last executing test programs:

9.465236886s ago: executing program 3 (id=4):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x57, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea"}]}], {0x14}}, 0xa0}}, 0x0) (fail_nth: 2)

9.294153992s ago: executing program 3 (id=9):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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")
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)

8.945727133s ago: executing program 1 (id=2):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(0x0, &(0x7f0000000380))
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = io_uring_setup(0x18e5, 0x0)
syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019680)={0x1b, 0x0, 0x0, 0xf6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x0, 0x0, 0x1}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000019700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0f000000030000000400"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019800)={0x18, 0x22, &(0x7f00000198c0)=ANY=[@ANYBLOB="1800000004000000000000000700000085000000830000001847000007000000000000000000000018270000", @ANYRES32, @ANYBLOB="00000000040000008510000005000000180000000400000000000000040000003d478000ffffffff1861000008000000000000000500000018250000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000408000000b70400000000000085000000820000001811000089346b595bd237b61f2d99eb029c04360cad2e7cff248c8ff87d6b9431bc36ae363267099e4ec8fb3f659070e4e65cd671eb10f15686cbf4f07e03d17e1f270e1ee4edd500", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f00000193c0)='GPL\x00', 0x1, 0xc1, &(0x7f0000019400)=""/193, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000019500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000019540)={0x5, 0x8, 0x7f, 0x2fd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000019780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9], &(0x7f00000197c0)=[{0x4, 0x1, 0xa, 0x5}, {0x2, 0x5, 0x1, 0x2}, {0x2, 0x3, 0x7, 0x4}], 0x10, 0x5}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)

8.012337033s ago: executing program 2 (id=11):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2200, 0x1aac80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x400003, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x4e1a, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0xc0f0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77<r\xe9\x9cD\xb0\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3wA\xf6`>\x8b')
unshare(0x20000400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000032000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000050000000000000000001e00000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000100)=""/156)
r6 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000210428bd70bbfbdbdf2500000000139820e331e7f6bf9d8fd006ace087081040eecf", @ANYRES32=r8, @ANYBLOB="43400000408a0200240012800c0001006d6163766c616e001400028008000300020000000800010010000000"], 0x44}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})

6.208672721s ago: executing program 3 (id=13):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="240000004e0025000307f4f9002304b3104b162f41d2346fe1a4ec7cd1dd000a44f57f08", 0x24)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x2}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x4480, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000002000011000000000ea8642b00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca90000000000003509010018000000950000000000000018000000400000000000000003000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

5.551031302s ago: executing program 2 (id=14):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000001100)=@assoc_value, &(0x7f0000000280)=0x8) (fail_nth: 1)

5.29792153s ago: executing program 1 (id=15):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0004050900010073797a31000000005c000480580001800a000100696e6e657200000048000280080004400000001724000580190001006d6574610000000014000280080002400000000708fa0140000000130800034000000002080002400000008408000140000000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000da61401002dbd7000fedbdf26ecced84840000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}}, {0x800, 0x0, 0x84, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000040)=[{0x6, 0x6, 0x0, 0x7fffffff}, {0x7, 0x7, 0x8d, 0x9e7}]})
r6 = socket$unix(0x1, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0xbc, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x809}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x801}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x20001004)
r7 = dup2(r6, r5)
close_range(r7, 0xffffffffffffffff, 0x0)

4.9763796s ago: executing program 2 (id=16):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x524, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000100000000000000000000a5f4c059c9", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB], 0x50)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0)
r1 = epoll_create1(0x0)
r2 = inotify_init1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r2, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
removexattr(&(0x7f00000004c0)='./file0\x00', 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x5, 0x2)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000001100)=@assoc_value, &(0x7f0000000280)=0x8)

4.440325027s ago: executing program 2 (id=20):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1d, 0x21, 0x20, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000)
syz_open_procfs(r0, &(0x7f0000000000)='ns\x00')
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0)
socket(0x1e, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80))
unshare(0x6020400)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fallocate(r3, 0x40, 0x8000, 0x6)
ioprio_set$pid(0x2, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000291000000b0000000000007f00000000130000000000000029000000"], 0x30}, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4)
sendmmsg$inet(r4, &(0x7f0000001380)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)='5', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000002180)="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", 0x5ad}], 0x1}}], 0x2, 0x240000c4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0})

4.36217752s ago: executing program 2 (id=22):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x82)
r2 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000800, &(0x7f0000000080)={[{@usrjquota}, {@bh}]}, 0x0, 0x4a4, &(0x7f0000001300)="$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")
r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x42, 0x197)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="760a0000000000026111500000000000180000000000000000000000000000009500000000000000b799c77cc91a"], &(0x7f0000000000)='GPL\x00'}, 0x80)
signalfd4(r3, &(0x7f00000001c0)={[0x883c]}, 0x8, 0x800)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000240)=0x7, 0x8, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000102000/0x4000)=nil, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000075c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x9, 0x400, 0x6, 0x20001})

4.335352921s ago: executing program 4 (id=23):
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000000)="45a7714f5d0d5af52a380562eb5c5ff9244721eb07332d7f7d845cdda2e007912fd7d47c154bdbc2cf06c41aea4729ef19f9ed3bde928c34d5d6faf9357ff9e2154eace134bb6f5d51c4ead6af3b1f710c6bda4565374c280ea641ad0c4501ad53eb4df8fbf0bf17a9f799a8f53a", &(0x7f0000000080)=""/75}, 0x20) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x2, 0x3, 0x301, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x669c, 0x1}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xff, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async)
statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x80, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x140d, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x8) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000500)={0x7, &(0x7f00000004c0)=[{0xc, 0x0, 0xff, 0x1000}, {0x8, 0x3, 0xf}, {0x1, 0xfc, 0x8, 0xffffffff}, {0x0, 0x0, 0x9, 0x5}, {0x6, 0x9, 0x40, 0xa}, {0x6, 0x1, 0x7, 0x6}, {0x1000, 0x5, 0xff, 0xf}]}) (async)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000540)={0x6, [0x0, 0x7, 0x7, 0x940, 0x8000, 0x7f]}, &(0x7f0000000580)=0x10) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={<r4=>0x0, 0x3, 0x30}, &(0x7f0000000600)=0xc)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000640)={r4, 0xba, "d0e55f2c93d9a2e211a1eae20780362bbdb5709d8bdeae78ea5adbe64b57e85566c384045564ea0de12196aa3f32a28b197196ebe2569fdf994206244052d6c0b315e9215a5de252e2b86e650f1053b68df678421ab6d9d0c88f3f5c67aded7938b3efc886fd2157d8eccf62d5a99b49c62449429178db7c65a926b05305cd94fbd0128a914f089ceeb7ecbc360c07a2696b0629e5f9db4e403101d78e9917bb22b8289b21e8b11b225b920a79dec736861e2549fef2afa1d13f"}, &(0x7f0000000740)=0xc2)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000780)={r4, 0x5}, 0x8) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044014}, 0x80) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0xc) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r7, &(0x7f0000000980)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8b06}, 0x1c) (async)
r8 = accept4$tipc(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe2$watch_queue(&(0x7f0000000ac0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
bind$rds(r9, &(0x7f0000000b00)={0x2, 0x4e20, @remote}, 0x10)
ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x15) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000b40)=0x6, 0x4) (async)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000b80)={0x0, @sco, @generic={0x2a, "40b9d2d0cf30edc1b297b6d3374f"}, @l2={0x1f, 0x80, @none, 0x20fb}, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x4, 0x2})
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000c80)=0x3ff)

