   37.247575][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   37.273917][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.406286][ T3722] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.406405][ T3722] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.429611][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.458523][ T3726] ext4: Unknown parameter 'noacl'
[   37.516320][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.575846][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.626491][ T3730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.77: bg 0: block 2: invalid block bitmap
[   37.634821][ T3730] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 21 with error 117
[   37.634875][ T3730] EXT4-fs (loop4): This should not happen!! Data will be lost
[   37.634875][ T3730] 
[   37.716851][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.716960][ T3735] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.761098][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.894970][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.899068][   T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.904874][ T3728] kmmpd-loop4: attempt to access beyond end of device
[   37.904874][ T3728] loop4: rw=8402945, sector=256, nr_sectors = 4 limit=64
[   37.904915][ T3728] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[   37.962291][   T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.980912][ T3741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   37.981502][ T3741] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.027076][   T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.084521][   T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.110769][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.110832][ T3749] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.136685][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   38.180677][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.198584][   T42] bridge_slave_1: left allmulticast mode
[   38.198605][   T42] bridge_slave_1: left promiscuous mode
[   38.198757][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.228020][   T42] bridge_slave_0: left allmulticast mode
[   38.228040][   T42] bridge_slave_0: left promiscuous mode
[   38.228190][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.277181][ T3761] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.87'.
[   38.322752][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.324118][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.328990][   T42] bond0 (unregistering): Released all slaves
[   38.374539][   T42] hsr_slave_0: left promiscuous mode
[   38.375176][   T42] hsr_slave_1: left promiscuous mode
[   38.375755][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.375771][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[   38.404553][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.404627][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.425689][   T42] veth1_macvtap: left promiscuous mode
[   38.425758][   T42] veth0_macvtap: left promiscuous mode
[   38.425798][   T42] veth1_vlan: left promiscuous mode
[   38.425855][   T42] veth0_vlan: left promiscuous mode
[   38.524294][   T42] team0 (unregistering): Port device team_slave_1 removed
[   38.533267][   T42] team0 (unregistering): Port device team_slave_0 removed
[   38.561008][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1
[   38.562853][ T3784] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 2, id = 0
[   38.710086][ T3792] syzkaller0: entered promiscuous mode
[   38.710104][ T3792] syzkaller0: entered allmulticast mode
[   38.731477][ T3792] tipc: Started in network mode
[   38.731521][ T3792] tipc: Node identity 0edde8909f41, cluster identity 4711
[   38.731574][ T3792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   38.763163][ T3792] tipc: Resetting bearer <eth:syzkaller0>
[   38.784609][ T3790] tipc: Resetting bearer <eth:syzkaller0>
[   38.791513][ T3790] tipc: Disabling bearer <eth:syzkaller0>
[   38.852775][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2
[   38.916815][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.916847][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.916904][ T3746] bridge_slave_0: entered allmulticast mode
[   38.917603][ T3746] bridge_slave_0: entered promiscuous mode
[   38.951416][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.951451][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.951535][ T3746] bridge_slave_1: entered allmulticast mode
[   38.952115][ T3746] bridge_slave_1: entered promiscuous mode
[   38.989910][ T3746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.992223][ T3746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.029279][ T3746] team0: Port device team_slave_0 added
[   39.030170][ T3746] team0: Port device team_slave_1 added
[   39.060779][ T3746] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.060793][ T3746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.060817][ T3746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.107706][ T3845] set_capacity_and_notify: 10 callbacks suppressed
[   39.107774][ T3845] loop0: detected capacity change from 0 to 512
[   39.110388][ T3845] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.110419][ T3845] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.118258][ T3845] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   39.123873][ T3845] EXT4-fs (loop0): 1 truncate cleaned up
[   39.124515][ T3845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.162499][ T3746] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.162511][ T3746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.162540][ T3746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.280154][   T29] kauditd_printk_skb: 140 callbacks suppressed
[   39.280168][   T29] audit: type=1400 audit(1789975882.693:341): avc:  denied  { write } for  pid=3854 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.644622][   T29] audit: type=1400 audit(1789975883.053:342): avc:  denied  { create } for  pid=3860 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   39.644652][   T29] audit: type=1400 audit(1789975883.053:343): avc:  denied  { write } for  pid=3860 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   41.961339][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.963827][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3
[   41.964872][ T3847] syzkaller0: entered promiscuous mode
[   41.964887][ T3847] syzkaller0: entered allmulticast mode
[   41.966637][ T3859] tipc: Started in network mode
[   41.966662][ T3859] tipc: Node identity eeba6674da2e, cluster identity 4711
[   41.966712][ T3859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   41.967154][ T3862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'.
[   41.982464][ T3842] tipc: Resetting bearer <eth:syzkaller0>
[   41.995969][ T3842] tipc: Disabling bearer <eth:syzkaller0>
[   42.030200][   T29] audit: type=1400 audit(1789975885.443:344): avc:  denied  { create } for  pid=3868 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   42.110543][ T3746] hsr_slave_0: entered promiscuous mode
[   42.110964][ T3746] hsr_slave_1: entered promiscuous mode
[   42.114198][ T3746] debugfs: 'hsr0' already exists in 'hsr'
[   42.114211][ T3746] Cannot create hsr debugfs directory
[   42.190461][   T29] audit: type=1400 audit(1789975885.603:345): avc:  denied  { checkpoint_restore } for  pid=3872 comm="syz.0.107" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   42.224705][   T29] audit: type=1326 audit(1789975885.633:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b20e159 code=0x7ffc0000
[   42.225209][   T29] audit: type=1326 audit(1789975885.633:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b20e159 code=0x7ffc0000
[   42.225284][   T29] audit: type=1326 audit(1789975885.643:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b20e159 code=0x7ffc0000
[   42.226669][   T29] audit: type=1326 audit(1789975885.643:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb32b20e159 code=0x7ffc0000
[   42.277910][   T29] audit: type=1326 audit(1789975885.693:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32b20e159 code=0x7ffc0000
[   42.432514][ T3886] loop1: detected capacity change from 0 to 128
[   42.439484][ T3746] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   42.447448][ T3746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   42.453965][ T3746] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   42.461822][ T3746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   42.465271][ T3746] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   42.483122][ T3894] loop2: detected capacity change from 0 to 512
[   42.489530][ T3894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   42.489615][ T3894] System zones: 1-12
[   42.492717][ T3746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   42.499238][ T3746] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   42.511506][ T3894] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.111: missing EA_INODE flag
[   42.511537][ T3894] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   42.511765][ T3894] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.111: error while reading EA inode 12 err=-117
[   42.511789][ T3894] loop2: lost filesystem error report for type 5 error -117
[   42.511940][ T3894] EXT4-fs (loop2): 1 orphan inode deleted
[   42.512376][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.516957][ T3746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   42.561547][ T3886] capability: warning: `syz.1.110' uses 32-bit capabilities (legacy support in use)
[   42.662099][ T3898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.042045][ T3898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.077287][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4
[   43.102972][ T3746] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.131240][ T3898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.153904][ T3921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'.
[   43.175288][ T3746] 8021q: adding VLAN 0 to HW filter on device team0
[   43.179039][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.179077][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.184175][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.184206][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.320022][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.341137][ T3927] loop1: detected capacity change from 0 to 256
[   43.341707][ T3927] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   43.391662][ T3898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.786258][ T3946] loop1: detected capacity change from 0 to 512
[   43.811994][ T3746] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.818006][ T3946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.818130][ T3946] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.890853][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.023448][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5
[   44.094647][ T3963] loop1: detected capacity change from 0 to 512
[   44.156462][ T3963] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   44.162505][ T3963] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   44.165570][ T3963] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.122: bg 0: block 248: padding at end of block bitmap is not set
[   44.165646][ T3963] loop1: lost filesystem error report for type 5 error -117
[   44.166668][ T3963] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.122: Failed to acquire dquot type 1
[   44.166738][ T3963] loop1: lost filesystem error report for type 5 error -28
[   44.169652][ T3963] EXT4-fs (loop1): 1 truncate cleaned up
[   44.175934][ T3963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   44.272273][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   44.297590][ T3746] veth0_vlan: entered promiscuous mode
[   44.304385][   T29] kauditd_printk_skb: 79 callbacks suppressed
[   44.304401][   T29] audit: type=1400 audit(1789975887.713:428): avc:  denied  { write } for  pid=3978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.325327][ T3746] veth1_vlan: entered promiscuous mode
[   44.349071][ T3746] veth0_macvtap: entered promiscuous mode
[   44.353381][ T3746] veth1_macvtap: entered promiscuous mode
[   44.368045][   T29] audit: type=1400 audit(1789975887.773:429): avc:  denied  { write } for  pid=3997 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.373329][ T3746] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.380104][ T3746] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.400886][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6
[   44.405197][  T364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.405452][  T364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.405562][  T364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.405663][  T364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.435379][   T29] audit: type=1400 audit(1789975887.843:430): avc:  denied  { mounton } for  pid=3746 comm="syz-executor" path="/root/syzkaller.PwzH3g/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   44.435436][   T29] audit: type=1400 audit(1789975887.843:431): avc:  denied  { mount } for  pid=3746 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   44.436552][   T29] audit: type=1400 audit(1789975887.843:432): avc:  denied  { mounton } for  pid=3746 comm="syz-executor" path="/root/syzkaller.PwzH3g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   44.440309][   T29] audit: type=1400 audit(1789975887.853:433): avc:  denied  { mounton } for  pid=3746 comm="syz-executor" path="/root/syzkaller.PwzH3g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   44.452560][   T29] audit: type=1400 audit(1789975887.863:434): avc:  denied  { mounton } for  pid=3746 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   44.452587][   T29] audit: type=1400 audit(1789975887.863:435): avc:  denied  { mount } for  pid=3746 comm="syz-executor" name="/" dev="gadgetfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   44.543108][ T3996] loop1: detected capacity change from 0 to 164
[   44.644902][   T29] audit: type=1400 audit(1789975888.053:436): avc:  denied  { write } for  pid=4002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.672989][   T29] audit: type=1400 audit(1789975888.083:437): avc:  denied  { bind } for  pid=4008 comm="syz.5.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.720188][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7
[   44.748535][ T4018] netlink: 'syz.5.125': attribute type 4 has an invalid length.
