last executing test programs:

6m49.338948697s ago: executing program 0 (id=549):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000020000000200060f0300000002000000000000000300000000000000000000000000000044952d000000000000000f010000008400000415af0a2e248a70d56e291c615f2e2e00"], &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e04, 0x18c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}, 0x1c)

6m47.725787252s ago: executing program 0 (id=553):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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")
unshare(0x22020400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
mount_setattr(r0, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r0}}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ftruncate(r1, 0x5)
r2 = gettid()
r3 = epoll_create(0x3fc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000040)="e54c999d", 0x4)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000340)={[], [{@measure}, {@audit, 0x22}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xb6lt\xa7{\buY\xec(\xce\x9c:\xecv\x97_?\xb1\xc2\rBA\xd0\x90\x9f\x9c%\xef3\xc0\xf7\x0e\xd0\xd6\x8eRww/\xea\x14\x11\x1b\xe9\x94\xba\a1\x82\xeb$b\xeb\x84\x8bR\x87\t\xba\xef\x06\x00\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x65, 0x61, 0x0, 0x39, 0x63, 0x38], 0x2d, [0x34, 0x38, 0x39, 0x65], 0x2d, [0x39, 0x38, 0x62, 0x32], 0x2d, [0x65, 0x35, 0x39, 0x38], 0x2d, [0x63, 0x38, 0x63, 0x64, 0x34, 0x62, 0x65, 0x62]}}}]}, 0x0, 0x54a, &(0x7f0000000540)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x200}, 0x50)
utimes(0x0, &(0x7f0000000080)={{0xa, 0xc}, {0xfffffffffffffff9, 0xfffffffffffffffd}})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="18000003050000000000", @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x8, 0x100a, &(0x7f0000001a00)=""/4106, 0x41100, 0x24}, 0x94)
r5 = eventfd(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r5, &(0x7f0000000080)={r3, r5})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[], 0xff2e)

6m46.814008277s ago: executing program 0 (id=558):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000))
close(0x3)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x4e8, [0x0, 0x2000000012c0, 0x2000000014e4, 0x200000001778], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=ANY=[@ANYBLOB="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"]}, 0x41f)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r4 = socket$igmp(0x2, 0x3, 0x2)
io_setup(0x239f, &(0x7f0000000380)=<r5=>0x0)
syz_io_uring_setup(0x6621, &(0x7f0000000680)={0x0, 0xd7c7, 0x2, 0x0, 0x155}, &(0x7f0000000340), &(0x7f00000000c0), &(0x7f0000000000))
io_submit(r5, 0x0, 0x0)
getsockopt$MRT(r4, 0x0, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x66000000, 0x4)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
r7 = socket(0xa, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x600, 0x4)
sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x5, @mcast2}, 0x44, &(0x7f00000003c0)=[{&(0x7f0000000d00)="67172397c60133b2f9eb2935bcdc44cb079fea4f2098a4bad994ef91a0902a440d1eb7147a25b2269e450e82c62eb94481c9cb12322c8c21f83bc3a503f220cecc2b32361e2ccf5f36197543f923f1c1d888253342a912468d9e5a554bbcfd858ac2de072eb74afbbdba69e0f9a6f8cc7065863152bf4f10d39f6092ee704c17680e2010573288439cd96af6d3d47143ff1b68543326117d9ceb58fc8a6944d382494368a946c01fe4567b849c0224c2e72b80bc26cfe0da08fbd08639ce6e34ef2f32", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0xffffffffffffff02}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000300)="af0fc07262c2a34cacd2"}], 0x3}, 0x20008b88)

6m45.414964936s ago: executing program 0 (id=562):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x191, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x3, 0x5}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x4a4, &(0x7f0000001300)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x21, 0x0, 0x4)

6m44.802712873s ago: executing program 0 (id=566):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/55, 0x7ffff00a}, {&(0x7f0000006180)=""/152, 0x98}], 0x11, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/96, 0x7ffff04d}], 0x286, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x777, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, r0, 0x6, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000340), 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x23)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={0x0, 0x0, 0x0, r1}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000004c0)=ANY=[])
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0)

6m44.370347095s ago: executing program 0 (id=570):
r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x20000)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$evdev(0x0, 0x100000000000000, 0x402001)
syz_usb_disconnect(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000c8380)={0x3000000000000, [], 0xe, "f866f8d4ea4409"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000cab80)={0xf, [], 0x7, "a6ab37d3985959"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
r5 = syz_open_dev$vcsn(0x0, 0x2, 0x751000)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000080)={0x56, 0x200, 0x3, {0x8, 0x6}, {0x6, 0x8000}, @period={0x59, 0xfff9, 0x81, 0x8001, 0x1, {0xff, 0x0, 0x7, 0xa8}, 0x1, &(0x7f0000000040)=[0xfff]}})

6m44.339228605s ago: executing program 32 (id=570):
r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x20000)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$evdev(0x0, 0x100000000000000, 0x402001)
syz_usb_disconnect(r2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000c8380)={0x3000000000000, [], 0xe, "f866f8d4ea4409"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000cab80)={0xf, [], 0x7, "a6ab37d3985959"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
r5 = syz_open_dev$vcsn(0x0, 0x2, 0x751000)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000080)={0x56, 0x200, 0x3, {0x8, 0x6}, {0x6, 0x8000}, @period={0x59, 0xfff9, 0x81, 0x8001, 0x1, {0xff, 0x0, 0x7, 0xa8}, 0x1, &(0x7f0000000040)=[0xfff]}})