4.251269733s ago: executing program 4 (id=25):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(0x0, &(0x7f0000000380))
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = io_uring_setup(0x18e5, 0x0)
syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019680)={0x1b, 0x0, 0x0, 0xf6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x0, 0x0, 0x1}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000019700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0f000000030000000400"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019800)={0x18, 0x22, &(0x7f00000198c0)=ANY=[@ANYBLOB="1800000004000000000000000700000085000000830000001847000007000000000000000000000018270000", @ANYRES32, @ANYBLOB="00000000040000008510000005000000180000000400000000000000040000003d478000ffffffff1861000008000000000000000500000018250000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000408000000b70400000000000085000000820000001811000089346b595bd237b61f2d99eb029c04360cad2e7cff248c8ff87d6b9431bc36ae363267099e4ec8fb3f659070e4e65cd671eb10f15686cbf4f07e03d17e1f270e1ee4edd500", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f00000193c0)='GPL\x00', 0x1, 0xc1, &(0x7f0000019400)=""/193, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000019500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000019540)={0x5, 0x8, 0x7f, 0x2fd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000019780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9], &(0x7f00000197c0)=[{0x4, 0x1, 0xa, 0x5}, {0x2, 0x5, 0x1, 0x2}, {0x2, 0x3, 0x7, 0x4}], 0x10, 0x5}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)

4.189429715s ago: executing program 0 (id=26):
set_mempolicy(0x4001, &(0x7f0000000040)=0x200ff9, 0x6)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000140)=""/203, &(0x7f0000000240)=0xcb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x41, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x2082, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
shutdown(r2, 0x1)
sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0xc4, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80000000)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x488a80, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ptrace$ARCH_GET_FS(0x1e, r5, &(0x7f0000000140), 0x1003)
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)

3.846092817s ago: executing program 3 (id=27):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0)
close(r10)
socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.823070707s ago: executing program 0 (id=28):
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r4, 0x0, 0x13, 0x0, &(0x7f0000000040))
syz_usb_disconnect(0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$llc_int(r0, 0x10c, 0x2, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd29, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x202, {@in6_addr=@loopback, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20009080}, 0x0)
r9 = geteuid()
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
read$usbfs(r10, 0x0, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000040))
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@private=0xa010102, @in6=@local, 0x4e22, 0xfffc, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x6, r8, r9}, {0x1000, 0x1, 0x1, 0x1, 0xfffffffffffff8e6, 0xc, 0x8, 0x1ff}, {0x5, 0x4, 0x80}, 0x8001, 0x6e6bb3, 0x0, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x4, 0x0, 0x0, 0x7, 0xb, 0x8}}, 0xe8)

2.390139823s ago: executing program 3 (id=29):
socket$kcm(0x21, 0x2, 0x2)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x1ff, 0x3, 0x42, 0x1, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
pipe2$9p(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c0014b6465185d4278eddd5411721b3218ef383baeb46d91a33"])
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x2000000000000216, &(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
unshare(0x8000000)
r9 = semget(0x1, 0x4, 0x3c4)
semtimedop(r9, &(0x7f0000000000)=[{0x3, 0xd, 0x1000}, {0x3, 0x2}, {0x2, 0x25b0, 0x800}], 0x3, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24000800)
unshare(0x48020400)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000200f00000f000000ff010000000002004b99749372e59bb68c1bd18713eae6e648bf2a9406e6bc4cf2ba02449d6d7975eb338f2741a8a12ad8ab6b9666b98977a1570e262e37813831fc2aac8944f5836883f6498fb80deed87f9a502de5e48c75456bbcb6f21a4a90dc280f316c62bcb084333d90ade5c1", @ANYRES32, @ANYBLOB="1a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)

1.184864492s ago: executing program 0 (id=30):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0x1, 0x382, &(0x7f00000004c0)="$eJzs3U1oY1UbAOA3vWnSzsdnuxMFIboTtExnI7qxRTow2I1K8GchBqej0lShwWK7mLQuFJeCS125U9CFC3EpgiDuXLh1BPEHFzq7kRk8ktz83CZpbcFWis8Dk5w557znvDf3Nrm93Jw+txTrl6fjyvXrP8bMTCnKS48sxY1SzEcWfbsxrjKhDgA4G26kFL+n3GjbzOSQ0imkBQCcoO7n/wsRUYv5vOb1Lw/rn3z6A8CZ1/v9f3a0fqpQPuA6QMQrJ5YWAHCCxq7/37OvudL9V+7/t1y4KwAAOKueePqZR5dXIx6v1WYiNt7cqm/V46Fh+/KVeCmasRbnYy5uReQnCp2HUvfx4qXVlfO1Wq0dP81HvXDhoJ6fKSxn3fhqLMZczPfie2cbKaXs4ierK4u1rojYbXfnj43SVn06zvXm/+5crA1PPPqDdJ8iLq2uXKj1Bqhv9OPbEXvDGxU6+S/EXHzz/GCYlPp3MK6uXF3sJz2M36pX4/LgVRi/AjJ2wQQAAAAAAAAAAAAAAAAAAAAAAI5hoTYwP1g/J3We85VyFhYmtHfXx8nje+sD7eXrA6VqipR+e+3++ltZ7FsfaHR9ni0LCQIAAAAAAAAAAAAAAAAAAMBAa7sSjWZzbbO1vbNeLLQ3W9tTEdGpefmrj76YjfE+f1Mo51NUIwZT1HrT7qw3UtbvnLKI8fCsM3m/5oNPBxkP+jzwv1Z1sBUT06ge3NRs/v/uH94d1tyV9Uf+c9gni8kbmBXSeHhk5I3b8pSO80INCheKNdXx2a+llAo1bxTDrz47PmCUIsqjO27qCPlMxcF9UqdwM714R//Vb3yecvfeN/fktXfe/2W90ezMHN09WNls3UrrjVK/8xFm7w2XurtgeGyUIi+UikdC+bAB9/bXNLJvf33qzre/Pnj2KA9rUrHp1c7xPNI5yzfn49FxKnmhk+ZI0+wwfLq3Ec216ZGDf8J+Hysc/4dx5/b3Pvswpe9/PmpU4U1iauxto/TPvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LevCxU0oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7F8O//Fwp7uzFSc5TCzfaEqOraZiuiMmHmP/6FrQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/qrwAAAP//kcdlNA==")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008040)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0x0)
poll(0x0, 0x0, 0xa)
memfd_create(0x0, 0x6)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84200, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)

