last executing test programs:

8.607950962s ago: executing program 1 (id=138):
r0 = getpid()
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0xf6, 0x0, 0x228, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xd8}, 0x100000, 0x3, 0x0, 0x8, 0x77ff, 0xd7, 0x0, 0x0, 0xffffffff, 0x0, 0xff}, 0x0, 0xfffffffffdffffff, r1, 0x3)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1944}, 0x10020, 0x9, 0x0, 0x4, 0x7fff, 0x7fff, 0x8, 0x0, 0xffff, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000780), 0x8, 0x61f, &(0x7f00000008c0)="$eJzs3c9vE1ceAPDv2PlFsrsJaLW77GGJtFqBtEtCAqxQValwR4j+uPWUkoAogaAkVRuK1CDRS6Wqlx4q9dRD6X/RIvXaQ6899NJThYQqlEOpUHE147FxHDtxjB2H5PMRg+fNs+e9SfLNe355bxzAvjWe/leIOBwRN5OI0Zq8vsgzx8vPW3t0+9Lao/RYqfT6L0nc/iBZrT1Xkj+O5C/+fTSS7wsRh4oby11auXVtZn5+bjFPTy5fvzm5tHLr+NXrM1fmrszdmP7/9JnTp06fmTrR/sUVs39V5+++/e7oRxfe/PLzJ8nUVz9eSOJsPM2fkF5b/csH2y85Mx7jUSp7XHs8/bqeec5z7xa/jlZ+Tp5J6g+wa13Ofx77I+LvMRrFmu/maHz4ak8rB3RVKYlKGwXsO0lb8T/U+YoAO6zSDyi/ty9vW/caCl3ulQA74eG58gBAOfb7I6IS/33lscEYysYGhteSdeM8SUQ8x8hcVVrGd99euJtuUTcO12DYEOig1TuVUe769j/JYnMshrLU8FphXfwXarb0+Gttlj9el26t/wF0wuqdiPhH3v4PxLbif7wm/t9qs3zxDwAAAAAAAJ1z/1xE/K/R/L9Cdf7PQIP5PyMRcbYD5W/997/Cg3wn6UBxQI2H5yJebjj/tzrHd6yYp/6czQfoTy5fnZ87ERF/iYhj0T+Ypqfqzls7Q/j4x4c+a1Z+7fy/dEvLr8wFzM/0oK9uIe7szPLM8143EPHwTsQ/s/m/R/Ij6+f/pO1/0qD9T+P7ZotlHPrPvYvN8raOf6BbSl9EHG3Y/j/rbieb359jMusPTFZ6BRv96/1Pvm5WvviH3knb/+HN438wqb1fz9L2zj8QESdX+krN8tvt/w8kbxRjNTt/ZRHj8uJUxEByvlgpN/XezPLy4vT26gx7VSUessepcvwf+/fm43/V/n9NHB6IiNUWy/zb05GfmuVp/6F30vif3bz9H1vf/m9/Z/re2DdNik8uttT+n8ra9GP5EeN/UGvj/ThaDdCeVBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXnCFiPhTJIWJ6n6hMDERMRIRf43hwvzC0vJ/Ly+8c2M2zcs+/79Q+aTf0XI6qXz+/1hE9EdEmp7O05X8kxFxMCI+LR7I0hOXFuZne33xAAAAAAAAAAAAAAAAAAAAsEuMZGv+S4P16/9TPxd7XTug6/ryR/EO+09f268sDXa0IsCOaz/+gRdd6/Hf39V6ADuvefw/flLK7Gh1gB2k/w/7V5vx788FsAdo/2G/anFMb6jb9QB6QfsPAAAAAAB7ysEj939IImL1pQPZlhrI80z2h72t0OsKAD1jDi/sX30Lva4B0Cve4wNJde+3hov9m8/+T7pTIQAAAAAAAAAAAABgg6OHrf+H/Wrz9f/m9sNetsn6/0bB73YBsIc0/+gPbT/sdd7jA8kWvwis/wcAAAAAAAAAAACAXWDo1rWZ+fm5xaWVF2/nlTZeNdjryq/O7IYvXWd3nnbnzP0RsTsusFM7SUS08uTKLTh6WNUe/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACq/ggAAP//5y0ltw==")
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0)
recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002000), 0x0, &(0x7f0000000700)}, 0x2000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044)
sendmsg$nl_route_sched(r7, 0x0, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
syz_pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x40, 0x7, 0x28, 0x7, 0x0, 0xa3, 0x120, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8480, 0x0, 0xfffffff7, 0x9, 0x6, 0x1, 0x3, 0x0, 0xfffffffa, 0x0, 0x4}, r0, 0xc, 0xffffffffffffffff, 0x2)

7.468068445s ago: executing program 2 (id=139):
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480)='z', 0x1, 0x0, 0x9000}], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400010800"/16, @ANYRES32=0x0, @ANYBLOB="0b0000000000000054001a8018000a8014000700fe8000000000000000000000000000aa300002802c0001800800000000000000080000000000000008000000000000000800000000000000080000000000000008000280040001"], 0x74}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10000000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b23, 0x0)
r3 = syz_clone(0x10241000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, r3, 0x400010, 0xffffffffffffffff, 0x3)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0xbd7838ee412df6f2)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @initdev, <r4=>0x0}, &(0x7f0000000180)=0xc)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r7, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6erspan0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x44000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x25, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14000000220035", 0x7}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r11, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

6.818535472s ago: executing program 4 (id=140):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x2, 0x64, 0x4, 0x8, 0x2, 0x9, 'syz1\x00'})
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
io_setup(0x20fe, &(0x7f0000000540)=<r3=>0x0)
io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

6.247314389s ago: executing program 0 (id=142):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
syz_open_procfs(0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x434, &(0x7f0000000d80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r5, r5, 0x0, 0xe3aa6ea)
r6 = syz_clone(0x240000, 0x0, 0xfffffffffffffc60, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gretap0\x00'})
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r6, &(0x7f00000000c0)='fd/4\x00')

4.859755405s ago: executing program 1 (id=143):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x3}, 0x0)
r5 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r5)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0xc6580, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000, 0x3100, r6, 0x2}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4004000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100))
getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', r3, 0x8, 0x7, 0x2, 0x2, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xa3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x6, 0x3, '3'}, {0x2, 0xc, "3f35efbcd50973b9608c"}]}, @noop, @generic={0x1eb, 0x8, "88a2b0483537"}, @rr={0x7, 0xb, 0xb8, [@empty, @empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x3e, 0x3, [{0x0, 0x10, "7de780031e08714e0b417732327f"}, {0x7, 0xd, "c076f6a0ac1c88afe8f004"}, {0x6, 0x8, "d5d3d4c828b1"}, {0x6, 0x8, "096747a8cabf"}, {0x6, 0xb, "b375f968dcf9813748"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x0)
setresuid(0xee01, r9, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000008, &(0x7f00000007c0)={[], [{@euid_lt={'euid<', r9}}]}, 0xff, 0x553, &(0x7f0000000200)="$eJzs3d9rZFcdAPDvnWSy2d1sk6oPWmgttrJbdGc2jW2DD7WC+FYQ6vsak9kQdpJZkkm7CUVn/wJBRAWf9MUXwT9AkAVffBRhQZ8VKoroVkEf2l65d+4k2dk72WGdzHSTzwfu3nPur+85szln7o/DnQDOrOcj4o2I+ChN05ciYr5YXimm6HSnbLv377+7mk1JpOlb/0giKZZlm6VpmvaOeTHfZeogxreTIwFni/ne/s2VZrOxXWTr7c1b9Z29/asbmyvrjfXG1tLS4qvLry2/snxtJPW8FBGvf+0vP/zez7/++q+/+M6fr//tyneyYs0V63v1eAzTx63sVr16brZvh+3HDPZxlNWn+kGROT/cPndOskAAAAyUneN/IiI+FxEvxXxMHX86CwAAADyB0q/MxQdJ9/ldiZkBywEAAIAnSCUfA5tUasVYgLmoVGq17hjeT8WFSrO10/7Cjdbu1lp3rOxCVCs3NpqNa8VY4YWoJll+MU8f5l/uyy9FxNMR8YP583m+ttpqrk365gcAAACcERf7rv//Pd+9/j9eMp7CAQAAAKOzMOkCAAAAACfO9T8AAACcatVJFwAAAAA4cd94881sSnu/f7329t7uzdbbV9caOzdrm7urtdXW9q3aequ1nr+zb/NRx2u2Wre+FFu7t+vtxk67fmlv//pma3erfX0jZsdSIQAAAOAhT3/27h+TiOh8+Xw+ZWYmXShgLKYPUr13epa0/j891Z2/N6ZCAWMxNcQ2750rX+48AZ5s0/0LBrR14PQx/h941C96DBy887vurDLi8gAAAKN3+TPlz/+Pns9/mHY9uGfHKT884TRiOLv6nv+n85MqCDB2+fP/YQfyOFmAU6U61AhA4DT7f5//P1r//UMAAGDc5vIpqdSK23tzUanUahGX8p8FrCY3NpqNaxHxVET8Yb56Lssv5nsmj7xmAAAAAAAAAAAAAAAAAAAAAAAAAAC60jSJFAAAADjVIip/TX7TfZf/5fkX5/rvD8wk/81/EngmIt75yVs/ur3Sbm8vZsv/ebC8/eNi+cuTuIMBAAAA9Otdp+fz/0y6NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcNu/ff3e1Nw2x+flRxf37VyNioSz+dMzm89moRsSFfyUxfWS/JCKmRhC/cyciPl0WP8mKdRCyLP4oPoTOnaST5krjx0LxKZTFvziC+HCW3c36nzfK2n8lns/n5e1vOuKB/OMa3P/FQf83NaD9XxoyxjP3flkfGP9OxDPT5f1fL34yIP4LQ0Wvxre+ub8/aG3604jLve+fvMc7GuEwVW9v3qrv7O1f3dhcWW+sN7aWlhZfXX5t+ZXla/UbG81G8W9pjO8/+6uPjqv/hWqRKel/j6v/iyXHmyop/4f3bt//ZC/TeTj+lRdKPv/f/qzY4uH4lSLO54t0tv5yL93ppo967he/f+64+q8dfv9Xj/v/r889WP8rgw7a76GG8uxwfzoAwInY2du/udJsNrZPOpFdLI8r1gOJLPDYg44mMTOZT+zsJL6bJe6N6oBpmqZZmypZdTcihjlOEiOuaaW8PIeJgT3ApHsmAABg1A5P+iddEgAAAAAAAAAAAAAAAAAAADi7xvGWtf6Yh69ATkbxCm0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJH4XwAAAP//OIPeOg==")
syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffbff, 0x12042)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0)

4.851768065s ago: executing program 0 (id=144):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x1, [0x806f, 0x0, 0xfff, 0x2], [0x8, 0x7, 0x2, 0xa, 0x2, 0x0, 0xfffffffffffffff9, 0x2, 0x0, 0x802, 0x9, 0x7f, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0xffffffffffffffff, 0x7, 0x3, 0xc3c, 0x0, 0x8, 0x100000000, 0x3, 0xa51, 0x8, 0x401, 0xfffffffffffffefc, 0x7, 0xfffffffffffffffc, 0x81, 0x103, 0x5, 0x931, 0x3, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x6, 0xa, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x5, 0x0, 0x4, 0x7, 0x8, 0x8002, 0x8000000000000000, 0x4, 0xfffffffffffffff8, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x4, 0x9, 0x8000000828, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x20, 0xfffffffffffffffd, 0x7, 0x1, 0x8000000000000000, 0xa2, 0x7, 0x0, 0x6, 0x100009, 0xb, 0x100000002, 0x4, 0x4, 0x8, 0x8, 0x7, 0x8, 0x1, 0x16d, 0x0, 0x68e, 0x100000001, 0xc, 0x4ffffffffffffe, 0xe, 0x8000000000000000, 0x8, 0x10000, 0x4, 0x7, 0x406, 0x8, 0x6, 0x2, 0x0, 0x1000003, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]})
r0 = syz_open_dev$vcsn(0x0, 0x99, 0x10000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={0x0, 0x114}}, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000340)=r0, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}}, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffff7}, 0x2)