5m36.958866983s ago: executing program 1 (id=897):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x214000, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x4, 0x8, 0x9, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', <r3=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@loopback, @initdev, <r5=>0x0}, &(0x7f0000000280)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x4008080)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)=<r7=>0x0)
rt_sigqueueinfo(r7, 0x15, &(0x7f00000004c0)={0x13, 0xffffffff, 0xfffffffb})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x170, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "8cf66298a55a8c1945fc99db7fbf76b9b93dd7decc0e51d23f783cc55acba16caa6cf8b715a298ceea67fb7581a4f414495f95c090765ffe4e05d95ea52d7d4d83d06566baa9704bbc989f268a7c1e23f36b8d3cfb19018b57ef06bf7a0f0c91daa745fda7a655da5b258e9d9033cb9d87f4a698c67e9a975b15680d693efadd430a41ee8a5f3651c4e40bad"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb08}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "3f86f582605a2bf4bcc1de64942159507d258bdf44068bf0ae9e95581fc704f9e6a1698c201df168d2883bcab88e205bc63e954afd709976b45fc515f4b123a812c95bb7c25ab6bcfe4d9fb9cfd7b503d74d14110ee1e2de2d5a07a813703eb73adee6775d5cbab7464104c499a302dd3e640d4aec06433695a93c7472cae2e9d178b4813fa3afdaa656e3fc0a13c20899307e2840fb09da60eb665a9ba1193a469d57af6d6930eb7cf0730c17791b59ceea64cf3d"}]}, 0x170}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040015)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r10, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x8080)
r11 = perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0x7, 0x2, 0x2, 0x9, 0x0, 0x4, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xe, 0x317}, 0x1000, 0x6, 0xedd, 0x4, 0x8, 0x670b, 0x7, 0x0, 0x1, 0x0, 0xf}, r0, 0x8, r0, 0xb)
r12 = perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xf, 0x7, 0x3, 0xc7, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000940), 0x9}, 0x40, 0xa5, 0x8c0, 0x0, 0x7fff, 0x3b5c, 0x2, 0x0, 0x9, 0x0, 0x100000000}, r7, 0x0, r11, 0x1)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000a80)=""/185)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r10, 0x81d1906da4a912d9, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x9}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000f40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc0}]}, @NFT_MSG_NEWTABLE={0x104, 0x0, 0xa, 0x80d79b226ae29218, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xae, 0x6, "e7e52c9f48d7943e27cc966faa4b9c3aa05b2b7dd43ff6732826bc8169d22d0a2784c968d20972890bf1dbd0034969fa695607a50876cd27109f968e04e8d700d4988b54d1fe6b368225cd84dbe144300cfb5db64a4b91e13e43e3bbe88eb8822c750519921250563c5bdeda91b28eb7fe0de1a974b46d521407c6375bbd69a6f8720d4b0abdb5530b5b4bc60ac96d5a695f7c90fa758b0bf111503be3a54216831a1fe9e58fe5c3f544"}, @NFTA_TABLE_USERDATA={0x21, 0x6, "0acaacb48609b760572579d8fb2d83efc8a07b41050ecf9ce2d412b78f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0xd4, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x9a, 0x8, "c1ae81c8f9b6f42819b4cfb17e5908f842e8aecede4fe4576d499922a00016b220e184dd1ef9d49737b6820c9c97cba96ef579cd99f75d4b41dce03278bf3cb89abe2d9ccecfe02f83e2e1e3bcf94416dfca5408aa0cb2edc75ade97a6a10de09635dbad45e010dd36b2d33b3dd3ba80872b200b22c3617e15bb3fa93919db2eb17ba215f9f14f8946eed47ea7bf384db6c201ae505b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x258}}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000010c0)={'ip_vti0\x00', &(0x7f0000000fc0)={'gre0\x00', <r13=>r4, 0x91, 0x1, 0x1e04000, 0x3, {{0x2f, 0x4, 0x3, 0x0, 0xbc, 0x64, 0x0, 0x74, 0x29, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xb9, 0x3, 0x9, [{@multicast1, 0xcb8d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@broadcast, 0x3}, {@remote, 0x9}]}, @ssrr={0x89, 0x1f, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0x8, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x72ab}, {@multicast2, 0x608}, {@multicast1, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x79, 0x1, 0x3, [{@broadcast, 0xf}, {@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x8, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x69e}]}]}}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001400)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001100)={0x2bc, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
r14 = openat$null(0xffffffffffffff9c, &(0x7f0000001440), 0x901, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1, 0x19, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd9}, [@exit, @generic={0x2, 0x2, 0x0, 0x2, 0xfff}, @ldst={0x1, 0x2, 0x4, 0x7, 0x7, 0xfffffffffffffff0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x3, 0x4, 0x5, 0x9, 0x10}, @jmp={0x5, 0x1, 0x0, 0x5, 0x0, 0x10, 0x10}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x3}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f0000001580)='GPL\x00', 0x8, 0x2d, &(0x7f00000015c0)=""/45, 0x41100, 0x12, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0xd, 0x4, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001680), &(0x7f00000016c0)=[{0x1, 0x4, 0x5, 0xb}], 0x10, 0xb11a}, 0x94)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000018c0)=@get={0x1, &(0x7f00000017c0)=""/216, 0x6})
r15 = dup2(r8, r11)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r12, 0x80047213, &(0x7f0000001900))
connect$bt_l2cap(r15, &(0x7f0000001940)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001980), 0x101000, 0x0)
socket$kcm(0x29, 0x5, 0x0)

5m36.821735486s ago: executing program 1 (id=899):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, r3, 0x40, 0x75, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

5m36.424166868s ago: executing program 1 (id=901):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000020000000200060f0300000002000000000000000300000000000000000000000000000044952d000000000000000f010000008400000415af0a2e248a70d56e291c615f2e2e00"], &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e04, 0x18c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}, 0x1c)

5m35.772458416s ago: executing program 1 (id=906):
open(&(0x7f0000000140)='./file1\x00', 0x545142, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0xffffffff, @loopback={0xffffffffffff0000}, 0x92}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008009bf5001c006500000502907864010102e000000114009078ac141436"], 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x68)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r4}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x18d883, 0x0)

5m33.778135171s ago: executing program 1 (id=917):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r3], 0x20}}, 0x44800)

5m32.174821386s ago: executing program 1 (id=921):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc, 0x4, @perf_config_ext={0x8, 0x401}, 0x0, 0x1224, 0x0, 0x4, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000005480)=[{0x0}, {&(0x7f0000004480)="4c574ca29ad7f20de4dd1b90825eecf1ee2d03d92054d7c4cd07700a58bf3fdf6c91c07b30c63024467ef3cf475b8a1e4612a659acd247f8d6ca5a2ce385b47d177c3c17ead592a08d9b", 0x4a}], 0x2, 0x800000, 0x200000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff)
sendfile(r2, r2, 0x0, 0x24002de8)

5m32.173311286s ago: executing program 33 (id=921):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc, 0x4, @perf_config_ext={0x8, 0x401}, 0x0, 0x1224, 0x0, 0x4, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000005480)=[{0x0}, {&(0x7f0000004480)="4c574ca29ad7f20de4dd1b90825eecf1ee2d03d92054d7c4cd07700a58bf3fdf6c91c07b30c63024467ef3cf475b8a1e4612a659acd247f8d6ca5a2ce385b47d177c3c17ead592a08d9b", 0x4a}], 0x2, 0x800000, 0x200000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff)
sendfile(r2, r2, 0x0, 0x24002de8)

50.038928774s ago: executing program 3 (id=2218):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
timerfd_create(0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30be, 0x400, 0x8, 0x40000187})
socket(0x10, 0x803, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 6)

49.195916227s ago: executing program 3 (id=2220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe79)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x101104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x6}, 0x0, 0x4000, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x400b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000200010000009800088014000780080005000000000008000600450000003c0007"], 0xc0}}, 0x30004040)
setpgid(r2, 0x0)
close(r1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0xc)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/119, 0x77)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040010000000080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r6, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="814c8db3"], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)