1.063125466s ago: executing program 2 (id=31):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2a, 0x80802, 0x6)
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x3}, 0xfe}, 0x18)
syz_genetlink_get_family_id$l2tp(0x0, r1)
fcntl$getown(r1, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x9, &(0x7f0000000180)=[{0x200, 0x2, 0x5, 0x9cf}, {0x1, 0x0, 0x53, 0xffff}, {0x0, 0x5, 0x9, 0x7fff}, {0x9, 0xa1, 0x6, 0x7ff}, {0xeb1d, 0x9, 0x8, 0xeb66}, {0xf80a, 0x6, 0x40, 0xfffffffd}, {0x4, 0x6, 0x40, 0x8}, {0x1, 0x6, 0x2}, {0x80, 0x6, 0x9, 0x1}]})
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000300)={[{@grpquota}]}, 0x1, 0x548, &(0x7f0000001300)="$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")
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000001800), &(0x7f0000000540)=0x8b)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2012}}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)='I', 0x1}], 0x1}}], 0x1, 0x8010)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0)
shutdown(r1, 0x1)
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000100)={0x0, 0x5})
sendmmsg$inet6(r6, &(0x7f0000001080)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x94}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000240)="86cf57d617ef1851e208c1b0fdf32c8ed9515d7d457b8ba07e1ef21aafe943438b7b64bc79dab33aaa026be57d20a3310681d604f69223637343897f70def14ce949fab5211ee835f8754a326419a026c93a5b1c1910cca92da335126a626f842c04e155fc09792f8ad202dd7f448cd7e2d4052d4410a2493a1ebff55d681300a2a14be1843970ff86d54bc7da7996", 0x8f}, {&(0x7f00000003c0)="1bee0cdb4abb089bf429fe806d256068f11ecb07969de9837c2d96eb792347ba310825cf3194244ecc01fec9643a2d0c4eb1174fe6258433d3ba12534a66515d2caf732e175752a9012e84603eada1f1f2c073f60cd7732c7b2b211f8d4a3662a7140f49ec79eb3b04ce7c989aadec1bc85927ef9f502d6cb40abb9c691c3e3b633726281f1360e09fdd7419843c4b", 0x8f}, {&(0x7f0000000480)="209f321840aafc5de120ce1c91514f838c2ba7aec2fb0ae610e55f5c606a652a70e88ba6cb9dcdbd2be97ef6560a8b2194e6806eb9409593d1f6c6ceb292041c5e6c1c099b488a94e48796c5019d074098226b2303ab23a6cc1ec7abd5884a1f8f8aaed8e7054e641ff3282e697460c7fd2a23eedd8056625405889c306e2f3fb78e581aad0e9021ce6f4d17eddf6f042c", 0x91}, {&(0x7f0000000540)="eab3e5aea56139a130a95a5c7f83eb58a75aaf9e66a3f5586d0672961fb02c439dff6c4158e24c938b3389219b7fd17c836bd5aaf263baa7e051228ba5460148dba5c767fbedf91ceb28b55f92d60c4aae780df8d199ee263baa780cc80a52456809a821965535516b6ba8fdce4d50cb5f567127cffacb5715b5a514ff0f87faad9f278f7af030ad3670ffa019712197659b38cf182ef88f397d28638e3df7a8ad6577ba41937904c6ade1a310ac3862777bf09387fd849f1f0f104997e90d9b278e63397d27ca21416559811b4b5d16266e91a1c67050cd2dac8d40b1b2ee221b7184be4311401178642a82e6e65f1b6427b2ba7c", 0xf5}], 0x4, &(0x7f0000000680)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x2c, 0xa, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x5, [0x4, 0x3]}}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x507b, [0x5]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0xa, [0x4, 0x4]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x74fe}}], 0x88}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x1f2c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x84}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000780)="971b1c2be6a4a2756184f6870ea86d480876190b0be6fa2629ca48af083a670fdd850fe906ea0cd3696ab567b2dbe4aa01d64f532d8e2514626f3257abafb73f29e508cc2fbf9843165865ac0b3acfd115a130e8ca014e4524ec455a4c445b7391e9e5acc3fa1f123054a18725cdb03892d6fd283d58bac0e92fb0a8c107961c0385be686654185bf9ba84b142c3dee4dba8e8b66c8cd3ce487705811b04f417230fcc8d7ac9a780eb925d84bade", 0xae}, {&(0x7f0000000840)="5566291bfab52cc4cb70002fa90e0d5b81e521f27e8d336f4b1c4c438b79da51e5d9235401e8e9a79a6343787776f97fd69c62dc30ce9eb20579be8c1641e93279af5f1b1d128c471adfafb78f4221a51f7c3f88f1cdd6e47c1c9ec17446ba38b9b69cfd62280d4a0c775a42b588be6b931b5f0c54c1a0ee91c536a824258fc53d18e5f5509985e1623c4f55d8168f230d9e5aa672f62fbd8405878cfc1b23e826b3551cfb1fefb53d285f786350857629a04070c4afed6db466358bfa7acc", 0xbf}], 0x2, &(0x7f0000000940)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x1d, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x75, 0xe5e1, [0x6, 0x1, 0x3, 0xa2b7, 0x8000000000000000, 0x9ce, 0x80000000]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0xb}}, @dontfrag={{0x14, 0x29, 0x3e, 0x19}}, @hopopts={{0x18, 0x29, 0x36, {0x14}}}], 0xa8}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40}, 0x1c, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=[@dstopts_2292={{0x118, 0x29, 0x4, {0x3a, 0x1f, '\x00', [@generic={0x0, 0xf7, "a88b77c0d0e6d12c429379dc55215a53508afb099cef0bf03b0ab69d2b380be62d96edddcdb59dd7d879a1a21e37d7e35cc5592e59265743f72018734be33a47e9fc42c0a06ddc5027e915feed247223710ba0ebb2694d897deb31f378f9e64313abb33e045299fabe708074abc53607e5ab59fc8f35ac266bebd9b8b6636e70f2095851821b0841da2fc925006720ab645f0704b14991c946fa698f69fc1cf3d905f7290672c52a390ce1ecb2394ebd05b4f88f250d0ad4124cd84d78dc4271a7b0d8435750ee120aa31f6ab3147e9b85c09e9130294571d2fe0055622bcf89d75d24f7f546cd1f996adc6f6ada0bd455793dad4e51a1"}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x89, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xab}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdr={{0x68, 0x29, 0x39, {0x27, 0xa, 0x1, 0x1, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2b, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x8b}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x228}}, {{&(0x7f0000000cc0)={0xa, 0x4e20, 0x80000001, @mcast1, 0x6}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000d00)="6cf5a14ffb23ccbb8ceb0607eb8fa416ec17ef4100e70bd96a7eec0c939682cf9669681159da5f102b624fbdf9c1f38215a20bef04c076b7ed95f189180efded1edc5c8fc14929c11f1411b2b10d8b2a2230667dce8300ba8db4ae683cec74230a46ad1e4a72c6ee1fd7829333a1b32193f66b4a2a78f135a4c6a54d95571c5bcb8d5fe796eb2db669b1ec10edb8446e62ed2015a99d8fdc8b393d7076ed867b5b801363f1fac24370a75b713a96c2804bd53f1140e30820db54cd969125d494c2e4ba3ef06c3254a3cacbef11f9656d8308134be55e8ccbc45aa798a2e29f842f150c", 0xe3}, {&(0x7f0000000e00)="ccc5ea17980118dc0194ffa2422ccb8ddc8f865138f12b8c619c4dae73e22c490df1fbe71cfee7f177acb12293782875c46edac3c2e964b1e9d270126f323921007e244db934f690d843700346b83842ef5efe50d4732e0461df357ff0956ceff26930e67c349dc4c23bf27176574d31ca9d6de44a19985c6687ba57dc8ce8b9", 0x80}, {&(0x7f0000000e80)="f0221e5b4644c5a6254feff9793cecee87f82df893a9b7d2dd88359025e1809fa0e399269a4f45623e538921a3cd1969a3ffa916a1b0d3946ff7f428f676dd54687bae1826c5c9d2ac6f266e941a2df68426f6f7fa3454b0741ab1e43ee35e820723576eef49cb8908b2dad85a49a1be", 0x70}], 0x3, &(0x7f0000000f40)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x6c, 0x5, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xff, 0x5, [0x3, 0x8]}}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x87, 0x4, '\x00', [@ra={0x5, 0x2, 0xd9}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x600000}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x1, 0x81, 0x0, [@mcast2]}}}, @dstopts={{0x50, 0x29, 0x37, {0x0, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x10}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x7, [0x4, 0x8, 0x3, 0x6]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0xb}}], 0x130}}], 0x4, 0x20004000)
r8 = dup(r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)