4.734337836s ago: executing program 2 (id=146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000250000000000000000eaffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b00000001000030425bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00130000000000008800128009000100766c616e00000000780002800600010002000000280003800c00010000000000060000000c00010000020000090000000c0021000000000001000100280004800c00010001000000ef0300000c00010005000000a30000000c00010005000000000001001c0004801dfd010002000000020000000c0001007f0000000500000008000500", @ANYRES32=r2], 0xb0}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xa, 0x6, 0x100, 0x6, 0xd21, 0xf1fb, 0x7, 0x3, 0x5, 0x800, 0x26, 0x0, 0x80, 0x80000000, 0x8, 0xffffde8b, 0x8c, 0xfffffffd, 0x8, 0xfffffffe, 0x1, 0x7f, 0x5d55176a, 0x4, 0x6, 0x5dc, 0xf26, 0x8000, 0x51, 0x4, 0x2, 0xa, 0x0, 0x80000001, 0x2, 0x123, 0x7, 0x200001, 0x8001, 0x0, 0xf15, 0x9, 0xffffffff, 0xd, 0x0, 0x8000, 0x80b, 0x4, 0x82ae, 0x3a8c, 0x7ff, 0xe2c, 0xfffffffb, 0x100, 0x0, 0x10000, 0x9, 0x3, 0xb4, 0x5, 0x10, 0x6, 0x1, 0x6, 0x2, 0x800, 0x1, 0x7fff, 0xdbd, 0x40, 0x7, 0x40000000, 0x7ffffffd, 0x0, 0x9, 0x8a1, 0x9, 0x9, 0x8, 0x3, 0xfff, 0xffffffff, 0x86, 0x1a2, 0x80000001, 0x4, 0x0, 0x6, 0x10001, 0x3, 0x5, 0x2, 0x5, 0x7, 0xfff, 0x5, 0xc, 0x2, 0x9, 0xd4e, 0x9, 0x10001, 0x1, 0x2, 0x3, 0x791, 0xff, 0x6, 0x6a1, 0x9, 0x1, 0x5, 0x0, 0xb97, 0x80000000, 0x8, 0x7, 0x3, 0x10, 0x5, 0x5, 0x1, 0x9, 0x9, 0x1, 0x6, 0x2, 0x6, 0x1, 0xc, 0x200, 0x8000, 0x4, 0x2, 0x4, 0x92b, 0x2, 0x38000, 0xffffffff, 0x9, 0x80d4, 0x9ed, 0x3, 0x5, 0x8, 0x8, 0x5fc2, 0xe7, 0xff, 0x0, 0x9, 0xffffffff, 0x8, 0x40, 0x8000, 0x6, 0x1000, 0x5, 0xbd7c, 0xf71, 0x4, 0x68bd, 0x800, 0x1, 0xfffffff9, 0x640000, 0x8, 0x544, 0xc30, 0x0, 0x7b, 0x80000000, 0x264, 0xffffffff, 0x5, 0x3, 0x753236c5, 0x0, 0x1c, 0x4fd, 0x5, 0x2, 0x10000, 0x95bf, 0xe, 0x3, 0x1, 0x100, 0x0, 0xff, 0x3, 0x4, 0x0, 0x9, 0x0, 0x96c, 0x7, 0x10000, 0xffffff65, 0x6, 0x8, 0x6, 0xfffffd41, 0x4, 0xf, 0x97e2, 0x101, 0x1, 0x8, 0x401, 0x401, 0x7, 0x7, 0x9, 0x200, 0x7, 0x3, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0x6, 0xffff, 0x100, 0x81, 0xf8000000, 0x6, 0x8a1, 0x5, 0xc3, 0x2, 0x10000, 0x9, 0x2, 0x7, 0x6, 0xf, 0x2, 0x1, 0xffffe594, 0x7fff, 0x7a30, 0x791a, 0x6, 0x7, 0xfffffca9, 0x4, 0x0, 0x0, 0x101, 0x6, 0xcb03, 0x1, 0x4, 0x10]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x7fff, 0x4749, 0x9823, 0x3, 0x7, 0x2, 0x6, 0x0, 0x8, 0x3, 0x885c, 0x100, 0x3, 0x8, 0x0, 0xfffffffd, 0xc, 0x8fe, 0xfff, 0x7, 0xabc, 0x2957, 0xfff, 0x80000001, 0xffffffff, 0x0, 0x0, 0x4, 0x5, 0x1, 0x0, 0xed3c, 0xfffffff8, 0x9, 0x2, 0xe, 0x2, 0x38f, 0x0, 0x6, 0x2, 0x7, 0x110000, 0x6, 0x9, 0x10000, 0x6, 0x1, 0x1000, 0x10, 0xf0cb, 0x0, 0xb4b, 0x4, 0x0, 0x1, 0x960b, 0x5, 0x2, 0xe, 0x2, 0x9, 0x10000, 0xa06, 0x40, 0x9d6, 0x8, 0x7, 0x2, 0x2, 0x4, 0x0, 0x7, 0x772, 0x7ff, 0x2, 0x3, 0x0, 0x76a, 0x3e5, 0x8e96, 0x5, 0xfda, 0x100, 0x40, 0xf61, 0x2, 0xd0, 0x81, 0x3, 0x6e, 0x7fffffff, 0x7, 0x2, 0x2, 0x6, 0x8, 0x7, 0x3, 0x80000000, 0x5, 0x8, 0x1, 0x1, 0x8000, 0x9, 0xdf4, 0x5, 0x9, 0x0, 0x7, 0x8, 0x6, 0x1, 0xffffffff, 0x9, 0x9, 0x2, 0x10, 0x327, 0xfe, 0x0, 0x7, 0xd1c5, 0x5, 0xf, 0xa85, 0x7, 0x5, 0x9, 0xc9, 0x6, 0x1, 0x8, 0x9, 0xffff, 0x3, 0x5, 0x4, 0x0, 0x5, 0x5, 0x1, 0x4, 0x10, 0x81, 0x1, 0x6, 0x9, 0xc709, 0x3, 0xfffffffe, 0x80000001, 0x8, 0xd, 0x3, 0x6, 0x3d, 0x2, 0x2b, 0x4, 0x80000006, 0x9, 0x5, 0x1, 0x4, 0x0, 0x3, 0x6e, 0x8200, 0x2, 0x3, 0x8, 0x9, 0x6, 0x8001, 0x7, 0x6, 0x5, 0x0, 0x7, 0xc28, 0x1, 0xe, 0x8, 0x0, 0x5, 0x6ab3, 0xfff, 0x1, 0x1000, 0x5, 0x7, 0x2, 0x400, 0x4, 0x5, 0x62907071, 0x5, 0x6, 0x2, 0x41e, 0x1d02, 0x8, 0x2, 0x80, 0x2, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x200, 0x1800000, 0x5, 0xfffffffd, 0x80000001, 0xd, 0x5, 0x81, 0x21a, 0x7ff, 0x3ff, 0x1, 0x2, 0xbf, 0x2, 0x7, 0x8001, 0xb, 0xe045, 0x8, 0x7, 0x3, 0x7, 0x2, 0x9, 0x0, 0x50, 0x800, 0x3, 0xf9, 0x8, 0x10000, 0x7, 0x9, 0x0, 0x7, 0x979, 0x3, 0x3, 0x3, 0xb]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6d, 0x1, 0x3, 0x3b78, 0x80, 0x10}, {0x0, 0x1, 0x60, 0x0, 0x3, 0x5}, 0xfffffffb, 0x2f, 0x13e1}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

4.670796797s ago: executing program 0 (id=147):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
close_range(r1, r0, 0x2)
r2 = socket$packet(0x11, 0x2, 0x300)
file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000)
bind$packet(r2, &(0x7f0000008680)={0x11, 0xd, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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")
open(0x0, 0x4827e, 0xdc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
lseek(r3, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
close(0x3)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000300)="856ea0099b3902fd5cbe580a000010b49e78b95df8917a1a8317b0788ff9e52bdf3492d2dfdd2f535100728ac807d0c166cec40e22fdef0aa95193094107fd14686378537261f5c6af1f234b82b9b37387a44cbce6441e8428f000000000000000a8e053146d499e0d2469e69415f0b72bd39c169261951c644c53220a8a4442f5561ea01b2ae32234", 0x89}], 0x1, 0x2000, 0x0, 0x3)
r7 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@abort}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x529, &(0x7f0000002380)="$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")
utimes(&(0x7f0000000700)='./file1\x00', &(0x7f00000007c0))
openat(r7, &(0x7f0000000000)='./file1\x00', 0xa082, 0x2c)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0398eaee234ca32e210000008a00000000400000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000100"/28], 0x50)

4.664300387s ago: executing program 3 (id=148):
r0 = socket$netlink(0x10, 0x3, 0x1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x2, &(0x7f0000000240))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000280))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdfff9ff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e20, 0x2, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xd}, {}, {0xe, 0xd}}}, 0x24}}, 0x4014)
syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00006b1000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004080)
r6 = io_uring_setup(0xdd7, &(0x7f0000000040)={0x0, 0x8e44, 0x40, 0x4, 0x2ad})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r7 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0)

4.36185719s ago: executing program 4 (id=149):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x7, 0x0, 0x401f, 0xe8180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x7, 0x200000000000005, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x681c3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x48, 0x0, 0x0, 0x40f00, 0xc}, 0x94)
mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
msgsnd(0x0, 0x0, 0x2000, 0x0)
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x9, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe000000000000002, r1, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
sendmsg$nl_route_sched(r2, 0x0, 0x20048050)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r6, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40142, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)

4.314468701s ago: executing program 0 (id=150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = dup(r1)
mount$9p_fd(0x4000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

4.218361932s ago: executing program 0 (id=151):
r0 = socket$nl_route(0x10, 0x3, 0x0)
readahead(r0, 0x4, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x12104ca, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@dax}, {@init_itable}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@dioread_lock}]}, 0x1, 0x587, &(0x7f0000000940)="$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")
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyad/4WOddkfE4rkC9NCpu9TeFvvybbR1EcGGJO9PaWzYrQAAoB/5Mf6HI+KT7eP/6RhrH80BAAAAoyR7eyr+lURkAAAAwMhKI2IqkrRSjAWYijStVDpjeD8a19N6o9n69HJje2MpnxdRjlK6vFqvzRRjhctRSvLybDHGdr/82pHyXEQ8FxE/nL7WLlcWG/WlYV/8AAAAgCvixouHz///OZ228wAAAMCIKfcsAAAAAKPCKT8AAACMPuf/AAAAMNK++u67ecr23+O99P7O9lrj/TtLteZaZX17sbLY2NqsrDQaK+1n9q2fVl+90dj8bGxs36u2as1Wtbmze3e9sb3Rurt66BXYAAAAwCV67sUHv0siYu/z19opiucAAhzyx2E3ABiksWE3ABia8WE3ABia0qlL2EPAqEtOmX988E7nWmH8+mLaAwAADN6tjx+//z9RzDv92gDw/8xYHwC4etzdg6urdNYRgDcH3RJgWD7U+Xim1/yeD+/o4/5/5xpDlp2pYQAAwMBMtVOSVorj9KlI00ol4tn2awFKyfJqvTZTnB/8drr0TF6eba+ZnDpmGAAAAAAAAAAAAAAAAAAAAAAAAADoyLIkMgAAAGCkRaR/TtpP84+4Nf3K1OGrA0fe+vXT9358b6HV2pqNmEj+Pp1PmoiI1k+K6a9lXgkAAAAAT4HOeXrxOTvs1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwah4/+mBxP11m3L9+MSLK3eKPx2T7czJKEXH9H0mMH1gviYixAcTfux8RN7vFT+JJlmXlohXd4l+74Pjl9qbpHj+NiBsDiA9X2YN8//NOt+9fGi+1P7t//8aLdF6993/pf/d/Yz32P88eKffy/MNfVHvGvx/x/Hj3/c9+/KQT/1CIvPByn3385jd2d7vOOFBlt/gHY1Vb65vV5s7undX1hZXaSm1jbm72jfk351+fn6kur9Zrxd+uYX7wiV8+Oan/13vELx/u/7Ht/0pfvc/i3w/vPfpIp1DqFv/2y91/f2/2iJ8Wv32fKvL5/Fv7+b1O/qAXfv6bF07q/1KP/k+e0v/bffU/Pvfq1773h65zjm0NAOAyNHd21xbq9drWCZnJPpa55MzbT0czBpiJp6MZw8pk3+38P56vnnOufiyTnWf18RhAMyaOfU/H4qwVJhF7eV19/kMCAAAj5n8H/SfdQQIAAAAAAAAAAAAAAAAAAAAu0hkfSzYZEX0vfDTm3nC6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8EAAD//4kX0Xk=")
r6 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x4000, 0x4}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340))
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000006c0)={0x1, 0x31, 0x4, 0x300, 0x3f00, 0x81, 0x0})
socket(0x2, 0x80805, 0x0)
r8 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)