46.759147185s ago: executing program 3 (id=2229):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x5, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00'}, 0x94)

46.506856032s ago: executing program 3 (id=2230):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = dup(0xffffffffffffffff)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @fwd={0x4}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x51, 0x0, 0x1, 0x1ffffe}, 0x28)
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}})
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c800, &(0x7f0000000140), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[], 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)

42.920940361s ago: executing program 3 (id=2233):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x4}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10004, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x5, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)

41.642769867s ago: executing program 3 (id=2244):
truncate(&(0x7f0000000100)='./file0\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_open_pts(0xffffffffffffffff, 0x28081)
open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)

41.640358977s ago: executing program 34 (id=2244):
truncate(&(0x7f0000000100)='./file0\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_open_pts(0xffffffffffffffff, 0x28081)
open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)

26.964331824s ago: executing program 5 (id=2331):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000280), 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x22d01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r2, &(0x7f0000000b80)=[{&(0x7f0000002780)="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", 0x245}, {0x0}], 0x2)

26.690835211s ago: executing program 5 (id=2334):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000063113400000000006037090003fe2c38e000000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="2d63707520cff4f40300167eeb70331599c5223e7529f8e0bae5a26ad430019480"], 0x5)
r4 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000080), 0x9)

26.627049753s ago: executing program 5 (id=2335):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00')
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
unshare(0x2c020400)
socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x139, 0x205, 0x0, &(0x7f00000000c0))
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000980)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="067c6748c73575247f15e3930b5c2568b3de03713bea104903bd36df2df9be9679928dd48cf091a516f486c6de168ed82ec49111fba7bc4c0eb248367b1aa9ce34494372b83afd2566003406fd9b19f05fed51b7d8b7bb01cd93976608f3c32dbb136af6198d21a1e3b86e1c788b40df08b91470a91819b225a0eeb875ad47f8087a88f77d1a19d67b377c6f9612f0a8817e8c69224812dfbf4cad74659bbda419b3a9b87548ccae55752a689b552862dd0af592331860b989aca272ee76076801e46535132d0fe1ee12d2b0", 0xcc}, {&(0x7f00000010c0)="0a65e2ec113421c57379fce178da928a824dcfffeacef1c7c4ed56b390f8b2474c3be17386f9f4f4c261fac554afd15a20bc641f17ddd4c3d88848f3", 0x3c}, {&(0x7f0000000580)="18f3c85890b10e66ab923d5e682ecc456965f4704871a4935ddc18920e0b3f4dfbc315158d8c1e9a4355c6598dc372351e21b23e8ae81dfec907329744f23b075b77c7effce4e0d0157d3a607bebf67dc817569068504285ae713093a26ccfa810b7fb5381b7e16c15", 0x69}, {&(0x7f0000000600)="989300e7ab9c02002813c49a34cb51f5c94e48ed56858e1b7fe7e06256b83d662360ab892f0a5ca83f41e3d702b6a05a6fc8dcc4f92fccd328a71b1aa1400127a440561fad368f12033dbcc2f7c91d437298eb707886246983049694a7c291a7fe5d2c40df7115f1ec0004ea35c74a5f0abfe60ae94f23b79e71a26399f64683aebdc9e5d75fa1d27b37bcffce3fa68d2be1f62f2fe1e8c4448d3cee689bbd61bb2f7d4f52e1864cce08282399e856ee723d889f1b6621e04cfa3850fb78069a47e8bce67b9b3e05c06e721547df4a7a0a8e3c7b8921304984cfad60477e8c8a12ecf41aa7eff8e04ce9bc0930", 0xed}, {&(0x7f0000000700)}], 0x5}, 0x800)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x4, 0xfd, 0x0, 0x0, 0xd8679, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x8}, 0x8004, 0x8, 0x7f, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2ff, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
socket$key(0xf, 0x3, 0x2)
mq_timedreceive(r0, &(0x7f0000000f80)=""/234, 0xea, 0x2, &(0x7f0000001080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x46, &(0x7f0000000780)={@broadcast, @random="42e17dbe6edb", @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0xc, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44891}, 0x44)
r4 = signalfd(r3, 0x0, 0x0)
inotify_add_watch(r4, 0x0, 0x1000001)

26.372347s ago: executing program 5 (id=2337):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20)

26.183892685s ago: executing program 5 (id=2340):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3010008, &(0x7f00000001c0), 0xff, 0x547, &(0x7f0000000b80)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r0=>0x0})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb04143c, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xfe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r0, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file1\x00'})
recvmsg$inet_nvme(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000540)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/186, 0xba}, 0x40002002)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
getsockname(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000200)=0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0)

23.619955906s ago: executing program 5 (id=2358):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x325)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f00e3"], 0x3c}}, 0x0)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast1}, &(0x7f0000000040)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket(0xa, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)

8.960406792s ago: executing program 4 (id=2448):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1e8}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x2, 0x4, 0x0, 0x0, 0x200, 0xa430, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10441, 0x0, 0x10, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)

8.863065155s ago: executing program 4 (id=2449):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000))
close(0x3)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x4e8, [0x0, 0x2000000012c0, 0x2000000014e4, 0x200000001778], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=ANY=[@ANYBLOB="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"]}, 0x420)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r4 = socket$igmp(0x2, 0x3, 0x2)
io_setup(0x239f, &(0x7f0000000380)=<r5=>0x0)
syz_io_uring_setup(0x6621, &(0x7f0000000680)={0x0, 0xd7c7, 0x2, 0x0, 0x155}, 0x0, &(0x7f00000000c0), 0x0)
io_submit(r5, 0x0, 0x0)
getsockopt$MRT(r4, 0x0, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x66000000, 0x4)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
r7 = socket(0xa, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x600, 0x4)
sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x5, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000d00)="67172397c60133b2f9eb2935bcdc44cb079fea4f2098a4bad994ef91a0902a440d1eb7147a25b2269e450e82c62eb94481c9cb12322c8c21f83bc3a503f220cecc2b32361e2ccf5f36197543f923f1c1d888253342a912468d9e5a554bbcfd858ac2de072eb74afbbdba69e0f9a6f8cc7065863152bf4f10d39f6092ee704c17680e2010573288439cd96af6d3d47143ff1b68543326117d9ceb58fc8a6944d382494368a946c01fe4567b849c0224c2e72b80bc26cfe0da08fbd08639ce6e34ef2f32", 0xc3}, {&(0x7f0000000100)}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000300)="af0fc07262c2a34cacd2", 0xa}], 0x4}, 0x20008b88)