[   44.926424][ T4024] loop2: detected capacity change from 0 to 1024
[   45.020620][ T4024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   45.021124][ T4024] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.049813][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8
[   45.114705][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdc3a00: rx timeout, send abort
[   45.127603][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   45.236472][ T4028] loop1: detected capacity change from 0 to 1024
[   45.254306][ T4028] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.357898][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.614811][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdc3600: rx timeout, send abort
[   45.615027][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdc3a00: abort rx timeout. Force session deactivation
[   45.757498][ T4066] syzkaller0: entered promiscuous mode
[   45.757517][ T4066] syzkaller0: entered allmulticast mode
[   45.834038][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.879487][ T4069] syzkaller0: entered promiscuous mode
[   45.879511][ T4069] syzkaller0: entered allmulticast mode
[   45.951494][ T4073] loop3: detected capacity change from 0 to 512
[   45.967702][ T4073] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   46.114887][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdc3600: abort rx timeout. Force session deactivation
[   46.262710][ T4088] loop3: detected capacity change from 0 to 164
[   46.384826][ T4095] netlink: 'syz.1.142': attribute type 4 has an invalid length.
[   46.602199][ T4109] loop3: detected capacity change from 0 to 512
[   46.602593][ T4109] EXT4-fs: Ignoring removed nobh option
[   46.628239][ T4109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.628373][ T4109] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.639110][ T4111] syzkaller0: entered promiscuous mode
[   46.639129][ T4111] syzkaller0: entered allmulticast mode
[   46.667021][ T4109] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.149: corrupted inode contents
[   46.668673][ T4109] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #2: comm syz.3.149: mark_inode_dirty error
[   46.668862][ T4109] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.149: corrupted inode contents
[   46.669154][ T4109] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.149: mark_inode_dirty error
[   46.673808][ T4109] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.149: corrupted inode contents
[   46.731413][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.302746][ T4130] syzkaller0: entered promiscuous mode
[   47.302812][ T4130] syzkaller0: entered allmulticast mode
[   47.310898][ T4130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.317393][ T4128] tipc: Resetting bearer <eth:syzkaller0>
[   47.330090][ T4128] tipc: Disabling bearer <eth:syzkaller0>
[   47.525116][ T4133] syzkaller0: entered promiscuous mode
[   47.525140][ T4133] syzkaller0: entered allmulticast mode
[   47.557734][ T4143] loop1: detected capacity change from 0 to 128
[   47.603550][ T4143] loop1: detected capacity change from 0 to 512
[   47.623579][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.623705][ T4143] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.837974][ T4136] loop0: detected capacity change from 0 to 1024
[   47.871471][ T4136] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   47.873539][ T4136] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   47.880012][ T4136] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: inode #32: comm syz.0.159: iget: special inode unallocated
[   47.880082][ T4136] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[   47.881962][ T4136] EXT4-fs (loop0): Remounting filesystem read-only
[   47.882103][ T4136] EXT4-fs (loop0): no journal found
[   47.882133][ T4136] EXT4-fs (loop0): can't get journal size
[   47.895056][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   47.895095][    C0] EXT4-fs (loop0): initial error at time 1789975891: ext4_get_journal_inode:5927: inode 32
[   47.895206][    C0] EXT4-fs (loop0): last error at time 1789975891: ext4_get_journal_inode:5927: inode 32
[   47.910345][ T4136] EXT4-fs (loop0): filesystem is read-only
[   47.913336][ T4136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   47.990256][ T4151] loop5: detected capacity change from 0 to 164
[   47.996162][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.031310][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.091107][ T4124] syz.2.164: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   48.091263][ T4124] CPU: 1 UID: 0 PID: 4124 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT(lazy) 
[   48.091315][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.091329][ T4124] Call Trace:
[   48.091336][ T4124]  <TASK>
[   48.091344][ T4124]  __dump_stack+0x1d/0x30
[   48.091417][ T4124]  dump_stack_lvl+0x95/0xd0
[   48.091441][ T4124]  dump_stack+0x15/0x1b
[   48.091460][ T4124]  warn_alloc+0x146/0x1c0
[   48.091591][ T4124]  ? common_lsm_audit+0x1c9/0x230
[   48.091621][ T4124]  ? ktime_get+0x212/0x240
[   48.091649][ T4124]  __vmalloc_node_range_noprof+0xa3/0x1000
[   48.091775][ T4124]  ? clockevents_program_event+0x2fd/0x340
[   48.091883][ T4124]  ? tick_program_event+0x79/0xc0
[   48.091905][ T4124]  ? _raw_spin_unlock+0x9/0x30
[   48.091929][ T4124]  ? __hrtimer_rearm_deferred+0x571/0x650
[   48.091951][ T4124]  ? should_fail_ex+0x31/0x280
[   48.091989][ T4124]  ? xskq_create+0x38/0x160
[   48.092034][ T4124]  ? should_failslab+0x8c/0xb0
[   48.092071][ T4124]  ? __kmalloc_cache_noprof+0x19b/0x400
[   48.092103][ T4124]  xskq_create+0xea/0x160
[   48.092189][ T4124]  ? xsk_init_queue+0x70/0xb0
[   48.092208][ T4124]  xsk_init_queue+0x70/0xb0
[   48.092226][ T4124]  xsk_setsockopt+0x3ef/0x640
[   48.092245][ T4124]  ? __pfx_xsk_setsockopt+0x10/0x10
[   48.092301][ T4124]  __sys_setsockopt+0x184/0x200
[   48.092365][ T4124]  __x64_sys_setsockopt+0x64/0x80
[   48.092388][ T4124]  x64_sys_call+0x248f/0x2550
[   48.092413][ T4124]  do_syscall_64+0x112/0x360
[   48.092435][ T4124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.092460][ T4124] RIP: 0033:0x7f2b2586e159
[   48.092478][ T4124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.092498][ T4124] RSP: 002b:00007f2b242c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   48.092574][ T4124] RAX: ffffffffffffffda RBX: 00007f2b25af5fa0 RCX: 00007f2b2586e159
[   48.092602][ T4124] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   48.092616][ T4124] RBP: 00007f2b2590506b R08: 0000000000000004 R09: 0000000000000000
[   48.092704][ T4124] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.092717][ T4124] R13: 00007f2b25af6038 R14: 00007f2b25af5fa0 R15: 00007ffde55b8748
[   48.092737][ T4124]  </TASK>
[   48.092811][ T4124] Mem-Info:
[   48.092891][ T4124] active_anon:9883 inactive_anon:0 isolated_anon:0
[   48.092891][ T4124]  active_file:0 inactive_file:11272 isolated_file:0
[   48.092891][ T4124]  unevictable:1521 dirty:1544 writeback:0
[   48.092891][ T4124]  slab_reclaimable:3162 slab_unreclaimable:15895
[   48.092891][ T4124]  mapped:32474 shmem:3384 pagetables:1178
[   48.092891][ T4124]  sec_pagetables:0 bounce:0
[   48.092891][ T4124]  kernel_misc_reclaimable:0
[   48.092891][ T4124]  free:1892717 free_pcp:6601 free_cma:0
[   48.093102][ T4124] Node 0 active_anon:39532kB inactive_anon:0kB active_file:0kB inactive_file:45088kB unevictable:6084kB isolated(anon):0kB isolated(file):0kB mapped:129896kB dirty:6176kB writeback:0kB shmem:13536kB kernel_stack:3568kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   48.093271][ T4124] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   48.093440][ T4124] lowmem_reserve[]: 0 2878 7856 7856
[   48.093711][ T4124] Node 0 DMA32 free:2943692kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947216kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[   48.093850][ T4124] lowmem_reserve[]: 0 0 4978 4978
[   48.094008][ T4124] Node 0 Normal free:4611816kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39648kB inactive_anon:0kB active_file:0kB inactive_file:45088kB unevictable:6084kB writepending:6176kB zspages:0kB present:5242880kB managed:5098228kB mlocked:6040kB bounce:0kB free_pcp:22720kB local_pcp:18340kB free_cma:0kB
[   48.205121][ T4124] lowmem_reserve[]: 0 0 0 0
[   48.206818][ T4124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   48.207447][ T4124] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943692kB
[   48.229724][ T4124] Node 0 Normal: 1*4kB (E) 1*8kB (M) 1*16kB (M) 1*32kB (E) 1*64kB (U) 4*128kB (UME) 1*256kB (U) 2*512kB (UE) 2*1024kB (UM) 2*2048kB (UE) 1122*4096kB (M) = 4603772kB
[   48.230669][ T4124] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   48.230697][ T4124] 15870 total pagecache pages
[   48.230739][ T4124] 0 pages in swap cache
[   48.232234][ T4124] Free swap  = 124996kB
[   48.232284][ T4124] Total swap = 124996kB
[   48.232302][ T4124] 2097051 pages RAM
[   48.232344][ T4124] 0 pages HighMem/MovableOnly
[   48.232361][ T4124] 81850 pages reserved
[   48.659846][ T4169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.660056][ T4169] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.717976][ T4169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.718052][ T4169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.847820][ T4182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   48.847998][ T4182] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.935318][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   49.005853][ T4191] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   49.094232][ T4189] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   49.094391][ T4189] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   49.105615][ T4189] EXT4-fs error (device loop2): ext4_get_journal_inode:5927: inode #32: comm syz.2.173: iget: special inode unallocated
[   49.105745][ T4189] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[   49.108780][ T4189] EXT4-fs (loop2): Remounting filesystem read-only
[   49.109030][ T4189] EXT4-fs (loop2): no journal found
[   49.109120][ T4189] EXT4-fs (loop2): can't get journal size
[   49.111533][ T4189] EXT4-fs (loop2): filesystem is read-only
[   49.114614][ T4189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   49.150170][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.269300][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.269360][ T4202] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.300660][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.312985][  T364] IPVS: starting estimator thread 0...