4.137678343s ago: executing program 1 (id=152):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/4040, 0xfc8}, {&(0x7f0000003b80)=""/4141, 0x102d}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000001c40)=""/88, 0x58}], 0x5}, 0x20)
getsockopt$inet_tcp_buf(r0, 0x11e, 0xd, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
getdents64(r2, &(0x7f00000088c0)=""/42, 0x2a)
pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000000080)="21655aec4929086e4b4d252b3ca6058c2462b99949367b98a562377b9862dfad44f681232f9c1d8ba4860bafa65b23aef75f5e459d14907105159b0b4f0558a8e18a45a96762340587e5b9c224c0dde003514b9499941f51a3397b3c8cfc23185cd492e493cbb98b9acb9683d294fc11044a47bb02cfe036efee9f6ec6067043128023349459b984b47fc8d763f6948268619f0b6ebe070fc2b77956036278463751473b23580c040d67177659e008e6f219ebefda9a2e1c552f40e0b51eed4cf71f8c3eaf2d26ddb9a0551ef14649d72b", 0xd1}, {&(0x7f0000000180)="36f2166124558a1dd2d7887f055363f5f0f12cc3fa75a5e9691f68cc886e32d906c73ad8e908109c05750323af5e3af2c4732d2748027f2284f4f78c8f7fcddf0e014874b1d0b9b3d97b6da70b6add965e6b1099008f3427b20a", 0x5a}], 0x2, 0xc0, 0x8, 0x1)
sendto$inet(r0, &(0x7f0000000000)="127a26e5dac00fa3b7e4e55c328dc46e651b219372a5bd4432cfa3be51c70894e1597f4b445be4653071973faca130070a4f58fb7f590e0f", 0x38, 0x4c800, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10)

4.135980653s ago: executing program 2 (id=153):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
syz_open_procfs(0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x434, &(0x7f0000000d80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r5, r5, 0x0, 0xe3aa6ea)
r6 = syz_clone(0x240000, 0x0, 0xfffffffffffffc60, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gretap0\x00'})
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r6, &(0x7f00000000c0)='fd/4\x00')

4.022043354s ago: executing program 1 (id=154):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=<r0=>0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'gre0\x00', <r4=>0x0, 0x10, 0x1, 0xffffffff, 0xe6, {{0x1d, 0x4, 0x2, 0x8, 0x74, 0x65, 0x0, 0xa6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x11, 0x1, 0xa, [{@multicast1, 0x7f}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @noop, @lsrr={0x83, 0x7, 0x1a, [@multicast2]}, @noop, @timestamp={0x44, 0x14, 0x80, 0x0, 0x1, [0x1000, 0x6, 0x9, 0x6]}, @timestamp={0x44, 0x1c, 0x57, 0x0, 0xe, [0x3, 0x80000000, 0x6, 0x0, 0x3, 0x5]}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xe5, &(0x7f0000000040)=""/229, 0x0, 0x0, '\x00', r4}, 0x94)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x8, 0xb, 0x1, 0xfffffffa, 0x77, 0x3d, 0x9, 0x1}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd2d, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3a0aa495}]}, 0x2c}}, 0x200048c0)
sendto$inet(r5, &(0x7f00000002c0)=')', 0x34000, 0x2000c8c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f00000000c0)=0xc8, 0x4)
writev(r10, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r10, 0x1)

2.718548709s ago: executing program 3 (id=155):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x40000002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r4 = socket$kcm(0xa, 0x1, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x1, @ANYBLOB="000000000b000000000000000000000000000000bba9956af488f5dcae1d461e1427e9429f8e77b9ee9570c1b591a32b4df5d64fb040fab60444498a9bc4e84829c257812a93237b402e76cf0fa7c340690b2d0f6409b2ea44f04b372df56f222405d676a009dec2ef264a80e62d39f3f98d6f1869c063ad203bf27e295ca0b1190a11b412d235eb0c65ab44b83e4c74f5a19aedbe18f7463ff8e1f8b5951d41baf6ece739f8049ea648549fe1cca996d16c759940f516a45c22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, 0x0, 0x0}, 0x20)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, 0x0)
unshare(0x400)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400})
r9 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r9})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()

2.321585263s ago: executing program 2 (id=156):
r0 = getpid()
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0xf6, 0x0, 0x228, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xd8}, 0x100000, 0x3, 0x0, 0x8, 0x77ff, 0xd7, 0x0, 0x0, 0xffffffff, 0x0, 0xff}, 0x0, 0xfffffffffdffffff, r1, 0x3)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1944}, 0x10020, 0x9, 0x0, 0x4, 0x7fff, 0x7fff, 0x8, 0x0, 0xffff, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000780), 0x8, 0x61f, &(0x7f00000008c0)="$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")
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0)
recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002000), 0x0, &(0x7f0000000700)}, 0x2000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044)
sendmsg$nl_route_sched(r7, 0x0, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
syz_pidfd_open(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116f00000000008510000002000000850000000900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

1.142622907s ago: executing program 0 (id=157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c44056"], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'xfrm0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
capset(0x0, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe})
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4)

992.898849ms ago: executing program 1 (id=158):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8910, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4000810)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0)

938.183669ms ago: executing program 4 (id=159):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc)
syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
set_mempolicy(0x3, 0x0, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44)

804.89326ms ago: executing program 3 (id=160):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@RTM_NEWMDB={0x98, 0x43, 0x4, 0x70bd25, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x1, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x4, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x6acd818b626c07a0}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
fallocate(r0, 0x12, 0x8, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x3fffff)
write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc"], 0xfe78)

742.420041ms ago: executing program 4 (id=161):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x434, &(0x7f0000000d80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea)
r2 = syz_clone(0x240000, 0x0, 0xfffffffffffffc60, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_open_procfs(r2, &(0x7f00000000c0)='fd/4\x00')

560.572673ms ago: executing program 3 (id=162):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
preadv(r0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x200000, 0x9)
accept4$x25(r0, &(0x7f0000000340)={0x9, @remote}, &(0x7f0000000380)=0x12, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x8, "044158a35b9e"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0)
ioctl$TCSBRK(r1, 0x5409, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup/pids.max\x00', 0x2, 0x15)
write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x2d, 'blkio'}]}, 0x7)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x100)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x800000000001, 0xffffffffffffffff, 0xb)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)

559.887163ms ago: executing program 4 (id=163):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0x3}, 0x0)
r5 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r5)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0xc6580, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000, 0x3100, r6, 0x2}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4004000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100))
getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', r3, 0x8, 0x7, 0x2, 0x2, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xa3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x6, 0x3, '3'}, {0x2, 0xc, "3f35efbcd50973b9608c"}]}, @noop, @generic={0x1eb, 0x8, "88a2b0483537"}, @rr={0x7, 0xb, 0xb8, [@empty, @empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x3e, 0x3, [{0x0, 0x10, "7de780031e08714e0b417732327f"}, {0x7, 0xd, "c076f6a0ac1c88afe8f004"}, {0x6, 0x8, "d5d3d4c828b1"}, {0x6, 0x8, "096747a8cabf"}, {0x6, 0xb, "b375f968dcf9813748"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x0)
setresuid(0xee01, r9, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000008, &(0x7f00000007c0)={[], [{@euid_lt={'euid<', r9}}]}, 0xff, 0x553, &(0x7f0000000200)="$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")
syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffbff, 0x12042)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0)

278.806496ms ago: executing program 3 (id=164):
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(0xffffffffffffffff, 0x0, 0x1100)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0)
ioctl$int_out(r0, 0x2a30, &(0x7f0000000000))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2a31, 0x2000)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x11ae43)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc084}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0xa}, {0xa, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5781a09c30632252}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf1defb7184ccf002}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf6, 0x0, 0x3, 0xf372, 0x3, 0xa6b}, {0x8, 0x0, 0x8, 0x3, 0x401, 0x2}, 0x8, 0x34, 0x1eed}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

274.047057ms ago: executing program 2 (id=165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x9}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a300000000084000000090a0104000a0000000000000700000208000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001680c000100636f756e7465720004000280b357c6cb0b00010074756e6e656c00000400028008000340000001"], 0xcc}}, 0x20050800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0))

118.617558ms ago: executing program 4 (id=166):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$pptp(0x18, 0x1, 0x2)
ppoll(&(0x7f0000002080)=[{0xffffffffffffffff, 0x20}, {r0, 0x1}], 0x2, &(0x7f00000020c0)={0x0, 0x989680}, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50)
io_uring_enter(0xffffffffffffffff, 0x4094, 0x7721, 0x16, 0x0, 0x0)

83.003239ms ago: executing program 32 (id=166):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$pptp(0x18, 0x1, 0x2)
ppoll(&(0x7f0000002080)=[{0xffffffffffffffff, 0x20}, {r0, 0x1}], 0x2, &(0x7f00000020c0)={0x0, 0x989680}, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50)
io_uring_enter(0xffffffffffffffff, 0x4094, 0x7721, 0x16, 0x0, 0x0)

78.737109ms ago: executing program 3 (id=168):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r5)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

57.189049ms ago: executing program 2 (id=169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0xf2ff, 0x80}, 0x20000800)

0s ago: executing program 1 (id=170):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]})
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000240)={0x2, 0x10, 0x1, 0x7, 0x6, "d2115d1edb09b902f24abde1e888e6a70a1f39", 0xc0000, 0x7}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x5, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x0, 0x900000, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xc, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d00), 0x0, 0x10, 0x578}, 0x94)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r4, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x3, 0xef, 0x9}]}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340)={0x9, 0x3f, 0x8, 0x80, 0x43, 0x6, 0x7f, 0x2, 0x4, 0x2, 0xff, 0x10, 0x9, 0x5}, 0xe) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

kernel console output (not intermixed with test programs):