7.388784866s ago: executing program 7 (id=2452):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r3 = dup(r2)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000140)={{0xe, 0x1}, {0x10, 0x9}, 0x6})
openat(0xffffffffffffffff, 0x0, 0x421647, 0x160)
r4 = socket(0x2b, 0x80801, 0x1)
listen(r4, 0x8)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x40000)

7.096701004s ago: executing program 35 (id=2358):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x325)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f00e3"], 0x3c}}, 0x0)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast1}, &(0x7f0000000040)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket(0xa, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)

6.86633291s ago: executing program 4 (id=2455):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x4, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000280), 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x22d01, 0x0)
writev(r2, &(0x7f0000000b80)=[{&(0x7f0000002780)="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", 0x245}, {0x0}], 0x2)

6.807039752s ago: executing program 4 (id=2457):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000500)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x82, 0x334, &(0x7f0000000880)="$eJzs3EFII1cYwPHPJI5JrEkOpaWF4qO9tJdB055LQ1EoDVTUlGqhMOqkDZkmkgmWlFL11GvpvadCD+LRm9B668lLby0se9mbl4U96GHZWTKZ0WSMSYyRuMn/BzIv773PeW/mBb4ZMnP21a/fF/O2njeqEooqeU1E5EIkJSHxTXjbkFvWpNneuUw/+++dlbX1zzPZ7MKyUouZ1Q/TSqnE7F8//BTzuh1PyWnqm7On6Senb5y+dfZi9buCrQq2KpWrylAb5cdVY8My1VbBLupKLVmmYZuqULLNSqO93GjPW+Xt7ZoySlsz8e2KafvDqqlqWVUrNWV8axRKStd1NROXzh7906XDGMgdLC8bmT6DNwc8GNyTSiVjhEUkdq0ldzCUAQEAgKEK5v8hkb1b5f/ygZf/S8LN//3ejfz/8N2T6vSXRwkv/z/W2uX/H/3fCGnJ/6Mi0jX/t5VRqqmi2ZT//y495v/SNiMaL3fK//EwzGrXqiZaPtXz/7j3/XXtf3045xbI/wEAAAAAAAAAAAAAAAAAAAAAeBVcOE7ScZykv/X/rh4h8D5jJN10/qdEJFo/+w7nf5StrK1L1H1wL5IQsX7Zye3kGluvw4mIWGLKnCTlubsePPWy/+SRqkvJ39auF7+7kwu7LZm8FNz4eUlKKhjvOIuahP1/4MVfPqYUb45PS1JebxP/WXYhrVRzvLd/Td5/rylel6T8uyllsWTLXddX8T/PK/XpF9lAfMztBwAAAADAKNDVpbbX77p+U3vjLSOX19dt7w80rq/n2l6fR5JvR4Y9ewAAAAAAxoNd+7FoWJZZ6VCISfc+/RcivXXWAjWTnTqHm2bY63g09/cuIoGmkIjcal5/9HhUWwr+DylamqJeZX+H15//wM7XXuth6SEqEhz8bL1C3XU8/m0j7YbjLEvXo0IdVsLkwNbzm7/9eT64L8jHR/4K6N55v999RYOrzi1MejvmDh0AAAAwQq6Sfr/mk+bmiaEMCgAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMXMvr/QLFIY9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCheBkAAP//JHz2mA==")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x1}}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r1) (async)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r3 = creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$binfmt_aout(r3, 0x0, 0x20)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
socket$netlink(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
getpid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xd11, &(0x7f00000002c0)={0x0, 0x5471, 0x10000, 0x0, 0x81}, 0x0, &(0x7f0000000280), &(0x7f0000000180)) (async)
syz_io_uring_setup(0xd11, &(0x7f00000002c0)={0x0, 0x5471, 0x10000, 0x0, 0x81}, 0x0, &(0x7f0000000280), &(0x7f0000000180))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x9, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

6.287521596s ago: executing program 7 (id=2459):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e04, 0x18c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}, 0x1c)

6.082807752s ago: executing program 4 (id=2460):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0xbb24}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r6, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.941877214s ago: executing program 2 (id=2463):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49"], 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
clock_nanosleep(0x9, 0x0, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
geteuid()
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
socket(0xd, 0x5, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080))

4.798286258s ago: executing program 4 (id=2464):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r3 = dup(r2)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000140)={{0xe, 0x1}, {0x10, 0x9}, 0x6})
openat(0xffffffffffffffff, 0x0, 0x421647, 0x160)
r4 = socket(0x2b, 0x80801, 0x1)
listen(r4, 0x8)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x40000)

4.736718229s ago: executing program 36 (id=2464):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r3 = dup(r2)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000140)={{0xe, 0x1}, {0x10, 0x9}, 0x6})
openat(0xffffffffffffffff, 0x0, 0x421647, 0x160)
r4 = socket(0x2b, 0x80801, 0x1)
listen(r4, 0x8)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x40000)

4.425619818s ago: executing program 6 (id=2466):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000000)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@auto_da_alloc}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0xb, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/190)

4.231948053s ago: executing program 6 (id=2467):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x10, <r2=>0xffffffffffffffff, 'id0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f0000001480)="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", 0xd9a}], 0x2}}], 0x1, 0x9200000000040000)
bind$tipc(r4, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000180))
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd8cf932b327f8a8b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x170, r3, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_PEER_MEASUREMENTS={0x138, 0x111, 0x0, 0x1, {0x134, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x170}}, 0x2000800)

3.777781606s ago: executing program 7 (id=2468):
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = getpgid(0xffffffffffffffff)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x4, 0x400001, 0xfffe, r1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00')
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x340080d1, 0x0, 0x0)
mmap$qrtrtun(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r0, 0x4)
r2 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x0)
r3 = socket(0x11, 0xa, 0x5)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1ae0, 0x4)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r3, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

3.756421366s ago: executing program 2 (id=2469):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r3 = dup(r2)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000140)={{0xe, 0x1}, {0x10, 0x9}, 0x6})
openat(0xffffffffffffffff, 0x0, 0x421647, 0x160)
r4 = socket(0x2b, 0x80801, 0x1)
listen(r4, 0x8)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x40000)

3.227149381s ago: executing program 6 (id=2470):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="af8899fdb37fd99a818aeb98a6b14da891b1d95587e907ec8235580387b8482efa05ba366e58faca4844a31b89779018cac88a5f5549ca0000000001a25ace0861c9114723d9a87593f828edfabe6ca1de631f432488d2cd4fef536e65b21263bee283356d099a4eab459625d49489cd48029c44bd780bee5d93b1aa2f86f8b71fcbe818db06e8b84c89288bcd6a4ce5aacbd44dcdf3e8a66f95577c04143e32c2e585f12e96b4b0da5600b7be70d6083c57c7673ea5ba537a1b3f5c874867cdafc8e98e2c326a4586206271c6aa8fe24d9e18f25f250f4b37f263d8bb6f9c1ae8d81b2b5d2018fe0214a1a39fd2795a41f1126b7adc27a3b6d33cb4bbddcad76e1c581b2996beb308337346d33aaa"], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
io_setup(0x4, &(0x7f0000000080)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}])
io_destroy(r6)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>r7})
r9 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={<r10=>r9})
bind$xdp(r10, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
close(0x3)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004c0000000f00a8007365636f6e646e616d6502000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r11 = getpid()
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7)

