last executing test programs:

5m48.356466879s ago: executing program 32 (id=47):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000000})
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})

5m34.495683108s ago: executing program 33 (id=130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc}, 0x94)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0)
fchdir(r2)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7)
sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40050)
keyctl$assume_authority(0x10, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x44)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000340)=0x3200)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c0001"], 0xb8}}, 0x0)

5m34.41992235s ago: executing program 34 (id=133):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x6}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6(0xa, 0x3, 0x87)
socket$nl_route(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000280)='\x00', 0x1, 0x4000014, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001200000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

5m4.261301405s ago: executing program 35 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0xc0c9, 0x3, 0x0, 0x9, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6dffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x60, 0x6, 0x5, 0xfe, 0x0, 0xb, 0x40026, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000003c0), 0x5}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000020000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084000000001080002400000000208000540000000"], 0x9c}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)="50d70b", 0x3}], 0x1}, 0x8001)
ioctl$SIOCSIFHWADDR(r7, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
pipe2$9p(0x0, 0x80800)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x6d, 0x1}, 0x7)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000100)={[{@check_relaxed}, {@check_strict}, {@hide}, {}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
ioctl$FIBMAP(r9, 0x1, &(0x7f0000000180)=0x9)

4m36.57651271s ago: executing program 36 (id=574):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x33680}], 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="ad", 0x1}], 0x1}}], 0x3, 0x8080)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102270, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x5, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x2)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10)
listen(r1, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3100}, [@RTA_MARK={0x8, 0x10, 0xffffffff}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0)

3m40.583499582s ago: executing program 37 (id=1249):
socket(0xa, 0x3, 0x3a)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40002160)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

2m27.355264908s ago: executing program 38 (id=1786):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x20)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0/file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

1m45.665072137s ago: executing program 39 (id=2120):
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000400)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @loopback, 0x2}, {0xa, 0x4e22, 0x7, @remote, 0x9f93}, r1, 0x7}}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m36.4000943s ago: executing program 40 (id=2193):
prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0xa2ae}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890)
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000400000004000000"], 0x50)
set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5)
ioperm(0x2, 0x7ff, 0x8)
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x9, 0x6, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, 0x0, &(0x7f0000000180))
socket$inet(0x2, 0x2, 0x1)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1fd)

1m30.750545899s ago: executing program 4 (id=2226):
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003800000000000198780a010100ac1414aa04009078000000004518000b0065000902960101ffffffffac1414aa0200000005008000c0cff422fc1b4c"], 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, 0x0, 0x0)
recvmsg(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x40002160)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x44044)
socketpair(0x1d, 0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

1m30.7148806s ago: executing program 4 (id=2227):
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x404ff7, 0xb4, "20cd0045000000ffff0000000000001000", 0x1e, 0xdb28})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffc0, 0x7b6b9b2bf3aa0dd2)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)

1m30.207531416s ago: executing program 4 (id=2231):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x195be}]}]}]}, 0x38}}, 0x0)

1m28.546435789s ago: executing program 4 (id=2240):
r0 = socket(0x1d, 0x80802, 0x6)
bind$can_j1939(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
unshare(0x22020600)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x3e0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)={0xb, 0x0, {0x1, 0x2, 0x80, 0x1, 0x4}, 0x6})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_bp={0x0, 0x1}, 0xb093, 0x800000, 0x5, 0x2, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x98}}, 0x0)

1m28.17251974s ago: executing program 4 (id=2244):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402)
writev(r0, &(0x7f0000000000), 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002a00)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{}, 0x2, 0x0, [{0xd6, 0x24000000, 0x19, 0x4, 0x1fe, 0x1}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x28)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

1m27.612208728s ago: executing program 4 (id=2248):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r4, 0x5}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001780)={r4, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, [0x9, 0xffffffffffffffff, 0x7fff, 0x4, 0x9, 0x3c4, 0x0, 0x9, 0xb21b, 0x5, 0x100000001, 0x7, 0x2, 0xfffffffffffff800, 0xb1aa]}, &(0x7f0000000240)=0x100)

1m27.530326901s ago: executing program 41 (id=2248):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r4, 0x5}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001780)={r4, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, [0x9, 0xffffffffffffffff, 0x7fff, 0x4, 0x9, 0x3c4, 0x0, 0x9, 0xb21b, 0x5, 0x100000001, 0x7, 0x2, 0xfffffffffffff800, 0xb1aa]}, &(0x7f0000000240)=0x100)

58.543262068s ago: executing program 8 (id=2444):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xc, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000000000020001fe8000000000000000000000000000bbff020000000000000000000000000001000078565c944e7e8ddacc4e22ff3b3fb3e187872cc01da17b22b6bac005a5d999fa5956b3c5221d92039279c0d59f1d0527813227fea9caf4b526a822ca8579b17a9335bf7d2e7594", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5018000090780000"], 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, &(0x7f0000001080))
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000050)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0x4d}, 0x1c, 0x0}, 0xc0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "f19b0eb8a50d3d6fb3cd4eee9b283ebbb29f3006013aba37263b8b47da94eaa0b4055f0fc0d5129e7853726b14099643c354b7af00f1ff00", 0x3f}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r7})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r6})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001d00010002000000000000040a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0)
ioctl$OCFS2_IOC_UNRESVSP64(r8, 0x4030582b, &(0x7f0000000240)={0x0, 0x1, 0x10, 0x100000001, 0x41, 0x6})

58.228059688s ago: executing program 8 (id=2445):
prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
brk(0x20000000000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0)}, 0xc30c, 0x0, 0x43a1bd78, 0x6, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000001700000040"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x0, 0x9dc5, 0x5, 0x0, 0x8})

58.180794689s ago: executing program 8 (id=2446):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_read_part_table(0x105d, &(0x7f0000002700)="$eJzsz7FtwkAYBeDnS2L5lCJVRogyETUlEiUs4IaKgjlgEyZhDCOwzQhA8X3Nnd6TnvSHl2rarJcf/0lqkv4RT+/n0CQlh813ku0qSTsWNanlL0n5uXzdgm4/FufjvNHOI+maod4/fbrsfjNMeVmcnnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy9awAAAP//h8AL7A==")
mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0xa018)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x154)
socket(0x2b, 0x80801, 0x1)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')

57.21041951s ago: executing program 8 (id=2454):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f00000001c0)="02", 0x34000, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfffffff8, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

54.148998897s ago: executing program 8 (id=2459):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0xc81e9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7fff, 0x1}, 0x4846, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket(0x11, 0x3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
recvmsg$can_j1939(r3, &(0x7f00000007c0)={&(0x7f0000000180), 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000580)=""/125, 0x7d}], 0x2, &(0x7f00000006c0)=""/205, 0xcd}, 0xab5d16caa580482c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d)
sendmmsg(r3, &(0x7f0000000080)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x66}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2, 0x0, 0x30000}}], 0x1, 0x24044015)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)

54.090390699s ago: executing program 8 (id=2461):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x5393, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpgrp(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20008000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
getpgrp(0x0)
lstat(&(0x7f0000001d40)='./cgroup\x00', &(0x7f0000001d80))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x8}, 0x28)
getpid()
r7 = getuid()
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r7, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e80), &(0x7f0000001ec0)=0xc)

39.007948856s ago: executing program 42 (id=2461):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x5393, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpgrp(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20008000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
getpgrp(0x0)
lstat(&(0x7f0000001d40)='./cgroup\x00', &(0x7f0000001d80))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x8}, 0x28)
getpid()
r7 = getuid()
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r7, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e80), &(0x7f0000001ec0)=0xc)

29.296912553s ago: executing program 1 (id=2568):
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

29.205337776s ago: executing program 1 (id=2570):
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x8010, 0xffffffffffffffff, 0x5299b000)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x32, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x4000ffc, 0x63}, 0x2c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x400c084)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7040b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2, 0x400, 0x0, 0x0, 0x0, 0xdb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0xffffffff, 0x1, 0x0, 0x7, 0x7, "ff9f1c0eb74e1147ec7857efb1e4dfa4822012"})
ioctl$TCFLSH(r2, 0x540b, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xfe)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)

26.364302206s ago: executing program 1 (id=2599):
r0 = socket$packet(0x11, 0x2, 0x300)
file_getattr(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x400)
bind$packet(r0, &(0x7f0000008680)={0x11, 0xd, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003940)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
remap_file_pages(&(0x7f0000077000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10000)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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")
r1 = open(0x0, 0x4827e, 0xdc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010020000000000000000000000000000001090000006130610000003a"], 0x0, 0x21, 0x0, 0x1, 0x6}, 0x28)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket(0x2d, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfe1d, @mcast1, 0x936f}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000840)=@usbdevfs_driver={0x5, 0x5, &(0x7f0000000740)="1973095b1c0f29d5e86ff82d149af219b24f3328c3cecd69e3ff2dd84165cd5baceb40dead4f01a303aa6a68c047448a640dda9d55026e0a9caef49f8ef510fa1af13544be845ff1244f6cd9f59000e63f72152771dbdcf14e2d774175eb8af47fab49a57866f6c3c75a35b319db8430626da0e96062811b14f61a0d8ad2444b491bcb4edcec0f375959dc3f99faf653bfc1dda2322bbbef65a361fb8a45b94dad715c6de985c4233af918cb85fac9be13e742d2d9816e7dd65caf359ad7896a80995a"})
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

26.349253386s ago: executing program 1 (id=2600):
prctl$PR_GET_KEEPCAPS(0x7)
perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000000c0)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x12, &(0x7f0000000040)=0xffffffff, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0xfe3f, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff5655b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xa}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x4, 0x4, 0x2}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x840)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20002}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r12, 0x36, &(0x7f0000000ac0)={0x1f, 0xc4, 0xff7ffffe})
r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x404000, 0x0)
syz_open_pts(r13, 0x101000)
sched_setscheduler(r12, 0x0, &(0x7f0000000240)=0x906)
syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="0001d5bd7000fedb03000000000000000000", @ANYRES32=r11, @ANYBLOB="37003300d0a40900080211000000ffffffffffff5050505050508900fe01c7c10c0a066512080211000000ffffffffffffffffffffffff000a0006000802110000000000040067000a000600ffffffffffff00000400670014003300a4000800505050505050ffffffffffff0a000600ffffffffffff0000"], 0x94}, 0x1, 0x0, 0x0, 0x4000001}, 0x80)

25.111202305s ago: executing program 1 (id=2617):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000023, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x500, 0x4000000, 0x0, 0x18, 0x0, &(0x7f0000000600)="ffc7e1ad1e790116c502ed4e96cc37f3c5350782ae2ef767"}, 0x50)

24.761268767s ago: executing program 1 (id=2619):
socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
creat(&(0x7f0000000100)='./file0\x00', 0xa)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000000000000040000000b000000bf7f002000000000000000cc34c4c29fdc3ed4fad080e363ba797fcd1f61783820607484fd7dcc0119890186c2542914eae39cc43f0ab3a160b6e740431f548f6264"], 0x24, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00"], 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_pidfd_open(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
close(r1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
setns(r0, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x274)

24.721466868s ago: executing program 43 (id=2619):
socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
creat(&(0x7f0000000100)='./file0\x00', 0xa)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000000000000040000000b000000bf7f002000000000000000cc34c4c29fdc3ed4fad080e363ba797fcd1f61783820607484fd7dcc0119890186c2542914eae39cc43f0ab3a160b6e740431f548f6264"], 0x24, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00"], 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_pidfd_open(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
close(r1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
setns(r0, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x274)

18.716191238s ago: executing program 9 (id=2650):
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003800000000000198780a010100ac1414aa04009078000000004518000b0065000902960101ffffffffac1414aa0200000005008000c0cff422fc1b4c"], 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

18.234233153s ago: executing program 9 (id=2653):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xfff, 0x943e}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xc, 0xa8}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x74bd29, 0x10080, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb7, 0x1, 0x4, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

17.779813048s ago: executing program 9 (id=2656):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xd8a40)
r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x7)
r2 = dup(r1)
clock_adjtime(0x0, 0x0)
r3 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d6163767461700000000800014000"], 0x130}}, 0x0)
copy_file_range(r3, 0x0, r2, 0x0, 0x7, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
getpeername$packet(r2, 0x0, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xc4}}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

16.73228567s ago: executing program 9 (id=2664):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

16.540884497s ago: executing program 9 (id=2666):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x11d080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b)
writev(r0, &(0x7f0000001500)=[{&(0x7f0000000440)="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", 0x801}, {0x0}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20004080)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FIBMAP(r1, 0x1, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0xfff9, {0xa, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x8, 0x0, 0x4, 0x5e, 0x0, 0xd, 0x20, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={0x0, 0x1}, 0x44, 0x4, 0x2d58, 0x3, 0x60000000000000, 0xd8, 0x1, 0x0, 0x6, 0x0, 0xffffffffffffffff})
r2 = socket$inet(0x2, 0x2, 0x1)
r3 = gettid()
timer_create(0x2, &(0x7f0000000100)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000))
wait4(r3, 0x0, 0x21000000, &(0x7f0000000540))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4000000888ede38448b08e3ac8f51f0132bd44379096ed90f8b91c04d3c2f65ecfa82938"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a00a0df167e6d22", 0x1008}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0x400ee00)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002000010000200000f6db00260a8020000000000800000000080006000ee2ffff13000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socket$packet(0x11, 0x3, 0x300)

15.996427224s ago: executing program 5 (id=2669):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)

15.861981598s ago: executing program 5 (id=2671):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sync_file_range(r0, 0x1ffff, 0xb, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
syz_pidfd_open(r1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0)
getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, 0x0, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10)
r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522)
sendmsg$can_raw(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

15.262373487s ago: executing program 5 (id=2672):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0})
sync()
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000967eb78a91a4738fe5d656f3b93ab52eae8c02443d283e4c84e40ae3313e2ee781597e601e392b3041cece01fa388a8d708cf38a47c5416d5be96b1ddd74a3f6065724bcdc507bb57fa64c8faadbb4fe543b36a13ab29bacdd0ee112a4cf", @ANYRES16, @ANYBLOB="010004000000fbdbdf250100000008000100030000000c000c8004000b8004000b8004000880040004800800020001000000"], 0x38}}, 0x3000c000)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
socket$inet6(0xa, 0x3, 0x38)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r0)
read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea)

15.068366583s ago: executing program 5 (id=2676):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