[   27.322718][   T28] kauditd_printk_skb: 19 callbacks suppressed
[   27.322737][   T28] audit: type=1400 audit(1778328442.212:124): avc:  denied  { write } for  pid=3267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   27.369732][   T28] audit: type=1400 audit(1778328442.252:125): avc:  denied  { write } for  pid=3278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts.
[   33.685672][   T28] audit: type=1400 audit(1778328448.572:126): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.714803][   T28] audit: type=1400 audit(1778328448.602:127): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.717343][ T3289] cgroup: Unknown subsys name 'net'
[   33.748146][   T28] audit: type=1400 audit(1778328448.632:128): avc:  denied  { unmount } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.871161][ T3289] cgroup: Unknown subsys name 'cpuset'
[   33.878458][ T3289] cgroup: Unknown subsys name 'rlimit'
[   33.990977][   T28] audit: type=1400 audit(1778328448.882:129): avc:  denied  { setattr } for  pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.019504][   T28] audit: type=1400 audit(1778328448.882:130): avc:  denied  { create } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.056168][   T28] audit: type=1400 audit(1778328448.882:131): avc:  denied  { write } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.080251][   T28] audit: type=1400 audit(1778328448.882:132): avc:  denied  { read } for  pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.103746][ T3294] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.106148][   T28] audit: type=1400 audit(1778328448.882:133): avc:  denied  { read } for  pid=3024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.141996][   T28] audit: type=1400 audit(1778328448.912:134): avc:  denied  { mounton } for  pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.174114][   T28] audit: type=1400 audit(1778328448.912:135): avc:  denied  { mount } for  pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.174903][ T3289] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.538213][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.546488][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.555084][ T3306] bridge_slave_0: entered allmulticast mode
[   36.562730][ T3306] bridge_slave_0: entered promiscuous mode
[   36.582159][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.590542][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.599451][ T3306] bridge_slave_1: entered allmulticast mode
[   36.608179][ T3306] bridge_slave_1: entered promiscuous mode
[   36.622175][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.630514][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.639962][ T3301] bridge_slave_0: entered allmulticast mode
[   36.647247][ T3301] bridge_slave_0: entered promiscuous mode
[   36.673523][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.682288][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.690228][ T3301] bridge_slave_1: entered allmulticast mode
[   36.698537][ T3301] bridge_slave_1: entered promiscuous mode
[   36.719863][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.728932][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.736971][ T3302] bridge_slave_0: entered allmulticast mode
[   36.746072][ T3302] bridge_slave_0: entered promiscuous mode
[   36.754134][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.762339][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.770780][ T3302] bridge_slave_1: entered allmulticast mode
[   36.778774][ T3302] bridge_slave_1: entered promiscuous mode
[   36.803546][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.836639][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.855161][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.867277][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.875426][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.884114][ T3307] bridge_slave_0: entered allmulticast mode
[   36.891939][ T3307] bridge_slave_0: entered promiscuous mode
[   36.910517][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.923572][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.934090][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.941782][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.950742][ T3307] bridge_slave_1: entered allmulticast mode
[   36.960329][ T3307] bridge_slave_1: entered promiscuous mode
[   36.977501][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.011630][ T3306] team0: Port device team_slave_0 added
[   37.040183][ T3306] team0: Port device team_slave_1 added
[   37.047603][ T3302] team0: Port device team_slave_0 added
[   37.054339][ T3301] team0: Port device team_slave_0 added
[   37.063387][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.073959][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.083054][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.091212][ T3304] bridge_slave_0: entered allmulticast mode
[   37.098464][ T3304] bridge_slave_0: entered promiscuous mode
[   37.113068][ T3302] team0: Port device team_slave_1 added
[   37.124634][ T3301] team0: Port device team_slave_1 added
[   37.132610][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.142633][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.152074][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.161859][ T3304] bridge_slave_1: entered allmulticast mode
[   37.169686][ T3304] bridge_slave_1: entered promiscuous mode
[   37.215289][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.225042][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.256254][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.281488][ T3307] team0: Port device team_slave_0 added
[   37.294045][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.302078][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.333771][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.346414][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.355567][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.387092][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.399978][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.408486][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.442068][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.457846][ T3307] team0: Port device team_slave_1 added
[   37.465993][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.490522][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.499153][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.530899][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.545663][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.554204][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.586529][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.607315][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.656950][ T3304] team0: Port device team_slave_0 added
[   37.668433][ T3306] hsr_slave_0: entered promiscuous mode
[   37.675539][ T3306] hsr_slave_1: entered promiscuous mode
[   37.683163][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.691017][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.723100][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.736926][ T3304] team0: Port device team_slave_1 added
[   37.756392][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.764995][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.797818][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.828104][ T3302] hsr_slave_0: entered promiscuous mode
[   37.837106][ T3302] hsr_slave_1: entered promiscuous mode
[   37.844170][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   37.851741][ T3302] Cannot create hsr debugfs directory
[   37.875445][ T3301] hsr_slave_0: entered promiscuous mode
[   37.883367][ T3301] hsr_slave_1: entered promiscuous mode
[   37.891322][ T3301] debugfs: 'hsr0' already exists in 'hsr'
[   37.897707][ T3301] Cannot create hsr debugfs directory
[   37.908121][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.917797][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.953263][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.991216][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.999314][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.031394][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.066353][ T3307] hsr_slave_0: entered promiscuous mode
[   38.073977][ T3307] hsr_slave_1: entered promiscuous mode
[   38.082905][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   38.089530][ T3307] Cannot create hsr debugfs directory
[   38.182939][ T3304] hsr_slave_0: entered promiscuous mode
[   38.190419][ T3304] hsr_slave_1: entered promiscuous mode
[   38.197298][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   38.204031][ T3304] Cannot create hsr debugfs directory
[   38.358736][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.371201][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.380556][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.390797][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.401466][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.411988][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.424475][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.434550][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.464330][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.476017][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.485539][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.496086][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.506073][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.516393][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.524982][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.535182][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.580859][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.591484][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.602610][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.613556][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.628825][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.642708][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.652380][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.664799][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.707354][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.719072][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.732580][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.743257][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.754083][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.764964][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.776291][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.786753][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.838139][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.852170][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.864575][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.879279][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.890246][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.899597][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.911071][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.921814][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.932385][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.957336][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.968167][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   38.981918][ T1744] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.991041][ T1744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.010601][ T1744] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.019996][ T1744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.036846][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   39.061659][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.071218][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.086478][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.095481][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.109131][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.143817][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   39.174730][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.183563][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.203840][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.213021][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.237126][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.278015][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   39.298589][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.319578][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.329365][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.355958][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.366174][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.415605][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.461048][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   39.489322][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.499064][ T1847] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.525101][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.533166][ T1847] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.552256][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.577997][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.684915][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.811474][ T3301] veth0_vlan: entered promiscuous mode
[   39.833588][ T3306] veth0_vlan: entered promiscuous mode
[   39.846667][ T3301] veth1_vlan: entered promiscuous mode
[   39.873892][ T3306] veth1_vlan: entered promiscuous mode
[   39.907634][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.924959][ T3301] veth0_macvtap: entered promiscuous mode
[   39.938702][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.954318][ T3302] veth0_vlan: entered promiscuous mode
[   39.962747][ T3306] veth0_macvtap: entered promiscuous mode
[   39.972030][ T3306] veth1_macvtap: entered promiscuous mode
[   39.979903][ T3301] veth1_macvtap: entered promiscuous mode
[   40.000002][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.019411][ T3302] veth1_vlan: entered promiscuous mode
[   40.038614][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.061553][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.081812][  T335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.091702][  T335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.104960][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.118039][ T3302] veth0_macvtap: entered promiscuous mode
[   40.126882][   T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.148091][ T3302] veth1_macvtap: entered promiscuous mode
[   40.162380][   T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.186136][   T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.206483][   T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.218036][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   40.218056][   T28] audit: type=1400 audit(1778328455.092:146): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.x0Owph/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   40.253922][   T28] audit: type=1400 audit(1778328455.092:147): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   40.256212][   T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.283487][   T28] audit: type=1400 audit(1778328455.092:148): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.x0Owph/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   40.301497][   T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.329895][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.346434][   T28] audit: type=1400 audit(1778328455.092:149): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   40.353354][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.371768][   T28] audit: type=1400 audit(1778328455.092:150): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.x0Owph/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   40.408521][   T28] audit: type=1400 audit(1778328455.092:151): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.x0Owph/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   40.441603][   T28] audit: type=1400 audit(1778328455.112:152): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.485138][ T3304] veth0_vlan: entered promiscuous mode
[   40.491698][   T28] audit: type=1400 audit(1778328455.112:153): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   40.504920][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.531235][   T28] audit: type=1400 audit(1778328455.112:154): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=3783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   40.562770][   T28] audit: type=1400 audit(1778328455.422:155): avc:  denied  { read write } for  pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   40.574396][  T335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.611127][ T3304] veth1_vlan: entered promiscuous mode
[   40.619031][ T3507] loop0: detected capacity change from 0 to 128
[   40.633840][  T335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.654995][ T3507] syz.0.1: attempt to access beyond end of device
[   40.654995][ T3507] loop0: rw=2049, sector=132, nr_sectors = 16 limit=128
[   40.659561][  T335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.682179][ T3507] syz.0.1: attempt to access beyond end of device
[   40.682179][ T3507] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128
[   40.697336][ T3507] Buffer I/O error on dev loop0, logical block 156, lost async page write
[   40.707333][ T3507] syz.0.1: attempt to access beyond end of device
[   40.707333][ T3507] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128
[   40.722398][ T3507] Buffer I/O error on dev loop0, logical block 157, lost async page write
[   40.723931][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.731903][ T3507] syz.0.1: attempt to access beyond end of device
[   40.731903][ T3507] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128
[   40.756158][ T3507] Buffer I/O error on dev loop0, logical block 158, lost async page write
[   40.765235][ T3507] syz.0.1: attempt to access beyond end of device
[   40.765235][ T3507] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128
[   40.779442][ T3507] Buffer I/O error on dev loop0, logical block 159, lost async page write
[   40.788743][ T3507] syz.0.1: attempt to access beyond end of device
[   40.788743][ T3507] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128
[   40.808699][ T3507] Buffer I/O error on dev loop0, logical block 160, lost async page write
[   40.818886][ T3507] syz.0.1: attempt to access beyond end of device
[   40.818886][ T3507] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128
[   40.834301][ T3507] Buffer I/O error on dev loop0, logical block 161, lost async page write
[   40.844246][ T3507] syz.0.1: attempt to access beyond end of device
[   40.844246][ T3507] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128
[   40.859033][ T3507] Buffer I/O error on dev loop0, logical block 150, lost async page write