1.062543486s ago: executing program 4 (id=32):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)

524.718203ms ago: executing program 1 (id=33):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
r1 = socket(0x1d, 0x2, 0x6)
set_mempolicy(0x4000, &(0x7f00000001c0)=0x2, 0x7fff)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
unshare(0x22020600)
pidfd_send_signal(r3, 0x35, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x3, 0x207, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x3a}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x1ffffffe}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}}, 0xf0}}, 0x0)

494.254674ms ago: executing program 1 (id=34):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x1276, 0x0)
r2 = socket(0xa, 0x5, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x304, 0x1daf6}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
bind(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x1, 0x2, 0x3, 0x2}}, 0x80)
socketpair(0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)

462.628805ms ago: executing program 4 (id=35):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

404.048656ms ago: executing program 0 (id=36):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0xa, 0x1, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000)
syz_open_dev$sg(0x0, 0x0, 0x8002)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='$'], 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
bind(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x1, 0x2, 0x3, 0x2}}, 0x80)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)="fc6f19", 0x100000}], 0x1}}], 0x1, 0x40)
ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000240)={0x0, r0, 0xffffffffffffffff, 0x7, 0x3, '\x00', {0xffffffff00000000, 0x80, 0x80, 0x10, 0x3, 0xe6, 0x3, 0x81, {0x6, 0x2}, {0x8001, 0x10001}, {0x7, 0x2}, 0x59, 0x101, 0x1, 0x9, 0x0, 0x5, 0x2, 0x5, 0x200, 0x5, '\x00', 0x7, 0x0, 0x2, 0x2}})
socketpair(0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fdffde190100008a020000911100000000000000b061fea2dfb7743b1496fa95845c08646b415767d2692ca5a081cfceaf2e55dd6aa44e4baae2d458b1ada5d40f049227274db67d8cd071875b36fcc1b5644e305a933c50cbab3de689aaebd9a4e03a81b3cc61ff798a4321e7283ddd07bb0803376511711cf9df92f5be8a25d8821ac0d6a4dfc1379b625637b24fac221bf03a92ed31164d"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
socket$kcm(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

329.427869ms ago: executing program 1 (id=37):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'sit0\x00', 0x0})
close_range(r2, r4, 0x0)

238.009942ms ago: executing program 4 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r1, 0x50dc85624ea6cf59, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)

237.777472ms ago: executing program 0 (id=39):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x28}}, 0x0) (fail_nth: 1)

175.148444ms ago: executing program 4 (id=40):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x50008}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x3c}}, 0x8084)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x6)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

0s ago: executing program 0 (id=41):
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f0000000100)=""/213, 0xd5)

kernel console output (not intermixed with test programs):