2.674805366s ago: executing program 2 (id=2471):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x10001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10009}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000})
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'})
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0})

2.674014977s ago: executing program 7 (id=2472):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
mkdir(0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
poll(0x0, 0x0, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt(r3, 0x1, 0x1, 0x0, &(0x7f0000000580))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$kcm(0xa, 0x5, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000001340)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rename(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r4, @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20040110)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'nicvf0\x00'})

2.139215561s ago: executing program 6 (id=2473):
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f0000005ec0)=""/102394, 0x0)

1.950831206s ago: executing program 6 (id=2474):
pipe2(0x0, 0x0)
r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x800, 0x40})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000100)="35f3", 0x2, 0x4c081, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.521111058s ago: executing program 7 (id=2475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000140)={0x8, 'ip6gre0\x00', {'veth0_to_hsr\x00'}, 0x1})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x7fff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3e8}})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, <r3=>0x0})
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x7, 0x6, 0x8001, 0x7fff}, r3, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='ext2\x00', 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f00000001c0)={r4, 0x0, 0x8, 0x400, 0x1, 0xf})
getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, &(0x7f0000000200))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r7=>0x0})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000480)={0x2c, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x1, [0x0]}, @padn, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3f, 0x6, [0x3, 0x0, 0xe]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x8}]}, 0x60)
bind$xdp(r8, &(0x7f0000000180)={0x2c, 0x8, r7, 0xf}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x83}, 0x2002, 0x32, 0x43a1bd56, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r4, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000002000)="13", 0x1)

1.273343015s ago: executing program 6 (id=2476):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e04, 0x18c, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}, 0x1c)

691.268092ms ago: executing program 2 (id=2477):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0xfffffffd, 0x8, 0x2}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x7fff)
sendto$inet6(r3, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e20, 0x1000, @empty}, 0x1c)
read(r3, &(0x7f0000000240)=""/193, 0xc1)
shutdown(r3, 0x1)
pread64(r2, 0x0, 0x0, 0x4000000000000f3)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
socket$kcm(0x11, 0xa, 0x300)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setresgid(0xee00, 0xee01, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r6 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(r6, &(0x7f0000000180)='io\x00')
pread64(r7, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

619.753843ms ago: executing program 7 (id=2478):
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000180)=""/92, 0x5c}, {0x0}], 0x2}, 0x2}], 0x1, 0x40010121, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
bind$inet(r0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000440))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipmr_delroute={0x40, 0x19, 0x400, 0x70bd28, 0x25dfdbff, {0x80, 0x10, 0x0, 0x2, 0x0, 0x6, 0xff, 0x0, 0xd00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x39}}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00007ba000/0x3000)=nil, 0x3)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180))
r4 = socket$netlink(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10d00, 0xf)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
keyctl$session_to_parent(0x12)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)

302.918202ms ago: executing program 2 (id=2479):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010000d042dbd7010fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="4600067fad10010008002c0003faeeb5e0cc41543b9983d111fdb59a936f0390356015b39857f9994c73b311d95de180e9ba351638f26916f5735de908610b3d42"], 0x28}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a00000000000000080000004a9010000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800006f0000007b8af8ffffffffffffffff000000000007020000f8ffffffb703b48008000000b704000001000000850000008200000085100000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001a0400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000bcfde6c585000000820000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xe0, &(0x7f0000000140)=""/224, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0xc738, 0x7f}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=[{0x4, 0x5, 0x8, 0xe}, {0x5, 0x2, 0xf, 0x5}, {0x1, 0x2, 0x7}, {0x5, 0x1, 0x1, 0x1}], 0x10, 0x3}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', <r3=>0x0, 0x40, 0x700, 0x1, 0xfffffff9, {{0x18, 0x4, 0x2, 0x7, 0x60, 0x64, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x0, 0xa, "02b3d72e9c8583c5"}, @lsrr={0x83, 0xb, 0x5a, [@loopback, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x7, 0x2b, [@multicast2]}, @cipso={0x86, 0x29, 0x0, [{0x2, 0xe, "b125d71a746a77bba75b588a"}, {0x5, 0x4, "5eb5"}, {0x2, 0xa, "9661789ba925c66f"}, {0x5, 0x7, "be7bbbc7ac"}]}]}}}}})
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000004c0)={@mcast2, r3}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
socket(0x1e, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r4, &(0x7f00000000c0)={0x11, 0x18, r6, 0x1, 0x84, 0x6, @random="fbb6e9de22c1"}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