[   40.869687][ T3507] syz.0.1: attempt to access beyond end of device
[   40.869687][ T3507] loop0: rw=2049, sector=151, nr_sectors = 1 limit=128
[   40.883930][ T3507] Buffer I/O error on dev loop0, logical block 151, lost async page write
[   40.913199][ T3307] veth0_vlan: entered promiscuous mode
[   40.924569][ T3307] veth1_vlan: entered promiscuous mode
[   40.960990][ T3304] veth0_macvtap: entered promiscuous mode
[   40.969365][ T3304] veth1_macvtap: entered promiscuous mode
[   40.981569][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.992015][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.028558][  T335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.046889][  T335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.231109][ T3515] loop1: detected capacity change from 0 to 512
[   41.296478][ T3515] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   41.311204][ T3515] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   41.326889][ T3515] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2: Corrupt directory, running e2fsck is recommended
[   41.365128][ T3515] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   41.379653][ T3515] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.2: corrupted in-inode xattr: e_name out of bounds
[   41.396709][ T3515] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.400068][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   41.420229][    C0] EXT4-fs (loop1): initial error at time 1778328456: ext4_iget_extra_inode:5128: inode 15
[   41.431733][    C0] EXT4-fs (loop1): last error at time 1778328456: ext4_iget_extra_inode:5128: inode 15
[   41.459359][ T3515] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2: couldn't read orphan inode 15 (err -117)
[   41.473879][ T3515] loop1: lost filesystem error report for type 5 error -117
[   41.489842][ T3515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.506172][ T3307] veth0_macvtap: entered promiscuous mode
[   43.029552][ T3511] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   43.091571][ T3511] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   43.103800][ T3511] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2: Corrupt directory, running e2fsck is recommended
[   43.118711][ T3511] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.2: path /0/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   43.158693][ T3511] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.2: path /0/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   43.319001][  T335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.328956][  T335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.368088][ T3523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'.
[   43.379023][ T3523] Zero length message leads to an empty skb
[   43.476600][ T3307] veth1_macvtap: entered promiscuous mode
[   43.531506][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.574487][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.592807][ T1744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.605586][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.649190][  T335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.669125][  T335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.781781][ T3531] netlink: 'syz.0.8': attribute type 29 has an invalid length.
[   43.793412][  T335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.804180][ T3533] netlink: 'syz.0.8': attribute type 29 has an invalid length.
[   43.878524][ T3536] loop2: detected capacity change from 0 to 512
[   43.896664][ T3536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.911709][ T3536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   43.944381][ T3536] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   43.963206][ T3536] EXT4-fs (loop2): 1 truncate cleaned up
[   43.972065][ T3536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.069689][ T3538] syz.2.3 (3538) used greatest stack depth: 10168 bytes left
[   44.448346][ T3542] loop3: detected capacity change from 0 to 512
[   44.697354][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.713164][ T3542] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.728184][ T3546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5'.
[   44.731631][ T3542] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   44.754786][ T3542] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.9: Failed to acquire dquot type 0
[   44.886447][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.986560][ T3555] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10'.
[   45.333276][ T3560] loop0: detected capacity change from 0 to 512
[   45.803448][   T28] kauditd_printk_skb: 48 callbacks suppressed
[   45.803465][   T28] audit: type=1400 audit(1778328460.692:202): avc:  denied  { create } for  pid=3541 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   46.688282][ T3555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   46.829461][  T116] kworker/u8:5 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0
[   47.814583][  T116] CPU: 1 UID: 0 PID: 116 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[   47.814636][  T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   47.814655][  T116] Workqueue: loop3 loop_rootcg_workfn
[   47.814701][  T116] Call Trace:
[   47.814713][  T116]  <TASK>
[   47.814723][  T116]  __dump_stack+0x1d/0x30
[   47.814752][  T116]  dump_stack_lvl+0x95/0xd0
[   47.814850][  T116]  dump_stack+0x15/0x1b
[   47.814872][  T116]  dump_header+0x80/0x240
[   47.814966][  T116]  oom_kill_process+0x295/0x350
[   47.815057][  T116]  out_of_memory+0x97d/0xb80
[   47.815101][  T116]  try_charge_memcg+0x62f/0xa10
[   47.815209][  T116]  charge_memcg+0x6d/0x120
[   47.815235][  T116]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   47.815269][  T116]  __swap_cache_prepare_and_add+0x69/0x4a0
[   47.815366][  T116]  ? alloc_pages_mpol+0x217/0x260
[   47.815394][  T116]  swap_cache_alloc_folio+0xa2/0x120
[   47.815490][  T116]  swap_cluster_readahead+0x25f/0x3c0
[   47.815601][  T116]  shmem_swapin_folio+0x933/0x1370
[   47.815676][  T116]  shmem_get_folio_gfp+0x278/0xd60
[   47.815703][  T116]  ? ktime_get_coarse_real_ts64_mg+0xb3/0x1a0
[   47.815747][  T116]  shmem_write_begin+0xfc/0x1f0
[   47.815831][  T116]  generic_perform_write+0x183/0x490
[   47.815888][  T116]  shmem_file_write_iter+0xc5/0xf0
[   47.815928][  T116]  lo_rw_aio+0x67d/0x730
[   47.815978][  T116]  loop_process_work+0x56c/0xac0
[   47.816073][  T116]  ? kmem_cache_free+0xca/0x380
[   47.816095][  T116]  ? __kfree_skb+0x109/0x150
[   47.816116][  T116]  ? macvlan_process_broadcast+0x2ae/0x320
[   47.816139][  T116]  ? consume_skb+0x4b/0x130
[   47.816219][  T116]  ? pwq_dec_nr_in_flight+0x65c/0x760
[   47.816258][  T116]  ? macvlan_process_broadcast+0x2f4/0x320
[   47.816363][  T116]  loop_rootcg_workfn+0x22/0x30
[   47.816403][  T116]  process_scheduled_works+0x4f0/0x9c0
[   47.816444][  T116]  worker_thread+0x58a/0x780
[   47.816488][  T116]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[   47.816597][  T116]  ? __pfx_worker_thread+0x10/0x10
[   47.816626][  T116]  kthread+0x22a/0x280
[   47.816645][  T116]  ? __pfx_kthread+0x10/0x10
[   47.816722][  T116]  ret_from_fork+0x146/0x330
[   47.816754][  T116]  ? __pfx_kthread+0x10/0x10
[   47.816773][  T116]  ret_from_fork_asm+0x1a/0x30
[   47.816854][  T116]  </TASK>
[   47.819683][  T116] memory: usage 307200kB, limit 307200kB, failcnt 363
[   48.138317][ T3560] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0.
[   48.222766][   T28] audit: type=1400 audit(1778328463.092:203): avc:  denied  { create } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   48.454367][ T3565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   48.700836][   T28] audit: type=1400 audit(1778328463.132:204): avc:  denied  { create } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.954554][ T3567] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.12'.
[   48.974950][   T28] audit: type=1400 audit(1778328463.312:205): avc:  denied  { getopt } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.949906][ T3541] syz.3.9 (3541) used greatest stack depth: 9536 bytes left
[   49.961454][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   49.980293][   T28] audit: type=1400 audit(1778328463.312:206): avc:  denied  { shutdown } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   50.025019][   T28] audit: type=1400 audit(1778328463.312:207): avc:  denied  { connect } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   50.046901][   T28] audit: type=1400 audit(1778328463.312:208): avc:  denied  { name_connect } for  pid=3563 comm="syz.2.12" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   50.071044][   T28] audit: type=1400 audit(1778328464.852:209): avc:  denied  { getopt } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   50.091207][  T116] memory+swap: usage 232752kB, limit 9007199254740988kB, failcnt 0
[   50.099380][  T116] kmem: usage 231656kB, limit 9007199254740988kB, failcnt 0
[   50.107251][  T116] Memory cgroup stats for /syz3:
[   50.107706][  T116] cache 536576
[   50.116899][  T116] rss 8192
[   50.120510][  T116] shmem 0
[   50.123659][  T116] mapped_file 65536
[   50.127684][  T116] dirty 4096
[   50.131399][  T116] writeback 8192
[   50.135037][  T116] workingset_refault_anon 28
[   50.139820][  T116] workingset_refault_file 64
[   50.144920][  T116] swap 286720
[   50.148558][  T116] swapcached 462848
[   50.155201][  T116] pgpgin 577
[   50.158483][  T116] pgpgout 444
[   50.162090][  T116] pgfault 292
[   50.165762][  T116] pgmajfault 27
[   50.169838][  T116] inactive_anon 4096
[   50.174188][  T116] active_anon 4096
[   50.178318][  T116] inactive_file 12288
[   50.183671][  T116] active_file 524288
[   50.187722][  T116] unevictable 0
[   50.191446][  T116] hierarchical_memory_limit 314572800
[   50.197151][  T116] hierarchical_memsw_limit 9223372036854771712
[   50.204142][  T116] total_cache 536576
[   50.208475][  T116] total_rss 8192
[   50.213072][  T116] total_shmem 0
[   50.216851][  T116] total_mapped_file 65536
[   50.221511][  T116] total_dirty 4096
[   50.225381][  T116] total_writeback 8192
[   50.229799][  T116] total_workingset_refault_anon 28
[   50.235750][  T116] total_workingset_refault_file 64
[   50.241287][  T116] total_swap 286720
[   50.245322][  T116] total_swapcached 462848
[   50.251529][  T116] total_pgpgin 577
[   50.255434][  T116] total_pgpgout 444
[   50.260001][  T116] total_pgfault 292
[   50.266826][  T116] total_pgmajfault 27
[   50.271256][  T116] total_inactive_anon 4096
[   50.276294][  T116] total_active_anon 4096
[   50.281501][  T116] total_inactive_file 12288
[   50.557850][  T116] total_active_file 524288
[   50.562649][  T116] total_unevictable 0
[   50.567033][  T116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9,pid=3541,uid=0
[   50.583113][  T116] Memory cgroup out of memory: OOM victim 3541 (syz.3.9) is already exiting. Skip killing the task
[   50.598089][   T28] audit: type=1400 audit(1778328465.282:210): avc:  denied  { tracepoint } for  pid=3563 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   50.622583][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.658602][   T28] audit: type=1400 audit(1778328465.372:211): avc:  denied  { read write } for  pid=3574 comm="syz.0.15" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   50.784476][ T3584] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14'.
[   50.999234][ T3587] loop0: detected capacity change from 0 to 512
[   51.077748][ T3584] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   51.125775][ T3587] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   51.142403][ T3587] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   51.155805][ T3587] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended
[   51.203648][ T3587] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   51.215072][ T3587] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.16: corrupted in-inode xattr: e_name out of bounds
[   51.231595][ T3587] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   51.238593][ T3587] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.16: couldn't read orphan inode 15 (err -117)
[   51.249797][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   51.250246][    C1] EXT4-fs (loop0): initial error at time 1778328466: ext4_iget_extra_inode:5128: inode 15
[   51.250614][    C1] EXT4-fs (loop0): last error at time 1778328466: ext4_iget_extra_inode:5128: inode 15
[   51.300163][ T3587] loop0: lost filesystem error report for type 5 error -117
[   51.317544][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.747564][   T28] audit: type=1400 audit(1778328465.372:212): avc:  denied  { open } for  pid=3574 comm="syz.0.15" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   51.778173][   T28] audit: type=1400 audit(1778328465.542:213): avc:  denied  { read } for  pid=3578 comm="syz.4.17" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   52.115143][   T28] audit: type=1400 audit(1778328465.542:214): avc:  denied  { open } for  pid=3578 comm="syz.4.17" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   52.874041][ T3580] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   52.885949][ T3580] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   52.896434][ T3580] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended
[   52.910047][ T3580] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.16: path /5/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   52.943835][ T3580] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.16: path /5/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   52.990792][ T3581] 9p: Bad value for 'wfdno'
[   53.094541][   T28] audit: type=1400 audit(1778328465.582:215): avc:  denied  { ioctl } for  pid=3578 comm="syz.4.17" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   53.121675][   T28] audit: type=1400 audit(1778328465.662:216): avc:  denied  { create } for  pid=3582 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   53.143177][   T28] audit: type=1400 audit(1778328465.942:217): avc:  denied  { setopt } for  pid=3582 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.262066][ T3600] loop1: detected capacity change from 0 to 512
[   53.294103][ T3600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   53.336991][ T3600] EXT4-fs (loop1): 1 truncate cleaned up
[   53.345361][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.375237][   T28] audit: type=1400 audit(1778328465.952:218): avc:  denied  { bind } for  pid=3582 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.542087][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.033829][   T28] audit: type=1400 audit(1778328465.952:219): avc:  denied  { name_bind } for  pid=3582 comm="syz.3.14" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   54.064706][   T28] audit: type=1400 audit(1778328465.952:220): avc:  denied  { node_bind } for  pid=3582 comm="syz.3.14" saddr=172.20.20.15 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   54.232870][ T3607] loop3: detected capacity change from 0 to 512
[   54.316874][ T3607] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   54.331040][ T3607] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   54.348229][ T3607] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.23: Corrupt directory, running e2fsck is recommended
[   54.386338][ T3607] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   54.399474][ T3607] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.23: corrupted in-inode xattr: e_name out of bounds
[   54.416454][ T3607] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.422230][ T3607] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.23: couldn't read orphan inode 15 (err -117)
[   54.433318][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   54.433619][    C1] EXT4-fs (loop3): initial error at time 1778328469: ext4_iget_extra_inode:5128: inode 15
[   54.434010][    C1] EXT4-fs (loop3): last error at time 1778328469: ext4_iget_extra_inode:5128: inode 15
[   54.478197][ T3607] loop3: lost filesystem error report for type 5 error -117
[   54.498252][ T3607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.784790][   T28] audit: type=1400 audit(1778328465.952:221): avc:  denied  { name_bind } for  pid=3582 comm="syz.3.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   54.904198][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.962305][  T116] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   54.991805][  T116] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.037010][  T116] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.061886][ T3615] loop4: detected capacity change from 0 to 512
[   55.078548][  T116] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.090923][ T3615] =======================================================
[   55.090923][ T3615] WARNING: The mand mount option has been deprecated and
[   55.090923][ T3615]          and is ignored by this kernel. Remove the mand
[   55.090923][ T3615]          option from the mount to silence this warning.
[   55.090923][ T3615] =======================================================
[   55.222524][ T3615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   55.259133][ T3615] EXT4-fs (loop4): 1 truncate cleaned up
[   55.273851][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.344531][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.453556][ T3623] loop2: detected capacity change from 0 to 512
[   55.491164][ T3623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   55.547861][ T3625] syzkaller0: entered promiscuous mode
[   55.561679][ T3625] syzkaller0: entered allmulticast mode
[   55.569983][ T3623] EXT4-fs (loop2): 1 truncate cleaned up
[   55.596706][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.773685][ T3637] loop4: detected capacity change from 0 to 512
[   55.792484][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.896020][ T3637] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.925358][ T3645] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET)
[   56.054395][ T3591] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   56.083326][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.709678][ T3652] loop3: detected capacity change from 0 to 512
[   56.908785][ T3652] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.36: corrupted inode contents
[   56.922597][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   56.924768][ T3652] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.36: mark_inode_dirty error
[   56.935663][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   56.936034][    C1] EXT4-fs (loop3): initial error at time 1778328471: ext4_do_update_inode:5690: inode 16
[   56.936184][    C1] EXT4-fs (loop3): last error at time 1778328471: ext4_do_update_inode:5690: inode 16
[   56.980229][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   56.984097][ T3652] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.36: corrupted inode contents