[   24.157363][   T28] audit: type=1400 audit(1781196821.101:103): avc:  denied  { search } for  pid=3184 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.179469][   T28] audit: type=1400 audit(1781196821.101:104): avc:  denied  { search } for  pid=3184 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   25.831493][   T28] kauditd_printk_skb: 17 callbacks suppressed
[   25.831512][   T28] audit: type=1400 audit(1781196822.771:122): avc:  denied  { write } for  pid=3257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   25.866663][   T28] audit: type=1400 audit(1781196822.811:123): avc:  denied  { write } for  pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   26.300574][   T28] audit: type=1400 audit(1781196823.241:124): avc:  denied  { write } for  pid=3271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   26.330450][   T28] audit: type=1400 audit(1781196823.271:125): avc:  denied  { write } for  pid=3282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts.
[   31.106246][   T28] audit: type=1400 audit(1781196828.051:126): avc:  denied  { mounton } for  pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   31.129442][   T28] audit: type=1400 audit(1781196828.071:127): avc:  denied  { mount } for  pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   31.131807][ T3291] cgroup: Unknown subsys name 'net'
[   31.157290][   T28] audit: type=1400 audit(1781196828.111:128): avc:  denied  { unmount } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   31.273291][ T3291] cgroup: Unknown subsys name 'cpuset'
[   31.279530][ T3291] cgroup: Unknown subsys name 'rlimit'
[   31.392391][   T28] audit: type=1400 audit(1781196828.331:129): avc:  denied  { setattr } for  pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.425285][   T28] audit: type=1400 audit(1781196828.341:130): avc:  denied  { create } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.446142][   T28] audit: type=1400 audit(1781196828.341:131): avc:  denied  { write } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.466650][   T28] audit: type=1400 audit(1781196828.341:132): avc:  denied  { read } for  pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.487341][   T28] audit: type=1400 audit(1781196828.341:133): avc:  denied  { mounton } for  pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   31.507341][ T3294] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   31.512886][   T28] audit: type=1400 audit(1781196828.341:134): avc:  denied  { mount } for  pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   31.544340][   T28] audit: type=1400 audit(1781196828.371:135): avc:  denied  { read } for  pid=3026 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   31.571436][ T3291] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   32.979532][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.986710][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.994048][ T3309] bridge_slave_0: entered allmulticast mode
[   33.000750][ T3309] bridge_slave_0: entered promiscuous mode
[   33.028350][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.035468][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.042640][ T3309] bridge_slave_1: entered allmulticast mode
[   33.049118][ T3309] bridge_slave_1: entered promiscuous mode
[   33.062892][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.070123][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.077343][ T3304] bridge_slave_0: entered allmulticast mode
[   33.083833][ T3304] bridge_slave_0: entered promiscuous mode
[   33.102516][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.109693][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.116923][ T3304] bridge_slave_1: entered allmulticast mode
[   33.123411][ T3304] bridge_slave_1: entered promiscuous mode
[   33.154710][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.175879][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.183047][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.190277][ T3307] bridge_slave_0: entered allmulticast mode
[   33.196821][ T3307] bridge_slave_0: entered promiscuous mode
[   33.204469][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.223536][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.232797][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.239943][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.247248][ T3307] bridge_slave_1: entered allmulticast mode
[   33.253764][ T3307] bridge_slave_1: entered promiscuous mode
[   33.269990][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.277164][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.284411][ T3303] bridge_slave_0: entered allmulticast mode
[   33.290740][ T3303] bridge_slave_0: entered promiscuous mode
[   33.298371][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.326973][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.334125][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.341229][ T3310] bridge_slave_0: entered allmulticast mode
[   33.347829][ T3310] bridge_slave_0: entered promiscuous mode
[   33.354262][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.361334][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.368581][ T3303] bridge_slave_1: entered allmulticast mode
[   33.375211][ T3303] bridge_slave_1: entered promiscuous mode
[   33.382363][ T3304] team0: Port device team_slave_0 added
[   33.393113][ T3309] team0: Port device team_slave_0 added
[   33.398921][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.406023][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.413214][ T3310] bridge_slave_1: entered allmulticast mode
[   33.419583][ T3310] bridge_slave_1: entered promiscuous mode
[   33.431019][ T3304] team0: Port device team_slave_1 added
[   33.438008][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.447992][ T3309] team0: Port device team_slave_1 added
[   33.468605][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.493758][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.517404][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.527483][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.541844][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.548878][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.574932][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.586496][ T3307] team0: Port device team_slave_0 added
[   33.592468][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.599491][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.625450][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.637277][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.651841][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.658894][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.684920][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.696384][ T3307] team0: Port device team_slave_1 added
[   33.702249][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.709249][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.735288][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.751172][ T3303] team0: Port device team_slave_0 added
[   33.774297][ T3303] team0: Port device team_slave_1 added
[   33.790651][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.797750][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.823808][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.835433][ T3310] team0: Port device team_slave_0 added
[   33.855508][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.862602][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.888606][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.900139][ T3310] team0: Port device team_slave_1 added
[   33.915713][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.922776][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.948866][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.984540][ T3304] hsr_slave_0: entered promiscuous mode
[   33.990765][ T3304] hsr_slave_1: entered promiscuous mode
[   33.997158][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.004235][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.030391][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.043598][ T3309] hsr_slave_0: entered promiscuous mode
[   34.049756][ T3309] hsr_slave_1: entered promiscuous mode
[   34.055751][ T3309] debugfs: 'hsr0' already exists in 'hsr'
[   34.062009][ T3309] Cannot create hsr debugfs directory
[   34.069865][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.076902][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.102896][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.114129][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.121122][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.147095][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.186338][ T3307] hsr_slave_0: entered promiscuous mode
[   34.192392][ T3307] hsr_slave_1: entered promiscuous mode
[   34.198307][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   34.204090][ T3307] Cannot create hsr debugfs directory
[   34.237605][ T3310] hsr_slave_0: entered promiscuous mode
[   34.243870][ T3310] hsr_slave_1: entered promiscuous mode
[   34.249759][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   34.255527][ T3310] Cannot create hsr debugfs directory
[   34.290223][ T3303] hsr_slave_0: entered promiscuous mode
[   34.296664][ T3303] hsr_slave_1: entered promiscuous mode
[   34.302765][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   34.308513][ T3303] Cannot create hsr debugfs directory