0s ago: executing program 2 (id=2480):
pipe2(0x0, 0x0)
r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x800, 0x40})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ting filesystem 00000000-0000-0000-0000-000000000000.
[  437.054390][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  437.054410][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  437.084624][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.353502][T10346] random: crng reseeded on system resumption
[  437.575351][ T3945] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  437.581559][ T7608] Bluetooth: hci1: command 0x1003 tx timeout
[  437.631003][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.883874][   T28] audit: type=1400 audit(1777770846.329:1951): avc:  denied  { getopt } for  pid=10356 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  437.929389][T10364] loop2: detected capacity change from 128 to 64
[  437.973492][T10364]  loop2: p1
[  438.109423][T10373] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  438.116974][T10373] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  438.124422][T10373] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  438.976274][T10385] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1928'.
[  438.985652][T10385] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1928'.
[  438.994764][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1928'.
[  439.043962][   T28] audit: type=1400 audit(1777770847.398:1952): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  439.088718][  T268] Bluetooth: hci0: Frame reassembly failed (-84)
[  439.174281][T10388] loop3: detected capacity change from 0 to 512
[  439.188352][T10388] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1929: inode has both inline data and extents flags
[  439.202392][T10388] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  439.203277][T10388] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1929: couldn't read orphan inode 15 (err -117)
[  439.212770][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  439.212818][    C0] EXT4-fs (loop3): initial error at time 1777770847: ext4_orphan_get:1397: inode 15
[  439.212977][    C0] EXT4-fs (loop3): last error at time 1777770847: ext4_orphan_get:1397: inode 15
[  439.253046][T10388] loop3: lost filesystem error report for type 5 error -117
[  439.254920][T10388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.314225][   T28] audit: type=1400 audit(1777770847.647:1953): avc:  denied  { write } for  pid=10387 comm="syz.3.1929" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  439.933285][T10395] x_tables: ip6_tables: mh match: only valid for protocol 135
[  440.111526][ T2980]  loop2: p1
[  440.174307][ T2980]  loop2: p1
[  440.703626][T10424] random: crng reseeded on system resumption
[  441.040046][ T2980]  loop2: p1
[  441.074888][T10428] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1942'.
[  441.084311][T10428] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1942'.
[  441.093556][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'.
[  441.221464][T10434] loop4: detected capacity change from 0 to 512
[  441.243094][T10434] EXT4-fs (loop4): 1 truncate cleaned up
[  441.252894][T10434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.305242][ T3945] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  441.335995][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.361483][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.431138][T10444] loop3: detected capacity change from 0 to 2048
[  441.449687][T10444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.475208][T10444] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.488695][T10442] xt_hashlimit: size too large, truncated to 1048576
[  441.527439][   T28] audit: type=1400 audit(1777770849.685:1954): avc:  denied  { write } for  pid=10443 comm="syz.3.1947" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  441.529831][T10444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1947: bg 0: block 345: padding at end of block bitmap is not set
[  441.593154][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1951'.
[  441.603174][T10444] EXT4-fs (loop3): Remounting filesystem read-only
[  441.614345][T10454] loop5: detected capacity change from 0 to 512
[  441.639111][T10454] EXT4-fs (loop5): 1 truncate cleaned up
[  441.650727][T10454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.675826][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.698131][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.793520][T10465] loop3: detected capacity change from 0 to 256
[  441.812250][T10465] vfat: Deprecated parameter 'posix'
[  441.826261][T10465] FAT-fs: "posix" option is obsolete, not supported now
[  441.847083][T10465] FAT-fs (loop3): codepage cp775 not found
[  441.869798][T10465] loop3: detected capacity change from 0 to 128
[  441.991379][   T30] Bluetooth: hci0: Frame reassembly failed (-84)
[  442.001250][ T2980]  loop2: p1
[  442.092005][T10476] loop3: detected capacity change from 0 to 512
[  442.198359][T10476] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1957: inode has both inline data and extents flags
[  442.224990][T10476] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  442.225846][T10476] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1957: couldn't read orphan inode 15 (err -117)
[  442.235351][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  442.235458][    C0] EXT4-fs (loop3): initial error at time 1777770850: ext4_orphan_get:1397: inode 15
[  442.235545][    C0] EXT4-fs (loop3): last error at time 1777770850: ext4_orphan_get:1397: inode 15
[  442.857365][T10476] loop3: lost filesystem error report for type 5 error -117
[  442.876998][T10476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.060860][T10492] loop4: detected capacity change from 0 to 512
[  443.138779][T10492] EXT4-fs (loop4): 1 truncate cleaned up
[  443.160896][T10492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.236105][   T28] audit: type=1400 audit(1777770851.244:1955): avc:  denied  { write } for  pid=10475 comm="syz.3.1957" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  443.308101][ T2980]  loop2: p1
[  443.325791][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.625766][T10499] xt_hashlimit: size too large, truncated to 1048576
[  443.932294][T10507] syzkaller0: entered promiscuous mode
[  443.937874][T10507] syzkaller0: entered allmulticast mode
[  443.946287][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1968'.
[  443.955892][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'.
[  443.964851][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'.
[  444.164651][ T2980]  loop2: p1
[  444.168027][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  444.174127][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  444.224162][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.873348][T10536] loop4: detected capacity change from 0 to 1024
[  445.008864][T10536] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  445.017193][T10536] System zones: 0-1, 3-36
[  445.022759][T10536] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1976: bad orphan inode 134217728
[  445.033482][T10536] loop4: lost filesystem error report for type 5 error -117
[  445.034151][T10536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.264046][T10542] __nla_validate_parse: 2 callbacks suppressed
[  445.264067][T10542] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1987'.
[  445.282464][T10542] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  445.290014][T10542] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  445.298219][T10542] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  446.035714][T10548] loop5: detected capacity change from 0 to 1024
[  446.153662][ T2980]  loop2: p1
[  446.672894][T10548] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  446.684012][T10548] EXT4-fs (loop5): group descriptors corrupted!
[  447.767122][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.806023][ T2980]  loop2: p1
[  448.055340][T10561] xt_hashlimit: size too large, truncated to 1048576
[  448.308142][ T2980]  loop2: p1
[  448.481476][T10567] tipc: Started in network mode
[  448.514665][T10567] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  448.603485][T10567] tipc: Enabled bearer <udp:syz1>, priority 10
[  448.791214][T10575] netlink: 'syz.6.1989': attribute type 1 has an invalid length.