14.888381849s ago: executing program 9 (id=2677):
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003800000000000198780a010100ac1414aa04009078000000004518000b0065000902960101ffffffffac1414aa0200000005008000c0cff422fc1b4c"], 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x48)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

14.888195939s ago: executing program 44 (id=2677):
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003800000000000198780a010100ac1414aa04009078000000004518000b0065000902960101ffffffffac1414aa0200000005008000c0cff422fc1b4c"], 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x48)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

14.811706951s ago: executing program 5 (id=2680):
socket$nl_xfrm(0x10, 0x3, 0x6)
getuid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x6f6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)

14.436405913s ago: executing program 5 (id=2683):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xfff, 0x943e}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xc, 0xa8}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x74bd29, 0x10080, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb7, 0x1, 0x4, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

14.373171005s ago: executing program 45 (id=2683):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xfff, 0x943e}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xc, 0xa8}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x74bd29, 0x10080, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb7, 0x1, 0x4, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

11.800341406s ago: executing program 3 (id=2700):
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x330b}, 0x50)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read$snapshot(r6, &(0x7f0000000000)=""/31, 0x1f)
preadv(r6, 0x0, 0x0, 0x4004, 0x0)
connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.758601491s ago: executing program 3 (id=2705):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xd8a40)
r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x7)
r2 = dup(r1)
clock_adjtime(0x0, 0x0)
r3 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d6163767461700000000800014000"], 0x130}}, 0x0)
copy_file_range(r3, 0x0, r2, 0x0, 0x7, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
getpeername$packet(r2, 0x0, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xc4}}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9.185381029s ago: executing program 3 (id=2710):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)

9.071960343s ago: executing program 3 (id=2711):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@minixdf}, {@dioread_lock}, {@discard}, {@nolazytime}, {@grpid}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0xff}}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}, {@oldalloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local}, 0x10) (async)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), r1)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000014) (async)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x8001, 0x9a) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[]}, 0x78) (async)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f00000002c0)="7fb2a81cfd97e720e2e0a18da3841de349267bfccb5428d440abc6939d9778de01a8b190b217a9f2596d32227f53060000000eb45d82a60c6961922d7bfdea50c216474de3bef223853e4835880d68d9f4b6087de76866b5cd34eb", 0x5b, 0x16}])

8.949703067s ago: executing program 3 (id=2713):
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x330b}, 0x50)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read$snapshot(r6, &(0x7f0000000000)=""/31, 0x1f)
preadv(r6, &(0x7f0000001900), 0x0, 0x4004, 0x0)
connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.924237439s ago: executing program 6 (id=2718):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000140)={0x800, 0x0, 0xfff8})
r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80009, 0x3ff}, 0x4, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xf8}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b3d, 0x8, 0x8, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "3d984831b67aa0f14c0be38c6ec9f3b4d882e2883da51fe897c119a0df004ef7b25d32a494eb4a5c954266eb3e26e3ab2222e00626071d8c3b1ad2db1e7e3dbb", 0x1f}, 0xc, 0xfffffffffffffffc)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1027810, &(0x7f0000000700)={[{@jqfmt_vfsv1}, {@noquota}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '&.'}}, {@flag='nomand'}]}, 0x1, 0xbb7, &(0x7f0000002380)="$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")
socket$inet(0x2, 0x4, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable}]}, 0x1, 0x54a, &(0x7f0000001180)="$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")
r7 = add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_QUERY(0x18, r7, 0x0, &(0x7f0000000580)='\xc2\xfb\x82a)\xba\xfa\x93#v\xedHZ\xf0\xd9\b\xadq\x1c\x9en&\x91\'*O\xf0n>\t\rJu\xdd`<\f\xcfo\x02!\xa0\x9eO\x13\x00.w\x92\xf8u\x7f\xb1KN\xca\xb5\x80\xf9\x02\xd0\x1f-5\x8f\xf3L\\\x97\xe5\xbe&4\x7f\xb0\x0f@\x16\xc6n\xc2\t\xa5R\xd5b\xa2\'\x13\xca\b\xd9\x99\xfb\xc8', 0x0)

6.720417457s ago: executing program 3 (id=2722):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
syz_read_part_table(0x105d, &(0x7f0000002700)="$eJzsz7FtwkAYBeDnS2L5lCJVRogyETUlEiUs4IaKgjlgEyZhDCOwzQhA8X3Nnd6TnvSHl2rarJcf/0lqkv4RT+/n0CQlh813ku0qSTsWNanlL0n5uXzdgm4/FufjvNHOI+maod4/fbrsfjNMeVmcnnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy9awAAAP//h8AL7A==")
mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)

6.698196768s ago: executing program 46 (id=2722):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
syz_read_part_table(0x105d, &(0x7f0000002700)="$eJzsz7FtwkAYBeDnS2L5lCJVRogyETUlEiUs4IaKgjlgEyZhDCOwzQhA8X3Nnd6TnvSHl2rarJcf/0lqkv4RT+/n0CQlh813ku0qSTsWNanlL0n5uXzdgm4/FufjvNHOI+maod4/fbrsfjNMeVmcnnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy9awAAAP//h8AL7A==")
mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)

3.968067074s ago: executing program 6 (id=2729):
socket(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sync()
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x20402)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x0, 0xe88}, {0x9, 0xe24c}, {0xf, 0x7f}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x0, 0x51, 0x0, 0x3e]}}, 0x0, 0x53, 0x0, 0x2000001, 0x9}, 0x28)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100))
read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea)

3.816668499s ago: executing program 7 (id=2730):
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x330b}, 0x50)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
read$snapshot(r6, &(0x7f0000000000)=""/31, 0x1f)
preadv(r6, &(0x7f0000001900), 0x0, 0x4004, 0x0)
connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.556158458s ago: executing program 6 (id=2731):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe7c2, 0x0)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180))
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @local, 0x0, "7ea97ddb2ac127ffa5b7216fe70800a2f5bf788f0f90bd0639d727ad314500", 0x6, 0x3ff, 0x2, 0x8}, 0x3c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)="75c1ccf79c5bfe88cd6a6a000063ab59578db263f48925590534d436138406b6417e39a06607de99de69db93fd737428808940bcd0840d82f9b2cb172b3eacfd2f4fc930c81a8bd8b665cd233c5831977dd63ce2c8ae69169591cb5e3c124a30fbbd018d07caa5b538a1927bc3d7b32ed2fa3787557c1efd3ba32b4bdfd2c5879c72", 0x82}, {&(0x7f0000000380)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db9190ffb0de6f64fd77d8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21acbc4749413f629bac77949dcf9479a562112f58d4dbfd5d64de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a810f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0cd93f5524409672b4f35409a8720dc2b78f09198096c60126f911fd42c29cd6fa311e2c8daef3927ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9bad3711b3ea5c6361a97d4d46b8b406091be9433f950613083805aa4ae31e3aef57eb8d299548df54dffa5c4af7f00a869c6bdbc6c2bd1a83262981638ae365b2611d2b50c5f000000d620e2a52db4283dc90000000000000000e01b1adb6ff1fc162a3db2825aad14c25b657c12f4", 0x236}, {&(0x7f0000000100)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba68758412", 0x24}], 0x3}, 0x40)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000000800)=""/4080, 0xff0}, 0x0)
close(r1)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff09a94c3b652bbe11a5ce7879ed", 0x16, 0x0, 0x0, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xb, 0xffff})
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000001800)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c64656275672c696f636861727365743d6b6f69382d722c73686f72746e616d653d6d697865642c636865636b3d73747269631f74984f2604950c0d71ee88f6e885cf742c6e6f6e756c7461696c3d302c696f636861727365743d6d61636761656c69632c73686f72746e616d653d77696e6e742c6e66732c73686f72746e616d653d77696e39352c756e695f786c61746547302c757466383d302c73686f72746e616d653d6c6f7765722c747a3d5554432c00"], 0x1, 0x360, &(0x7f0000000900)="$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")
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000006004000008000a00"], 0x28}}, 0x0)
r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(r8, r3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

2.667056775s ago: executing program 2 (id=2732):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xd8a40)
r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x7)
r2 = dup(r1)
clock_adjtime(0x0, 0x0)
r3 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d6163767461700000000800014000"], 0x130}}, 0x0)
copy_file_range(r3, 0x0, r2, 0x0, 0x7, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
getpeername$packet(r2, 0x0, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xc4}}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.857444041s ago: executing program 6 (id=2734):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES8], 0x0, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000009e45d67d239b99400210000020000000000f93fe65a2c876ba4a4b279cdf01605fadd7d00100000000000000000001f5319a856dc0f575d1d1f183d60517e8f7dea1c3615b9e58dcb5053e16674ce8ae5cf371ca21be1f7ef68d8fcb67e0d4ea6cbda05c19896461f806908b288066e526a"], 0x0, 0x1a}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
bind$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @fwd={0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28)
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xb2, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d398969e317d9181be4"}, 0xb2, 0x3)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}})
socket$inet_sctp(0x2, 0x5, 0x84)

1.856947121s ago: executing program 7 (id=2735):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendto$inet6(r0, &(0x7f00000001c0)="02", 0x34000, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

1.778179994s ago: executing program 0 (id=2737):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x2000000000003, &(0x7f0000000300)='.', 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0xb093, 0xffff, 0x43a1bd76, 0x4, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18021700fcffffff0000000000000000850000003600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffefffb702000008000000b703000001800000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0xffffffffffffffff}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', <r5=>0x0})
sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6", 0x30, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000002c0), 0x0, 0x0, 0x2)
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000200))
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x422000)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={<r8=>r7, &(0x7f0000000180)='-\x00', 0x400, &(0x7f00000001c0)={@_ha_fsid={[0x7fff, 0xc3]}, {0x2, 0x3, 0x3, 0x6}}, 0x80000000, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x598, 0x0, 0x0, 0xffffffff, 0x0, 0x148, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f0000000340), {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0x0, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'pimreg1\x00', 'xfrm0\x00', {}, {0xff}, 0x3a, 0x5, 0x0, 0x6}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x7ff], 0x6, 0x86, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x5, @ipv6=@remote, @ipv6=@mcast2, @port=0x4e23, @icmp_id=0x66}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xff, 0xffffffff], [0xffffffff], 'veth0\x00', 'macvlan0\x00', {}, {}, 0x29, 0x40, 0x4, 0x18}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x1, 0x0, [0x9, 0x401, 0x1, 0x1, 0x8a, 0x9, 0x4, 0xff00, 0xc18b, 0x7, 0xe, 0x1, 0x743, 0x7fe, 0x2, 0xfb50], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3a, @ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e22, @icmp_id=0x64}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'pim6reg1\x00', {}, {0xff}, 0xff, 0x4, 0x2, 0x60}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@empty, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x67, @icmp_id=0x65}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xff, 0x0, 0xff, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'ip6gretap0\x00', 'pim6reg\x00', {}, {0xff}, 0x16, 0x3, 0x3, 0x22}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0xff, 0x4, 0x8, 0x0, 0x9, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xff, 0xff, 0xffffff, 0xffffff00], [0x0, 0x0, 0xff, 0x1fe0000ff], [0xffffff00, 0xff, 0x0, 0xff000000], 0x2500, 0x12c0}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@multicast2, @gre_key=0x5e, @gre_key=0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x5423)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000080000000000060a0104000000000000000001000000090001007379", @ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.708549816s ago: executing program 0 (id=2738):
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r2], 0x15, 0x4850}}], 0x1, 0x20040804)
accept4$unix(r1, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000008000000000000000000800095"], &(0x7f0000000340)='GPL\x00', 0x2}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r3], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r4, &(0x7f0000000080), &(0x7f0000000280)=""/250}, 0x20)

1.634047588s ago: executing program 6 (id=2739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffefc, 0x80, 0x4, 0x359}, 0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
r7 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) (async)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0x7}, {0x0, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

1.619593568s ago: executing program 2 (id=2740):
socket(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sync()
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x20402)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x0, 0xe88}, {0x9, 0xe24c}, {0xf, 0x7f}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x0, 0x51, 0x0, 0x3e]}}, 0x0, 0x53, 0x0, 0x2000001, 0x9}, 0x28)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100))
read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea)

1.488425703s ago: executing program 0 (id=2741):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)

1.486928463s ago: executing program 2 (id=2742):
r0 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0})
sync()
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x3000c000)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
socket$inet6(0xa, 0x3, 0x38)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r1)
read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea)

1.391002216s ago: executing program 0 (id=2743):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x1b4a2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xd}, 0x10, 0x0, 0x0, 0x2, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x5, 0xffffffffffffffff, 0x2)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x490702, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000950000000000000000000000000000000000e157efdda347644c1ff71dad16fe8a397d2da8fa005752bf436bd08f6697529ba81e94af08516200d79a4b3ca833c158e2e5ba882e04"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x6)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
socket$kcm(0x10, 0x2, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff6}}, @TCA_U32_SEL={0x24, 0x5, {0x2, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084)
socket$netlink(0x10, 0x3, 0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.369227816s ago: executing program 2 (id=2744):
bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x45)
sendmsg$inet(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001100)={0xfffffffffffffdba, 0x0}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xf509, 0x1f480, 0x0, 0x39d})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
io_uring_enter(r5, 0x12a, 0x14, 0x17, 0x0, 0x0)

1.319997678s ago: executing program 6 (id=2745):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xd8a40)
r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x7)
r2 = dup(r1)
clock_adjtime(0x0, 0x0)
r3 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d6163767461700000000800014000"], 0x130}}, 0x0)
copy_file_range(r3, 0x0, r2, 0x0, 0x7, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
getpeername$packet(r2, 0x0, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.031414027s ago: executing program 2 (id=2746):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
r1 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000002c0)=0x2, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000ed03010000000000000000000000000a14000000ed03010000000000000000000000000a1850dc82aa30403d4e42aab525c475408359d79e05cd9232994e4ec59040adcc2a385cb944a60ff1bd04f93e463dcdb1ce11d1287f220c74f38df8be97488f43c543e8b766c1c5cf7c3457321a2861aab63df0f0b28be3703bea0efa85f63c876447870e88e44133ec"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc010)
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x1200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth")
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
connect$inet6(r3, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000006, 0x4, @perf_config_ext={0x7}, 0x111802, 0x0, 0x10ffe, 0x4, 0x2, 0x80400011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x6, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x6]}}, 0x5c)
bind$rds(r2, &(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10)
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffff7, 0xec2)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa4220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)