[   57.007486][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   57.012446][ T3652] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.36: mark_inode_dirty error
[   57.035607][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   57.040187][ T3652] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.36: corrupted inode contents
[   57.065771][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   57.069757][ T3652] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   57.091454][ T3652] loop3: lost filesystem error report for type 5 error -117
[   57.311150][ T3652] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.36: corrupted inode contents
[   57.333914][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   57.338842][ T3652] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.36: mark_inode_dirty error
[   57.363109][ T3652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   57.365631][ T3652] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   57.385343][ T3652] loop3: lost filesystem error report for type 5 error -117
[   57.399516][ T3652] EXT4-fs (loop3): 1 truncate cleaned up
[   57.427679][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.512272][ T3652] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.624786][ T3657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'.
[   57.979111][   T28] kauditd_printk_skb: 22 callbacks suppressed
[   57.979188][   T28] audit: type=1400 audit(1778328472.862:244): avc:  denied  { setopt } for  pid=3656 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   58.052464][ T3657] netlink: 84 bytes leftover after parsing attributes in process `syz.0.37'.
[   58.082657][  T116] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   58.100526][ T3652] syz.3.36 (3652) used greatest stack depth: 8576 bytes left
[   58.134222][  T116] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1
[   58.208501][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.220137][ T3660] loop0: detected capacity change from 0 to 1024
[   58.245084][ T3660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.385897][   T28] audit: type=1400 audit(1778328473.272:245): avc:  denied  { write } for  pid=3659 comm="syz.0.39" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.435724][ T3664] loop1: detected capacity change from 0 to 1024
[   58.463599][ T3660] xt_policy: too many policy elements
[   58.528403][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.557488][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.621904][   T28] audit: type=1400 audit(1778328473.512:246): avc:  denied  { write } for  pid=3663 comm="syz.1.40" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.697273][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.733044][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.753748][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.782773][   T28] audit: type=1326 audit(1778328473.672:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.38" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee71cdd9 code=0x7ffc0000
[   58.809218][ T3670] capability: warning: `syz.0.41' uses deprecated v2 capabilities in a way that may be insecure
[   58.874503][   T28] audit: type=1326 audit(1778328473.672:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.38" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee71cdd9 code=0x7ffc0000
[   58.959579][   T28] audit: type=1326 audit(1778328473.672:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.38" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee71cdd9 code=0x7ffc0000
[   59.203780][   T28] audit: type=1326 audit(1778328473.672:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.38" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2eee71cdd9 code=0x7ffc0000
[   59.229944][   T28] audit: type=1326 audit(1778328473.722:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.38" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee71cdd9 code=0x7ffc0000
[   59.288675][   T28] audit: type=1326 audit(1778328473.722:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.38" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee71cdd9 code=0x7ffc0000
[   59.484257][ T3703] loop3: detected capacity change from 0 to 512
[   60.211581][ T3680] syzkaller0: entered promiscuous mode
[   60.294422][ T3703] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   60.307485][ T3703] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   60.320089][ T3703] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.49: Corrupt directory, running e2fsck is recommended
[   60.357677][ T3703] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   60.369718][ T3703] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.49: corrupted in-inode xattr: e_name out of bounds
[   60.384815][ T3703] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   60.388815][ T3703] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.49: couldn't read orphan inode 15 (err -117)
[   60.400154][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   60.400226][    C0] EXT4-fs (loop3): initial error at time 1778328475: ext4_iget_extra_inode:5128: inode 15
[   60.400526][    C0] EXT4-fs (loop3): last error at time 1778328475: ext4_iget_extra_inode:5128: inode 15
[   60.443607][ T3703] loop3: lost filesystem error report for type 5 error -117
[   60.460150][ T3703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.554887][ T3702] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   60.566914][ T3702] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   60.577179][ T3702] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.49: Corrupt directory, running e2fsck is recommended
[   60.590536][ T3702] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.49: path /7/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   60.616215][ T3680] syzkaller0: entered allmulticast mode
[   60.625573][ T3702] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.49: path /7/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   60.656377][ T3706] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   61.405590][ T3717] loop0: detected capacity change from 0 to 512
[   61.413560][ T3717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   61.429532][ T3717] EXT4-fs (loop0): 1 truncate cleaned up
[   61.436425][ T3717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.528819][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.902578][ T3726] loop1: detected capacity change from 0 to 512
[   61.966379][ T3726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.000171][ T3726] EXT4-fs (loop1): 1 truncate cleaned up
[   62.006559][ T3726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.081733][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.396180][ T3743] loop0: detected capacity change from 0 to 512
[   62.406579][ T3743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   62.441975][ T3743] EXT4-fs (loop0): 1 truncate cleaned up
[   62.449434][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.723677][ T3750] loop2: detected capacity change from 0 to 512
[   63.311979][ T3750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.373177][ T3750] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.462904][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.569631][   T28] kauditd_printk_skb: 50 callbacks suppressed
[   63.569721][   T28] audit: type=1400 audit(1778328478.452:303): avc:  denied  { write } for  pid=3740 comm="syz.2.61" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.681905][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.732428][   T28] audit: type=1400 audit(1778328478.612:304): avc:  denied  { write } for  pid=3749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.062380][   T28] audit: type=1400 audit(1778328478.802:305): avc:  denied  { setopt } for  pid=3772 comm="syz.0.65" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   64.144788][   T28] audit: type=1400 audit(1778328478.972:306): avc:  denied  { connect } for  pid=3764 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.166716][   T28] audit: type=1400 audit(1778328478.982:307): avc:  denied  { ioctl } for  pid=3764 comm="syz.3.63" path="socket:[6280]" dev="sockfs" ino=6280 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.169691][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.203845][ T3778] loop1: detected capacity change from 0 to 512
[   64.214719][ T3770] syzkaller0: entered promiscuous mode
[   64.229587][   T28] audit: type=1400 audit(1778328479.112:308): avc:  denied  { write } for  pid=3780 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.260639][ T3770] syzkaller0: entered allmulticast mode
[   64.287559][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.314711][ T3778] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.451054][ T3794] loop3: detected capacity change from 0 to 512
[   64.503584][ T3794] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   64.531847][   T28] audit: type=1400 audit(1778328479.422:309): avc:  denied  { write } for  pid=3777 comm="syz.1.62" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.578452][ T3794] EXT4-fs (loop3): 1 truncate cleaned up
[   64.588509][ T3794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.679470][ T3796] loop2: detected capacity change from 0 to 512
[   64.938530][ T3796] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   64.953349][ T3796] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   64.965119][ T3796] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.66: Corrupt directory, running e2fsck is recommended
[   65.008282][ T3796] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   65.031315][ T3796] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.66: corrupted in-inode xattr: e_name out of bounds
[   65.047374][ T3796] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   65.058033][ T3796] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.66: couldn't read orphan inode 15 (err -117)
[   65.060088][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   65.068960][ T3796] loop2: lost filesystem error report for type 5 error -117
[   65.080828][    C1] EXT4-fs (loop2): initial error at time 1778328479: ext4_iget_extra_inode:5128: inode 15
[   65.080882][    C1] EXT4-fs (loop2): last error at time 1778328479: ext4_iget_extra_inode:5128: inode 15
[   65.250401][   T28] audit: type=1400 audit(1778328479.582:310): avc:  denied  { write } for  pid=3788 comm="syz.3.67" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.288480][ T3796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.576662][ T3796] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   65.589374][   T28] audit: type=1400 audit(1778328479.712:311): avc:  denied  { write } for  pid=3797 comm="syz.3.67" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.617048][ T3796] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   65.628355][ T3796] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.66: Corrupt directory, running e2fsck is recommended
[   65.643983][ T3796] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.66: path /12/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   65.990314][ T3796] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.66: path /12/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   66.893450][ T3720] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   66.927581][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.939155][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.975314][   T28] audit: type=1400 audit(1778328481.862:312): avc:  denied  { ioctl } for  pid=3813 comm="syz.4.72" path="socket:[5262]" dev="sockfs" ino=5262 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.000290][ T3814] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   67.206033][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.337665][ T3840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.356125][ T3840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.379429][ T3840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.397477][ T3840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.892833][ T3859] loop4: detected capacity change from 0 to 512
[   68.717289][ T3851] sd 0:0:1:0: device reset
[   68.722045][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   68.722062][   T28] audit: type=1400 audit(1778328483.602:326): avc:  denied  { write } for  pid=3850 comm="syz.0.80" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   68.938227][ T3859] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   68.960118][ T3859] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   68.970585][ T3859] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.79: Corrupt directory, running e2fsck is recommended
[   69.005472][ T3859] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   69.083226][ T3859] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.79: corrupted in-inode xattr: e_name out of bounds
[   69.098611][ T3859] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   69.101153][ T3859] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.79: couldn't read orphan inode 15 (err -117)
[   69.111373][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   69.111454][    C1] EXT4-fs (loop4): initial error at time 1778328483: ext4_iget_extra_inode:5128: inode 15
[   69.111654][    C1] EXT4-fs (loop4): last error at time 1778328483: ext4_iget_extra_inode:5128: inode 15
[   69.154429][ T3859] loop4: lost filesystem error report for type 5 error -117
[   69.162891][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.890088][ T3870] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   69.902752][ T3870] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   69.913343][ T3870] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.79: Corrupt directory, running e2fsck is recommended
[   69.927340][ T3870] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.79: path /12/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   70.040565][ T3870] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.79: path /12/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   70.361065][   T28] audit: type=1400 audit(1778328485.242:327): avc:  denied  { write } for  pid=3846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.408941][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.458612][ T3878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'.
[   70.502141][   T28] audit: type=1400 audit(1778328485.342:328): avc:  denied  { write } for  pid=3874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.552777][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   70.579831][ T3878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.615613][ T3884] loop3: detected capacity change from 0 to 256
[   70.713164][ T3882] syzkaller0: entered promiscuous mode
[   70.751130][ T3882] syzkaller0: entered allmulticast mode
[   70.820171][   T28] audit: type=1400 audit(1778328485.702:329): avc:  denied  { write } for  pid=3891 comm="syz.0.88" path="socket:[5311]" dev="sockfs" ino=5311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.917504][ T3896] loop3: detected capacity change from 0 to 8192
[   70.988246][ T3901] FAULT_INJECTION: forcing a failure.
[   70.988246][ T3901] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   71.007246][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.036409][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) 
[   71.036441][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   71.036455][ T3901] Call Trace:
[   71.036466][ T3901]  <TASK>
[   71.036477][ T3901]  __dump_stack+0x1d/0x30
[   71.036517][ T3901]  dump_stack_lvl+0x95/0xd0
[   71.036547][ T3901]  dump_stack+0x15/0x1b
[   71.036568][ T3901]  should_fail_ex+0x263/0x280
[   71.036605][ T3901]  should_fail+0xb/0x20
[   71.036697][ T3901]  should_fail_usercopy+0x1a/0x20
[   71.036740][ T3901]  _copy_from_iter+0xcf/0xea0
[   71.036845][ T3901]  ? _copy_from_iter+0x13e/0xea0
[   71.036890][ T3901]  copy_page_from_iter+0x161/0x1f0
[   71.036972][ T3901]  skb_copy_datagram_from_iter+0x22d/0x480
[   71.037017][ T3901]  tun_get_user+0x93e/0x27e0
[   71.037137][ T3901]  ? ref_tracker_alloc+0x1eb/0x2f0
[   71.037227][ T3901]  ? selinux_file_permission+0x1e1/0x320
[   71.037256][ T3901]  tun_chr_write_iter+0x15e/0x210
[   71.037341][ T3901]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   71.037382][ T3901]  vfs_write+0x5a6/0x9f0
[   71.037444][ T3901]  ksys_write+0xdc/0x1a0
[   71.037486][ T3901]  __x64_sys_write+0x40/0x50
[   71.037523][ T3901]  x64_sys_call+0x27e1/0x3020
[   71.037559][ T3901]  do_syscall_64+0x12c/0x3b0
[   71.037664][ T3901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.037692][ T3901] RIP: 0033:0x7f2f63f5cdd9
[   71.037724][ T3901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.037744][ T3901] RSP: 002b:00007f2f629b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   71.037771][ T3901] RAX: ffffffffffffffda RBX: 00007f2f641d5fa0 RCX: 00007f2f63f5cdd9
[   71.037802][ T3901] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004
[   71.037825][ T3901] RBP: 00007f2f629b7090 R08: 0000000000000000 R09: 0000000000000000
[   71.037839][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   71.037854][ T3901] R13: 00007f2f641d6038 R14: 00007f2f641d5fa0 R15: 00007ffd91371e88
[   71.037879][ T3901]  </TASK>
[   71.042869][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.404632][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.425395][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.870475][  T116] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.892191][  T116] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.923574][  T116] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.949800][  T116] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.998720][   T28] audit: type=1400 audit(1778328486.882:330): avc:  denied  { mounton } for  pid=3915 comm="syz.2.94" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   72.262783][ T3907] loop1: detected capacity change from 0 to 512
[   72.490321][ T3928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'.
[   73.281529][ T3931] loop0: detected capacity change from 0 to 512
[   73.345498][ T3931] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   73.364866][ T3931] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   73.376417][ T3931] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.98: Corrupt directory, running e2fsck is recommended
[   73.424556][ T3931] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   73.442691][ T3931] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.98: corrupted in-inode xattr: e_name out of bounds
[   73.457992][ T3931] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   73.460973][ T3931] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.98: couldn't read orphan inode 15 (err -117)
[   73.472262][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   73.472541][    C1] EXT4-fs (loop0): initial error at time 1778328488: ext4_iget_extra_inode:5128: inode 15
[   73.473063][    C1] EXT4-fs (loop0): last error at time 1778328488: ext4_iget_extra_inode:5128: inode 15