[   49.336166][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.395218][ T4207] IPVS: using max 2640 ests per chain, 132000 per kthread
[   49.457903][   T29] kauditd_printk_skb: 48 callbacks suppressed
[   49.457918][   T29] audit: type=1400 audit(1789975892.863:486): avc:  denied  { mount } for  pid=4214 comm="syz.2.180" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   49.461462][   T29] audit: type=1400 audit(1789975892.873:487): avc:  denied  { search } for  pid=4214 comm="syz.2.180" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   49.471249][   T29] audit: type=1400 audit(1789975892.873:488): avc:  denied  { read } for  pid=4214 comm="syz.2.180" name="buffer_size_kb" dev="tracefs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   49.471280][   T29] audit: type=1400 audit(1789975892.883:489): avc:  denied  { open } for  pid=4214 comm="syz.2.180" path="/37/tracefs_dir/buffer_size_kb" dev="tracefs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   49.476333][ T4216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.476393][ T4216] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.575371][   T29] audit: type=1400 audit(1789975892.983:490): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   49.617990][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.647553][   T29] audit: type=1400 audit(1789975893.063:491): avc:  denied  { unmount } for  pid=4222 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   49.649165][ T4225] set_capacity_and_notify: 9 callbacks suppressed
[   49.649181][ T4225] loop2: detected capacity change from 0 to 128
[   49.652969][ T4225] FAT-fs (loop2): bogus logical sector size 0
[   49.652988][ T4225] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   49.653004][ T4225] FAT-fs (loop2): Can't find a valid FAT filesystem
[   49.711273][ T4225] loop2: detected capacity change from 0 to 764
[   49.733369][   T29] audit: type=1400 audit(1789975893.143:492): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   49.772963][   T29] audit: type=1400 audit(1789975893.183:493): avc:  denied  { write } for  pid=4227 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   49.919662][ T4230] loop5: detected capacity change from 0 to 1024
[   49.963734][ T4230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   49.964133][ T4230] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.995906][   T29] audit: type=1400 audit(1789975893.413:494): avc:  denied  { ioctl } for  pid=4241 comm="syz.0.199" path="socket:[8270]" dev="sockfs" ino=8270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   50.041870][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   50.048862][ T4244] loop1: detected capacity change from 0 to 512
[   50.069141][ T4244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.069199][ T4244] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.100755][   T29] audit: type=1400 audit(1789975893.513:495): avc:  denied  { write } for  pid=4243 comm="syz.1.201" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.115774][ T4244] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.201: corrupted xattr block 32: bad e_name length
[   50.115977][ T4244] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   50.125933][ T4251] loop0: detected capacity change from 0 to 1024
[   50.126254][ T4251] EXT4-fs: Ignoring removed nobh option
[   50.126375][ T4251] EXT4-fs: Ignoring removed oldalloc option
[   50.126391][ T4251] EXT4-fs: Ignoring removed oldalloc option
[   50.130354][ T4251] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   50.140482][ T4251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.186215][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.260380][ T4249] loop5: detected capacity change from 0 to 512
[   50.264333][ T4249] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   50.289694][ T4249] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   50.293380][ T4249] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.188: bg 0: block 248: padding at end of block bitmap is not set
[   50.293440][ T4249] loop5: lost filesystem error report for type 5 error -117
[   50.295084][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   50.295170][    C0] EXT4-fs (loop5): last error at time 1789975893: ext4_validate_block_bitmap:445
[   50.336292][ T4249] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.188: Failed to acquire dquot type 1
[   50.337925][ T4249] loop5: lost filesystem error report for type 5 error -28
[   50.341727][ T4249] EXT4-fs (loop5): 1 truncate cleaned up
[   50.349239][ T4249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   50.397686][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.473881][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   50.626989][ T4273] loop5: detected capacity change from 0 to 128
[   50.646492][ T4273] loop5: detected capacity change from 0 to 512
[   50.660587][ T4273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.660721][ T4273] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.716881][ T4276] loop2: detected capacity change from 0 to 164
[   50.765594][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811be9c800: rx timeout, send abort
[   50.773460][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.840861][ T4284] syzkaller0: entered promiscuous mode
[   50.840882][ T4284] syzkaller0: entered allmulticast mode
[   50.946148][ T4286] loop2: detected capacity change from 0 to 512
[   50.966474][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.967117][ T4286] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.998683][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.265641][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdbe400: rx timeout, send abort
[   51.265698][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811be9c800: abort rx timeout. Force session deactivation
[   51.412089][ T4301] syzkaller0: entered promiscuous mode
[   51.412110][ T4301] syzkaller0: entered allmulticast mode
[   51.721880][ T4307] ./dev/sda1: Can't lookup blockdev
[   51.765690][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdbe400: abort rx timeout. Force session deactivation
[   51.850501][ T4305] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   51.873286][ T4312] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   51.874790][ T4305] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   51.880283][ T4305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.207: bg 0: block 248: padding at end of block bitmap is not set
[   51.880323][ T4305] loop0: lost filesystem error report for type 5 error -117
[   51.882155][ T4305] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.207: Failed to acquire dquot type 1
[   51.882244][ T4305] loop0: lost filesystem error report for type 5 error -28
[   51.885026][    C1] EXT4-fs (loop0): error count since last fsck: 2
[   51.885044][    C1] EXT4-fs (loop0): last error at time 1789975895: ext4_acquire_dquot:7069
[   51.886776][ T4305] EXT4-fs (loop0): 1 truncate cleaned up
[   51.892430][ T4305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   52.205491][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   52.413115][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.413434][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.454438][ T4338] hub 8-0:1.0: USB hub found
[   52.454636][ T4338] hub 8-0:1.0: 8 ports detected
[   52.488042][ T4328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.488689][ T4328] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.530523][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdbe000: rx timeout, send abort
[   52.581349][ T4328] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #12: block 32: comm syz.0.214: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   52.581857][ T4328] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #12: comm syz.0.214: directory missing '.'
[   52.648193][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.682788][ T4347] syzkaller0: entered promiscuous mode
[   52.682800][ T4347] syzkaller0: entered allmulticast mode
[   52.684643][ T4347] 0: reclassify loop, rule prio 0, protocol 700
[   52.896679][ T4351] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.973336][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'.
[   52.974431][ T4356] team0: No ports can be present during mode change
[   52.974797][ T4356] netlink: 'syz.0.223': attribute type 10 has an invalid length.
[   53.001937][ T4356] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.003567][ T4356] team0: Port device bond0 added
[   53.021885][ T4356] vlan0: entered promiscuous mode
[   53.030576][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811be9f800: rx timeout, send abort
[   53.030666][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdbe000: abort rx timeout. Force session deactivation
[   53.054830][ T4356] team0: Port device vlan0 added
[   53.072379][ T4356] tipc: Started in network mode
[   53.072427][ T4356] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   53.072459][ T4356] tipc: Enabled bearer <eth:team0>, priority 0
[   53.265469][ T4364] EXT4-fs (loop0): invalid journal inode
[   53.265496][ T4364] EXT4-fs (loop0): can't get journal size
[   53.274189][ T4364] EXT4-fs (loop0): 1 truncate cleaned up
[   53.498490][ T4371] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.530629][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811be9f800: abort rx timeout. Force session deactivation
[   53.769599][ T4384] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   54.135804][ T4393] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   54.185410][   T11] tipc: Node number set to 11578026
[   54.470880][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a567200: rx timeout, send abort
[   54.485773][   T29] kauditd_printk_skb: 111 callbacks suppressed
[   54.485788][   T29] audit: type=1400 audit(1789975897.903:603): avc:  denied  { read } for  pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   54.485823][   T29] audit: type=1400 audit(1789975897.903:604): avc:  denied  { search } for  pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   54.485887][   T29] audit: type=1400 audit(1789975897.903:605): avc:  denied  { open } for  pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   54.485930][   T29] audit: type=1400 audit(1789975897.903:606): avc:  denied  { getattr } for  pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   54.492522][   T29] audit: type=1400 audit(1789975897.903:607): avc:  denied  { write } for  pid=4439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   54.523598][   T29] audit: type=1400 audit(1789975897.923:608): avc:  denied  { write } for  pid=4454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   54.617756][   T29] audit: type=1400 audit(1789975898.033:609): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   54.815089][   T29] audit: type=1400 audit(1789975898.203:610): avc:  denied  { create } for  pid=4463 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.815122][   T29] audit: type=1400 audit(1789975898.203:611): avc:  denied  { setopt } for  pid=4463 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.815178][   T29] audit: type=1400 audit(1789975898.213:612): avc:  denied  { create } for  pid=4463 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   54.970926][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811beb5a00: rx timeout, send abort
[   54.970967][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a567200: abort rx timeout. Force session deactivation
[   55.055043][    C0] vcan0: j1939_simple_recv: Received already invalidated message
[   55.184957][ T4474] set_capacity_and_notify: 9 callbacks suppressed
[   55.193419][ T4474] loop5: detected capacity change from 0 to 256
[   55.214757][ T4474] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   55.470981][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811beb5a00: abort rx timeout. Force session deactivation
[   56.251215][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'.
[   56.251386][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.333014][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.387334][ T4488] loop0: detected capacity change from 0 to 1764
[   56.515820][ T4520] usb usb8: usbfs: process 4520 (syz.2.253) did not claim interface 0 before use
[   57.204392][ T4551] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.256'.