[   34.492327][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   34.501593][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.509423][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   34.517999][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.526117][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   34.534723][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.545283][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   34.554210][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.574728][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   34.583457][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.591168][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   34.600383][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.608089][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   34.616842][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.624901][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   34.633634][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.663757][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   34.672601][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.683154][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   34.691984][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.699815][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   34.708397][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.723793][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   34.732248][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.760794][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   34.769838][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.782302][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   34.790954][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.798908][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   34.807304][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.824508][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   34.833152][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.854258][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   34.862975][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.870634][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   34.879738][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.893098][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   34.901810][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.909763][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   34.918578][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.948991][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.976332][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   34.985092][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.009472][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.016588][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.031297][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.038396][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.047778][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   35.064465][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.073287][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.080385][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.109690][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.121809][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.128951][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.140173][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   35.153812][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.160916][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.170582][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.177881][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.209126][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.229044][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   35.253603][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.260724][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.279195][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.286378][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.308074][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   35.339824][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.346974][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.378703][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.387400][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.434904][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.590672][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.616901][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.632160][ T3309] veth0_vlan: entered promiscuous mode
[   35.660570][ T3309] veth1_vlan: entered promiscuous mode
[   35.679564][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.716934][ T3309] veth0_macvtap: entered promiscuous mode
[   35.735591][ T3309] veth1_macvtap: entered promiscuous mode
[   35.752345][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.774942][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.793386][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.814390][   T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.826032][   T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.836397][ T3307] veth0_vlan: entered promiscuous mode
[   35.849237][   T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.863444][   T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.890707][ T3307] veth1_vlan: entered promiscuous mode
[   35.907986][ T3310] veth0_vlan: entered promiscuous mode
[   35.934536][ T3307] veth0_macvtap: entered promiscuous mode
[   35.950401][ T3310] veth1_vlan: entered promiscuous mode
[   35.960421][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.982167][ T3307] veth1_macvtap: entered promiscuous mode
[   36.029764][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.038584][ T3310] veth0_macvtap: entered promiscuous mode
[   36.046085][ T3303] veth0_vlan: entered promiscuous mode
[   36.060720][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.077882][ T3310] veth1_macvtap: entered promiscuous mode
[   36.089123][ T3303] veth1_vlan: entered promiscuous mode
[   36.100804][   T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.110975][   T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.120117][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.141936][   T28] kauditd_printk_skb: 25 callbacks suppressed
[   36.141955][   T28] audit: type=1400 audit(1781196833.081:161): avc:  denied  { open } for  pid=3512 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   36.144248][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.149049][   T28] audit: type=1400 audit(1781196833.081:162): avc:  denied  { perfmon } for  pid=3512 comm="syz.2.7" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   36.178948][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.203923][   T28] audit: type=1400 audit(1781196833.081:163): avc:  denied  { kernel } for  pid=3512 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   36.228208][   T28] audit: type=1400 audit(1781196833.171:164): avc:  denied  { read } for  pid=3512 comm="syz.2.7" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   36.245495][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.260856][   T28] audit: type=1400 audit(1781196833.171:165): avc:  denied  { open } for  pid=3512 comm="syz.2.7" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   36.286601][   T28] audit: type=1400 audit(1781196833.201:166): avc:  denied  { map_create } for  pid=3512 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   36.308194][   T28] audit: type=1400 audit(1781196833.231:167): avc:  denied  { map_read map_write } for  pid=3512 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   36.328083][   T28] audit: type=1400 audit(1781196833.231:168): avc:  denied  { bpf } for  pid=3512 comm="syz.2.7" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   36.333097][ T3304] veth0_vlan: entered promiscuous mode
[   36.350541][   T28] audit: type=1400 audit(1781196833.231:169): avc:  denied  { prog_load } for  pid=3512 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   36.372326][  T311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.381628][  T311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.389619][   T28] audit: type=1400 audit(1781196833.331:170): avc:  denied  { prog_run } for  pid=3512 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   36.410361][ T3514] loop2: detected capacity change from 0 to 1024
[   36.418108][ T3303] veth0_macvtap: entered promiscuous mode
[   36.424426][ T3514] EXT4-fs: Ignoring removed bh option
[   36.435734][ T3304] veth1_vlan: entered promiscuous mode
[   36.442370][  T311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.451690][  T311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.465920][ T3303] veth1_macvtap: entered promiscuous mode
[   36.472034][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   36.483894][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.493409][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.528898][  T311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.539548][  T311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.553779][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   36.554630][  T311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.584572][  T311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.621638][ T3304] veth0_macvtap: entered promiscuous mode
[   36.629361][ T3304] veth1_macvtap: entered promiscuous mode
[   36.645830][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.654936][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.700613][ T3526] loop0: detected capacity change from 0 to 512
[   36.739684][   T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.752445][   T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.755225][ T3529] FAULT_INJECTION: forcing a failure.
[   36.755225][ T3529] name failslab, interval 1, probability 0, space 0, times 1
[   36.767423][ T3526] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   36.774300][ T3529] CPU: 1 UID: 0 PID: 3529 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(lazy) 
[   36.774383][ T3529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   36.774436][ T3529] Call Trace:
[   36.774509][ T3529]  <TASK>
[   36.774537][ T3529]  __dump_stack+0x1d/0x30
[   36.774612][ T3529]  dump_stack_lvl+0x95/0xd0
[   36.774684][ T3529]  dump_stack+0x15/0x1b
[   36.774741][ T3529]  should_fail_ex+0x263/0x280
[   36.774879][ T3529]  should_failslab+0x8c/0xb0
[   36.774975][ T3529]  kmem_cache_alloc_node_noprof+0x6d/0x450
[   36.775110][ T3529]  ? __alloc_skb+0x2d6/0x690
[   36.775182][ T3529]  __alloc_skb+0x2d6/0x690
[   36.775242][ T3529]  ? __alloc_skb+0x200/0x690
[   36.775299][ T3529]  netlink_alloc_large_skb+0xbf/0xf0
[   36.775432][ T3529]  netlink_sendmsg+0x40c/0x6f0
[   36.775618][ T3529]  ? __pfx_netlink_sendmsg+0x10/0x10
[   36.775720][ T3529]  ____sys_sendmsg+0x563/0x5b0