[   73.520255][ T3931] loop0: lost filesystem error report for type 5 error -117
[   73.555147][ T3931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.200661][   T28] audit: type=1400 audit(1778328489.082:331): avc:  denied  { create } for  pid=3938 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   74.313028][   T28] audit: type=1400 audit(1778328489.132:332): avc:  denied  { sys_admin } for  pid=3938 comm="syz.2.101" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   74.344749][ T3949] loop3: detected capacity change from 0 to 512
[   74.381005][ T3949] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   74.436374][ T3949] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.103: bg 0: block 4: invalid block bitmap
[   74.487495][ T3949] loop3: lost filesystem error report for type 5 error -117
[   74.487711][ T3949] EXT4-fs (loop3): Remounting filesystem read-only
[   74.495855][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   74.495884][    C1] EXT4-fs (loop3): initial error at time 1778328489: ext4_validate_block_bitmap:432
[   74.495909][    C1] EXT4-fs (loop3): last error at time 1778328489: ext4_validate_block_bitmap:432
[   74.545748][ T3907] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   74.635497][ T3907] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   74.676010][ T3949] EXT4-fs (loop3): 1 truncate cleaned up
[   74.781399][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.804398][ T3907] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.92: Corrupt directory, running e2fsck is recommended
[   74.858342][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.931554][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.991045][ T3907] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   75.054159][ T3958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'.
[   75.070207][   T28] audit: type=1400 audit(1778328489.962:333): avc:  denied  { setopt } for  pid=3959 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   75.109281][ T3907] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.92: corrupted in-inode xattr: e_name out of bounds
[   75.140883][   T28] audit: type=1400 audit(1778328489.982:334): avc:  denied  { write } for  pid=3957 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   75.162989][ T3961] 9p: Bad value for 'wfdno'
[   75.172123][ T3963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   75.181560][ T3907] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   75.189675][ T3907] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.92: couldn't read orphan inode 15 (err -117)
[   75.190057][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   75.190080][    C1] EXT4-fs (loop1): initial error at time 1778328490: ext4_iget_extra_inode:5128: inode 15
[   75.190119][    C1] EXT4-fs (loop1): last error at time 1778328490: ext4_iget_extra_inode:5128: inode 15
[   75.256841][   T28] audit: type=1400 audit(1778328490.072:335): avc:  denied  { read } for  pid=3957 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   75.303063][   T28] audit: type=1400 audit(1778328490.132:336): avc:  denied  { ioctl } for  pid=3955 comm="syz.3.104" path="net:[4026532677]" dev="nsfs" ino=4026532677 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   75.373314][ T3907] loop1: lost filesystem error report for type 5 error -117
[   75.381756][ T3907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.451549][ T3966] loop0: detected capacity change from 0 to 8192
[   75.663822][ T3973] loop4: detected capacity change from 0 to 512
[   75.696408][ T3973] EXT4-fs: Mount option(s) incompatible with ext2
[   76.330339][ T3984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.350838][ T3984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.400350][   T28] audit: type=1400 audit(1778328491.272:337): avc:  denied  { bind } for  pid=3987 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   76.438632][   T28] audit: type=1400 audit(1778328491.272:338): avc:  denied  { connect } for  pid=3987 comm="syz.4.114" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.467482][   T28] audit: type=1400 audit(1778328491.272:339): avc:  denied  { block_suspend } for  pid=3987 comm="syz.4.114" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   76.502192][   T28] audit: type=1400 audit(1778328491.392:340): avc:  denied  { bind } for  pid=3990 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   76.684923][ T3984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.712230][ T3984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.858795][ T3997] loop3: detected capacity change from 0 to 512
[   76.900377][ T3933] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   77.021743][ T3997] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   77.036597][ T3997] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   77.048605][ T3997] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.116: Corrupt directory, running e2fsck is recommended
[   77.089989][ T3997] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   77.107191][ T3997] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.116: corrupted in-inode xattr: e_name out of bounds
[   77.126142][ T3997] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   77.130496][ T3997] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.116: couldn't read orphan inode 15 (err -117)
[   77.141076][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   77.141214][    C1] EXT4-fs (loop3): initial error at time 1778328492: ext4_iget_extra_inode:5128: inode 15
[   77.141617][    C1] EXT4-fs (loop3): last error at time 1778328492: ext4_iget_extra_inode:5128: inode 15
[   77.187829][ T3997] loop3: lost filesystem error report for type 5 error -117
[   77.241603][ T3997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.071981][ T3984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.591626][ T4010] loop0: detected capacity change from 0 to 512
[   78.645822][ T4010] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   78.660823][ T4010] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   78.673837][ T4010] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.118: Corrupt directory, running e2fsck is recommended
[   78.716782][ T4010] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   78.736958][ T4010] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.118: corrupted in-inode xattr: e_name out of bounds
[   78.754257][ T4010] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   78.756352][ T4010] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.118: couldn't read orphan inode 15 (err -117)
[   78.767933][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   78.768052][    C1] EXT4-fs (loop0): initial error at time 1778328493: ext4_iget_extra_inode:5128: inode 15
[   78.768302][    C1] EXT4-fs (loop0): last error at time 1778328493: ext4_iget_extra_inode:5128: inode 15
[   78.817022][ T4010] loop0: lost filesystem error report for type 5 error -117
[   78.835393][ T4010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.380349][ T4015] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   79.393853][ T4015] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   79.404683][ T4015] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.118: Corrupt directory, running e2fsck is recommended
[   79.419814][ T4015] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.118: path /28/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   79.494586][ T3984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.507876][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.539407][ T4011] loop4: detected capacity change from 0 to 1024
[   79.560330][ T4015] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.118: path /28/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[   80.552640][ T4011] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   80.613991][ T3984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.628152][ T4011] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   80.638718][ T3984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.680164][ T4011] JBD2: no valid journal superblock found
[   80.709404][ T4011] EXT4-fs (loop4): Could not load journal inode
[   80.732885][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.906060][ T4019] loop0: detected capacity change from 0 to 1024
[   80.917999][ T1686] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.941184][   T28] audit: type=1400 audit(1778328495.822:341): avc:  denied  { read } for  pid=4006 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.948451][ T1686] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.967898][ T4019] EXT4-fs: Ignoring removed orlov option
[   81.012700][ T4019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.171480][ T4027] loop3: detected capacity change from 0 to 512
[   81.201232][  T116] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.254191][  T116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.264675][   T28] audit: type=1400 audit(1778328496.132:342): avc:  denied  { write } for  pid=4018 comm="syz.0.121" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   81.421661][   T28] audit: type=1400 audit(1778328496.302:343): avc:  denied  { create } for  pid=4018 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   81.621573][   T28] audit: type=1400 audit(1778328496.472:344): avc:  denied  { create } for  pid=4018 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   81.770473][   T30] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.798157][   T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.808865][   T30] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.819146][   T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.085350][ T4027] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   82.102852][ T4027] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   82.118368][ T4027] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.122: Corrupt directory, running e2fsck is recommended
[   82.172848][ T4027] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   82.190328][ T4027] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.122: corrupted in-inode xattr: e_name out of bounds
[   82.211454][ T4027] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   82.220037][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   82.241230][    C0] EXT4-fs (loop3): initial error at time 1778328497: ext4_iget_extra_inode:5128: inode 15
[   82.254330][    C0] EXT4-fs (loop3): last error at time 1778328497: ext4_iget_extra_inode:5128: inode 15
[   82.371861][ T4027] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.122: couldn't read orphan inode 15 (err -117)
[   82.389189][ T4027] loop3: lost filesystem error report for type 5 error -117
[   82.411021][ T4027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.677477][   T28] audit: type=1400 audit(1778328496.492:345): avc:  denied  { setopt } for  pid=4018 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   82.709812][   T28] audit: type=1400 audit(1778328496.612:346): avc:  denied  { create } for  pid=4037 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   83.389114][ T4022] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   83.402094][ T4022] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   83.414235][ T4022] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.122: Corrupt directory, running e2fsck is recommended
[   83.428360][ T4022] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.122: path /30/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   83.699285][   T28] audit: type=1400 audit(1778328498.572:347): avc:  denied  { append } for  pid=4018 comm="syz.0.121" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   83.871547][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.916403][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.945589][   T28] audit: type=1400 audit(1778328498.572:348): avc:  denied  { write } for  pid=4018 comm="syz.0.121" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.938950][   T28] audit: type=1400 audit(1778328499.822:349): avc:  denied  { connect } for  pid=4058 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.961979][ T4059] tipc: Started in network mode
[   84.980158][ T4059] tipc: Node identity 4, cluster identity 4711
[   84.989214][ T4059] tipc: Node number set to 4
[   85.555279][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.643834][   T28] audit: type=1400 audit(1778328500.532:350): avc:  denied  { write } for  pid=4068 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   85.743462][ T4076] loop2: detected capacity change from 0 to 512
[   85.754748][ T4077] loop4: detected capacity change from 0 to 1024
[   85.787526][ T4077] EXT4-fs: Mount option(s) incompatible with ext3
[   85.797769][ T4079] loop1: detected capacity change from 0 to 8192
[   85.808550][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.826919][ T4076] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.484184][ T4089] x_tables: duplicate underflow at hook 2
[   86.503132][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   86.503147][   T28] audit: type=1400 audit(1778328501.392:353): avc:  denied  { read } for  pid=4088 comm="syz.0.133" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   86.560138][   T28] audit: type=1400 audit(1778328501.392:354): avc:  denied  { open } for  pid=4088 comm="syz.0.133" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   86.615080][   T28] audit: type=1400 audit(1778328501.392:355): avc:  denied  { ioctl } for  pid=4088 comm="syz.0.133" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   86.642289][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.386689][ T4095] loop0: detected capacity change from 0 to 512
[   88.510790][ T4098] loop2: detected capacity change from 0 to 512
[   89.132610][ T4098] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.147601][ T4098] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   89.280212][ T4098] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.135: Corrupt directory, running e2fsck is recommended
[   89.841629][ T4102] netem: change failed
[   89.954653][ T4098] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   89.965943][ T4098] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.135: corrupted in-inode xattr: e_name out of bounds
[   89.981993][ T4098] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   89.988198][ T4095] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[   90.001408][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   90.001518][    C0] EXT4-fs (loop2): initial error at time 1778328504: ext4_iget_extra_inode:5128: inode 15
[   90.001587][    C0] EXT4-fs (loop2): last error at time 1778328504: ext4_iget_extra_inode:5128: inode 15
[   90.151172][ T4098] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.135: couldn't read orphan inode 15 (err -117)
[   90.164591][ T4098] loop2: lost filesystem error report for type 5 error -117
[   90.167539][ T4095] EXT4-fs: failed to create workqueue
[   90.184618][ T4095] EXT4-fs (loop0): mount failed
[   90.935467][ T4098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.767477][ T4108] loop3: detected capacity change from 0 to 512
[   91.808801][ T4108] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   91.824760][ T4108] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   91.837023][ T4108] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.137: Corrupt directory, running e2fsck is recommended
[   91.863418][ T4100] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   91.926700][ T4108] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   91.946961][ T4108] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.137: corrupted in-inode xattr: e_name out of bounds
[   91.966442][ T4108] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.973014][ T4108] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.137: couldn't read orphan inode 15 (err -117)
[   91.985336][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   91.985794][    C1] EXT4-fs (loop3): initial error at time 1778328506: ext4_iget_extra_inode:5128: inode 15
[   91.986313][    C1] EXT4-fs (loop3): last error at time 1778328506: ext4_iget_extra_inode:5128: inode 15
[   92.035743][ T4108] loop3: lost filesystem error report for type 5 error -117
[   92.050771][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.720244][ T4114] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   92.732630][ T4114] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   92.744503][ T4114] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.137: Corrupt directory, running e2fsck is recommended
[   92.758253][ T4114] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.137: path /34/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   92.806131][ T4115] loop1: detected capacity change from 0 to 1024
[   92.820995][ T4115] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   93.181928][ T4115] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   93.223652][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.259576][ T4115] JBD2: no valid journal superblock found
[   93.277448][ T4115] EXT4-fs (loop1): Could not load journal inode
[   93.312416][ T4117] loop4: detected capacity change from 0 to 8192
[   93.393005][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.446873][   T28] audit: type=1400 audit(1778328508.332:356): avc:  denied  { kexec_image_load } for  pid=4119 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   93.516289][   T28] audit: type=1400 audit(1778328508.382:357): avc:  denied  { module_request } for  pid=4119 comm="syz.2.139" kmod="netdev-ip6erspan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   93.568606][   T28] audit: type=1400 audit(1778328508.442:358): avc:  denied  { create } for  pid=4119 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   93.602307][ T4129] netlink: 'syz.2.139': attribute type 3 has an invalid length.
[   93.673074][ T4129] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   93.735535][ T4134] loop0: detected capacity change from 0 to 512
[   93.758849][ T4134] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   93.882567][ T4134] EXT4-fs (loop0): 1 truncate cleaned up
[   93.890333][ T4134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.294794][ T4129] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.139'.
[   94.295642][   T28] audit: type=1400 audit(1778328508.812:359): avc:  denied  { write } for  pid=4121 comm="syz.0.142" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.595224][   T28] audit: type=1400 audit(1778328509.062:360): avc:  denied  { write } for  pid=4142 comm="syz.0.142" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.741226][ T4126] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   94.830946][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.912457][ T4146] 9p: Bad value for 'wfdno'
[   94.962708][   T28] audit: type=1400 audit(1778328509.852:361): avc:  denied  { ioctl } for  pid=4147 comm="syz.3.145" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5683 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   95.019683][ T4154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'.