[  448.814249][T10575] netlink: 'syz.6.1989': attribute type 2 has an invalid length.
[  448.862784][T10575] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1989'.
[  448.908039][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'.
[  449.153473][ T2980]  loop2: p1
[  449.342893][T10592] loop5: detected capacity change from 0 to 1024
[  449.418826][T10595] loop3: detected capacity change from 0 to 512
[  450.203512][T10595] EXT4-fs (loop3): 1 truncate cleaned up
[  450.209436][T10592] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  450.218135][ T3774] tipc: Node number set to 4269801492
[  450.258055][T10595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.272625][T10586] random: crng reseeded on system resumption
[  450.281172][T10592] EXT4-fs (loop5): group descriptors corrupted!
[  451.316764][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.212560][T10599] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1995'.
[  452.528298][T10599] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  452.535823][T10599] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  452.543239][T10599] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  453.291756][T10602] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1999'.
[  453.335245][T10602] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1999'.
[  453.346217][T10606] loop3: detected capacity change from 0 to 512
[  453.387777][T10606] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  453.433709][T10602] loop5: detected capacity change from 0 to 512
[  453.472342][T10602] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  453.497998][T10612] xt_hashlimit: size too large, truncated to 1048576
[  453.520202][T10602] Quota error (device loop5): v2_read_file_info: Free block number 7 out of range (1, 6).
[  453.540786][ T2980]  loop2: p1
[  453.563812][  T268] Bluetooth: hci0: Frame reassembly failed (-84)
[  453.584354][T10602] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  453.597250][T10606] loop3: detected capacity change from 0 to 512
[  453.607050][T10602] EXT4-fs (loop5): mount failed
[  453.620369][T10606] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1997: inode has both inline data and extents flags
[  453.633686][T10606] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  453.673512][T10606] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1997: couldn't read orphan inode 15 (err -117)
[  453.694730][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  453.694781][    C0] EXT4-fs (loop3): initial error at time 1777770860: ext4_orphan_get:1397: inode 15
[  453.694924][    C0] EXT4-fs (loop3): last error at time 1777770860: ext4_orphan_get:1397: inode 15
[  453.751041][ T2980]  loop2: p1
[  453.854268][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'.
[  453.873621][T10606] loop3: lost filesystem error report for type 5 error -117
[  453.888900][T10606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.929726][ T2980]  loop2: p1
[  454.035851][T10631] loop4: detected capacity change from 0 to 1024
[  454.125291][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  454.134490][T10630] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2006'.
[  454.158745][T10631] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  454.177030][T10631] EXT4-fs (loop4): group descriptors corrupted!
[  454.214840][   T28] audit: type=1400 audit(1777770861.388:1956): avc:  denied  { connect } for  pid=10629 comm="syz.2.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  454.881812][   T28] audit: type=1400 audit(1777770861.997:1957): avc:  denied  { accept } for  pid=10633 comm="syz.6.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  455.318235][   T28] audit: type=1400 audit(1777770862.403:1958): avc:  denied  { write } for  pid=10604 comm="syz.3.1997" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  455.367860][T10637] pim6reg2: entered allmulticast mode
[  455.376667][ T2980]  loop2: p1
[  455.454821][ T2980]  loop2: p1
[  455.489305][   T28] audit: type=1400 audit(1777770862.559:1959): avc:  denied  { write } for  pid=10635 comm="syz.6.2009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  455.528448][ T2980]  loop2: p1
[  456.095877][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  456.141989][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  457.137997][ T2980]  loop2: p1
[  457.922691][T10655] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2012'.
[  457.944737][T10655] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  457.986129][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.000096][T10655] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  458.059450][T10655] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  458.503782][T10662] xt_hashlimit: size too large, truncated to 1048576
[  459.671366][T10665] loop5: detected capacity change from 0 to 1024
[  459.724236][T10665] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  459.735336][T10665] EXT4-fs (loop5): group descriptors corrupted!
[  459.755064][T10668] loop3: detected capacity change from 0 to 128
[  459.823366][T10668] FAT-fs (loop3): error, clusters badly computed (1 != 163841)
[  459.881346][T10670] loop4: detected capacity change from 0 to 128
[  459.891551][T10668] FAT-fs (loop3): Filesystem has been set read-only
[  459.937778][   T28] audit: type=1400 audit(1777770866.663:1960): avc:  denied  { remount } for  pid=10667 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  459.961311][T10668] FAT-fs (loop3): error, clusters badly computed (2 != 163842)
[  460.039169][T10668] FAT-fs (loop3): error, clusters badly computed (3 != 163843)
[  460.120385][T10668] FAT-fs (loop3): error, clusters badly computed (4 != 163844)
[  460.228327][T10668] FAT-fs (loop3): error, clusters badly computed (5 != 163845)
[  460.246384][T10668] FAT-fs (loop3): error, clusters badly computed (6 != 163846)
[  460.292501][T10668] FAT-fs (loop3): error, clusters badly computed (7 != 163847)
[  460.311276][T10668] FAT-fs (loop3): error, clusters badly computed (8 != 163848)
[  460.529706][T10673] loop4: detected capacity change from 0 to 512
[  460.556377][T10668] FAT-fs (loop3): error, clusters badly computed (9 != 163849)
[  460.595604][T10673] EXT4-fs (loop4): 1 truncate cleaned up
[  460.613246][T10668] FAT-fs (loop3): error, clusters badly computed (10 != 163850)
[  460.623997][T10673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.751809][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.831265][   T28] audit: type=1400 audit(1777770867.484:1961): avc:  denied  { write } for  pid=10678 comm="syz.3.2022" path="socket:[28270]" dev="sockfs" ino=28270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  461.117056][T10680] loop3: detected capacity change from 0 to 1024
[  461.430332][T10680] EXT4-fs: Ignoring removed mblk_io_submit option
[  461.597838][ T2980]  loop2: p1
[  461.636940][T10680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  461.900574][T10680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.124159][ T2980]  loop2: p1
[  462.161377][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.219390][T10705] loop3: detected capacity change from 0 to 512
[  462.243659][T10705] EXT4-fs: inline encryption not supported
[  462.265585][T10705] EXT4-fs: inline encryption not supported
[  462.283897][T10705] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  462.303038][T10709] loop4: detected capacity change from 0 to 512
[  462.304336][T10705] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  462.335025][T10705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2030: bg 0: block 248: padding at end of block bitmap is not set
[  462.338170][T10709] EXT4-fs (loop4): 1 truncate cleaned up
[  462.353009][T10705] loop3: lost filesystem error report for type 5 error -117
[  462.363505][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  462.377659][    C1] EXT4-fs (loop3): last error at time 1777770868: ext4_validate_block_bitmap:441
[  462.391883][T10705] Quota error (device loop3): write_blk: dquota write failed
[  462.409268][T10709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.427369][T10705] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  462.462231][T10705] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2030: Failed to acquire dquot type 1
[  462.490840][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.506089][T10705] loop3: lost filesystem error report for type 5 error -28
[  462.507084][T10705] EXT4-fs (loop3): 1 truncate cleaned up