[   57.306246][ T4558] loop5: detected capacity change from 0 to 8192
[   57.339200][ T4558]  loop5: p1 p2 p4
[   57.339299][ T4558] loop5: p1 start 65792 is beyond EOD, truncated
[   57.339317][ T4558] loop5: p2 size 590592 extends beyond EOD, truncated
[   57.341270][ T4558] loop5: p4 start 1073741828 is beyond EOD, truncated
[   57.388906][ T4558] batman_adv: batadv0: Adding interface: syzkaller0
[   57.388921][ T4558] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.388951][ T4558] batman_adv: batadv0: Interface activated: syzkaller0
[   57.392901][ T4563] loop1: detected capacity change from 0 to 512
[   57.490901][ T4557] batman_adv: batadv0: Interface deactivated: syzkaller0
[   57.493321][ T4557] batman_adv: batadv0: Removing interface: syzkaller0
[   57.542617][ T4563] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.657764][ T4585] syzkaller0: entered promiscuous mode
[   57.657833][ T4585] syzkaller0: entered allmulticast mode
[   58.102076][ T4591] syz.3.271: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   58.102306][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(lazy) 
[   58.102333][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.102348][ T4591] Call Trace:
[   58.102354][ T4591]  <TASK>
[   58.102362][ T4591]  __dump_stack+0x1d/0x30
[   58.102396][ T4591]  dump_stack_lvl+0x95/0xd0
[   58.102443][ T4591]  dump_stack+0x15/0x1b
[   58.102465][ T4591]  warn_alloc+0x146/0x1c0
[   58.102503][ T4591]  ? _raw_spin_unlock+0x9/0x30
[   58.102563][ T4591]  __vmalloc_node_range_noprof+0xa3/0x1000
[   58.102595][ T4591]  ? clockevents_program_event+0x2fd/0x340
[   58.102628][ T4591]  ? irqentry_exit+0x58f/0x610
[   58.102715][ T4591]  ? _raw_spin_unlock+0x9/0x30
[   58.102739][ T4591]  ? __hrtimer_rearm_deferred+0x571/0x650
[   58.102764][ T4591]  ? should_fail_ex+0x31/0x280
[   58.102789][ T4591]  ? xskq_create+0x38/0x160
[   58.102889][ T4591]  ? should_failslab+0x8c/0xb0
[   58.102922][ T4591]  ? __kmalloc_cache_noprof+0x19b/0x400
[   58.102960][ T4591]  xskq_create+0xea/0x160
[   58.103000][ T4591]  ? xsk_init_queue+0x70/0xb0
[   58.103025][ T4591]  xsk_init_queue+0x70/0xb0
[   58.103048][ T4591]  xsk_setsockopt+0x3ef/0x640
[   58.103147][ T4591]  ? __pfx_xsk_setsockopt+0x10/0x10
[   58.103173][ T4591]  __sys_setsockopt+0x184/0x200
[   58.103197][ T4591]  __x64_sys_setsockopt+0x64/0x80
[   58.103220][ T4591]  x64_sys_call+0x248f/0x2550
[   58.103296][ T4591]  do_syscall_64+0x112/0x360
[   58.103388][ T4591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.103414][ T4591] RIP: 0033:0x7fb32b20e159
[   58.103438][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.103533][ T4591] RSP: 002b:00007fb329c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   58.103556][ T4591] RAX: ffffffffffffffda RBX: 00007fb32b495fa0 RCX: 00007fb32b20e159
[   58.103572][ T4591] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   58.103585][ T4591] RBP: 00007fb32b2a506b R08: 0000000000000004 R09: 0000000000000000
[   58.103648][ T4591] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.103661][ T4591] R13: 00007fb32b496038 R14: 00007fb32b495fa0 R15: 00007ffe5414e528
[   58.103681][ T4591]  </TASK>
[   58.177718][ T4602] loop1: detected capacity change from 0 to 1164
[   58.188832][ T4591] Mem-Info:
[   58.188853][ T4591] active_anon:8702 inactive_anon:0 isolated_anon:0
[   58.188853][ T4591]  active_file:0 inactive_file:21873 isolated_file:0
[   58.188853][ T4591]  unevictable:1508 dirty:456 writeback:2
[   58.188853][ T4591]  slab_reclaimable:3301 slab_unreclaimable:16307
[   58.188853][ T4591]  mapped:31042 shmem:1840 pagetables:1308
[   58.188853][ T4591]  sec_pagetables:0 bounce:0
[   58.188853][ T4591]  kernel_misc_reclaimable:0
[   58.188853][ T4591]  free:1877168 free_pcp:11971 free_cma:0
[   58.188952][ T4591] Node 0 active_anon:34808kB inactive_anon:0kB active_file:0kB inactive_file:87492kB unevictable:6032kB isolated(anon):0kB isolated(file):0kB mapped:124168kB dirty:1824kB writeback:8kB shmem:7360kB kernel_stack:3744kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   58.189043][ T4591] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   58.189272][ T4591] lowmem_reserve[]: 0 2878 7856 7856
[   58.189532][ T4591] Node 0 DMA32 free:2943692kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947216kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[   58.189791][ T4591] lowmem_reserve[]: 0 0 4978 4978
[   58.189962][ T4591] Node 0 Normal free:4549620kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34808kB inactive_anon:0kB active_file:0kB inactive_file:87492kB unevictable:6032kB writepending:1832kB zspages:0kB present:5242880kB managed:5098228kB mlocked:6032kB bounce:0kB free_pcp:44360kB local_pcp:22236kB free_cma:0kB
[   58.190100][ T4591] lowmem_reserve[]: 0 0 0 0
[   58.192379][ T4591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   58.192938][ T4591] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 
[   58.198784][ T4602] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[   58.199218][ T4591] 3*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943692kB
[   58.199489][ T4591] Node 0 Normal: 81*4kB (UME) 392*8kB (UM) 221*16kB (UME) 177*32kB (UME) 98*64kB (UME) 108*128kB (UME) 78*256kB (UME) 7*512kB (UM) 6*1024kB (UM) 3*2048kB (ME) 1094*4096kB (M) = 4549620kB
[   58.200396][ T4591] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   58.200449][ T4591] 23711 total pagecache pages
[   58.200467][ T4591] 2 pages in swap cache
[   58.200509][ T4591] Free swap  = 124996kB
[   58.200526][ T4591] Total swap = 124996kB
[   58.200568][ T4591] 2097051 pages RAM
[   58.200588][ T4591] 0 pages HighMem/MovableOnly
[   58.203587][ T4591] 81850 pages reserved
[   58.358479][ T4606] loop1: detected capacity change from 0 to 128
[   58.359321][ T4606] FAT-fs (loop1): bogus logical sector size 0
[   58.359337][ T4606] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   58.359356][ T4606] FAT-fs (loop1): Can't find a valid FAT filesystem
[   58.381905][ T4606] loop1: detected capacity change from 0 to 764
[   58.436836][ T4604] loop0: detected capacity change from 0 to 512
[   58.506137][ T4608] ./dev/sda1: Can't lookup blockdev
[   58.548173][ T4604] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.994369][ T4622] loop0: detected capacity change from 0 to 1024
[   59.032637][ T4622] EXT4-fs: quotafile must be on filesystem root
[   59.252276][ T4626] loop0: detected capacity change from 0 to 164
[   59.463815][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.465444][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.495860][ T4635] hub 8-0:1.0: USB hub found
[   59.495993][ T4635] hub 8-0:1.0: 8 ports detected
[   59.515230][   T29] kauditd_printk_skb: 112 callbacks suppressed
[   59.515243][   T29] audit: type=1400 audit(1789975902.923:725): avc:  denied  { write } for  pid=4648 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   59.561749][   T29] audit: type=1400 audit(1789975902.973:726): avc:  denied  { create } for  pid=4631 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   60.079596][   T29] audit: type=1400 audit(1789975903.493:727): avc:  denied  { relabelfrom } for  pid=4651 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   60.079642][   T29] audit: type=1400 audit(1789975903.493:728): avc:  denied  { relabelto } for  pid=4651 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   60.083279][   T29] audit: type=1400 audit(1789975903.493:729): avc:  denied  { create } for  pid=4651 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   60.085932][   T29] audit: type=1400 audit(1789975903.503:730): avc:  denied  { allowed } for  pid=4651 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   60.095025][   T29] audit: type=1400 audit(1789975903.503:731): avc:  denied  { create } for  pid=4651 comm="syz.5.292" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   60.167163][   T29] audit: type=1400 audit(1789975903.583:732): avc:  denied  { mount } for  pid=4662 comm="syz.3.293" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   60.170869][   T29] audit: type=1400 audit(1789975903.583:733): avc:  denied  { write } for  pid=4662 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   60.170896][   T29] audit: type=1400 audit(1789975903.583:734): avc:  denied  { connect } for  pid=4662 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   60.377193][ T4670] loop5: detected capacity change from 0 to 512
[   60.679988][ T4670] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   60.735792][ T4670] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #12: block 32: comm syz.5.295: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   60.736130][ T4670] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz.5.295: directory missing '.'
[   60.803014][ T4680] loop5: detected capacity change from 0 to 164
[   63.821537][ T4700] bridge0: port 3(syz_tun) entered blocking state
[   63.822226][ T4700] bridge0: port 3(syz_tun) entered disabled state
[   63.822946][ T4700] syz_tun: entered allmulticast mode
[   63.852139][ T4700] syz_tun: entered promiscuous mode
[   63.854795][ T4700] bridge0: port 3(syz_tun) entered blocking state
[   63.855039][ T4700] bridge0: port 3(syz_tun) entered forwarding state
[   64.068503][ T4711] netlink: 'syz.2.307': attribute type 10 has an invalid length.
[   64.068608][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.068671][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.070882][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.071055][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.071235][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.071267][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.073237][ T4711] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   64.074390][ T4709] FAULT_INJECTION: forcing a failure.
[   64.074390][ T4709] name fail_futex, interval 1, probability 0, space 0, times 0
[   64.074420][ T4709] CPU: 1 UID: 0 PID: 4709 Comm: syz.5.309 Not tainted syzkaller #0 PREEMPT(lazy) 
[   64.074557][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.074574][ T4709] Call Trace:
[   64.074582][ T4709]  <TASK>
[   64.074589][ T4709]  __dump_stack+0x1d/0x30
[   64.074616][ T4709]  dump_stack_lvl+0x95/0xd0
[   64.074641][ T4709]  dump_stack+0x15/0x1b
[   64.074674][ T4709]  should_fail_ex+0x262/0x280
[   64.074721][ T4709]  should_fail+0xb/0x20
[   64.074746][ T4709]  get_futex_key+0x12d/0xb10
[   64.074778][ T4709]  futex_wake+0x89/0x400
[   64.074823][ T4709]  ? cap_capable+0x6c/0x1f0
[   64.074860][ T4709]  do_futex+0x3f8/0x460
[   64.074890][ T4709]  ? capable+0x61/0xb0
[   64.074976][ T4709]  __se_sys_futex+0x2f6/0x370
[   64.075011][ T4709]  __x64_sys_futex+0x78/0x90
[   64.075041][ T4709]  x64_sys_call+0x22e2/0x2550
[   64.075084][ T4709]  do_syscall_64+0x112/0x360
[   64.075106][ T4709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.075131][ T4709] RIP: 0033:0x7f02bb7de159
[   64.075148][ T4709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.075168][ T4709] RSP: 002b:00007f02ba2370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   64.075188][ T4709] RAX: ffffffffffffffda RBX: 00007f02bba65fa8 RCX: 00007f02bb7de159
[   64.075279][ T4709] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f02bba65fac
[   64.075293][ T4709] RBP: 00007f02bba65fa0 R08: 3fffffffffffffff R09: 0000000000000000
[   64.075307][ T4709] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   64.075322][ T4709] R13: 00007f02bba66038 R14: 00007ffcc8a9fbd0 R15: 00007ffcc8a9fcb8
[   64.075341][ T4709]  </TASK>
[   64.107671][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'.