924.243191ms ago: executing program 7 (id=2747):
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000}, 0x50)

704.817157ms ago: executing program 7 (id=2748):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6) (async)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x2, 0x18, 0x0, 0x7fffffff}, {0x4, 0x0, 0x9, 0x3c00}, {0x7fff, 0x5, 0xff, 0xc}, {0x3, 0x5, 0x3, 0x5}]})
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x1, 0x0) (async)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r8 = dup(r7)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0) (async)
close_range(r9, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18)
socket$unix(0x1, 0x5, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r11=>0x0})
socket(0x10, 0x3, 0x0) (async)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20000000) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20000000)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14050000", @ANYRES16=r13, @ANYBLOB="02002bbd7000fddbdf258900000008000300", @ANYRES32=r14, @ANYBLOB="0c009900865a00005a000000ec041d804400008005000b000100000020000d801c00018005000400020000000500070002000000050006000100000005000a00000000000500080056000000050008004d0000002803008005000c00020000000400040005000700b80000000c0002000000000000000000050008002e00000005000900010000000c0002000d00000000000000e8020d80c40002800500060001000000050006000200000014000300060051fd0180ff070d00ae000800000405000600020000000500040001000000190001000306600518300201090b18016c0512301b040260060000001400030002001e0e0400010000000200000006000e00020030520b0838423919390e0000490002003c4923004d3d35184d3940440112504150021618252d192a34102f05011e054037004814530c1d261e26392c26045239515419144d2c3c253d292c404f1630511d53111a0e0000000c00038005000600020000002000008014000500020004007f001000050080000000f9ff05000400000000005c000180140003000200030001000180070002002a00f4001400030001000100050005000080050009000051050004000100000005000700010000001d0002001d38443f24382b27190c423e15311755373d0f0036360f330c0000008400038014000300000009000004060038c2800005000004060002002949000014000300580b3730050000080400040008002500050007000100000040000200562432090827104d3c432e30284b5154433eba1d022f19193445401b312b0e10163a184827553cae350549331e0e3d18132b2b002c054b462846295005000600000000006c00038026000200452c3c11572f2c21530250500919153f1d3b50131152244742213b551002063c3d4a00001400050007000600720ed10902000600ff7fde00050007000000000005000600000000000500060002000000140003000700070000800400aedd00040200020014000280050006000000000005000700020000002c0000800500040001000000050004000000000016000100160b0c02062402651260032405090b060903000068000080140005000300dc35ff01050081000500030003001000010030030c0b020c18050b5b05021400050002000300ff070e007f00010000080700050007000200000022000100120c09241203061e1b240c0201036c066c300b0b0024020b0302241730010000380000800c000200000000000000000005000700ca00000004000400040004000400040005000800d60000000c0002000300000000000000d8000080060005003200000005000800db000000060005001400000005000800810000007c000d807800018005000600020000000500070002000000140005008100d0000000ff070900050010000200330002002f384108510a2d2b16430b18484c021b0b310c50453b0a2c5320062b295134191b1e0f463e2c305134252d1a442d31001400030001000900004806005a0efbff68ff070005000600000000000c000300010000000000000005000a00010000000c000300f9ffffffffffffff0c000300faffffffffffffff0c0003000b00000000000000280000800c000200080000000000000005000600000000000500060001000000050008007c0000000c00008005000c0001000000380000800c000200eba90000000000000500090001000000050007007e0000000500090001000000050009000000000005000b0001000000"], 0x514}, 0x1, 0x0, 0x0, 0x40001}, 0x40)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r15, @ANYBLOB="04002d99000100000900000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004804}, 0x4) (async)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r15, @ANYBLOB="04002d99000100000900000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004804}, 0x4)

521.942074ms ago: executing program 7 (id=2749):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (fail_nth: 1)

361.909899ms ago: executing program 0 (id=2750):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

84.399467ms ago: executing program 2 (id=2751):
socket(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sync()
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x20402)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x0, 0xe88}, {0x9, 0xe24c}, {0xf, 0x7f}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x0, 0x51, 0x0, 0x3e]}}, 0x0, 0x53, 0x0, 0x2000001, 0x9}, 0x28)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100))
read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea)

46.422078ms ago: executing program 0 (id=2752):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)

0s ago: executing program 7 (id=2753):
r0 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0})
sync()
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x3000c000)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
socket$inet6(0xa, 0x3, 0x38)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r1)
read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea)

kernel console output (not intermixed with test programs):