[   36.775811][ T3529]  ___sys_sendmsg+0x195/0x1e0
[   36.775928][ T3529]  __x64_sys_sendmsg+0xd4/0x160
[   36.776104][ T3529]  x64_sys_call+0x194c/0x3020
[   36.776255][ T3529]  do_syscall_64+0x12c/0x3b0
[   36.776414][ T3529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.776535][ T3529] RIP: 0033:0x7f135b18ce59
[   36.776557][ T3529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.776575][ T3529] RSP: 002b:00007f1359bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   36.776608][ T3529] RAX: ffffffffffffffda RBX: 00007f135b405fa0 RCX: 00007f135b18ce59
[   36.776717][ T3529] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[   36.776766][ T3529] RBP: 00007f1359bdf090 R08: 0000000000000000 R09: 0000000000000000
[   36.776824][ T3529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.776877][ T3529] R13: 00007f135b406038 R14: 00007f135b405fa0 R15: 00007ffdf3c50728
[   36.776997][ T3529]  </TASK>
[   36.810528][ T1907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.047878][ T3535] loop2: detected capacity change from 0 to 1024
[   37.073389][ T3535] EXT4-fs: Ignoring removed bh option
[   37.124862][ T1907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.141132][ T3535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.401926][ T3539] loop3: detected capacity change from 0 to 512
[   37.455280][ T3539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.537055][ T3539] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.9: corrupted inode contents
[   37.549683][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.552751][ T3539] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.9: mark_inode_dirty error
[   37.562760][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   37.562899][    C1] EXT4-fs (loop3): initial error at time 1781196834: ext4_do_update_inode:5690: inode 16
[   37.563136][    C1] EXT4-fs (loop3): last error at time 1781196834: ext4_do_update_inode:5690: inode 16
[   37.602595][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.607931][ T3539] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.9: corrupted inode contents
[   37.632628][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.636298][ T3539] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.9: mark_inode_dirty error
[   37.657902][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.661523][ T3539] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.9: corrupted inode contents
[   37.684442][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.686802][ T3539] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   37.706473][ T3539] loop3: lost filesystem error report for type 5 error -117
[   37.708584][ T3539] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.9: corrupted inode contents
[   37.729480][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.734462][ T3539] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.9: mark_inode_dirty error
[   37.756592][ T3539] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   37.758392][ T3539] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   37.777500][ T3539] loop3: lost filesystem error report for type 5 error -117
[   37.783814][ T3539] EXT4-fs (loop3): 1 truncate cleaned up
[   37.807055][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.821516][ T3539] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.902061][   T36] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1
[   37.937656][ T3548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'.
[   38.258073][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.399249][ T3539] syz.3.9 (3539) used greatest stack depth: 8128 bytes left
[   38.473043][ T3551] loop1: detected capacity change from 0 to 512
[   38.644466][ T3406] IPVS: starting estimator thread 0...
[   38.680368][ T3551] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.514733][ T3559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11'.
[   39.694104][ T3555] IPVS: using max 2256 ests per chain, 112800 per kthread
[   39.847480][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   39.906008][ T3551] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   39.936307][ T3551] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set
[   39.965489][ T3551] loop1: lost filesystem error report for type 5 error -117
[   39.972453][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   39.986253][    C1] EXT4-fs (loop1): last error at time 1781196836: ext4_validate_block_bitmap:441
[   40.202137][ T3551] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2: Failed to acquire dquot type 1
[   40.245447][ T3551] loop1: lost filesystem error report for type 5 error -28
[   40.270139][ T3551] EXT4-fs (loop1): 1 truncate cleaned up
[   40.369153][ T3551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   40.443284][ T3551] syz.1.2 (3551) used greatest stack depth: 7680 bytes left
[   40.865966][ T3567] FAULT_INJECTION: forcing a failure.
[   40.865966][ T3567] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   40.927882][ T3567] CPU: 1 UID: 0 PID: 3567 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(lazy) 
[   40.927912][ T3567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   40.928002][ T3567] Call Trace:
[   40.928009][ T3567]  <TASK>
[   40.928017][ T3567]  __dump_stack+0x1d/0x30
[   40.928044][ T3567]  dump_stack_lvl+0x95/0xd0
[   40.928064][ T3567]  dump_stack+0x15/0x1b
[   40.928102][ T3567]  should_fail_ex+0x263/0x280
[   40.928126][ T3567]  should_fail+0xb/0x20
[   40.928148][ T3567]  should_fail_usercopy+0x1a/0x20
[   40.928245][ T3567]  _copy_from_user+0x1c/0xb0
[   40.928270][ T3567]  do_sock_getsockopt+0x122/0x570
[   40.928341][ T3567]  __x64_sys_getsockopt+0x11d/0x1a0
[   40.928378][ T3567]  x64_sys_call+0x2dcf/0x3020
[   40.928417][ T3567]  do_syscall_64+0x12c/0x3b0
[   40.928479][ T3567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.928511][ T3567] RIP: 0033:0x7f1d2573ce59
[   40.928577][ T3567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.928601][ T3567] RSP: 002b:00007f1d24197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   40.928626][ T3567] RAX: ffffffffffffffda RBX: 00007f1d259b5fa0 RCX: 00007f1d2573ce59
[   40.928645][ T3567] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003
[   40.928683][ T3567] RBP: 00007f1d24197090 R08: 0000200000000280 R09: 0000000000000000
[   40.928701][ T3567] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001
[   40.928793][ T3567] R13: 00007f1d259b6038 R14: 00007f1d259b5fa0 R15: 00007ffc61488c78
[   40.928817][ T3567]  </TASK>
[   41.142562][ T3573] loop2: detected capacity change from 0 to 512
[   41.161779][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   41.189622][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.209248][ T3573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.16: bg 0: block 169: padding at end of block bitmap is not set
[   41.235342][ T3573] loop2: lost filesystem error report for type 5 error -117
[   41.235672][ T3573] __quota_error: 146 callbacks suppressed
[   41.235695][ T3573] Quota error (device loop2): write_blk: dquota write failed
[   41.243055][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   41.243087][    C1] EXT4-fs (loop2): initial error at time 1781196838: ext4_validate_block_bitmap:441
[   41.243123][    C1] EXT4-fs (loop2): last error at time 1781196838: ext4_validate_block_bitmap:441
[   41.286358][   T28] audit: type=1400 audit(1781196838.201:314): avc:  denied  { create } for  pid=3576 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   41.314582][   T28] audit: type=1400 audit(1781196838.261:315): avc:  denied  { create } for  pid=3576 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   41.334105][   T28] audit: type=1400 audit(1781196838.261:316): avc:  denied  { connect } for  pid=3576 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   41.353632][ T3573] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   41.365601][ T3573] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.16: Failed to acquire dquot type 0
[   41.377142][ T3573] loop2: lost filesystem error report for type 5 error -117
[   41.377683][ T3573] EXT4-fs (loop2): 1 truncate cleaned up
[   41.391528][ T3573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.415737][   T28] audit: type=1400 audit(1781196838.361:317): avc:  denied  { create } for  pid=3582 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   41.440360][ T3581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'.
[   41.440339][ T3573] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.461787][   T28] audit: type=1400 audit(1781196838.361:318): avc:  denied  { write } for  pid=3582 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   41.467741][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   41.486934][   T28] audit: type=1400 audit(1781196838.381:319): avc:  denied  { connect } for  pid=3572 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   41.511566][   T28] audit: type=1400 audit(1781196838.401:320): avc:  denied  { name_connect } for  pid=3572 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   41.533072][ T3583] lo speed is unknown, defaulting to 1000
[   41.533971][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.562348][ T3587] Zero length message leads to an empty skb
[   41.564822][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.582594][ T3583] lo speed is unknown, defaulting to 1000
[   41.590134][ T3583] lo speed is unknown, defaulting to 1000
[   41.611461][   T28] audit: type=1400 audit(1781196838.401:321): avc:  denied  { listen } for  pid=3572 comm="syz.2.16" lport=49635 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   41.679261][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.769469][ T3583] infiniband s
z1: set active
[   41.774323][  T281] lo speed is unknown, defaulting to 1000
[   41.787876][ T3583] infiniband s
z1: added lo
[   41.824350][ T3583] RDS/IB: s
z1: added
[   41.832991][ T3583] smc: adding ib device s
z1 with port count 1
[   41.843228][ T3583] smc:    ib device s
z1 port 1 has no pnetid
[   41.863469][ T3583] lo speed is unknown, defaulting to 1000
[   41.870916][ T3392] lo speed is unknown, defaulting to 1000
[   41.882776][ T3607] loop2: detected capacity change from 0 to 512