[   64.371816][ T4717] syzkaller0: entered promiscuous mode
[   64.371836][ T4717] syzkaller0: entered allmulticast mode
[   64.415753][ T4725] program syz.2.313 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   64.454526][ T4720] loop5: detected capacity change from 0 to 128
[   64.508037][ T4720] syz.5.311: attempt to access beyond end of device
[   64.508037][ T4720] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128
[   64.509429][ T4720] syz.5.311: attempt to access beyond end of device
[   64.509429][ T4720] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128
[   64.511465][ T4720] syz.5.311: attempt to access beyond end of device
[   64.511465][ T4720] loop5: rw=8390657, sector=150, nr_sectors = 2 limit=128
[   64.511529][ T4720] Buffer I/O error on dev loop5, logical block 75, lost async page write
[   64.511658][ T4720] syz.5.311: attempt to access beyond end of device
[   64.511658][ T4720] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128
[   64.511729][ T4720] Buffer I/O error on dev loop5, logical block 76, lost async page write
[   64.528996][ T4733] file system registered
[   64.529151][   T29] kauditd_printk_skb: 87 callbacks suppressed
[   64.529162][   T29] audit: type=1400 audit(1789975907.943:822): avc:  denied  { search } for  pid=4732 comm="syz.0.315" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.529187][   T29] audit: type=1400 audit(1789975907.943:823): avc:  denied  { search } for  pid=4732 comm="syz.0.315" name="usb_gadget" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.529259][   T29] audit: type=1400 audit(1789975907.943:824): avc:  denied  { search } for  pid=4732 comm="syz.0.315" name="g1" dev="configfs" ino=9005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.529337][   T29] audit: type=1400 audit(1789975907.943:825): avc:  denied  { search } for  pid=4732 comm="syz.0.315" name="functions" dev="configfs" ino=9006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.529360][   T29] audit: type=1400 audit(1789975907.943:826): avc:  denied  { write search } for  pid=4732 comm="syz.0.315" name="functions" dev="configfs" ino=9006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.532673][   T29] audit: type=1400 audit(1789975907.943:827): avc:  denied  { create } for  pid=4732 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   64.534292][   T29] audit: type=1400 audit(1789975907.943:828): avc:  denied  { write } for  pid=4732 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   64.534697][   T29] audit: type=1400 audit(1789975907.943:829): avc:  denied  { setopt } for  pid=4735 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   64.536809][   T29] audit: type=1400 audit(1789975907.953:830): avc:  denied  { mount } for  pid=4732 comm="syz.0.315" name="/" dev="functionfs" ino=9023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[   64.540273][   T29] audit: type=1400 audit(1789975907.953:831): avc:  denied  { read write } for  pid=4735 comm="syz.2.316" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   64.571824][ T4720] syz.5.311: attempt to access beyond end of device
[   64.571824][ T4720] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128
[   64.596466][ T3296] ffs_data_put(): freeing
[   64.840908][ T4741] loop1: detected capacity change from 0 to 512
[   64.858270][ T4741] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.867942][ T4737] syz.5.311: attempt to access beyond end of device
[   64.867942][ T4737] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128
[   64.867988][ T4737] syz.5.311: attempt to access beyond end of device
[   64.867988][ T4737] loop5: rw=8390657, sector=170, nr_sectors = 2 limit=128
[   64.868011][ T4737] Buffer I/O error on dev loop5, logical block 85, lost async page write
[   64.868027][ T4737] syz.5.311: attempt to access beyond end of device
[   64.868027][ T4737] loop5: rw=8390657, sector=172, nr_sectors = 2 limit=128
[   64.868086][ T4737] Buffer I/O error on dev loop5, logical block 86, lost async page write
[   64.868101][ T4737] syz.5.311: attempt to access beyond end of device
[   64.868101][ T4737] loop5: rw=8390657, sector=174, nr_sectors = 2 limit=128
[   64.868122][ T4737] Buffer I/O error on dev loop5, logical block 87, lost async page write
[   64.948901][ T4747] 9p: Bad value for 'rfdno'
[   65.174243][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.323'.
[   65.222409][   T12] IPVS: starting estimator thread 0...
[   65.257938][ T4757] loop2: detected capacity change from 0 to 164
[   65.272630][ T4764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=4764 comm=syz.5.326
[   65.315145][ T4761] IPVS: using max 2592 ests per chain, 129600 per kthread
[   65.382507][ T4764] loop5: detected capacity change from 0 to 512
[   65.440895][ T4764] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   65.441157][ T4764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   65.466866][ T4764] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.326: bad orphan inode 131083
[   65.467030][ T4764] loop5: lost filesystem error report for type 5 error -117
[   65.798184][ T4779] loop2: detected capacity change from 0 to 164
[   65.881600][ T4779] iso9660: Corrupted directory entry in block 4 of inode 1792
[   66.191226][ T4806] loop2: detected capacity change from 0 to 128
[   66.202590][ T4806] EXT4-fs mount: 16 callbacks suppressed
[   66.202652][ T4806] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.202834][ T4806] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   66.271311][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.338469][ T4815] loop2: detected capacity change from 0 to 128
[   66.350328][ T4815] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.363554][ T4815] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.437712][ T4815] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   66.478078][ T4822] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2308.0.0), cmd(3)
[   66.537506][ T4830] 9p: Bad value for 'rfdno'
[   66.889186][ T4848] loop5: detected capacity change from 0 to 512
[   66.914116][ T4848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.914466][ T4848] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.990918][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.101164][ T4864] 9p: Bad value for 'rfdno'
[   67.122730][ T4870] xt_policy: output policy not valid in PREROUTING and INPUT
[   67.138211][ T4870] veth1_to_bond: entered allmulticast mode
[   67.141988][ T4869] veth1_to_bond: left allmulticast mode
[   67.160531][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.690792][ T4890] syzkaller0: entered promiscuous mode
[   67.690811][ T4890] syzkaller0: entered allmulticast mode
[   67.694788][ T4891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   67.710519][ T4887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.710773][ T4887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.739465][ T4887] hub 8-0:1.0: USB hub found
[   67.739582][ T4887] hub 8-0:1.0: 8 ports detected
[   67.853807][ T4904] geneve2: entered promiscuous mode
[   67.865081][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 47049 - 0
[   67.865195][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 47049 - 0
[   67.865227][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 47049 - 0
[   67.865262][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 47049 - 0
[   67.950487][ T4909] hub 1-0:1.0: USB hub found
[   67.951964][ T4909] hub 1-0:1.0: 8 ports detected
[   68.043598][ T4913] loop1: detected capacity change from 0 to 164
[   68.349447][ T4923] mmap: syz.3.387 (4923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   68.387096][ T4925] loop1: detected capacity change from 0 to 512
[   68.398728][ T4925] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   68.398810][ T4925] EXT4-fs (loop1): orphan cleanup on readonly fs
[   68.399149][ T4925] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   68.399296][ T4925] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   68.399590][ T4925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.389: bg 0: block 15: invalid block bitmap
[   68.399625][ T4925] loop1: lost filesystem error report for type 5 error -117
[   68.399743][ T4925] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   68.399761][ T4925] loop1: lost filesystem error report for type 5 error -117
[   68.400001][ T4925] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #16: comm syz.1.389: data will be lost
[   68.400090][ T4925] EXT4-fs (loop1): 1 truncate cleaned up
[   68.400571][ T4925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.520662][ T4921] SELinux: context truncated
[   68.520701][ T4921] SELinux:  invalid ocon
[   68.533593][ T4921] SELinux: failed to load policy
[   68.556979][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.787766][ T4930] PM: suspend entry (deep)
[   68.893335][   T12] Filesystems sync: 0.105 seconds
[   68.936100][ T4930] Freezing user space processes
[   68.936919][ T4900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.938486][ T4930] Freezing user space processes completed (elapsed 0.002 seconds)
[   68.938519][ T4930] OOM killer disabled.
[   68.938530][ T4930] Freezing remaining freezable tasks
[   68.940368][ T4930] Freezing remaining freezable tasks completed (elapsed 0.001 seconds)
[   68.940533][ T4930] printk: Suspending console(s) (use no_console_suspend to debug)
[   69.037537][ T4930] vhci_hcd vhci_hcd.15: suspend vhci_hcd
[   69.037782][ T4930] vhci_hcd vhci_hcd.14: suspend vhci_hcd
[   69.037935][ T4930] vhci_hcd vhci_hcd.13: suspend vhci_hcd
[   69.038080][ T4930] vhci_hcd vhci_hcd.12: suspend vhci_hcd
[   69.038213][ T4930] vhci_hcd vhci_hcd.11: suspend vhci_hcd
[   69.039074][ T4930] vhci_hcd vhci_hcd.10: suspend vhci_hcd
[   69.039151][ T4930] vhci_hcd vhci_hcd.9: suspend vhci_hcd
[   69.039314][ T4930] vhci_hcd vhci_hcd.8: suspend vhci_hcd
[   69.039412][ T4930] vhci_hcd vhci_hcd.7: suspend vhci_hcd
[   69.039449][ T4930] vhci_hcd vhci_hcd.6: suspend vhci_hcd
[   69.039486][ T4930] vhci_hcd vhci_hcd.5: suspend vhci_hcd
[   69.039559][ T4930] vhci_hcd vhci_hcd.4: suspend vhci_hcd
[   69.039600][ T4930] vhci_hcd vhci_hcd.3: suspend vhci_hcd
[   69.039648][ T4930] vhci_hcd vhci_hcd.2: suspend vhci_hcd
[   69.039840][ T4930] vhci_hcd vhci_hcd.1: suspend vhci_hcd
[   69.039943][ T4930] vhci_hcd vhci_hcd.0: suspend vhci_hcd
[   69.085175][ T4942] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   69.611149][ T4930] ACPI: PM: Preparing to enter system sleep state S3
[   69.611362][ T4930] ACPI: PM: Saving platform NVS memory
[   69.611530][ T4930] Disabling non-boot CPUs ...