to acquire dquot type 1
[  336.725736][T13777] loop3: lost filesystem error report for type 5 error -5
[  336.732124][T13777] EXT4-fs (loop3): 1 truncate cleaned up
[  336.750590][T13777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  336.773851][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2460'.
[  336.874604][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.917499][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.376344][T13783] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.2462: iget: bad i_size value: 360287970189639690
[  338.707881][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2466'.
[  338.729106][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.804168][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2466'.
[  339.062551][T13802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.074244][T13804] tipc: Started in network mode
[  339.085486][T13804] tipc: Node identity ac14140f, cluster identity 4711
[  339.098744][T13804] tipc: New replicast peer: 172.30.0.8
[  339.110102][T13804] tipc: Enabled bearer <udp:syz2>, priority 10
[  339.547148][T13790] syzkaller1: entered promiscuous mode
[  339.949540][T13802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.105899][T13790] syzkaller1: entered allmulticast mode
[  341.697256][   T28] audit: type=1400 audit(1779619776.555:4279): avc:  denied  { ioctl } for  pid=13812 comm="syz.7.2471" path="socket:[40716]" dev="sockfs" ino=40716 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  341.722380][ T6628] tipc: Node number set to 2886997007
[  341.787692][T13813] loop7: detected capacity change from 0 to 512
[  342.020044][T13813] ------------[ cut here ]------------
[  342.025855][T13813] EA inode 11 i_nlink=2
[  342.025982][T13813] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.7.2471/13813
[  342.043641][T13813] Modules linked in:
[  342.048824][T13813] CPU: 1 UID: 0 PID: 13813 Comm: syz.7.2471 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  342.061558][T13813] Tainted: [W]=WARN
[  342.066111][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  342.077525][T13813] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  342.084687][T13813] Code: 44 58 98 ff 4c 8d 2d 7d 66 5c 05 49 8d 7e 40 e8 e4 17 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 13 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf 2b d8 03 66 66 66 66 66 66 2e
[  342.105414][T13813] RSP: 0018:ffffc900001db778 EFLAGS: 00010246
[  342.112437][T13813] RAX: ffff88810444e000 RBX: ffff888100690598 RCX: ffffffff81c0db78
[  342.120911][T13813] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d41e0
[  342.129758][T13813] RBP: 000000000000000b R08: 000188810069054b R09: 0000000000000000
[  342.138299][T13813] R10: ffffc900001db6a8 R11: 0001c900001db6a8 R12: ffff888100690548
[  342.146932][T13813] R13: ffffffff871d41e0 R14: ffff888100690500 R15: 0000000000000001
[  342.155645][T13813] FS:  00007f392bbaf6c0(0000) GS:ffff8882ae9f8000(0000) knlGS:0000000000000000
[  342.165297][T13813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.167188][T13831] loop6: detected capacity change from 0 to 128
[  342.172731][T13813] CR2: 00007f3add01ed58 CR3: 0000000119d00000 CR4: 00000000003506f0
[  342.188838][T13813] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[  342.197471][T13813] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  342.206105][T13813] Call Trace:
[  342.210267][T13813]  <TASK>
[  342.213738][T13813]  ext4_xattr_inode_dec_ref_all+0x57c/0x8b0
[  342.220630][T13813]  ? errseq_check+0x2c/0x50
[  342.225502][T13813]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  342.231754][T13813]  ? ext4_truncate+0x89f/0xa10
[  342.237345][T13813]  ext4_evict_inode+0xb16/0xe30
[  342.242758][T13813]  ? __pfx_ext4_evict_inode+0x10/0x10
[  342.249128][T13813]  evict+0x2af/0x510
[  342.254003][T13813]  ? __dquot_initialize+0x146/0x7c0
[  342.260736][T13813]  iput+0x41a/0x580
[  342.265498][T13813]  ext4_process_orphan+0x1a9/0x1c0
[  342.272261][T13813]  ext4_orphan_cleanup+0x69c/0x9f0
[  342.278633][T13813]  ext4_fill_super+0x3408/0x37c0
[  342.284665][T13813]  ? set_blocksize+0x14c/0x270
[  342.289918][T13813]  ? setup_bdev_super+0x30e/0x370
[  342.295740][T13813]  ? __pfx_ext4_fill_super+0x10/0x10
[  342.302423][T13813]  get_tree_bdev_flags+0x291/0x300
[  342.308342][T13813]  ? __pfx_ext4_fill_super+0x10/0x10
[  342.314147][T13813]  get_tree_bdev+0x1f/0x30
[  342.319579][T13813]  ext4_get_tree+0x1c/0x30
[  342.325222][T13813]  vfs_get_tree+0x57/0x1d0
[  342.330263][T13813]  do_new_mount+0x288/0x8d0
[  342.335686][T13813]  path_mount+0x4d0/0xbc0
[  342.340617][T13813]  __se_sys_mount+0x28c/0x2e0
[  342.346279][T13813]  __x64_sys_mount+0x67/0x80
[  342.351682][T13813]  x64_sys_call+0x2d61/0x3020
[  342.357050][T13813]  do_syscall_64+0x12c/0x3b0
[  342.362717][T13813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.371760][T13813] RIP: 0033:0x7f392d15e0ca
[  342.377178][T13813] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.397670][T13813] RSP: 002b:00007f392bbaee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  342.407244][T13813] RAX: ffffffffffffffda RBX: 00007f392bbaeee0 RCX: 00007f392d15e0ca
[  342.415666][T13813] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f392bbaeea0
[  342.424460][T13813] RBP: 00002000000009c0 R08: 00007f392bbaeee0 R09: 0000000000800718
[  342.433491][T13813] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  342.467054][T13813] R13: 00007f392bbaeea0 R14: 000000000000048d R15: 0000200000000200
[  342.475850][T13813]  </TASK>
[  342.479674][T13813] ---[ end trace 0000000000000000 ]---
[  342.489446][T13813] EXT4-fs (loop7): 1 orphan inode deleted
[  342.613798][T13813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.676159][T13831] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  342.715364][T13831] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  342.771908][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.843873][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'.
[  342.884059][T13839] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2480'.
[  342.908053][T13840] loop3: detected capacity change from 0 to 512
[  342.924457][T13837] loop7: detected capacity change from 0 to 2048
[  342.960819][T13840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.972356][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  342.987136][T13840] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.022213][T13837]  loop7: p2 p3 p7
[  343.154463][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[  343.155327][ T5633] udevd[5633]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  343.166539][ T9169] udevd[9169]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  343.205142][T13855] loop7: detected capacity change from 0 to 512
[  343.214320][T13855] EXT4-fs (loop7): orphan cleanup on readonly fs
[  343.225392][T13855] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  343.235999][T13855] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  343.246070][T13855] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2483: Failed to acquire dquot type 1
[  343.246465][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.257618][T13855] loop7: lost filesystem error report for type 5 error -5
[  343.267039][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  343.280653][    C1] EXT4-fs (loop7): last error at time 1779619778: ext4_acquire_dquot:7034
[  343.290585][T13855] EXT4-fs (loop7): 1 truncate cleaned up
[  343.297385][T13855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  343.351974][ T9170] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  343.959776][T13861] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.2483: iget: bad i_size value: 360287970189639690
[  344.532313][T13863] netlink: 'syz.6.2485': attribute type 3 has an invalid length.
[  344.544377][T13863] netlink: 'syz.6.2485': attribute type 16 has an invalid length.
[  344.552542][T13863] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2485'.
[  344.597633][T13862] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  344.727663][T13862] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 8
[  345.494754][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.595191][T13872] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  345.612324][T13872] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  345.783881][T13878] loop7: detected capacity change from 0 to 8192
[  345.944183][T13878]  loop7: p1 < > p2 p4 < p5 >
[  345.956522][T13878] loop7: partition table partially beyond EOD, truncated
[  345.973145][T13878] loop7: p1 start 134217728 is beyond EOD, truncated
[  345.992101][T13878] loop7: p2 size 67072 extends beyond EOD, truncated
[  346.008996][T13878] loop7: p5 size 67072 extends beyond EOD, truncated
[  346.188811][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2495'.
[  346.218338][T13889] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2495'.
[  346.262638][T13889] loop7: detected capacity change from 0 to 512
[  346.288236][T13892] loop1: detected capacity change from 0 to 512
[  346.340497][T13889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.354697][T13889] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.450091][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.486211][T13892] EXT4-fs (loop1): orphan cleanup on readonly fs
[  346.495790][T13892] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  346.560115][T13905] loop7: detected capacity change from 0 to 8192
[  346.567896][T13892] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  346.577482][T13892] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2497: Failed to acquire dquot type 1
[  346.594791][T13892] loop1: lost filesystem error report for type 5 error -5
[  346.598377][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  346.611994][    C0] EXT4-fs (loop1): last error at time 1779619781: ext4_acquire_dquot:7034
[  346.631173][T13905]  loop7: p1 < > p2 p4 < p5 >
[  346.646403][T13905] loop7: partition table partially beyond EOD, truncated
[  346.654010][T13905] loop7: p1 start 134217728 is beyond EOD, truncated
[  346.661118][T13905] loop7: p2 size 67072 extends beyond EOD, truncated
[  346.676506][T13905] loop7: p5 size 67072 extends beyond EOD, truncated
[  346.698305][T13892] EXT4-fs (loop1): 1 truncate cleaned up
[  346.774715][T13910] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  346.785502][T13910] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  346.811074][T13892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  346.979920][T13913] FAULT_INJECTION: forcing a failure.
[  346.979920][T13913] name failslab, interval 1, probability 0, space 0, times 0
[  346.992738][T13913] CPU: 0 UID: 0 PID: 13913 Comm: syz.3.2502 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  346.992770][T13913] Tainted: [W]=WARN
[  346.992779][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.992796][T13913] Call Trace:
[  346.992804][T13913]  <TASK>
[  346.992814][T13913]  __dump_stack+0x1d/0x30
[  346.992906][T13913]  dump_stack_lvl+0x95/0xd0
[  346.992935][T13913]  dump_stack+0x15/0x1b
[  346.992954][T13913]  should_fail_ex+0x263/0x280
[  346.992983][T13913]  should_failslab+0x8c/0xb0
[  346.993090][T13913]  __kmalloc_noprof+0xb8/0x4d0
[  346.993130][T13913]  ? hash_ipport6_add+0x7cd/0x11a0
[  346.993174][T13913]  hash_ipport6_add+0x7cd/0x11a0
[  346.993203][T13913]  ? hash_ipport6_add+0x51/0x11a0
[  346.993282][T13913]  ? ip_set_get_extensions+0x5af/0x650
[  346.993314][T13913]  hash_ipport6_uadt+0x59f/0x680
[  346.993338][T13913]  ? __pfx_hash_ipport6_add+0x10/0x10
[  346.993394][T13913]  call_ad+0xdc/0x640
[  346.993428][T13913]  ? __nla_parse+0x40/0x60
[  346.993464][T13913]  ip_set_ad+0x5c0/0x690
[  346.993509][T13913]  ip_set_uadd+0x41/0x50
[  346.993720][T13913]  nfnetlink_rcv_msg+0x4fe/0x5d0
[  346.993776][T13913]  netlink_rcv_skb+0x123/0x220
[  346.993809][T13913]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  346.993880][T13913]  nfnetlink_rcv+0x167/0x1720
[  346.993922][T13913]  ? __kfree_skb+0x109/0x150
[  346.994029][T13913]  ? nlmon_xmit+0x4f/0x60
[  346.994131][T13913]  ? consume_skb+0x4b/0x130
[  346.994210][T13913]  ? nlmon_xmit+0x4f/0x60
[  346.994240][T13913]  ? dev_hard_start_xmit+0x36c/0x3a0
[  346.994274][T13913]  ? __dev_queue_xmit+0x1396/0x1ec0
[  346.994340][T13913]  ? __dev_queue_xmit+0x165/0x1ec0
[  346.994365][T13913]  ? ref_tracker_free+0x37d/0x3e0
[  346.994401][T13913]  ? __netlink_deliver_tap+0x4dc/0x500
[  346.994466][T13913]  netlink_unicast+0x5a8/0x680
[  346.994503][T13913]  netlink_sendmsg+0x5c8/0x6f0
[  346.994617][T13913]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.994702][T13913]  ____sys_sendmsg+0x563/0x5b0
[  346.994740][T13913]  ___sys_sendmsg+0x195/0x1e0
[  346.994788][T13913]  __x64_sys_sendmsg+0xd4/0x160
[  346.994820][T13913]  x64_sys_call+0x194c/0x3020
[  346.994894][T13913]  do_syscall_64+0x12c/0x3b0
[  346.994966][T13913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.994993][T13913] RIP: 0033:0x7f3ade5ece59
[  346.995010][T13913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.995027][T13913] RSP: 002b:00007f3add01e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.995052][T13913] RAX: ffffffffffffffda RBX: 00007f3ade866090 RCX: 00007f3ade5ece59
[  346.995070][T13913] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005
[  346.995142][T13913] RBP: 00007f3add01e090 R08: 0000000000000000 R09: 0000000000000000
[  346.995155][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.995169][T13913] R13: 00007f3ade866128 R14: 00007f3ade866090 R15: 00007ffdf5170068
[  346.995194][T13913]  </TASK>
[  347.350441][T13916] loop6: detected capacity change from 0 to 512
[  347.361908][T13916] EXT4-fs (loop6): orphan cleanup on readonly fs
[  347.368650][T13916] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  347.379847][T13916] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  347.389646][T13916] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2503: Failed to acquire dquot type 1
[  347.401668][T13916] loop6: lost filesystem error report for type 5 error -5
[  347.402918][T13916] EXT4-fs (loop6): 1 truncate cleaned up
[  347.410259][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  347.410275][    C1] EXT4-fs (loop6): last error at time 1779619782: ext4_acquire_dquot:7034
[  347.785380][T13918] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.2497: iget: bad i_size value: 360287970189639690
[  348.391507][T13916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  348.419077][T13919] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  348.586862][T13919] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8
[  349.920787][T13925] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.2503: iget: bad i_size value: 360287970189639690
[  350.761595][T13928] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  350.771222][T13928] EXT4-fs warning (device loop6): read_mmp_block:111: Error -117 while reading MMP block 8
[  350.916901][T10454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.050252][T13937] xt_hashlimit: size too large, truncated to 1048576
[  351.086560][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.159934][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'.
[  351.706102][T13960] loop3: detected capacity change from 0 to 512
[  351.728587][T13960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  351.739375][T13960] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  351.789990][T13960] loop3: detected capacity change from 0 to 512
[  351.820512][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2517'.
[  351.902545][T13960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2518: invalid indirect mapped block 256 (level 2)
[  351.929331][T13960] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  351.929664][T13960] EXT4-fs (loop3): 2 truncates cleaned up
[  351.938923][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  351.938945][    C1] EXT4-fs (loop3): initial error at time 1779619786: ext4_free_branches:1023: inode 11
[  351.938970][    C1] EXT4-fs (loop3): last error at time 1779619786: ext4_free_branches:1023: inode 11
[  351.980072][T13966] loop1: detected capacity change from 0 to 8192
[  352.001238][T13960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.053871][   T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.068339][   T28] audit: type=1400 audit(1779619786.921:4280): avc:  denied  { write } for  pid=13959 comm="syz.3.2518" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  352.105450][T13966]  loop1: p1 < > p2 p4 < p5 >
[  352.119825][T13978] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2518: bg 0: block 5: invalid block bitmap
[  352.120238][T13966] loop1: partition table partially beyond EOD, 
[  352.144985][T13981] loop7: detected capacity change from 0 to 512
[  352.146939][T13966] truncated
[  352.161756][   T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.172320][T13978] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  352.188118][T13981] EXT4-fs (loop7): orphan cleanup on readonly fs
[  352.194877][T13981] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  352.196048][T13978] EXT4-fs (loop3): This should not happen!! Data will be lost
[  352.196048][T13978] 
[  352.205668][T13981] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  352.216910][T13978] EXT4-fs (loop3): Total free blocks count 0
[  352.230602][T13978] EXT4-fs (loop3): Free/Dirty block details
[  352.231051][T13981] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2522: Failed to acquire dquot type 1
[  352.236534][T13978] EXT4-fs (loop3): free_blocks=0
[  352.247810][T13981] loop7: lost filesystem error report for type 5 error -5
[  352.252904][T13978] EXT4-fs (loop3): dirty_blocks=472
[  352.253962][T13981] EXT4-fs (loop7): 1 truncate cleaned up
[  352.260981][T13978] EXT4-fs (loop3): Block reservation details
[  352.265390][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  352.265407][    C0] EXT4-fs (loop7): last error at time 1779619787: ext4_acquire_dquot:7034
[  352.292609][T13978] EXT4-fs (loop3): i_reserved_data_blocks=472
[  352.300939][T13966] loop1: p1 start 134217728 is beyond EOD, truncated
[  352.302063][T13981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  352.307659][T13966] loop1: p2 size 67072 extends beyond EOD, truncated
[  352.345780][T13966] loop1: p5 size 67072 extends beyond EOD, truncated
[  352.396239][   T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.500264][  T140] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 468 with error 28
[  352.515098][T12234] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  352.529387][   T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.944645][T13989] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.2522: iget: bad i_size value: 360287970189639690
[  353.022719][T13990] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  353.033541][T13990] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 8
[  353.567275][T13963] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.286742][T13963] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.294308][T13963] bridge_slave_0: entered allmulticast mode
[  354.300875][T13963] bridge_slave_0: entered promiscuous mode
[  354.307791][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.335884][T13963] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.348116][T13963] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.355443][T13963] bridge_slave_1: entered allmulticast mode
[  354.362198][T13963] bridge_slave_1: entered promiscuous mode
[  354.391931][T14005] xt_hashlimit: size too large, truncated to 1048576
[  354.536935][   T49] bond2 (unregistering): (slave geneve2): Releasing active interface
[  354.554135][   T49] geneve2 (unregistering): left allmulticast mode
[  354.651007][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811aeb3400: rx timeout, send abort
[  354.690923][   T49] bond0 (unregistering): Released all slaves
[  354.828792][   T49] bond1 (unregistering): Released all slaves
[  354.844395][   T49] bond2 (unregistering): Released all slaves
[  354.870095][T14017] netlink: 'syz.3.2529': attribute type 58 has an invalid length.
[  354.878064][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2529'.
[  354.927424][T14013] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  354.936044][T14013] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  355.090918][T13963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.122486][T13963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.151226][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b466e00: rx timeout, send abort
[  355.159523][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811aeb3400: abort rx timeout. Force session deactivation
[  355.179824][   T49] tipc: Disabling bearer <udp:syz2>
[  355.188812][   T49] tipc: Left network mode
[  355.206753][   T49] hsr_slave_0: left promiscuous mode
[  355.219219][   T49] hsr_slave_1: left promiscuous mode
[  355.258893][   T49] veth1_macvtap: left promiscuous mode
[  355.267802][   T49] veth0_macvtap: left promiscuous mode
[  355.274411][   T49] veth1_vlan: left promiscuous mode