[   41.906652][ T3608] netlink: 'syz.0.24': attribute type 3 has an invalid length.
[   41.919678][ T3607] EXT4-fs: Ignoring removed bh option
[   41.926513][ T3583] lo speed is unknown, defaulting to 1000
[   41.935468][ T3608] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.24'.
[   42.030689][ T3583] lo speed is unknown, defaulting to 1000
[   42.049859][ T3607] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.22: corrupted xattr block 95: invalid header
[   42.078385][ T3607] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   42.078578][ T3607] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   42.087819][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   42.087835][    C0] EXT4-fs (loop2): initial error at time 1781196839: ext4_expand_extra_isize_ea:2810: inode 11
[   42.087861][    C0] EXT4-fs (loop2): last error at time 1781196839: ext4_expand_extra_isize_ea:2810: inode 11
[   42.129601][ T3607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.22: bg 0: block 7: invalid block bitmap
[   42.141943][ T3607] loop2: lost filesystem error report for type 5 error -117
[   42.142150][ T3607] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   42.160581][ T3607] loop2: lost filesystem error report for type 5 error -117
[   42.160823][ T3607] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.22: corrupted xattr block 95: invalid header
[   42.181925][ T3607] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   42.182104][ T3607] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117)
[   42.202595][ T3607] EXT4-fs (loop2): 1 orphan inode deleted
[   42.217475][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.276688][ T3583] lo speed is unknown, defaulting to 1000
[   42.415030][ T3620] tipc: Started in network mode
[   42.433516][ T3620] tipc: Node identity fe25efaf189f, cluster identity 4711
[   42.462736][ T3620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.516712][ T3583] lo speed is unknown, defaulting to 1000
[   42.518710][ T3624] syzkaller0: entered promiscuous mode
[   42.545784][ T3618] loop4: detected capacity change from 0 to 512
[   42.551053][ T3624] syzkaller0: entered allmulticast mode
[   42.696097][ T3618] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   42.732742][ T3620] tipc: Resetting bearer <eth:syzkaller0>
[   42.782365][ T3619] tipc: Resetting bearer <eth:syzkaller0>
[   42.829954][ T3619] tipc: Disabling bearer <eth:syzkaller0>
[   42.939517][ T3618] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   43.023551][ T3618] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.25: bg 0: block 248: padding at end of block bitmap is not set
[   43.082767][ T3618] loop4: lost filesystem error report for type 5 error -117
[   43.092424][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   43.106236][    C1] EXT4-fs (loop4): last error at time 1781196840: ext4_validate_block_bitmap:441
[   43.121597][ T3618] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.25: Failed to acquire dquot type 1
[   43.355045][ T3618] loop4: lost filesystem error report for type 5 error -28
[   43.385634][ T3618] EXT4-fs (loop4): 1 truncate cleaned up
[   43.587518][ T3618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   44.802423][ T3635] lo speed is unknown, defaulting to 1000
[   45.556406][ T3638] loop0: detected capacity change from 0 to 256
[   45.563367][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   45.574739][ T3638] vfat: Unknown parameter './file2'
[   45.586881][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.633067][ T3638] random: crng reseeded on system resumption
[   45.726551][ T3646] loop2: detected capacity change from 0 to 512
[   45.759132][ T3646] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   45.799939][ T3646] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   45.824001][ T3646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.31: bg 0: block 248: padding at end of block bitmap is not set
[   45.846786][ T3646] loop2: lost filesystem error report for type 5 error -117
[   45.852524][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   45.865640][ T3646] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.31: Failed to acquire dquot type 1
[   45.869875][    C0] EXT4-fs (loop2): last error at time 1781196842: ext4_validate_block_bitmap:441
[   45.897172][ T3659] FAULT_INJECTION: forcing a failure.
[   45.897172][ T3659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.910482][ T3646] loop2: lost filesystem error report for type 5 error -28
[   45.910639][ T3659] CPU: 0 UID: 0 PID: 3659 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.910671][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   45.910729][ T3659] Call Trace:
[   45.910737][ T3659]  <TASK>
[   45.910747][ T3659]  __dump_stack+0x1d/0x30
[   45.910777][ T3659]  dump_stack_lvl+0x95/0xd0
[   45.910826][ T3659]  dump_stack+0x15/0x1b
[   45.910871][ T3659]  should_fail_ex+0x263/0x280
[   45.910898][ T3659]  should_fail+0xb/0x20
[   45.910918][ T3659]  should_fail_usercopy+0x1a/0x20
[   45.910958][ T3659]  _copy_from_user+0x1c/0xb0
[   45.910985][ T3659]  ___sys_sendmsg+0xc1/0x1e0
[   45.911034][ T3659]  __x64_sys_sendmsg+0xd4/0x160
[   45.911071][ T3659]  x64_sys_call+0x194c/0x3020
[   45.911184][ T3659]  do_syscall_64+0x12c/0x3b0
[   45.911303][ T3659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.911337][ T3659] RIP: 0033:0x7fa8e0cbce59
[   45.911356][ T3659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.911391][ T3659] RSP: 002b:00007fa8df70f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   45.911414][ T3659] RAX: ffffffffffffffda RBX: 00007fa8e0f35fa0 RCX: 00007fa8e0cbce59
[   45.911428][ T3659] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004
[   45.911440][ T3659] RBP: 00007fa8df70f090 R08: 0000000000000000 R09: 0000000000000000
[   45.911511][ T3659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.911526][ T3659] R13: 00007fa8e0f36038 R14: 00007fa8e0f35fa0 R15: 00007ffe21d75d98
[   45.911551][ T3659]  </TASK>
[   46.085754][ T3646] EXT4-fs (loop2): 1 truncate cleaned up
[   46.104163][ T3646] ==================================================================
[   46.112314][ T3646] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath
[   46.121472][ T3646] 
[   46.123809][ T3646] write to 0xffffc9000246b7f0 of 1 bytes by task 3635 on cpu 0:
[   46.131458][ T3646]  rwsem_down_write_slowpath+0x3dd/0xac0
[   46.137119][ T3646]  down_write+0xab/0xc0
[   46.141302][ T3646]  kernfs_activate+0x50/0x220
[   46.146015][ T3646]  kernfs_add_one+0x212/0x280
[   46.150723][ T3646]  __kernfs_create_file+0x145/0x180
[   46.155980][ T3646]  sysfs_add_file_mode_ns+0x132/0x1b0
[   46.161375][ T3646]  internal_create_group+0x441/0x9f0
[   46.166697][ T3646]  sysfs_create_groups+0x3f/0xf0
[   46.171657][ T3646]  ib_setup_port_attrs+0xe87/0x1400
[   46.176892][ T3646]  add_one_compat_dev+0x297/0x390
[   46.181961][ T3646]  rdma_dev_init_net+0x1b9/0x240
[   46.186937][ T3646]  ops_init+0x22a/0x2e0
[   46.191116][ T3646]  setup_net+0x9f/0x230
[   46.195302][ T3646]  copy_net_ns+0x310/0x450
[   46.199751][ T3646]  create_new_namespaces+0x20e/0x440
[   46.205069][ T3646]  unshare_nsproxy_namespaces+0x115/0x150
[   46.210824][ T3646]  ksys_unshare+0x402/0x740
[   46.215362][ T3646]  __x64_sys_unshare+0x1f/0x30
[   46.220150][ T3646]  x64_sys_call+0x1cef/0x3020
[   46.224862][ T3646]  do_syscall_64+0x12c/0x3b0
[   46.229486][ T3646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.235404][ T3646] 
[   46.237745][ T3646] read to 0xffffc9000246b7f0 of 1 bytes by task 3646 on cpu 1:
[   46.245344][ T3646]  rwsem_down_write_slowpath+0x44f/0xac0
[   46.251008][ T3646]  down_write+0xab/0xc0
[   46.255194][ T3646]  kernfs_activate+0x50/0x220
[   46.259897][ T3646]  kernfs_add_one+0x212/0x280
[   46.264601][ T3646]  __kernfs_create_file+0x145/0x180
[   46.269836][ T3646]  sysfs_add_file_mode_ns+0x132/0x1b0
[   46.275242][ T3646]  internal_create_group+0x441/0x9f0
[   46.280549][ T3646]  sysfs_create_groups+0x3f/0xf0
[   46.285512][ T3646]  kobject_add_internal+0x4a7/0x780
[   46.290741][ T3646]  kobject_init_and_add+0x14a/0x1f0
[   46.295964][ T3646]  ext4_register_sysfs+0xa5/0x270
[   46.301013][ T3646]  ext4_fill_super+0x36f0/0x37c0
[   46.305970][ T3646]  get_tree_bdev_flags+0x291/0x300
[   46.311116][ T3646]  get_tree_bdev+0x1f/0x30
[   46.315559][ T3646]  ext4_get_tree+0x1c/0x30
[   46.320002][ T3646]  vfs_get_tree+0x57/0x1d0
[   46.324445][ T3646]  do_new_mount+0x288/0x8d0
[   46.328984][ T3646]  path_mount+0x4d0/0xbc0
[   46.333344][ T3646]  __se_sys_mount+0x28c/0x2e0
[   46.338058][ T3646]  __x64_sys_mount+0x67/0x80
[   46.342681][ T3646]  x64_sys_call+0x2d61/0x3020
[   46.347388][ T3646]  do_syscall_64+0x12c/0x3b0
[   46.352010][ T3646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.357922][ T3646] 
[   46.360267][ T3646] value changed: 0x00 -> 0x01
[   46.364956][ T3646] 
[   46.367292][ T3646] Reported by Kernel Concurrency Sanitizer on:
[   46.373452][ T3646] CPU: 1 UID: 0 PID: 3646 Comm: syz.2.31 Not tainted syzkaller #0 PREEMPT(lazy) 
[   46.382592][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   46.392667][ T3646] ==================================================================
[   46.459019][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.475596][ T3646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   46.483256][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.573917][   T28] kauditd_printk_skb: 50 callbacks suppressed
[   46.573935][   T28] audit: type=1400 audit(1781196843.511:368): avc:  denied  { create } for  pid=3645 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.610901][   T28] audit: type=1400 audit(1781196843.551:369): avc:  denied  { getopt } for  pid=3645 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.704030][   T28] audit: type=1400 audit(1781196843.641:370): avc:  denied  { shutdown } for  pid=3645 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   46.740374][   T28] audit: type=1400 audit(1781196843.671:371): avc:  denied  { ioctl } for  pid=3645 comm="syz.2.31" path="socket:[5301]" dev="sockfs" ino=5301 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   46.891925][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.