[   69.620010][ T4930] smpboot: CPU 1 is now offline
[   69.631681][ T4930] ACPI: PM: Low-level resume complete
[   69.631726][ T4930] ACPI: PM: Restoring platform NVS memory
[   69.648992][ T4930] Enabling non-boot CPUs ...
[   69.649350][ T4930] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   69.653328][ T4930] CPU1 is up
[   69.653551][ T4930] ACPI: PM: Waking up from system sleep state S3
[   69.694976][ T4943] virtio_scsi virtio0: 1/0/0 default/read/poll queues
[   69.875157][ T4930] OOM killer enabled.
[   69.875204][ T4930] Restarting tasks: Starting
[   69.899727][ T4930] Restarting tasks: Done
[   69.899943][ T4930] random: crng reseeded on system resumption
[   69.904177][ T4930] PM: suspend exit
[   69.951295][   T29] kauditd_printk_skb: 243 callbacks suppressed
[   69.951308][   T29] audit: type=1400 audit(1789975913.388:1074): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   69.987655][ T5021] bridge0: port 3(syz_tun) entered blocking state
[   69.988035][ T5021] bridge0: port 3(syz_tun) entered disabled state
[   69.988912][ T5021] syz_tun: entered allmulticast mode
[   69.989193][ T5016] FAULT_INJECTION: forcing a failure.
[   69.989193][ T5016] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   69.989222][ T5016] CPU: 0 UID: 0 PID: 5016 Comm: syz.0.392 Not tainted syzkaller #0 PREEMPT(lazy) 
[   69.989244][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   69.989260][ T5016] Call Trace:
[   69.989266][ T5016]  <TASK>
[   69.989273][ T5016]  __dump_stack+0x1d/0x30
[   69.989341][ T5016]  dump_stack_lvl+0x95/0xd0
[   69.989365][ T5016]  dump_stack+0x15/0x1b
[   69.989388][ T5016]  should_fail_ex+0x262/0x280
[   69.989469][ T5016]  should_fail+0xb/0x20
[   69.989501][ T5016]  should_fail_usercopy+0x1a/0x20
[   69.989531][ T5016]  set_fd_set+0x29/0x90
[   69.989632][ T5016]  core_sys_select+0x5aa/0x730
[   69.989678][ T5016]  ? timespec64_add_safe+0x106/0x150
[   69.989710][ T5016]  __se_sys_pselect6+0x23f/0x2a0
[   69.989734][ T5016]  __x64_sys_pselect6+0x78/0x90
[   69.989758][ T5016]  x64_sys_call+0x1dfc/0x2550
[   69.989836][ T5016]  do_syscall_64+0x112/0x360
[   69.989859][ T5016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.989885][ T5016] RIP: 0033:0x7ff66947e159
[   69.989903][ T5016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.989923][ T5016] RSP: 002b:00007ff667ed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   69.990007][ T5016] RAX: ffffffffffffffda RBX: 00007ff669705fa0 RCX: 00007ff66947e159
[   69.990020][ T5016] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000
[   69.990032][ T5016] RBP: 00007ff66951506b R08: 0000200000000280 R09: 0000000000000000
[   69.990044][ T5016] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[   69.990056][ T5016] R13: 00007ff669706038 R14: 00007ff669705fa0 R15: 00007ffed6809718
[   69.990103][ T5016]  </TASK>
[   69.992790][ T5021] syz_tun: entered promiscuous mode
[   69.993844][ T5021] bridge0: port 3(syz_tun) entered blocking state
[   69.994104][ T5021] bridge0: port 3(syz_tun) entered forwarding state
[   70.065015][ T5027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=5027 comm=syz.2.399
[   70.217488][ T5027] loop2: detected capacity change from 0 to 512
[   70.254038][ T5027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   70.282025][   T29] audit: type=1400 audit(1789975913.718:1075): avc:  denied  { lock } for  pid=5038 comm="syz.0.403" path="socket:[10512]" dev="sockfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   70.288491][ T5027] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.399: bad orphan inode 131083
[   70.288568][ T5027] loop2: lost filesystem error report for type 5 error -117
[   70.302242][ T5027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.302659][   T29] audit: type=1400 audit(1789975913.738:1076): avc:  denied  { rename } for  pid=5022 comm="syz.1.398" name="file0" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1
[   70.302719][   T29] audit: type=1400 audit(1789975913.738:1077): avc:  denied  { unlink } for  pid=5022 comm="syz.1.398" name="file0" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1
[   70.313995][   T29] audit: type=1400 audit(1789975913.748:1078): avc:  denied  { write } for  pid=5026 comm="syz.2.399" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.336292][   T29] audit: type=1400 audit(1789975913.778:1079): avc:  denied  { write } for  pid=5026 comm="syz.2.399" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.339940][   T29] audit: type=1400 audit(1789975913.778:1080): avc:  denied  { write } for  pid=5026 comm="syz.2.399" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.436381][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[   70.468332][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.496710][   T29] audit: type=1400 audit(1789975913.938:1081): avc:  denied  { name_connect } for  pid=5043 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   70.547607][   T29] audit: type=1400 audit(1789975913.988:1082): avc:  denied  { map } for  pid=5052 comm="syz.0.408" path="socket:[10530]" dev="sockfs" ino=10530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.547695][   T29] audit: type=1400 audit(1789975913.988:1083): avc:  denied  { read } for  pid=5052 comm="syz.0.408" path="socket:[10530]" dev="sockfs" ino=10530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.747018][ T5067] loop2: detected capacity change from 0 to 512
[   70.773336][ T5067] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   70.773423][ T5067] EXT4-fs (loop2): orphan cleanup on readonly fs
[   70.773563][ T5067] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   70.773722][ T5067] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   70.774564][ T5067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.406: bg 0: block 15: invalid block bitmap
[   70.774667][ T5067] loop2: lost filesystem error report for type 5 error -117
[   70.774806][ T5067] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   70.774824][ T5067] loop2: lost filesystem error report for type 5 error -117
[   70.776189][ T5067] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #16: comm syz.2.406: data will be lost
[   70.776291][ T5067] EXT4-fs (loop2): 1 truncate cleaned up
[   70.776682][ T5067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   70.879146][ T5071] hub 1-0:1.0: USB hub found
[   70.879364][ T5071] hub 1-0:1.0: 8 ports detected
[   71.182110][ T5067] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[   71.182203][ T5067] SELinux: failed to load policy
[   71.301818][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.347779][ T5081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=5081 comm=syz.3.417
[   71.493084][ T5082] loop2: detected capacity change from 0 to 2048
[   71.579097][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.589387][ T5082] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   71.590127][ T5082] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   71.591519][ T5082] EXT4-fs (loop2): Remounting filesystem read-only
[   71.591615][ T5082] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.2.427: cleanup dec ref error -28
[   71.606098][ T5089] xt_policy: output policy not valid in PREROUTING and INPUT
[   71.631035][ T5089] veth1_to_bond: entered allmulticast mode
[   71.633563][ T5088] veth1_to_bond: left allmulticast mode
[   71.654629][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.238069][ T5087] bridge0: port 3(syz_tun) entered disabled state
[   72.239986][ T5087] syz_tun (unregistering): left allmulticast mode
[   72.240006][ T5087] syz_tun (unregistering): left promiscuous mode
[   72.240074][ T5087] bridge0: port 3(syz_tun) entered disabled state
[   72.362101][ T4966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.362159][ T4966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47049 - 0
[   72.411099][ T4966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.411202][ T4966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47049 - 0
[   72.427787][ T5119] vcan0: tx address claim with dlc 0
[   72.465123][ T4966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.465231][ T4966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47049 - 0
[   72.602414][ T5132] xt_policy: output policy not valid in PREROUTING and INPUT
[   72.629962][ T5132] veth1_to_bond: entered allmulticast mode
[   72.640009][ T4966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.640049][ T4966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47049 - 0
[   72.648219][ T5131] veth1_to_bond: left allmulticast mode
[   72.668458][ T5130] loop2: detected capacity change from 0 to 128
[   72.712453][ T5130] syz.2.433: attempt to access beyond end of device
[   72.712453][ T5130] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128
[   72.718179][ T5130] syz.2.433: attempt to access beyond end of device
[   72.718179][ T5130] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128
[   72.721713][ T5130] syz.2.433: attempt to access beyond end of device
[   72.721713][ T5130] loop2: rw=8390657, sector=150, nr_sectors = 2 limit=128
[   72.721805][ T5130] Buffer I/O error on dev loop2, logical block 75, lost async page write
[   72.721893][ T5130] syz.2.433: attempt to access beyond end of device
[   72.721893][ T5130] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128
[   72.721923][ T5130] Buffer I/O error on dev loop2, logical block 76, lost async page write
[   72.737914][ T4966] bridge_slave_1: left allmulticast mode
[   72.737936][ T4966] bridge_slave_1: left promiscuous mode
[   72.738067][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.739207][ T4966] bridge_slave_0: left allmulticast mode
[   72.739224][ T4966] bridge_slave_0: left promiscuous mode
[   72.739363][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.745895][ T5130] syz.2.433: attempt to access beyond end of device
[   72.745895][ T5130] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128
[   72.747786][ T5130] syz.2.433: attempt to access beyond end of device
[   72.747786][ T5130] loop2: rw=8390657, sector=174, nr_sectors = 2 limit=128
[   72.747954][ T5130] Buffer I/O error on dev loop2, logical block 87, lost async page write
[   72.748096][ T5130] syz.2.433: attempt to access beyond end of device
[   72.748096][ T5130] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128
[   72.748124][ T5130] Buffer I/O error on dev loop2, logical block 88, lost async page write
[   72.749762][ T5130] syz.2.433: attempt to access beyond end of device
[   72.749762][ T5130] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128
[   72.751291][ T5130] syz.2.433: attempt to access beyond end of device
[   72.751291][ T5130] loop2: rw=8390657, sector=182, nr_sectors = 2 limit=128
[   72.751360][ T5130] Buffer I/O error on dev loop2, logical block 91, lost async page write
[   72.751420][ T5130] syz.2.433: attempt to access beyond end of device
[   72.751420][ T5130] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128
[   72.751461][ T5130] Buffer I/O error on dev loop2, logical block 92, lost async page write
[   72.776444][ T5130] Buffer I/O error on dev loop2, logical block 103, lost async page write
[   72.776692][ T5130] Buffer I/O error on dev loop2, logical block 104, lost async page write
[   72.815341][ T5143] loop5: detected capacity change from 0 to 164
[   72.823993][ T4966] team0: Port device bond0 removed
[   72.837467][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.841679][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.842495][ T4966] bond0 (unregistering): Released all slaves
[   72.877147][ T5147] netlink: 32 bytes leftover after parsing attributes in process `syz.5.439'.