[  355.281318][   T49] veth0_vlan: left promiscuous mode
[  355.395799][   T28] audit: type=1400 audit(1779619790.250:4281): avc:  denied  { getopt } for  pid=14037 comm="syz.6.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  355.492628][   T28] audit: type=1400 audit(1779619790.340:4282): avc:  denied  { write } for  pid=14027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  355.547728][   T28] audit: type=1400 audit(1779619790.390:4283): avc:  denied  { write } for  pid=14046 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  355.570164][   T49] team0 (unregistering): Port device dummy0 removed
[  355.588738][T13963] team0: Port device team_slave_0 added
[  355.602485][T13963] team0: Port device team_slave_1 added
[  355.627218][T14052] loop7: detected capacity change from 0 to 512
[  355.638309][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17
[  355.652220][T14052] EXT4-fs (loop7): orphan cleanup on readonly fs
[  355.658989][T14052] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  355.669379][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b466e00: abort rx timeout. Force session deactivation
[  355.679882][T14052] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  355.689714][T14052] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2536: Failed to acquire dquot type 1
[  355.701477][T14052] loop7: lost filesystem error report for type 5 error -5
[  355.701873][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  355.715534][    C0] EXT4-fs (loop7): last error at time 1779619790: ext4_acquire_dquot:7034
[  355.724623][T14052] EXT4-fs (loop7): 1 truncate cleaned up
[  355.726839][T13963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.731162][T14052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  355.749093][T13963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.806228][T13963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.836581][T13963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.863150][T13963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.965123][T13963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.155665][T14067] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.2536: iget: bad i_size value: 360287970189639690
[  356.218196][   T28] audit: type=1400 audit(1779619791.070:4284): avc:  denied  { write } for  pid=14057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  356.318939][   T28] audit: type=1400 audit(1779619791.170:4285): avc:  denied  { write } for  pid=14071 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  356.687798][T14067] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  356.697795][T14067] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 8
[  356.776572][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18
[  356.794875][T13963] hsr_slave_0: entered promiscuous mode
[  356.801062][T13963] hsr_slave_1: entered promiscuous mode
[  356.808477][T13963] debugfs: 'hsr0' already exists in 'hsr'
[  356.814416][T13963] Cannot create hsr debugfs directory
[  356.866044][   T49] IPVS: stop unused estimator thread 0...
[  357.027755][   T28] audit: type=1400 audit(1779619791.860:4286): avc:  denied  { write } for  pid=14082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  357.077327][T14097] xt_hashlimit: size too large, truncated to 1048576
[  357.116833][   T28] audit: type=1400 audit(1779619791.970:4287): avc:  denied  { write } for  pid=14095 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  357.211566][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19
[  357.267640][T13963] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  357.292603][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  357.304595][T13963] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  357.328482][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  357.348418][T13963] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  357.373897][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  357.394317][T13963] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  357.417112][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  357.564412][T13963] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.575150][T13963] 8021q: adding VLAN 0 to HW filter on device team0
[  357.592444][T13963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  357.607920][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.615074][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.623701][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.630778][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.694194][   T28] audit: type=1400 audit(1779619792.539:4288): avc:  denied  { write } for  pid=14102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  357.722361][T14122] bond0: option arp_interval: invalid value (18446744073709551615)
[  357.748655][T14122] bond0: option arp_interval: allowed values 0 - 2147483647
[  357.828054][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20
[  357.835034][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.919171][T13963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.936361][T14146] loop7: detected capacity change from 0 to 1024
[  358.020227][T14157] loop3: detected capacity change from 0 to 512
[  358.046183][T14157] EXT4-fs (loop3): orphan cleanup on readonly fs
[  358.075859][T14157] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2547: Failed to acquire dquot type 1
[  358.106220][T14157] loop3: lost filesystem error report for type 5 error -5
[  358.106882][T14157] EXT4-fs (loop3): 1 truncate cleaned up
[  358.114111][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  358.114140][    C0] EXT4-fs (loop3): last error at time 1779619792: ext4_acquire_dquot:7034
[  358.159432][T14157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  358.394865][T13963] veth0_vlan: entered promiscuous mode
[  358.575743][T14192] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.2547: iget: bad i_size value: 360287970189639690
[  358.718577][T14197] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  358.737991][T14197] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8
[  358.770143][T14196] xt_hashlimit: size too large, truncated to 1048576
[  359.075373][T14201] loop1: detected capacity change from 0 to 512
[  359.127948][T14201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  359.150466][T14201] EXT4-fs (loop1): 1 truncate cleaned up
[  359.163186][T14201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.199815][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2551'.
[  359.278903][T10454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.389704][ T4720] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.406850][ T4720] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.428390][T13963] veth1_vlan: entered promiscuous mode
[  359.438270][ T4720] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.468028][ T4720] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.491618][T13963] veth0_macvtap: entered promiscuous mode
[  359.680014][T14231] loop6: detected capacity change from 0 to 512
[  359.734197][T14231] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  359.752632][T14231] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2554: bad orphan inode 131083
[  359.763349][T14231] loop6: lost filesystem error report for type 5 error -117
[  359.763450][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  359.777261][    C0] EXT4-fs (loop6): initial error at time 1779619794: ext4_orphan_get:1423
[  359.785817][    C0] EXT4-fs (loop6): last error at time 1779619794: ext4_orphan_get:1423
[  359.798528][T14231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.835391][T13963] veth1_macvtap: entered promiscuous mode
[  359.855167][T13963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.864438][T13963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.889814][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.912036][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.011796][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.024773][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.077636][T14231] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.6.2554: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  360.187449][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.199269][T14231] EXT4-fs error (device loop6) in ext4_delete_entry:2744: Corrupt filesystem
[  360.322326][T14274] loop7: detected capacity change from 0 to 512
[  360.336820][T14274] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  360.372123][T14274] EXT4-fs (loop7): 1 truncate cleaned up
[  360.384378][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.384984][T14274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.406690][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  360.406707][   T28] audit: type=1400 audit(1779619795.258:4305): avc:  denied  { write } for  pid=14278 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.451930][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2558'.
[  360.567688][   T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.583681][   T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.597728][   T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.608604][   T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.641321][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2560'.
[  360.659175][   T28] audit: type=1400 audit(1779619795.498:4306): avc:  denied  { write } for  pid=14283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.678355][T14297] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2560'.
[  360.711078][T14307] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  360.723871][   T28] audit: type=1400 audit(1779619795.558:4307): avc:  denied  { write } for  pid=14306 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.749819][T14309] loop6: detected capacity change from 0 to 512
[  360.804567][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.879501][   T28] audit: type=1400 audit(1779619795.728:4308): avc:  denied  { write } for  pid=14311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.926947][   T28] audit: type=1400 audit(1779619795.778:4309): avc:  denied  { write } for  pid=14325 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.970944][T14309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.996879][T14309] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.011683][   T28] audit: type=1400 audit(1779619795.858:4310): avc:  denied  { cpu } for  pid=14315 comm="syz.7.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  361.100175][   T28] audit: type=1400 audit(1779619795.948:4311): avc:  denied  { write } for  pid=14327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  361.145385][   T28] audit: type=1400 audit(1779619795.998:4312): avc:  denied  { write } for  pid=14343 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  361.303119][   T28] audit: type=1400 audit(1779619796.148:4313): avc:  denied  { write } for  pid=14347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  361.346704][   T28] audit: type=1400 audit(1779619796.198:4314): avc:  denied  { write } for  pid=14360 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  361.508248][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.577523][T14380] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0
[  361.609374][T14380] Bluetooth: hci0: Frame reassembly failed (-84)
[  361.616190][T14380] Bluetooth: hci0: Frame reassembly failed (-84)
[  361.646697][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2574'.
[  361.663608][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2574'.
[  361.677101][T14384] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2574'.
[  361.706484][T14397] xt_hashlimit: size too large, truncated to 1048576
[  361.832427][T14393] loop6: detected capacity change from 0 to 512
[  361.887117][T14416] FAULT_INJECTION: forcing a failure.
[  361.887117][T14416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.908797][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.7.2577 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  361.908837][T14416] Tainted: [W]=WARN
[  361.908846][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  361.908863][T14416] Call Trace:
[  361.908871][T14416]  <TASK>
[  361.908880][T14416]  __dump_stack+0x1d/0x30
[  361.909059][T14416]  dump_stack_lvl+0x95/0xd0
[  361.909087][T14416]  dump_stack+0x15/0x1b
[  361.909170][T14416]  should_fail_ex+0x263/0x280
[  361.909208][T14416]  should_fail+0xb/0x20
[  361.909240][T14416]  should_fail_usercopy+0x1a/0x20
[  361.909320][T14416]  _copy_to_user+0x20/0xa0
[  361.909361][T14416]  simple_read_from_buffer+0xb5/0x130
[  361.909407][T14416]  proc_fail_nth_read+0x10e/0x150
[  361.909459][T14416]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  361.909512][T14416]  vfs_read+0x1ab/0x7f0
[  361.909547][T14416]  ? __rcu_read_unlock+0x4e/0x70
[  361.909608][T14416]  ? __fget_files+0x184/0x1c0
[  361.909658][T14416]  ? mutex_lock+0x57/0x90
[  361.909707][T14416]  ksys_read+0xdc/0x1a0
[  361.909745][T14416]  __x64_sys_read+0x40/0x50
[  361.909797][T14416]  x64_sys_call+0x2886/0x3020
[  361.909833][T14416]  do_syscall_64+0x12c/0x3b0
[  361.909873][T14416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.909927][T14416] RIP: 0033:0x7f392d11d68e
[  361.909947][T14416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  361.909968][T14416] RSP: 002b:00007f392bbaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  361.909991][T14416] RAX: ffffffffffffffda RBX: 00007f392bbaf6c0 RCX: 00007f392d11d68e
[  361.910009][T14416] RDX: 000000000000000f RSI: 00007f392bbaf0a0 RDI: 0000000000000004
[  361.910027][T14416] RBP: 00007f392bbaf090 R08: 0000000000000000 R09: 0000000000000000
[  361.910043][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.910058][T14416] R13: 00007f392d3d6038 R14: 00007f392d3d5fa0 R15: 00007fff299a8da8
[  361.910105][T14416]  </TASK>
[  362.117957][T14393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  362.163878][T14393] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.186544][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2579'.
[  362.203403][T14426] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2579'.
[  362.214790][T14424] loop7: detected capacity change from 0 to 8192
[  362.228145][T14426] loop3: detected capacity change from 0 to 512
[  362.359483][T14426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.372799][T14426] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.387579][T14424]  loop7: p1 < > p2 p4 < p5 >
[  362.392666][T14424] loop7: partition table partially beyond EOD, truncated
[  362.400836][T14424] loop7: p1 start 134217728 is beyond EOD, truncated
[  362.408369][T14424] loop7: p2 size 67072 extends beyond EOD, truncated
[  362.431918][T14424] loop7: p5 size 67072 extends beyond EOD, truncated
[  362.468241][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.659589][T14453] syz_tun: entered promiscuous mode
[  362.818451][T14464] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1868027520/1868027522
[  362.827928][T14464] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1868027520/1868027521
[  362.827899][T14459] loop7: detected capacity change from 0 to 256
[  362.844178][T14464] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1868027520/1868027522
[  362.853555][T14464] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1868027520/1868027521
[  362.904661][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  362.969634][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2591'.
[  363.003800][T14474] loop3: detected capacity change from 0 to 1024
[  363.010266][T14472] loop7: detected capacity change from 0 to 512
[  363.013600][T14474] EXT4-fs: Ignoring removed mblk_io_submit option
[  363.035885][T14474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  363.044477][T14474] EXT4-fs (loop3): inodes count not valid: 15 vs 32
[  363.115281][T14472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.128643][T14472] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.201170][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.645202][ T3525] Bluetooth: hci0: command 0x1003 tx timeout
[  363.675109][ T5477] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  364.354121][T14529] loop1: detected capacity change from 0 to 512
[  364.407899][T14531] loop1: detected capacity change from 0 to 512
[  364.583376][T14538] loop7: detected capacity change from 0 to 4096
[  364.631199][T14538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.708017][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.889062][T14549] xt_hashlimit: size too large, truncated to 1048576
[  364.913334][T14531] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2600: corrupted inode contents
[  364.955384][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  364.956367][T14531] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.2600: mark_inode_dirty error
[  364.965569][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  364.965595][    C0] EXT4-fs (loop1): initial error at time 1779619799: ext4_do_update_inode:5690: inode 16
[  364.965639][    C0] EXT4-fs (loop1): last error at time 1779619799: ext4_do_update_inode:5690: inode 16
[  365.009271][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  365.053696][T14557] __nla_validate_parse: 1 callbacks suppressed
[  365.053718][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2609'.
[  365.081097][T14531] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2600: corrupted inode contents
[  365.092202][T14560] EXT4-fs: Ignoring removed mblk_io_submit option
[  365.109388][T14560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  365.128638][T14560] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  365.158349][T14564] program syz.6.2608 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  365.168498][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  365.168701][T14531] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.2600: mark_inode_dirty error
[  365.189684][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  365.189869][T14531] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2600: corrupted inode contents
[  365.191911][T14560] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.2610: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  365.199879][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  365.215343][T14560] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  365.234828][T14531] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  365.242458][T14560] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2610: couldn't read orphan inode 11 (err -117)
[  365.249239][T14531] loop1: lost filesystem error report for type 5 error -117
[  365.256357][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  365.269856][T14531] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2600: corrupted inode contents
[  365.275402][    C1] EXT4-fs (loop7): initial error at time 1779619800: ext4_ext_check_inode:521
[  365.282385][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  365.293667][    C1] : inode 11
[  365.293686][    C1] EXT4-fs (loop7): last error at time 1779619800: ext4_ext_check_inode:521
[  365.303874][T14531] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.2600: mark_inode_dirty error
[  365.311792][    C1] : inode 11
[  365.315779][T14531] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  365.339668][T14531] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  365.339696][T14531] loop1: lost filesystem error report for type 5 error -117
[  365.340003][T14531] EXT4-fs (loop1): 1 truncate cleaned up
[  365.340532][T14531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.340660][T14531] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.358103][T14560] loop7: lost filesystem error report for type 5 error -117
[  365.368467][T14560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.416418][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2611'.
[  365.441233][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.495056][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2612'.
[  365.514045][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2612'.
[  365.559367][T14573] syzkaller0: entered promiscuous mode
[  365.565084][T14573] syzkaller0: entered allmulticast mode
[  365.642182][T14585] vfat: Unknown parameter '2'
[  365.735350][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.744875][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.918215][T14582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.949368][ T4718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.959865][ T4718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.019791][ T4718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.030878][ T4718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.181268][ T4718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.192177][ T4718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.265665][ T4718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.278608][ T4718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.411311][T14684] xt_hashlimit: size too large, truncated to 1048576