[   95.037908][   T28] audit: type=1400 audit(1778328509.922:362): avc:  denied  { bind } for  pid=4157 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   95.058583][ T4158] mmap: syz.0.147 (4158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   95.065773][ T4154] vlan2: entered promiscuous mode
[   95.087145][ T4158] loop0: detected capacity change from 0 to 512
[   95.095828][ T4154] geneve1: entered promiscuous mode
[   95.102019][ T4154] vlan2: entered allmulticast mode
[   95.107862][ T4154] geneve1: entered allmulticast mode
[   95.167070][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'.
[   95.198465][ T4160] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.205791][ T4160] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.220571][   T28] audit: type=1400 audit(1778328510.112:363): avc:  denied  { write } for  pid=4159 comm="syz.3.148" name="ip_tables_targets" dev="proc" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   95.248758][   T28] audit: type=1400 audit(1778328510.112:364): avc:  denied  { setopt } for  pid=4159 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   95.280988][   T28] audit: type=1400 audit(1778328510.142:365): avc:  denied  { read } for  pid=4159 comm="syz.3.148" path="socket:[6960]" dev="sockfs" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   95.353402][ T4160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.368107][ T4160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.429711][   T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.439080][   T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.449882][ T4170] loop0: detected capacity change from 0 to 1024
[   95.459389][   T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.470216][ T4170] EXT4-fs: test_dummy_encryption option not supported
[   95.510262][   T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.573786][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'.
[   95.587433][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.152'.
[   95.823719][ T4179] loop0: detected capacity change from 0 to 512
[   95.880415][ T4180] loop2: detected capacity change from 0 to 512
[   95.922208][ T4180] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   96.087212][ T4180] EXT4-fs (loop2): 1 truncate cleaned up
[   96.095466][ T4180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.148472][ T4179] EXT4-fs (loop0): 1 orphan inode deleted
[   97.178388][ T4179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.364227][   T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.391722][ T4179] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.568229][ T4179] usb usb1: usbfs: process 4179 (syz.0.151) did not claim interface 0 before use
[   97.776211][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.786128][   T12] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1
[   97.810814][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.968894][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.542367][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.595354][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.754451][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   98.754471][   T28] audit: type=1400 audit(1778328513.642:372): avc:  denied  { read append } for  pid=4193 comm="syz.1.158" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   98.820957][   T28] audit: type=1400 audit(1778328513.672:373): avc:  denied  { open } for  pid=4193 comm="syz.1.158" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   98.853467][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.862573][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.886348][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.896417][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.938123][ T4203] loop2: detected capacity change from 0 to 1024
[   98.963072][ T4203] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   98.993231][ T4203] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   99.017882][ T4203] JBD2: no valid journal superblock found
[   99.035899][ T4206] loop4: detected capacity change from 0 to 512
[   99.042398][ T4203] EXT4-fs (loop2): Could not load journal inode
[   99.045180][ T4206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   99.064221][ T4206] EXT4-fs (loop4): 1 truncate cleaned up
[   99.071629][ T4206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.104262][ T3307] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   99.121912][   T28] audit: type=1400 audit(1778328513.982:374): avc:  denied  { write } for  pid=4204 comm="syz.4.161" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.183691][ T3307] EXT4-fs (loop4): Remounting filesystem read-only
[   99.226276][   T28] audit: type=1400 audit(1778328513.982:375): avc:  denied  { write } for  pid=4208 comm="syz.4.161" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.250186][   T28] audit: type=1400 audit(1778328513.992:376): avc:  denied  { write } for  pid=3307 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.272843][   T28] audit: type=1400 audit(1778328513.992:377): avc:  denied  { remove_name } for  pid=3307 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.312297][   T28] audit: type=1400 audit(1778328513.992:378): avc:  denied  { rmdir } for  pid=3307 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.359572][   T28] audit: type=1400 audit(1778328513.992:379): avc:  denied  { write } for  pid=3307 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.423789][   T28] audit: type=1400 audit(1778328513.992:380): avc:  denied  { unlink } for  pid=3307 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   99.424631][ T4215] x_tables: duplicate underflow at hook 2
[   99.479267][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.528316][   T28] audit: type=1400 audit(1778328514.412:381): avc:  denied  { ioctl } for  pid=4193 comm="syz.1.158" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   99.562848][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.651740][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.697685][ T4225] ==================================================================
[   99.706287][ T4225] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk
[   99.714027][ T4225] 
[   99.716848][ T4225] write to 0xffff88810565ff00 of 8 bytes by task 4224 on cpu 1:
[   99.724781][ T4225]  mas_wmb_replace+0x908/0x1760
[   99.730936][ T4225]  mas_wr_store_entry+0x54ff/0x5ad0
[   99.736387][ T4225]  mas_store_prealloc+0x43e/0x690
[   99.741720][ T4225]  vma_complete+0x3c7/0x850
[   99.746460][ T4225]  __split_vma+0x5db/0x640
[   99.751311][ T4225]  vma_modify+0xbee/0xca0
[   99.755813][ T4225]  vma_modify_flags+0x182/0x210
[   99.761173][ T4225]  mprotect_fixup+0x3a2/0x680
[   99.766180][ T4225]  do_mprotect_pkey+0x6ae/0x960
[   99.771532][ T4225]  __x64_sys_mprotect+0x48/0x60
[   99.776479][ T4225]  x64_sys_call+0x2768/0x3020
[   99.781978][ T4225]  do_syscall_64+0x12c/0x3b0
[   99.786987][ T4225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.793021][ T4225] 
[   99.795683][ T4225] read to 0xffff88810565ff00 of 8 bytes by task 4225 on cpu 0:
[   99.803541][ T4225]  mtree_range_walk+0x350/0x490
[   99.809852][ T4225]  mas_walk+0x1cc/0x370
[   99.814140][ T4225]  lock_vma_under_rcu+0xc9/0x210
[   99.819399][ T4225]  do_user_addr_fault+0x232/0x1050
[   99.824741][ T4225]  exc_page_fault+0x62/0xa0
[   99.829657][ T4225]  asm_exc_page_fault+0x26/0x30
[   99.834837][ T4225] 
[   99.837373][ T4225] value changed: 0xffff88810cbdb616 -> 0xffff88810cbd8d16
[   99.845637][ T4225] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   99.848805][ T4225] Reported by Kernel Concurrency Sanitizer on:
[   99.855435][ T4225] CPU: 0 UID: 0 PID: 4225 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) 
[   99.865211][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   99.875659][ T4225] ==================================================================
[   99.900784][ T4221] syzkaller0: entered promiscuous mode
[   99.907242][ T4221] syzkaller0: entered allmulticast mode
[  100.019401][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.090251][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.242471][   T49] bridge_slave_1: left allmulticast mode
[  100.260367][   T49] bridge_slave_1: left promiscuous mode
[  100.268342][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.279591][   T49] bridge_slave_0: left allmulticast mode
[  100.288433][   T49] bridge_slave_0: left promiscuous mode
[  100.295338][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.462634][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.474666][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.487037][   T49] bond0 (unregistering): Released all slaves
[  100.497768][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1
[  100.526798][   T49] hsr_slave_0: left promiscuous mode
[  100.534771][   T49] hsr_slave_1: left promiscuous mode
[  100.541232][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.554766][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.564838][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.573402][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.586234][   T49] veth1_macvtap: left promiscuous mode
[  100.592174][   T49] veth0_macvtap: left promiscuous mode
[  100.598988][   T49] veth1_vlan: left promiscuous mode
[  100.605520][   T49] veth0_vlan: left promiscuous mode
[  100.704607][   T49] team0 (unregistering): Port device team_slave_1 removed
[  100.715922][   T49] team0 (unregistering): Port device team_slave_0 removed
[  100.755523][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2
[  100.887532][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3
[  100.995147][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.006292][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.032173][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4
[  101.044292][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.057145][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.103722][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.116310][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.174048][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.184714][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.244359][   T49] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.254249][   T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.312468][   T49] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.322602][   T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.351842][   T49] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.362208][   T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.399599][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5
[  101.422603][   T49] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.433217][   T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.522557][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.533745][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.561815][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6
[  101.583626][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.595409][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.644561][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.656080][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.692944][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.704257][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.735433][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7
[  101.863664][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8
[  101.986966][   T49] bridge_slave_1: left allmulticast mode
[  101.993177][   T49] bridge_slave_1: left promiscuous mode
[  101.999036][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.008743][   T49] bridge_slave_0: left allmulticast mode
[  102.014936][   T49] bridge_slave_0: left promiscuous mode
[  102.021873][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.032505][   T49] bridge_slave_1: left allmulticast mode
[  102.038385][   T49] bridge_slave_1: left promiscuous mode
[  102.044284][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.053384][   T49] bridge_slave_0: left allmulticast mode
[  102.059191][   T49] bridge_slave_0: left promiscuous mode
[  102.065266][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.074644][   T49] bridge_slave_1: left allmulticast mode
[  102.080478][   T49] bridge_slave_1: left promiscuous mode
[  102.086821][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.095460][   T49] bridge_slave_0: left allmulticast mode
[  102.101694][   T49] bridge_slave_0: left promiscuous mode
[  102.107588][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.116834][   T49] bridge_slave_1: left allmulticast mode
[  102.123020][   T49] bridge_slave_1: left promiscuous mode
[  102.129053][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.137249][   T49] bridge_slave_0: left allmulticast mode
[  102.143109][   T49] bridge_slave_0: left promiscuous mode
[  102.148921][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.284668][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.295252][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.305564][   T49] bond0 (unregistering): Released all slaves
[  102.402916][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.413269][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.423038][   T49] bond0 (unregistering): Released all slaves
[  102.532522][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.543408][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.553615][   T49] bond0 (unregistering): Released all slaves
[  102.623344][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.634816][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.644327][   T49] bond0 (unregistering): Released all slaves
[  102.652377][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9
[  102.706445][   T49] tipc: Left network mode
[  102.715450][   T49] hsr_slave_0: left promiscuous mode
[  102.721715][   T49] hsr_slave_1: left promiscuous mode
[  102.728159][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.736492][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.745695][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.753487][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.763581][   T49] hsr_slave_0: left promiscuous mode
[  102.770555][   T49] hsr_slave_1: left promiscuous mode
[  102.776668][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.784404][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.792496][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.800233][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.810278][   T49] hsr_slave_0: left promiscuous mode
[  102.816137][   T49] hsr_slave_1: left promiscuous mode
[  102.822853][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.832555][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.840578][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.848123][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.858388][   T49] hsr_slave_0: left promiscuous mode
[  102.864439][   T49] hsr_slave_1: left promiscuous mode
[  102.870599][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.878689][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.898139][   T49] veth1_macvtap: left promiscuous mode
[  102.903842][   T49] veth0_macvtap: left promiscuous mode
[  102.909702][   T49] veth1_vlan: left promiscuous mode
[  102.916154][   T49] veth0_vlan: left promiscuous mode
[  102.922840][   T49] veth1_macvtap: left promiscuous mode
[  102.928557][   T49] veth0_macvtap: left promiscuous mode
[  102.934678][   T49] veth1_vlan: left promiscuous mode
[  102.940235][   T49] veth0_vlan: left promiscuous mode
[  102.946471][   T49] veth1_macvtap: left promiscuous mode
[  102.952438][   T49] veth0_macvtap: left promiscuous mode
[  102.959642][   T49] veth1_vlan: left promiscuous mode
[  102.965274][   T49] veth0_vlan: left promiscuous mode
[  103.113846][   T49] team0 (unregistering): Port device team_slave_1 removed
[  103.123886][   T49] team0 (unregistering): Port device team_slave_0 removed
[  103.189010][   T49] team0 (unregistering): Port device team_slave_1 removed
[  103.199451][   T49] team0 (unregistering): Port device team_slave_0 removed
[  103.263078][   T49] team0 (unregistering): Port device team_slave_1 removed
[  103.274115][   T49] team0 (unregistering): Port device team_slave_0 removed
[  103.337519][   T49] team0 (unregistering): Port device team_slave_1 removed
[  103.347452][   T49] team0 (unregistering): Port device team_slave_0 removed
[  103.384908][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10
[  103.504708][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11
[  103.622707][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12
[  103.743702][ T3024] 8021q: adding VLAN 0 to HW filter on device eth13
[  103.829545][   T28] kauditd_printk_skb: 27 callbacks suppressed
[  103.829564][   T28] audit: type=1400 audit(1778328518.712:409): avc:  denied  { write } for  pid=4430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.867799][   T28] audit: type=1400 audit(1778328518.752:410): avc:  denied  { write } for  pid=4441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.901636][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14
[  103.997924][   T28] audit: type=1400 audit(1778328518.882:411): avc:  denied  { write } for  pid=4445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.033828][   T28] audit: type=1400 audit(1778328518.922:412): avc:  denied  { write } for  pid=4456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.068428][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15
[  104.153648][   T28] audit: type=1400 audit(1778328519.042:413): avc:  denied  { write } for  pid=4460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.193143][   T28] audit: type=1400 audit(1778328519.082:414): avc:  denied  { write } for  pid=4471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.226950][ T3024] 8021q: adding VLAN 0 to HW filter on device eth16
[  104.324136][   T28] audit: type=1400 audit(1778328519.212:415): avc:  denied  { write } for  pid=4475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.361560][   T28] audit: type=1400 audit(1778328519.252:416): avc:  denied  { write } for  pid=4486 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.393471][ T3024] 8021q: adding VLAN 0 to HW filter on device eth17
[  104.476366][   T28] audit: type=1400 audit(1778328519.362:417): avc:  denied  { write } for  pid=4489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.512064][   T28] audit: type=1400 audit(1778328519.402:418): avc:  denied  { write } for  pid=4500 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.547362][ T3024] 8021q: adding VLAN 0 to HW filter on device eth18
[  104.664354][ T3024] 8021q: adding VLAN 0 to HW filter on device eth19
[  104.780339][ T3024] 8021q: adding VLAN 0 to HW filter on device eth20