[   72.888748][ T5147] loop5: detected capacity change from 0 to 512
[   72.894917][ T4966] tipc: Disabling bearer <eth:team0>
[   72.896571][ T4966] tipc: Left network mode
[   72.901991][ T5147] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   72.902012][ T5147] EXT4-fs (loop5): inodes count not valid: 4072 vs 32
[   72.919023][ T4966] hsr_slave_0: left promiscuous mode
[   72.920329][ T4966] hsr_slave_1: left promiscuous mode
[   72.920685][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.920699][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.922048][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.922062][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.935041][ T4966] veth1_macvtap: left promiscuous mode
[   72.935065][ T4966] veth0_macvtap: left promiscuous mode
[   72.935107][ T4966] veth1_vlan: left promiscuous mode
[   73.008985][ T4966] team0 (unregistering): Port device vlan0 removed
[   73.036558][ T4966] team0 (unregistering): Port device team_slave_1 removed
[   73.041919][ T4966] team0 (unregistering): Port device team_slave_0 removed
[   73.309004][ T5130] Buffer I/O error on dev loop2, logical block 85, lost async page write
[   73.309036][ T5130] Buffer I/O error on dev loop2, logical block 86, lost async page write
[   73.376659][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9
[   73.393788][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.393817][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.393867][ T5121] bridge_slave_0: entered allmulticast mode
[   73.398933][ T5121] bridge_slave_0: entered promiscuous mode
[   73.400880][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.400911][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.400963][ T5121] bridge_slave_1: entered allmulticast mode
[   73.401403][ T5121] bridge_slave_1: entered promiscuous mode
[   73.432580][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.433668][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.457643][ T5121] team0: Port device team_slave_0 added
[   73.458723][ T5121] team0: Port device team_slave_1 added
[   73.468735][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.468751][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.468781][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.469399][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.469412][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.469443][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.491082][ T5121] hsr_slave_0: entered promiscuous mode
[   73.491470][ T5121] hsr_slave_1: entered promiscuous mode
[   73.578718][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10
[   73.583255][ T5121] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   73.586663][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   73.587339][ T5121] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   73.589118][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   73.589565][ T5121] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   73.591100][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   73.591828][ T5121] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   73.594969][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   73.606582][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.606610][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.606910][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.606952][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.630198][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.637498][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.638344][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.646282][ T5121] 8021q: adding VLAN 0 to HW filter on device team0
[   73.649937][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.649973][ T4960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.656869][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.656905][ T4960] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.729263][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11
[   73.763495][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.839083][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12
[   73.876304][ T5121] veth0_vlan: entered promiscuous mode
[   73.878968][ T5121] veth1_vlan: entered promiscuous mode
[   73.891941][ T5121] veth0_macvtap: entered promiscuous mode
[   73.893415][ T5121] veth1_macvtap: entered promiscuous mode
[   73.901695][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.906530][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.942175][ T4978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.942432][ T4978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.942464][ T4978] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.942575][ T4978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.995587][ T5261] loop6: detected capacity change from 0 to 512
[   74.084172][ T5261] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.431: iget: bad i_size value: 38620345925642
[   74.084383][ T5261] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.086401][ T5261] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.431: couldn't read orphan inode 15 (err -117)
[   74.086505][ T5261] loop6: lost filesystem error report for type 5 error -117
[   74.087636][    C1] EXT4-fs (loop6): error count since last fsck: 2
[   74.087685][    C1] EXT4-fs (loop6): initial error at time 1789975917: ext4_orphan_get:1403: inode 15
[   74.087771][    C1] EXT4-fs (loop6): last error at time 1789975917: ext4_orphan_get:1408
[   74.150733][ T5258] loop2: detected capacity change from 0 to 1024
[   74.161925][ T5258] EXT4-fs: Ignoring removed orlov option
[   74.163389][ T5258] EXT4-fs: Ignoring removed orlov option
[   74.184990][ T5265] loop5: detected capacity change from 0 to 2048
[   74.191152][ T5261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.353590][ T4965] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm kworker/u8:41: bg 0: block 5: invalid block bitmap
[   74.355122][ T4965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[   74.355164][ T4965] EXT4-fs (loop6): This should not happen!! Data will be lost
[   74.355164][ T4965] 
[   74.355175][ T4965] EXT4-fs (loop6): Total free blocks count 0
[   74.355196][ T4965] EXT4-fs (loop6): Free/Dirty block details
[   74.355223][ T4965] EXT4-fs (loop6): free_blocks=0
[   74.355241][ T4965] EXT4-fs (loop6): dirty_blocks=1
[   74.355323][ T4965] EXT4-fs (loop6): Block reservation details
[   74.355448][ T4965] EXT4-fs (loop6): i_reserved_data_blocks=1
[   74.357813][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.367298][ T5265] Alternate GPT is invalid, using primary GPT.
[   74.367836][ T5265]  loop5: p2 p3 p7
[   74.493372][ T5258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.582468][ T5258] random: crng reseeded on system resumption
[   74.618162][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.637564][ T5280] xt_policy: output policy not valid in PREROUTING and INPUT
[   74.645013][ T5280] veth1_to_bond: entered allmulticast mode
[   74.647659][ T5279] veth1_to_bond: left allmulticast mode
[   74.779708][ T5284] loop2: detected capacity change from 0 to 1024
[   74.788863][ T5284] EXT4-fs: Ignoring removed orlov option
[   74.789144][ T5284] EXT4-fs: Ignoring removed orlov option
[   74.847373][ T5284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.855953][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'.
[   74.916782][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.956858][ T5295] loop2: detected capacity change from 0 to 512
[   74.973996][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.974110][ T5295] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.040095][ T4965] IPVS: starting estimator thread 0...
[   75.057059][   T29] kauditd_printk_skb: 347 callbacks suppressed
[   75.057075][   T29] audit: type=1400 audit(1789975918.539:1430): avc:  denied  { write } for  pid=5294 comm="syz.2.455" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.059915][   T29] audit: type=1400 audit(1789975918.539:1431): avc:  denied  { write } for  pid=5294 comm="syz.2.455" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   75.059942][   T29] audit: type=1400 audit(1789975918.549:1432): avc:  denied  { open } for  pid=5294 comm="syz.2.455" path="/88/file0/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   75.126933][ T5304] IPVS: using max 2736 ests per chain, 136800 per kthread
[   75.139340][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.156797][   T29] audit: type=1400 audit(1789975918.652:1433): avc:  denied  { unmount } for  pid=3746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   75.183626][   T29] audit: type=1400 audit(1789975918.673:1434): avc:  denied  { write } for  pid=5312 comm="syz.3.461" name="file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   75.196550][ T5314] xt_policy: output policy not valid in PREROUTING and INPUT
[   75.199951][ T5314] veth1_to_bond: entered allmulticast mode
[   75.200914][ T5313] veth1_to_bond: left allmulticast mode
[   75.325538][ T5321] loop2: detected capacity change from 0 to 128
[   75.350873][ T5321] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   75.352244][ T5321] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   75.361121][ T5321] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.464'.
[   75.361151][ T5321] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.464'.
[   75.368493][   T29] audit: type=1400 audit(1789975918.858:1435): avc:  denied  { write } for  pid=5320 comm="syz.2.464" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.425822][   T29] audit: type=1400 audit(1789975918.920:1436): avc:  denied  { bind } for  pid=5316 comm="syz.5.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   75.425902][   T29] audit: type=1400 audit(1789975918.920:1437): avc:  denied  { name_bind } for  pid=5316 comm="syz.5.462" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   75.425993][   T29] audit: type=1400 audit(1789975918.920:1438): avc:  denied  { node_bind } for  pid=5316 comm="syz.5.462" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   75.613854][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   75.685736][ T5328] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[   75.755500][ T5328] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.765257][ T5328] ext2 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.845687][   T29] audit: type=1400 audit(1789975919.352:1440): avc:  denied  { mount } for  pid=5332 comm="syz.2.466" name="/" dev="autofs" ino=10217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   75.931318][ T5121] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.847376][ T5355] xt_policy: output policy not valid in PREROUTING and INPUT
[   76.899568][ T5360] set_capacity_and_notify: 1 callbacks suppressed
[   76.899592][ T5360] loop2: detected capacity change from 0 to 512
[   76.908361][ T5355] veth1_to_bond: entered allmulticast mode
[   76.920415][ T5360] EXT4-fs (loop2): invalid journal inode
[   76.920514][ T5360] EXT4-fs (loop2): can't get journal size
[   76.921153][ T5351] veth1_to_bond: left allmulticast mode
[   76.932406][ T5360] EXT4-fs (loop2): 1 truncate cleaned up
[   76.936343][ T5360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.959225][ T5360] netlink: 'syz.2.476': attribute type 8 has an invalid length.
[   76.974351][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.076520][ T5368] loop6: detected capacity change from 0 to 512
[   77.086455][ T5368] ext4: Unknown parameter ''
[   77.284882][ T5364] loop5: detected capacity change from 0 to 512
[   77.308504][ T5364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.309469][ T5364] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.423668][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.133556][ T5394] xt_policy: output policy not valid in PREROUTING and INPUT
[   78.141447][ T5394] veth1_to_bond: entered allmulticast mode
[   78.142510][ T5393] veth1_to_bond: left allmulticast mode
[   78.210942][ T5396] netlink: 'syz.3.491': attribute type 8 has an invalid length.