[  366.431713][T14634] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.460981][T14634] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.484394][T14634] bridge_slave_0: entered allmulticast mode
[  366.544392][T14634] bridge_slave_0: entered promiscuous mode
[  366.582225][T14712] netlink: 'syz.3.2625': attribute type 83 has an invalid length.
[  366.601280][T14634] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.629313][T14634] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.656785][T14634] bridge_slave_1: entered allmulticast mode
[  366.694518][T14634] bridge_slave_1: entered promiscuous mode
[  366.759819][ T4718] bridge_slave_1: left allmulticast mode
[  366.775690][ T4718] bridge_slave_1: left promiscuous mode
[  366.781658][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.808391][ T4718] bridge_slave_0: left allmulticast mode
[  366.816972][ T4718] bridge_slave_0: left promiscuous mode
[  366.835956][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.078603][ T4718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.092546][ T4718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.106515][ T4718] bond0 (unregistering): Released all slaves
[  367.150665][T14634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.173691][T14634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.194473][ T4718] tipc: Disabling bearer <udp:syz2>
[  367.212204][ T4718] tipc: Left network mode
[  367.242559][ T4718] hsr_slave_0: left promiscuous mode
[  367.257570][ T4718] hsr_slave_1: left promiscuous mode
[  367.264536][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.280740][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.312254][T14740] set_capacity_and_notify: 2 callbacks suppressed
[  367.312272][T14740] loop5: detected capacity change from 0 to 512
[  367.328307][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  367.328321][   T28] audit: type=1400 audit(1779619802.176:4331): avc:  denied  { write } for  pid=14729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.330279][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.338329][T14740] EXT4-fs: Ignoring removed bh option
[  367.404505][   T28] audit: type=1400 audit(1779619802.246:4332): avc:  denied  { write } for  pid=14744 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.407238][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.431640][T14740] EXT4-fs: inline encryption not supported
[  367.465014][T14740] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  367.489217][T14740] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  367.505973][T14740] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2628: bg 0: block 248: padding at end of block bitmap is not set
[  367.539375][T14740] loop5: lost filesystem error report for type 5 error -117
[  367.539895][T14740] Quota error (device loop5): write_blk: dquota write failed
[  367.547358][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  367.547373][    C0] EXT4-fs (loop5): last error at time 1779619802: ext4_validate_block_bitmap:441
[  367.602183][T14740] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  367.622285][T14740] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2628: Failed to acquire dquot type 1
[  367.645229][T14740] loop5: lost filesystem error report for type 5 error -28
[  367.645681][ T4718] veth1_macvtap: left promiscuous mode
[  367.658748][T14740] EXT4-fs (loop5): 1 truncate cleaned up
[  367.668776][ T4718] veth0_macvtap: left promiscuous mode
[  367.675098][T14740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  367.682793][ T4718] veth1_vlan: left promiscuous mode
[  367.700934][T14740] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2628: deleted inode referenced: 12
[  367.703866][ T4718] veth0_vlan: left promiscuous mode
[  367.724384][T14740] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2628: deleted inode referenced: 12
[  368.324604][ T4718] team0 (unregistering): Port device team_slave_1 removed
[  368.336000][ T4718] team0 (unregistering): Port device team_slave_0 removed
[  368.377183][T14634] team0: Port device team_slave_0 added
[  368.386959][T14746] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  368.395160][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21
[  368.414374][T14740] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2628'.
[  368.445753][T14750] netlink: 'syz.5.2628': attribute type 12 has an invalid length.
[  368.453614][T14750] netlink: 'syz.5.2628': attribute type 29 has an invalid length.
[  368.461547][T14750] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2628'.
[  368.471599][T14634] team0: Port device team_slave_1 added
[  368.497567][T13963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  368.523072][T14634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.533220][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2630'.
[  368.549386][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.588435][T14758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2630'.
[  368.597694][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'.
[  368.616988][T14760] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2631'.
[  368.637302][T14634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.655000][T14763] loop5: detected capacity change from 0 to 512
[  368.662426][T14634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.676915][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.724265][T14634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.738861][T14763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.762466][T14763] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.799742][T14634] hsr_slave_0: entered promiscuous mode
[  368.821326][T14634] hsr_slave_1: entered promiscuous mode
[  368.843694][T13963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.843751][T14634] debugfs: 'hsr0' already exists in 'hsr'
[  368.843765][T14634] Cannot create hsr debugfs directory
[  368.992115][   T28] audit: type=1400 audit(1779619803.835:4333): avc:  denied  { write } for  pid=14770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  369.038248][   T28] audit: type=1400 audit(1779619803.885:4334): avc:  denied  { write } for  pid=14791 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  369.072347][T14790] xt_hashlimit: size too large, truncated to 1048576
[  369.110270][T14788] syzkaller0: entered promiscuous mode
[  369.122045][T14788] syzkaller0: entered allmulticast mode
[  369.139189][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22
[  369.376787][   T28] audit: type=1400 audit(1779619804.215:4335): avc:  denied  { write } for  pid=14800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  369.415321][T14634] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  369.474841][T14634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.495355][   T28] audit: type=1400 audit(1779619804.305:4336): avc:  denied  { write } for  pid=14819 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  369.506906][T14634] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  369.574617][T14634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.608958][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23
[  369.629698][T14634] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  369.649048][T14634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.657087][T14634] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  369.666698][T14634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  370.242298][T14634] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.266773][T14634] 8021q: adding VLAN 0 to HW filter on device team0
[  370.286903][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.294044][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.333004][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.340163][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.404379][   T28] audit: type=1400 audit(1779619805.244:4337): avc:  denied  { write } for  pid=14838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  370.586679][   T28] audit: type=1400 audit(1779619805.424:4338): avc:  denied  { write } for  pid=14860 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  370.650828][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24
[  370.663649][T14867] __nla_validate_parse: 2 callbacks suppressed
[  370.663667][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2642'.
[  370.697764][T14867] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2642'.
[  370.728536][T14634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.781266][T14859] loop5: detected capacity change from 0 to 512
[  370.789523][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2643'.
[  370.863437][T14859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.916433][T14859] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.985998][T14634] veth0_vlan: entered promiscuous mode
[  370.999513][T14634] veth1_vlan: entered promiscuous mode
[  371.016784][T14634] veth0_macvtap: entered promiscuous mode
[  371.024485][T14634] veth1_macvtap: entered promiscuous mode
[  371.035640][T14634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.047427][T14634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.062898][ T4718] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.074284][ T4718] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.080795][T13963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.099604][ T4718] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.113436][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.268038][T14911] program syz.9.2621 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  371.410897][T14913] loop5: detected capacity change from 0 to 512
[  371.454227][T14913] EXT4-fs (loop5): 1 orphan inode deleted
[  371.461054][T14913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.474280][T14913] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  371.484885][   T36] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1
[  371.518940][T14928] netlink: 'syz.9.2647': attribute type 2 has an invalid length.
[  371.540403][T14929] tmpfs: Bad value for 'mpol'
[  371.612157][T12234] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  371.630049][T12234] CPU: 1 UID: 0 PID: 12234 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  371.630115][T12234] Tainted: [W]=WARN
[  371.630124][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  371.630142][T12234] Call Trace:
[  371.630152][T12234]  <TASK>
[  371.630163][T12234]  __dump_stack+0x1d/0x30
[  371.630241][T12234]  dump_stack_lvl+0x95/0xd0
[  371.630270][T12234]  dump_stack+0x15/0x1b
[  371.630296][T12234]  dump_header+0x80/0x240
[  371.630324][T12234]  oom_kill_process+0x295/0x350
[  371.630485][T12234]  out_of_memory+0x97d/0xb80
[  371.630547][T12234]  try_charge_memcg+0x62f/0xa10
[  371.630597][T12234]  charge_memcg+0x6d/0x120
[  371.630672][T12234]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  371.630713][T12234]  __swap_cache_prepare_and_add+0x69/0x4a0
[  371.630749][T12234]  ? alloc_pages_mpol+0x217/0x260
[  371.630792][T12234]  swap_cache_alloc_folio+0xa2/0x120
[  371.630841][T12234]  swap_cluster_readahead+0x25f/0x3c0
[  371.630882][T12234]  swapin_readahead+0xde/0x840
[  371.630948][T12234]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  371.630976][T12234]  ? hrtimer_start_range_ns+0x58c/0x10a0
[  371.631012][T12234]  ? __rcu_read_unlock+0x4e/0x70
[  371.631041][T12234]  ? swap_cache_get_folio+0x1e0/0x1f0
[  371.631074][T12234]  do_swap_page+0x31e/0x2180
[  371.631195][T12234]  ? __schedule+0x951/0xd40
[  371.631224][T12234]  ? __rcu_read_lock+0x36/0x50
[  371.631250][T12234]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  371.631280][T12234]  handle_mm_fault+0xb30/0x2e70
[  371.631382][T12234]  ? vma_start_read+0x1c7/0x2c0
[  371.631463][T12234]  do_user_addr_fault+0x62f/0x1050
[  371.631589][T12234]  ? trace_page_fault_user+0x1f/0xa0
[  371.631629][T12234]  exc_page_fault+0x62/0xa0
[  371.631661][T12234]  asm_exc_page_fault+0x26/0x30
[  371.631706][T12234] RIP: 0033:0x7f3ade5a7fd7
[  371.631725][T12234] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  371.631747][T12234] RSP: 002b:00007ffdf5170360 EFLAGS: 00010202
[  371.631825][T12234] RAX: 0000000000000000 RBX: 000055558c4b5500 RCX: 00007f3ade5a7fd7
[  371.631843][T12234] RDX: 00007ffdf51703a0 RSI: 0000000000000000 RDI: 0000000000000000
[  371.631860][T12234] RBP: 00007ffdf517040c R08: 0000000000000000 R09: 0000000000000000
[  371.631877][T12234] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  371.631893][T12234] R13: 00000000000927c0 R14: 000000000005a0d1 R15: 00007ffdf5170460
[  371.631920][T12234]  </TASK>
[  371.632019][T12234] memory: usage 307200kB, limit 307200kB, failcnt 584
[  371.886708][T12234] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0
[  371.894967][T12234] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  371.902673][T12234] Memory cgroup stats for /syz3:
[  371.902916][T12234] cache 0
[  371.911098][T12234] rss 0
[  371.913918][T12234] shmem 0
[  371.923869][T12234] mapped_file 0
[  371.930778][T12234] dirty 0
[  371.933786][T12234] writeback 0
[  371.937245][T12234] workingset_refault_anon 40
[  371.942251][T12234] workingset_refault_file 662
[  371.946998][T12234] swap 217088
[  371.950565][T12234] swapcached 573440
[  371.954797][T12234] pgpgin 97645
[  371.965114][T12234] pgpgout 97645
[  371.972864][T12234] pgfault 101843
[  371.991996][T12234] pgmajfault 45
[  371.996567][T12234] inactive_anon 0
[  372.000633][T12234] active_anon 0
[  372.004253][T12234] inactive_file 0
[  372.008509][T12234] active_file 0
[  372.012118][T12234] unevictable 0
[  372.015856][T12234] hierarchical_memory_limit 314572800
[  372.021678][T12234] hierarchical_memsw_limit 9223372036854771712
[  372.028230][T12234] total_cache 0
[  372.031888][T12234] total_rss 0
[  372.035376][T12234] total_shmem 0
[  372.041258][T12234] total_mapped_file 0
[  372.046500][T12234] total_dirty 0
[  372.050805][T14951] xt_hashlimit: size too large, truncated to 1048576
[  372.057491][T12234] total_writeback 0
[  372.110016][T13963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.114020][T12234] total_workingset_refault_anon 40
[  372.124456][T12234] total_workingset_refault_file 662
[  372.130020][T12234] total_swap 217088
[  372.133866][T12234] total_swapcached 573440
[  372.138496][T12234] total_pgpgin 97645
[  372.142424][T12234] total_pgpgout 97645
[  372.146564][T12234] total_pgfault 101843
[  372.150732][T12234] total_pgmajfault 45
[  372.154772][T12234] total_inactive_anon 0
[  372.159004][T12234] total_active_anon 0
[  372.163060][T12234] total_inactive_file 0
[  372.167289][T12234] total_active_file 0
[  372.172933][T14958] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  372.180652][T12234] total_unevictable 0
[  372.185022][T12234] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2638,pid=14810,uid=0
[  372.214169][T12234] Memory cgroup out of memory: Killed process 14810 (syz.3.2638) total-vm:96348kB, anon-rss:1228kB, file-rss:22388kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  372.385535][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  372.385552][   T28] audit: type=1400 audit(1779619807.224:4346): avc:  denied  { write } for  pid=14969 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  372.422467][T14962] loop5: detected capacity change from 0 to 8192
[  372.530783][T14962]  loop5: p1 < > p2 p4 < p5 >
[  372.536714][T14962] loop5: partition table partially beyond EOD, truncated
[  372.576720][T14962] loop5: p1 start 134217728 is beyond EOD, truncated
[  372.598612][T14962] loop5: p2 size 67072 extends beyond EOD, truncated
[  372.620696][T14962] loop5: p5 size 67072 extends beyond EOD, truncated
[  372.666165][   T28] audit: type=1400 audit(1779619807.503:4347): avc:  denied  { write } for  pid=14972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  372.738079][   T28] audit: type=1400 audit(1779619807.573:4348): avc:  denied  { write } for  pid=14986 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  372.922249][   T28] audit: type=1400 audit(1779619807.763:4349): avc:  denied  { write } for  pid=14988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.002424][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2656'.
[  373.049327][   T28] audit: type=1400 audit(1779619807.883:4350): avc:  denied  { write } for  pid=15005 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.084298][T15004] netlink: 59 bytes leftover after parsing attributes in process `syz.9.2656'.
[  373.126935][T15012] loop5: detected capacity change from 0 to 512
[  373.169958][T15012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.170031][T15012] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.188286][   T28] audit: type=1400 audit(1779619808.023:4351): avc:  denied  { write } for  pid=15011 comm="syz.5.2658" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  373.188350][   T28] audit: type=1400 audit(1779619808.023:4352): avc:  denied  { create } for  pid=15011 comm="syz.5.2658" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  373.239934][   T28] audit: type=1400 audit(1779619808.093:4353): avc:  denied  { write } for  pid=15010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.272868][   T28] audit: type=1400 audit(1779619808.113:4354): avc:  denied  { write } for  pid=15026 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.283594][T15004] loop9: detected capacity change from 0 to 512
[  373.354808][T15004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.355153][T15004] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.360910][   T28] audit: type=1400 audit(1779619808.213:4355): avc:  denied  { write } for  pid=15028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.754749][T15078] netlink: 'syz.7.2661': attribute type 10 has an invalid length.
[  373.755411][T13963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.773595][T15078] ieee802154 phy0 wpan0: encryption failed: -22
[  373.842650][T15084] program  is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.948705][T15096] xt_hashlimit: size too large, truncated to 1048576
[  374.008605][T14634] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.074002][T15112] loop9: detected capacity change from 0 to 512
[  374.089399][T15112] EXT4-fs: Ignoring removed bh option
[  374.116396][T15112] EXT4-fs (loop9): 1 truncate cleaned up
[  374.138678][T15112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.195029][T14634] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  374.220377][T14634] EXT4-fs (loop9): Remounting filesystem read-only
[  374.324564][T15122] loop3: detected capacity change from 0 to 512
[  374.339703][T15122] EXT4-fs: Ignoring removed mblk_io_submit option
[  374.351007][T15122] EXT4-fs (loop3): orphan cleanup on readonly fs
[  374.361319][T15122] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  374.372445][T15122] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2665: attempt to clear invalid blocks 2 len 1
[  374.385383][T15122] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  374.385718][T15122] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, 
[  374.394886][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  374.394911][    C1] EXT4-fs (loop3): initial error at time 1779619809: ext4_clear_blocks:876: inode 13
[  374.394941][    C1] EXT4-fs (loop3): last error at time 1779619809: ext4_clear_blocks:876: inode 13
[  374.428400][T15122] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  374.437160][T15122] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2665: invalid indirect mapped block 1819239214 (level 0)
[  374.453947][T15122] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  374.454097][T15122] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2665: invalid indirect mapped block 1819239214 (level 1)
[  374.477421][T15122] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  374.477822][T15122] EXT4-fs (loop3): 1 truncate cleaned up
[  374.494598][T15122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.522099][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2667'.
[  374.533336][T15131] loop5: detected capacity change from 0 to 128
[  374.557819][T15131] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  374.575224][T15131] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  374.625310][T13963] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  375.509244][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.681554][T15194] loop5: detected capacity change from 0 to 512
[  375.688213][T15194] EXT4-fs: Ignoring removed bh option
[  375.699877][T15194] EXT4-fs (loop5): 1 truncate cleaned up
[  375.705823][T15191] loop3: detected capacity change from 0 to 512
[  375.706510][T15194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.780943][T15191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  375.792620][T14634] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.865640][T15191] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.931836][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  375.942375][ T4722] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.943549][T13963] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  375.975824][T15205] loop7: detected capacity change from 0 to 512
[  375.990039][T13963] EXT4-fs (loop5): Remounting filesystem read-only
[  376.021312][T15205] EXT4-fs (loop7): 1 orphan inode deleted
[  376.027669][T15205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.040637][T15205] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.053488][   T36] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1
[  376.071266][ T4722] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.154323][ T4722] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.216311][ T4722] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.255257][T15222] loop3: detected capacity change from 0 to 8192
[  376.281211][T13963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.358092][ T4722] bridge_slave_1: left allmulticast mode
[  376.380159][ T4722] bridge_slave_1: left promiscuous mode
[  376.398695][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.423983][ T4722] bridge_slave_0: left allmulticast mode
[  376.439876][ T4722] bridge_slave_0: left promiscuous mode
[  376.447306][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.645788][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.684916][ T4722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.714327][ T4722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.727534][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'.
[  376.749924][ T4722] bond0 (unregistering): Released all slaves
[  376.829902][ T4722] hsr_slave_0: left promiscuous mode
[  376.853034][ T4722] hsr_slave_1: left promiscuous mode
[  376.870391][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.890217][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.898070][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.920125][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.938593][ T4722] veth1_macvtap: left promiscuous mode
[  376.950386][ T4722] veth0_macvtap: left promiscuous mode
[  376.960185][ T4722] veth1_vlan: left promiscuous mode
[  376.980244][ T4722] veth0_vlan: left promiscuous mode
[  377.077606][ T4722] team0 (unregistering): Port device team_slave_1 removed
[  377.088689][ T4722] team0 (unregistering): Port device team_slave_0 removed
[  377.852788][   T28] kauditd_printk_skb: 94 callbacks suppressed
[  377.852807][   T28] audit: type=1400 audit(1779619812.701:4449): avc:  denied  { write } for  pid=15256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.896543][T15204] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.898689][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'.
[  377.904010][T15204] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.920165][T15204] bridge_slave_0: entered allmulticast mode
[  377.926725][T15204] bridge_slave_0: entered promiscuous mode
[  377.943072][T15204] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.963536][   T28] audit: type=1400 audit(1779619812.811:4450): avc:  denied  { write } for  pid=15282 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.988318][T15204] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.011861][T15204] bridge_slave_1: entered allmulticast mode
[  378.028593][T15204] bridge_slave_1: entered promiscuous mode
[  378.223016][T15286] set_capacity_and_notify: 1 callbacks suppressed
[  378.223031][T15286] loop3: detected capacity change from 0 to 512
[  378.236041][T15286] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  378.247017][ T4722] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.321258][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1
[  378.381941][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.420383][ T4722] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.457216][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.508995][T15204] team0: Port device team_slave_0 added
[  378.530196][T15204] team0: Port device team_slave_1 added
[  378.586464][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.601772][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.639567][   T28] audit: type=1400 audit(1779619813.481:4451): avc:  denied  { write } for  pid=15297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.663075][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.683150][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.698048][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.726526][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.738028][   T28] audit: type=1400 audit(1779619813.571:4452): avc:  denied  { write } for  pid=15314 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.793215][ T4722] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.809037][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2
[  378.810248][T15321] loop6: detected capacity change from 0 to 512
[  378.838266][T15228] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.845377][T15228] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.852560][T15228] bridge_slave_0: entered allmulticast mode
[  378.858930][T15228] bridge_slave_0: entered promiscuous mode
[  378.879059][T15204] hsr_slave_0: entered promiscuous mode
[  378.885223][T15204] hsr_slave_1: entered promiscuous mode
[  378.891182][T15204] debugfs: 'hsr0' already exists in 'hsr'
[  378.896944][T15204] Cannot create hsr debugfs directory
[  378.948579][T15228] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.964726][T15228] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.982445][T15228] bridge_slave_1: entered allmulticast mode
[  378.990298][T15228] bridge_slave_1: entered promiscuous mode
[  379.063237][T15321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.077891][T15321] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.093931][ T4722] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.130592][T15228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.144319][T15228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.384337][   T28] audit: type=1400 audit(1779619814.231:4453): avc:  denied  { write } for  pid=15325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  379.505672][   T28] audit: type=1400 audit(1779619814.351:4454): avc:  denied  { write } for  pid=15349 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  379.609418][T15352] loop7: detected capacity change from 0 to 2048
[  379.688443][   T28] audit: type=1400 audit(1779619814.531:4455): avc:  denied  { write } for  pid=15320 comm="syz.6.2698" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  379.713473][   T28] audit: type=1400 audit(1779619814.561:4456): avc:  denied  { create } for  pid=15320 comm="syz.6.2698" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  379.739108][T15352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.826119][   T28] audit: type=1400 audit(1779619814.671:4457): avc:  denied  { write } for  pid=15351 comm="syz.7.2703" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  379.867631][   T28] audit: type=1400 audit(1779619814.691:4458): avc:  denied  { read append open } for  pid=15351 comm="syz.7.2703" path="/125/file1/cpu.stat" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  380.137694][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3
[  380.177684][T15228] team0: Port device team_slave_0 added
[  380.189009][   T36] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  380.205342][T15228] team0: Port device team_slave_1 added
[  380.224052][   T36] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 958 with error 28
[  380.251591][   T36] EXT4-fs (loop7): This should not happen!! Data will be lost
[  380.251591][   T36] 
[  380.280141][T15228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.287368][   T36] EXT4-fs (loop7): Total free blocks count 0
[  380.293414][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.319609][   T36] EXT4-fs (loop7): Free/Dirty block details
[  380.326024][   T36] EXT4-fs (loop7): free_blocks=66060288
[  380.331655][   T36] EXT4-fs (loop7): dirty_blocks=960
[  380.337090][   T36] EXT4-fs (loop7): Block reservation details
[  380.346042][   T36] EXT4-fs (loop7): i_reserved_data_blocks=60
[  380.352220][T15228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.367920][T12664] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  380.380153][T15228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.387321][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.418181][T12664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.428653][T15228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.462058][T15228] hsr_slave_0: entered promiscuous mode
[  380.468069][T15228] hsr_slave_1: entered promiscuous mode
[  380.474400][T15228] debugfs: 'hsr0' already exists in 'hsr'
[  380.480152][T15228] Cannot create hsr debugfs directory
[  380.641459][ T4722] bridge_slave_1: left allmulticast mode
[  380.647320][ T4722] bridge_slave_1: left promiscuous mode
[  380.653371][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.661443][ T4722] bridge_slave_0: left allmulticast mode
[  380.667623][ T4722] bridge_slave_0: left promiscuous mode
[  380.676218][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.795392][ T4722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.808231][ T4722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.818049][ T4722] bond0 (unregistering): Released all slaves
[  381.000090][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2704'.
[  381.025387][ T4722] hsr_slave_0: left promiscuous mode
[  381.035919][T15377] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2704'.
[  381.046390][ T4722] hsr_slave_1: left promiscuous mode
[  381.046406][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.053001][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.068247][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.076762][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.084296][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.094878][ T4722] veth1_macvtap: left promiscuous mode
[  381.095244][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'.
[  381.100939][ T4722] veth0_macvtap: left promiscuous mode
[  381.111900][T15378] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2705'.
[  381.115599][ T4722] veth1_vlan: left promiscuous mode
[  381.129564][ T4722] veth0_vlan: left promiscuous mode
[  381.204657][T15378] loop3: detected capacity change from 0 to 512
[  381.245465][T15378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.258054][T15378] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.271137][T15381] loop6: detected capacity change from 0 to 512
[  381.278718][ T4722] team0 (unregistering): Port device team_slave_1 removed
[  381.292165][T15381] EXT4-fs: Ignoring removed mblk_io_submit option
[  381.299090][ T4722] team0 (unregistering): Port device team_slave_0 removed
[  381.301166][T15381] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  381.325600][T15381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002]
[  381.336115][T15381] EXT4-fs (loop6): orphan cleanup on readonly fs
[  381.348729][T15381] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2706: bg 0: block 361: padding at end of block bitmap is not set
[  381.350039][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4
[  381.366059][T15381] loop6: lost filesystem error report for type 5 error -117
[  381.372446][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  381.387859][    C1] EXT4-fs (loop6): initial error at time 1779619816: ext4_validate_block_bitmap:441
[  381.397913][    C1] EXT4-fs (loop6): last error at time 1779619816: ext4_validate_block_bitmap:441
[  381.411570][T15381] EXT4-fs (loop6): Remounting filesystem read-only
[  381.424360][T15381] EXT4-fs (loop6): 1 truncate cleaned up
[  381.431054][T15381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  381.463242][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  381.532666][T15397] loop7: detected capacity change from 0 to 128
[  381.551515][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.628977][T15410] loop3: detected capacity change from 0 to 1024
[  381.638493][T15410] EXT4-fs: Ignoring removed bh option
[  381.646171][T15410] EXT4-fs: Ignoring removed oldalloc option
[  381.658230][T15410] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  381.669091][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25
[  381.686749][T15410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.726565][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12
[  381.786446][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  381.810026][T15204] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  381.821401][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  381.837115][T15204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  381.844848][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  381.869344][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  381.877654][T15204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  381.885540][T12234] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  381.909589][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  381.917725][T15204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  381.925290][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  381.940002][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  381.966408][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  381.978677][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  382.003219][T12234] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  382.025630][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.040647][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  382.063460][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  382.089224][T12234] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  382.112771][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.128560][T12234] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  382.170385][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.200083][T15204] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.207677][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.229099][T15204] 8021q: adding VLAN 0 to HW filter on device team0
[  382.242545][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.249746][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.259567][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.275867][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.283121][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.300339][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.316148][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.330987][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.345247][T15204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  382.345281][T15204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  382.393603][T12234] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  382.412715][T15468] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  382.516793][T15228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  382.533941][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  382.541917][T15228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  382.550645][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  382.559172][T15228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  382.568258][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  382.579649][T15228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  382.596116][T15485] loop6: detected capacity change from 0 to 128
[  382.599249][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  382.615802][T15485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  382.636178][T15485] System zones: 1-3, 19-19, 35-36
[  382.641993][T15485] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  382.657253][T15485] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  382.696035][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.715888][T15485] EXT4-fs warning (device loop6): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  382.791726][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26
[  382.860768][T15228] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.872589][T15228] 8021q: adding VLAN 0 to HW filter on device team0
[  382.878712][ T9170] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  382.889452][   T28] kauditd_printk_skb: 108 callbacks suppressed
[  382.889467][   T28] audit: type=1400 audit(1779619817.729:4567): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  382.904147][T15228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  383.054773][T15228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  383.443376][   T28] audit: type=1400 audit(1779619817.769:4568): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.465497][   T28] audit: type=1400 audit(1779619817.769:4569): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.492798][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.499921][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.507661][   T28] audit: type=1400 audit(1779619817.769:4570): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.531748][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.538901][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.546624][   T28] audit: type=1400 audit(1779619817.769:4571): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.568311][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27
[  383.583680][   T28] audit: type=1400 audit(1779619817.779:4572): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.609713][   T28] audit: type=1400 audit(1779619817.779:4573): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.632053][   T28] audit: type=1400 audit(1779619817.779:4574): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.654569][   T28] audit: type=1400 audit(1779619817.779:4575): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.676789][   T28] audit: type=1400 audit(1779619817.779:4576): avc:  denied  { write } for  pid=12234 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  383.797001][T15204] veth0_vlan: entered promiscuous mode
[  383.820233][T15204] veth1_vlan: entered promiscuous mode
[  383.830804][T15545] loop6: detected capacity change from 0 to 4096
[  383.871307][T15204] veth0_macvtap: entered promiscuous mode
[  383.904750][T15204] veth1_macvtap: entered promiscuous mode
[  383.936065][T15228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.945864][T12234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.976221][   T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.005760][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.023269][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.049171][T15560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.065645][   T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.085033][ T4722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.101234][ T4722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.120526][T15560] syzkaller0: entered promiscuous mode
[  384.128406][T15560] syzkaller0: entered allmulticast mode
[  384.146145][T15572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  384.166154][ T4722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.176081][ T4722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.192074][   T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.207044][T15560] tipc: Resetting bearer <eth:syzkaller0>
[  384.213075][T15574] loop6: detected capacity change from 0 to 512
[  384.231967][T15228] veth0_vlan: entered promiscuous mode
[  384.250849][T15228] veth1_vlan: entered promiscuous mode
[  384.268171][T15559] tipc: Resetting bearer <eth:syzkaller0>
[  384.285680][T15559] tipc: Disabling bearer <eth:syzkaller0>
[  384.315733][T15574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  384.326706][   T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.376534][T15228] veth0_macvtap: entered promiscuous mode
[  384.420866][T15228] veth1_macvtap: entered promiscuous mode
[  384.437170][T15228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.445931][T15228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.543854][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.552680][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.633874][T15574] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  385.068435][T15574] EXT4-fs (loop6): orphan cleanup on readonly fs
[  385.586332][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.637105][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.691764][T15617] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  385.883983][T15574] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  386.081743][T15576] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.097497][T15576] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.120179][T15576] bridge_slave_0: entered allmulticast mode
[  386.142241][T15576] bridge_slave_0: entered promiscuous mode
[  386.160586][T15576] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.183967][T15576] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.204537][T15576] bridge_slave_1: entered allmulticast mode
[  386.228327][T15576] bridge_slave_1: entered promiscuous mode