[   78.254861][ T5398] loop5: detected capacity change from 0 to 512
[   78.261366][ T5398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   78.275927][ T5398] EXT4-fs (loop5): 1 truncate cleaned up
[   78.285403][ T5398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.317021][ T5400] syz_tun: entered allmulticast mode
[   78.464907][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.480534][ T5407] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'.
[   78.482444][ T5405] netlink: 48 bytes leftover after parsing attributes in process `syz.2.494'.
[   78.498069][ T5405] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   78.886762][ T5414] loop2: detected capacity change from 0 to 164
[   78.887246][ T5414] iso9660: Unknown parameter 'map8acorn'
[   78.943746][ T5407] loop5: detected capacity change from 0 to 512
[   79.002921][ T5407] EXT4-fs (loop5): 1 orphan inode deleted
[   79.010058][ T5407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.011524][ T5407] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.021438][   T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1
[   79.038475][ T3746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.285373][ T5432] netlink: 96 bytes leftover after parsing attributes in process `syz.1.503'.
[   79.308126][ T5432] vlan2: entered allmulticast mode
[   79.308175][ T5432] syz_tun: entered allmulticast mode
[   79.393731][ T5436] bridge0: port 3(syz_tun) entered blocking state
[   79.394016][ T5436] bridge0: port 3(syz_tun) entered disabled state
[   79.401835][ T5436] syz_tun: entered promiscuous mode
[   79.403435][ T5436] bridge0: port 3(syz_tun) entered blocking state
[   79.403718][ T5436] bridge0: port 3(syz_tun) entered forwarding state
[   80.235704][ T5449] loop6: detected capacity change from 0 to 2048
[   80.269871][ T5449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.287237][   T29] kauditd_printk_skb: 16 callbacks suppressed
[   80.287253][   T29] audit: type=1400 audit(1789975923.899:1455): avc:  denied  { write } for  pid=5448 comm="syz.6.507" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.305227][   T29] audit: type=1400 audit(1789975923.920:1456): avc:  denied  { write } for  pid=5448 comm="syz.6.507" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.305312][   T29] audit: type=1400 audit(1789975923.920:1457): avc:  denied  { write } for  pid=5448 comm="syz.6.507" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.306189][ T5449] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   80.306404][ T5449] EXT4-fs (loop6): Remounting filesystem read-only
[   80.348457][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.691968][ T5467] loop6: detected capacity change from 0 to 512
[   80.737181][ T5467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.738004][ T5467] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.790679][ T5446] infiniband syz0: set active
[   80.791660][ T5446] infiniband syz0: added bond0
[   80.804912][ T5446] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[   80.810628][ T5446] infiniband syz0: Couldn't open port 1
[   80.852970][ T5446] RDS/IB: syz0: added
[   80.852988][ T5446] smc: adding ib device syz0 with port count 1
[   80.853000][ T5446] smc:    ib device syz0 port 1 has no pnetid
[   80.930122][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.514'.
[   80.934622][ T5475] netlink: 'syz.5.514': attribute type 1 has an invalid length.
[   80.937166][ T5475] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.514'.
[   81.014887][   T29] audit: type=1400 audit(1789975924.644:1458): avc:  denied  { name_bind } for  pid=5476 comm="syz.1.515" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[   81.467173][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.629054][ T5495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5495 comm=syz.3.520
[   81.662677][   T29] audit: type=1400 audit(1789975925.307:1459): avc:  denied  { setopt } for  pid=5498 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.666161][   T29] audit: type=1400 audit(1789975925.307:1460): avc:  denied  { write } for  pid=5498 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.786648][ T5505] FAULT_INJECTION: forcing a failure.
[   81.786648][ T5505] name failslab, interval 1, probability 0, space 0, times 1
[   81.786678][ T5505] CPU: 0 UID: 0 PID: 5505 Comm: syz.2.523 Not tainted syzkaller #0 PREEMPT(lazy) 
[   81.786710][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.786731][ T5505] Call Trace:
[   81.786739][ T5505]  <TASK>
[   81.786748][ T5505]  __dump_stack+0x1d/0x30
[   81.786777][ T5505]  dump_stack_lvl+0x95/0xd0
[   81.786803][ T5505]  dump_stack+0x15/0x1b
[   81.786869][ T5505]  should_fail_ex+0x262/0x280
[   81.786896][ T5505]  should_failslab+0x8c/0xb0
[   81.786929][ T5505]  __kvmalloc_node_noprof+0x168/0x5c0
[   81.786992][ T5505]  ? alloc_fdtable+0x115/0x1d0
[   81.787012][ T5505]  ? alloc_fdtable+0x115/0x1d0
[   81.787073][ T5505]  alloc_fdtable+0x115/0x1d0
[   81.787094][ T5505]  dup_fd+0x4ae/0x530
[   81.787125][ T5505]  __se_sys_close_range+0x10e/0x4e0
[   81.787155][ T5505]  ? xfd_validate_state+0x45/0xf0
[   81.787186][ T5505]  ? restore_fpregs_from_fpstate+0x61/0x110
[   81.787240][ T5505]  __x64_sys_close_range+0x43/0x50
[   81.787265][ T5505]  x64_sys_call+0x2198/0x2550
[   81.787363][ T5505]  do_syscall_64+0x112/0x360
[   81.787407][ T5505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.787431][ T5505] RIP: 0033:0x7f2b2586e159
[   81.787447][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.787465][ T5505] RSP: 002b:00007f2b242c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   81.787488][ T5505] RAX: ffffffffffffffda RBX: 00007f2b25af5fa0 RCX: 00007f2b2586e159
[   81.787555][ T5505] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000003
[   81.787569][ T5505] RBP: 00007f2b2590506b R08: 0000000000000000 R09: 0000000000000000
[   81.787584][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.787596][ T5505] R13: 00007f2b25af6038 R14: 00007f2b25af5fa0 R15: 00007ffde55b8748
[   81.787628][ T5505]  </TASK>
[   81.818122][   T29] audit: type=1400 audit(1789975925.439:1461): avc:  denied  { ioctl } for  pid=5502 comm="syz.1.522" path="socket:[11518]" dev="sockfs" ino=11518 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.908918][   T29] audit: type=1400 audit(1789975925.562:1462): avc:  denied  { mounton } for  pid=5506 comm="syz.2.524" path="/" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   81.938549][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[   81.938747][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'.
[   81.969317][   T29] audit: type=1400 audit(1789975925.623:1463): avc:  denied  { write } for  pid=5508 comm="syz.5.525" path="socket:[11558]" dev="sockfs" ino=11558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   82.312557][ T5520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.528'.
[   82.365289][   T29] audit: type=1400 audit(1789975926.020:1464): avc:  denied  { compute_member } for  pid=5522 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   82.501729][ T5530] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.531'.
[   82.560183][ T5536] loop6: detected capacity change from 0 to 128
[   82.577401][ T5536] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   82.580732][ T4966] ==================================================================
[   82.580764][ T4966] BUG: KCSAN: data-race in probe_sched_switch / tracing_stop_cmdline_record
[   82.580800][ T4966] 
[   82.580805][ T4966] read-write to 0xffffffff895fc1e0 of 4 bytes by task 5528 on cpu 1:
[   82.580820][ T4966]  tracing_stop_cmdline_record+0x28/0xc0
[   82.580852][ T4966]  __ftrace_event_enable_disable+0x323/0x4b0
[   82.580880][ T4966]  __ftrace_set_clr_event_nolock+0x39e/0x820
[   82.580910][ T4966]  ftrace_set_clr_event+0x2a6/0x340
[   82.580936][ T4966]  ftrace_event_write+0x170/0x1d0
[   82.580954][ T4966]  vfs_write+0x254/0x9a0
[   82.580978][ T4966]  ksys_write+0xdc/0x1a0
[   82.581002][ T4966]  __x64_sys_write+0x40/0x50
[   82.581026][ T4966]  x64_sys_call+0x154e/0x2550
[   82.581048][ T4966]  do_syscall_64+0x112/0x360
[   82.581063][ T4966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.581082][ T4966] 
[   82.581086][ T4966] read to 0xffffffff895fc1e0 of 4 bytes by task 4966 on cpu 0:
[   82.581100][ T4966]  probe_sched_switch+0x46/0xa0
[   82.581116][ T4966]  __schedule+0xc34/0xd20
[   82.581134][ T4966]  schedule+0x5b/0xa0
[   82.581151][ T4966]  schedule_timeout+0x53/0x180
[   82.581167][ T4966]  wait_for_common+0xef/0x1d0
[   82.581187][ T4966]  __synchronize_srcu+0x125/0x160
[   82.581204][ T4966]  synchronize_srcu+0x1bd/0x1d0
[   82.581220][ T4966]  fsnotify_connector_destroy_workfn+0x4e/0x90
[   82.581245][ T4966]  process_scheduled_works+0x56a/0xa50
[   82.581309][ T4966]  worker_thread+0x569/0x750
[   82.581335][ T4966]  kthread+0x223/0x270
[   82.581352][ T4966]  ret_from_fork+0x146/0x330
[   82.581378][ T4966]  ret_from_fork_asm+0x1a/0x30
[   82.581399][ T4966] 
[   82.581402][ T4966] value changed: 0x00000001 -> 0x00000000
[   82.581412][ T4966] 
[   82.581415][ T4966] Reported by Kernel Concurrency Sanitizer on:
[   82.581424][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(lazy) 
[   82.581446][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.581458][ T4966] Workqueue: events_unbound fsnotify_connector_destroy_workfn
[   82.581483][ T4966] ==================================================================
[   82.581653][ T5536] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.317244][ T5121] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.577527][   T29] kauditd_printk_skb: 7 callbacks suppressed
[   85.577543][   T29] audit: type=1400 audit(1789975929.293:1472): avc:  denied  { write } for  pid=5583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.595608][   T29] audit: type=1400 audit(1789975929.313:1473): avc:  denied  { write } for  pid=5594 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1