[  386.276608][T15576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.311913][T15576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.348435][T15574] EXT4-fs (loop6): Cannot turn on quotas: error -5
[  386.359955][T15574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2718: bg 0: block 64: padding at end of block bitmap is not set
[  386.384723][T15574] loop6: lost filesystem error report for type 5 error -117
[  386.393992][   T30] bridge_slave_1: left allmulticast mode
[  386.420932][T15574] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  386.429816][   T30] bridge_slave_1: left promiscuous mode
[  386.442918][T15574] loop6: lost filesystem error report for type 5 error -117
[  386.443405][T15574] EXT4-fs (loop6): 1 truncate cleaned up
[  386.447385][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.451667][T15574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  386.483607][   T30] bridge_slave_0: left allmulticast mode
[  386.493945][   T30] bridge_slave_0: left promiscuous mode
[  386.512483][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.547544][T15651] loop7: detected capacity change from 0 to 256
[  386.553972][T15652] loop2: detected capacity change from 0 to 1024
[  386.577442][T15651] FAULT_INJECTION: forcing a failure.
[  386.577442][T15651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  386.590598][T15651] CPU: 0 UID: 0 PID: 15651 Comm: syz.7.2726 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  386.590637][T15651] Tainted: [W]=WARN
[  386.590647][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  386.590663][T15651] Call Trace:
[  386.590671][T15651]  <TASK>
[  386.590681][T15651]  __dump_stack+0x1d/0x30
[  386.590772][T15651]  dump_stack_lvl+0x95/0xd0
[  386.590797][T15651]  dump_stack+0x15/0x1b
[  386.590815][T15651]  should_fail_ex+0x263/0x280
[  386.590849][T15651]  should_fail+0xb/0x20
[  386.590873][T15651]  should_fail_usercopy+0x1a/0x20
[  386.590963][T15651]  strncpy_from_user+0x27/0x250
[  386.590984][T15651]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  386.591098][T15651]  do_getname+0x59/0x1c0
[  386.591117][T15651]  getname_flags+0x1d/0x30
[  386.591134][T15651]  __se_sys_chroot+0x3d/0x270
[  386.591163][T15651]  __x64_sys_chroot+0x1f/0x30
[  386.591192][T15651]  x64_sys_call+0x2601/0x3020
[  386.591240][T15651]  do_syscall_64+0x12c/0x3b0
[  386.591281][T15651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.591309][T15651] RIP: 0033:0x7f392d15ce59
[  386.591380][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.591401][T15651] RSP: 002b:00007f392bbaf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1
[  386.591421][T15651] RAX: ffffffffffffffda RBX: 00007f392d3d5fa0 RCX: 00007f392d15ce59
[  386.591453][T15651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[  386.591466][T15651] RBP: 00007f392bbaf090 R08: 0000000000000000 R09: 0000000000000000
[  386.591481][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.591497][T15651] R13: 00007f392d3d6038 R14: 00007f392d3d5fa0 R15: 00007fff299a8da8
[  386.591557][T15651]  </TASK>
[  386.623094][T15652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.623232][T15652] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.639863][T15652] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.2727: lblock 3 mapped to illegal pblock 3 (length 3)
[  386.644730][T15652] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  386.644770][T15652] EXT4-fs (loop2): This should not happen!! Data will be lost
[  386.644770][T15652] 
[  386.717353][ T4722] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8)
[  386.717624][ T4722] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  386.717655][ T4722] EXT4-fs (loop2): This should not happen!! Data will be lost
[  386.717655][ T4722] 
[  386.718709][T15228] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  386.907758][T15228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  386.918477][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.337765][T15669] loop6: detected capacity change from 0 to 1024
[  387.393637][T15669] EXT4-fs: Ignoring removed bh option
[  387.417913][T15669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.086706][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'.
[  388.098623][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.107477][T15675] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2732'.
[  388.120555][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.144361][   T30] bond0 (unregistering): Released all slaves
[  388.197719][   T30] tipc: Disabling bearer <udp:syz2>
[  388.203979][T15675] loop2: detected capacity change from 0 to 512
[  388.211463][T15678] program syz.0.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  388.230643][   T30] tipc: Left network mode
[  388.236492][T15576] team0: Port device team_slave_0 added
[  388.276088][T15576] team0: Port device team_slave_1 added
[  388.315859][T15576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.329181][T15576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.363737][T15675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.380051][T15576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.390911][T15675] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.472462][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  388.472477][   T28] audit: type=1400 audit(1779619823.307:4593): avc:  denied  { write } for  pid=15676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.530452][   T28] audit: type=1400 audit(1779619823.357:4594): avc:  denied  { write } for  pid=15691 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.594152][   T30] hsr_slave_0: left promiscuous mode
[  388.603499][   T30] hsr_slave_1: left promiscuous mode
[  388.624431][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.637095][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  388.689726][   T28] audit: type=1400 audit(1779619823.527:4595): avc:  denied  { write } for  pid=15695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.747553][   T28] audit: type=1400 audit(1779619823.577:4596): avc:  denied  { write } for  pid=15706 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.780367][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.788456][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.800278][   T30] veth1_macvtap: left promiscuous mode
[  388.806880][   T30] veth0_macvtap: left promiscuous mode
[  388.812496][   T30] veth1_vlan: left promiscuous mode
[  388.818555][   T30] veth0_vlan: left promiscuous mode
[  388.879821][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.924956][   T30] team0 (unregistering): Port device team_slave_1 removed
[  388.959793][   T30] team0 (unregistering): Port device team_slave_0 removed
[  388.983628][T15719] loop6: detected capacity change from 0 to 256
[  389.032861][T15576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.040652][T15576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.071288][T15576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.099531][T15715] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  389.117182][T15228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.150744][T15576] hsr_slave_0: entered promiscuous mode
[  389.162633][T15576] hsr_slave_1: entered promiscuous mode
[  389.168864][T15576] debugfs: 'hsr0' already exists in 'hsr'
[  389.175418][T15576] Cannot create hsr debugfs directory
[  389.197933][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2739'.
[  389.264870][   T28] audit: type=1400 audit(1779619824.097:4597): avc:  denied  { write } for  pid=15724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  389.319757][   T28] audit: type=1400 audit(1779619824.137:4598): avc:  denied  { write } for  pid=15748 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  389.374558][T15751] loop0: detected capacity change from 0 to 512
[  389.390806][T15751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.406064][T15751] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2743: iget: bad i_size value: 38620345925642
[  389.422707][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'.
[  389.434914][T15751] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  389.435313][T15751] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2743: couldn't read orphan inode 15 (err -117)
[  389.456749][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  389.456799][    C1] EXT4-fs (loop0): initial error at time 1779619824: ext4_orphan_get:1397: inode 15
[  389.456877][    C1] EXT4-fs (loop0): last error at time 1779619824: ext4_orphan_get:1397: inode 15
[  389.493704][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2745'.
[  389.502676][T15759] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2745'.
[  389.511966][T15751] loop0: lost filesystem error report for type 5 error -117
[  389.519638][T15754] loop2: detected capacity change from 0 to 512
[  389.530203][T15751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.546008][   T28] audit: type=1400 audit(1779619824.347:4599): avc:  denied  { mounton } for  pid=15753 comm="syz.2.2744" path="/6/file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  389.576200][   T28] audit: type=1400 audit(1779619824.407:4600): avc:  denied  { write } for  pid=15750 comm="syz.0.2743" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  389.598840][T15754] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  389.601519][T15754] EXT4-fs (loop2): 1 truncate cleaned up
[  389.605658][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2743'.
[  389.606630][T15751] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=15751 comm=syz.0.2743
[  389.722897][   T28] audit: type=1400 audit(1779619824.557:4601): avc:  denied  { write } for  pid=15770 comm="syz.2.2746" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  389.748142][T15773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=15773 comm=syz.2.2746
[  389.767546][T15775] loop6: detected capacity change from 0 to 512
[  389.812048][T15765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2743: bg 0: block 5: invalid block bitmap
[  389.835030][T15773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=15773 comm=syz.2.2746
[  389.842606][T15765] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1176 with error 28
[  389.868936][T15780] loop2: detected capacity change from 0 to 512
[  389.883265][T15780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  389.894616][T15765] EXT4-fs (loop0): This should not happen!! Data will be lost
[  389.894616][T15765] 
[  389.918252][   T28] audit: type=1400 audit(1779619824.757:4602): avc:  denied  { write } for  pid=15761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  389.946030][T15765] EXT4-fs (loop0): Total free blocks count 0
[  389.953910][T15780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2746: Invalid block bitmap block 0 in block_group 0
[  389.966672][T15765] EXT4-fs (loop0): Free/Dirty block details
[  389.977987][T15780] loop2: lost filesystem error report for type 5 error -117
[  389.978217][T15780] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  389.981815][T15576] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  389.985574][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  389.998830][T15765] EXT4-fs (loop0): free_blocks=0
[  390.001019][    C0] EXT4-fs (loop2): initial error at time 1779619824: ext4_read_block_bitmap_nowait:483
[  390.010540][T15765] EXT4-fs (loop0): dirty_blocks=1180
[  390.012502][    C0] 
[  390.022375][T15765] EXT4-fs (loop0): Block reservation details
[  390.027462][    C0] EXT4-fs (loop2): last error at time 1779619824: ext4_read_block_bitmap_nowait:483
[  390.045665][T15765] EXT4-fs (loop0): i_reserved_data_blocks=1180
[  390.056169][T15771] EXT4-fs (loop0): shut down requested (0)
[  390.063658][T15780] loop2: lost filesystem error report for type 5 error -117
[  390.063842][T15780] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2746: attempt to clear invalid blocks 983261 len 1
[  390.070687][T15576] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  390.084428][T15780] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  390.093349][T15780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.2746: Invalid inode table block 0 in block_group 0
[  390.101084][T15576] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  390.125436][T15576] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  390.133674][T15576] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  390.140992][T15780] loop2: lost filesystem error report for type 5 error -117
[  390.141123][T15780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  390.160230][T15576] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  390.168209][T15576] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  390.174964][T15780] loop2: lost filesystem error report for type 5 error -117
[  390.175127][T15780] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  390.191260][T15780] loop2: lost filesystem error report for type 5 error -117
[  390.191494][T15780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.2746: Invalid inode table block 0 in block_group 0
[  390.213680][T15576] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  390.232963][T15775] EXT4-fs mount: 2 callbacks suppressed
[  390.232990][T15775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.236126][T15780] loop2: lost filesystem error report for type 5 error -117
[  390.252037][T15780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  390.269036][T15780] loop2: lost filesystem error report for type 5 error -117
[  390.269280][T15780] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.2746: mark_inode_dirty error
[  390.287905][T15780] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  390.288073][T15780] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  390.306783][T15780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.2746: Invalid inode table block 0 in block_group 0
[  390.319794][T15780] EXT4-fs (loop2): 1 truncate cleaned up
[  390.326278][T15780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.330267][T15799] FAULT_INJECTION: forcing a failure.
[  390.330267][T15799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  390.348800][T15775] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.411184][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.7.2749 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  390.411266][T15799] Tainted: [W]=WARN
[  390.411275][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  390.411320][T15799] Call Trace:
[  390.411328][T15799]  <TASK>
[  390.411338][T15799]  __dump_stack+0x1d/0x30
[  390.411368][T15799]  dump_stack_lvl+0x95/0xd0
[  390.411394][T15799]  dump_stack+0x15/0x1b
[  390.411423][T15799]  should_fail_ex+0x263/0x280
[  390.411534][T15799]  should_fail+0xb/0x20
[  390.411619][T15799]  should_fail_usercopy+0x1a/0x20
[  390.411712][T15799]  _copy_from_user+0x1c/0xb0
[  390.411742][T15799]  ___sys_sendmsg+0xc1/0x1e0
[  390.411785][T15799]  __x64_sys_sendmsg+0xd4/0x160
[  390.411894][T15799]  x64_sys_call+0x194c/0x3020
[  390.411932][T15799]  do_syscall_64+0x12c/0x3b0
[  390.412010][T15799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.412032][T15799] RIP: 0033:0x7f392d15ce59
[  390.412050][T15799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.412154][T15799] RSP: 002b:00007f392bbaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  390.412177][T15799] RAX: ffffffffffffffda RBX: 00007f392d3d5fa0 RCX: 00007f392d15ce59
[  390.412225][T15799] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 000000000000000c
[  390.412240][T15799] RBP: 00007f392bbaf090 R08: 0000000000000000 R09: 0000000000000000
[  390.412254][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.412267][T15799] R13: 00007f392d3d6038 R14: 00007f392d3d5fa0 R15: 00007fff299a8da8
[  390.412288][T15799]  </TASK>
[  390.608620][T15228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.637429][ T4736] ==================================================================
[  390.645570][ T4736] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  390.645620][ T4736] 
[  390.645626][ T4736] read-write to 0xffff88811b0586b8 of 8 bytes by task 15755 on cpu 1:
[  390.645643][ T4736]  __xa_set_mark+0xd2/0x1a0
[  390.645674][ T4736]  __folio_mark_dirty+0x3b7/0x4b0
[  390.645697][ T4736]  mark_buffer_dirty+0x120/0x1f0
[  390.645718][ T4736]  block_page_mkwrite+0x261/0x300
[  390.645743][ T4736]  ext4_page_mkwrite+0x835/0xad0
[  390.645764][ T4736]  handle_mm_fault+0x1bc5/0x2e70
[  390.645790][ T4736]  do_user_addr_fault+0x62f/0x1050
[  390.645818][ T4736]  exc_page_fault+0x62/0xa0
[  390.645842][ T4736]  asm_exc_page_fault+0x26/0x30
[  390.645861][ T4736] 
[  390.645867][ T4736] read to 0xffff88811b0586b8 of 8 bytes by task 4736 on cpu 0:
[  390.645883][ T4736]  xas_find_marked+0x213/0x620
[  390.645913][ T4736]  filemap_get_folios_tag+0xfa/0x430
[  390.645944][ T4736]  mpage_prepare_extent_to_map+0x328/0xc50
[  390.645967][ T4736]  ext4_do_writepages+0x6fe/0x2770
[  390.645998][ T4736]  ext4_writepages+0x18f/0x320
[  390.646018][ T4736]  do_writepages+0x1c6/0x310
[  390.646040][ T4736]  __writeback_single_inode+0x7f/0x650
[  390.646070][ T4736]  writeback_sb_inodes+0x4dd/0xaa0
[  390.646098][ T4736]  __writeback_inodes_wb+0x94/0x1a0
[  390.646127][ T4736]  wb_writeback+0x261/0x560
[  390.646154][ T4736]  wb_workfn+0x4d1/0x930
[  390.646175][ T4736]  process_scheduled_works+0x4f0/0x9c0
[  390.646209][ T4736]  worker_thread+0x58a/0x780
[  390.646235][ T4736]  kthread+0x22a/0x280
[  390.646252][ T4736]  ret_from_fork+0x146/0x330
[  390.646280][ T4736]  ret_from_fork_asm+0x1a/0x30
[  390.646304][ T4736] 
[  390.646308][ T4736] value changed: 0xffffff0000000000 -> 0xffffffc000000000
[  390.646321][ T4736] 
[  390.646325][ T4736] Reported by Kernel Concurrency Sanitizer on:
[  390.646339][ T4736] CPU: 0 UID: 0 PID: 4736 Comm: kworker/u8:25 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  390.646369][ T4736] Tainted: [W]=WARN
[  390.646376][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  390.646392][ T4736] Workqueue: writeback wb_workfn (flush-8:0)
[  390.646420][ T4736] ==================================================================
[  390.681385][T15576] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.688010][T15576] 8021q: adding VLAN 0 to HW filter on device team0
[  390.711551][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.711638][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.713613][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.713653][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.961480][T15576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.193905][ T9170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.342578][T15576] veth0_vlan: entered promiscuous mode
[  391.352025][T15576] veth1_vlan: entered promiscuous mode
[  391.373591][T15576] veth0_macvtap: entered promiscuous mode
[  391.381658][T15576] veth1_macvtap: entered promiscuous mode
[  391.393513][T15576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.406184][T15576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.418433][ T4716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.427942][ T4716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.454484][ T4716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.465102][ T4716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.661260][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5
[  392.771246][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6
[  392.885126][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7
[  392.998938][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8
[  393.486034][   T28] kauditd_printk_skb: 54 callbacks suppressed
[  393.486051][   T28] audit: type=1400 audit(1779619828.315:4657): avc:  denied  { write } for  pid=16180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.522724][   T28] audit: type=1400 audit(1779619828.355:4658): avc:  denied  { write } for  pid=16191 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.607559][   T28] audit: type=1400 audit(1779619828.445:4659): avc:  denied  { write } for  pid=16194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.640063][   T28] audit: type=1400 audit(1779619828.475:4660): avc:  denied  { write } for  pid=16205 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.726573][   T28] audit: type=1400 audit(1779619828.555:4661): avc:  denied  { write } for  pid=16207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.759038][   T28] audit: type=1400 audit(1779619828.595:4662): avc:  denied  { write } for  pid=16218 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.842235][   T28] audit: type=1400 audit(1779619828.675:4663): avc:  denied  { write } for  pid=16220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.874922][   T28] audit: type=1400 audit(1779619828.705:4664): avc:  denied  { write } for  pid=16231 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.979903][   T28] audit: type=1400 audit(1779619828.815:4665): avc:  denied  { write } for  pid=16234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  394.018718][   T28] audit: type=1400 audit(1779619828.855:4666): avc:  denied  { write } for  pid=16245 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1