[  462.557519][T10705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  462.592825][T10705] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0008-000000000000 ro.
[  462.641197][   T28] audit: type=1400 audit(1777770869.153:1962): avc:  denied  { getopt } for  pid=10715 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  462.655419][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.675546][T10716] loop4: detected capacity change from 0 to 512
[  462.675989][T10716] EXT4-fs: Invalid want_extra_isize 7
[  462.700174][T10716] syzkaller0: entered promiscuous mode
[  462.710164][T10716] syzkaller0: entered allmulticast mode
[  462.747077][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.784441][T10705] Cannot find del_set index 29 as target
[  462.832428][T10718] xt_hashlimit: size too large, truncated to 1048576
[  463.127757][T10728] netlink: 'syz.5.2036': attribute type 1 has an invalid length.
[  463.136046][T10728] netlink: 'syz.5.2036': attribute type 2 has an invalid length.
[  463.158600][T10728] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2036'.
[  463.539411][T10754] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2046'.
[  463.548545][T10754] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2046'.
[  463.557610][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2046'.
[  463.715076][T10758] xt_hashlimit: size too large, truncated to 1048576
[  463.900609][T10766] FAULT_INJECTION: forcing a failure.
[  463.900609][T10766] name failslab, interval 1, probability 0, space 0, times 0
[  463.914203][T10766] CPU: 1 UID: 0 PID: 10766 Comm: syz.5.2050 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  463.914254][T10766] Tainted: [W]=WARN
[  463.914261][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  463.914275][T10766] Call Trace:
[  463.914282][T10766]  <TASK>
[  463.914291][T10766]  __dump_stack+0x1d/0x30
[  463.914340][T10766]  dump_stack_lvl+0x95/0xd0
[  463.914363][T10766]  dump_stack+0x15/0x1b
[  463.914382][T10766]  should_fail_ex+0x263/0x280
[  463.914412][T10766]  should_failslab+0x8c/0xb0
[  463.914506][T10766]  kmem_cache_alloc_noprof+0x66/0x3f0
[  463.914601][T10766]  ? skb_clone+0x151/0x1f0
[  463.914660][T10766]  skb_clone+0x151/0x1f0
[  463.914719][T10766]  __netlink_deliver_tap+0x2c9/0x500
[  463.914754][T10766]  __netlink_sendskb+0xc3/0xd0
[  463.914778][T10766]  netlink_dump+0x6fb/0x870
[  463.914914][T10766]  __netlink_dump_start+0x43e/0x520
[  463.914981][T10766]  ? __pfx_rtnl_dump_all+0x10/0x10
[  463.915096][T10766]  rtnetlink_rcv_msg+0x59f/0x720
[  463.915180][T10766]  ? __pfx_rtnl_dump_all+0x10/0x10
[  463.915208][T10766]  ? __pfx_rtnl_dumpit+0x10/0x10
[  463.915235][T10766]  ? __pfx_rtnl_dump_all+0x10/0x10
[  463.915265][T10766]  netlink_rcv_skb+0x123/0x220
[  463.915423][T10766]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  463.915458][T10766]  rtnetlink_rcv+0x1c/0x30
[  463.915483][T10766]  netlink_unicast+0x5a8/0x680
[  463.915510][T10766]  netlink_sendmsg+0x5c8/0x6f0
[  463.915558][T10766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  463.915586][T10766]  ____sys_sendmsg+0x563/0x5b0
[  463.915613][T10766]  ___sys_sendmsg+0x195/0x1e0
[  463.915680][T10766]  __x64_sys_sendmsg+0xd4/0x160
[  463.915776][T10766]  x64_sys_call+0x194c/0x3020
[  463.915802][T10766]  do_syscall_64+0x12c/0x3b0
[  463.915848][T10766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.915879][T10766] RIP: 0033:0x7fd182c6cdd9
[  463.915972][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.915991][T10766] RSP: 002b:00007fd1816bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  463.916011][T10766] RAX: ffffffffffffffda RBX: 00007fd182ee5fa0 RCX: 00007fd182c6cdd9
[  463.916053][T10766] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  463.916066][T10766] RBP: 00007fd1816bf090 R08: 0000000000000000 R09: 0000000000000000
[  463.916100][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  463.916112][T10766] R13: 00007fd182ee6038 R14: 00007fd182ee5fa0 R15: 00007fff69201238
[  463.916133][T10766]  </TASK>
[  464.304438][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  464.310616][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  464.364402][T10781] random: crng reseeded on system resumption
[  464.430476][ T2980]  loop2: p1
[  464.505231][T10788] xt_hashlimit: size too large, truncated to 1048576
[  464.561251][   T28] audit: type=1400 audit(1777770870.924:1963): avc:  denied  { write } for  pid=10790 comm="syz.5.2060" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  464.937301][T10807] netlink: 'syz.4.2065': attribute type 2 has an invalid length.
[  464.960539][ T2980]  loop2: p1
[  464.992499][ T2980]  loop2: p1
[  465.037396][ T2980]  loop2: p1
[  465.051255][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  465.087754][T10814] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2068'.
[  465.096961][T10814] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2068'.
[  465.106149][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2068'.
[  465.155947][T10816] loop5: detected capacity change from 0 to 512
[  465.167368][T10816] EXT4-fs (loop5): 1 truncate cleaned up
[  465.173829][T10816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.213935][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.220084][ T2980]  loop2: p1
[  465.305819][T10821] FAULT_INJECTION: forcing a failure.
[  465.305819][T10821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.320344][T10821] CPU: 1 UID: 0 PID: 10821 Comm: syz.5.2070 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  465.320463][T10821] Tainted: [W]=WARN
[  465.320475][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  465.320495][T10821] Call Trace:
[  465.320506][T10821]  <TASK>
[  465.320518][T10821]  __dump_stack+0x1d/0x30
[  465.320555][T10821]  dump_stack_lvl+0x95/0xd0
[  465.320590][T10821]  dump_stack+0x15/0x1b
[  465.320692][T10821]  should_fail_ex+0x263/0x280
[  465.320743][T10821]  should_fail+0xb/0x20
[  465.320839][T10821]  should_fail_usercopy+0x1a/0x20
[  465.320971][T10821]  _copy_from_user+0x1c/0xb0
[  465.321027][T10821]  __copy_msghdr+0x244/0x300
[  465.321068][T10821]  ___sys_sendmsg+0x10c/0x1e0
[  465.321105][T10821]  ? path_openat+0x1b01/0x2050
[  465.321301][T10821]  __sys_sendmmsg+0x185/0x320
[  465.321363][T10821]  __x64_sys_sendmmsg+0x57/0x70
[  465.321406][T10821]  x64_sys_call+0x27aa/0x3020
[  465.321450][T10821]  do_syscall_64+0x12c/0x3b0
[  465.321494][T10821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.321558][T10821] RIP: 0033:0x7fd182c6cdd9
[  465.321581][T10821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.321648][T10821] RSP: 002b:00007fd1816bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  465.321680][T10821] RAX: ffffffffffffffda RBX: 00007fd182ee5fa0 RCX: 00007fd182c6cdd9
[  465.321704][T10821] RDX: 0000000000000002 RSI: 0000200000003a40 RDI: 0000000000000003
[  465.321738][T10821] RBP: 00007fd1816bf090 R08: 0000000000000000 R09: 0000000000000000
[  465.321808][T10821] R10: 0000000004004845 R11: 0000000000000246 R12: 0000000000000001
[  465.321825][T10821] R13: 00007fd182ee6038 R14: 00007fd182ee5fa0 R15: 00007fff69201238
[  465.321859][T10821]  </TASK>
[  465.546762][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  465.554556][T10823] random: crng reseeded on system resumption
[  465.569268][ T2980]  loop2: p1
[  465.750064][T10829] loop3: detected capacity change from 0 to 2048
[  465.788451][T10829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.802830][T10829] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.833592][   T28] audit: type=1400 audit(1777770872.095:1964): avc:  denied  { write } for  pid=10828 comm="syz.3.2073" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  465.855827][T10829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2073: bg 0: block 345: padding at end of block bitmap is not set
[  465.889253][T10833] xt_hashlimit: size too large, truncated to 1048576
[  465.896684][T10829] EXT4-fs (loop3): Remounting filesystem read-only
[  465.974004][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.120084][T10844] syz_tun: entered allmulticast mode
[  466.247553][T10845] syz_tun: left allmulticast mode
[  466.350442][T10849] tipc: Started in network mode
[  466.369770][T10849] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  466.378721][T10849] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  466.909883][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2080'.
[  467.542961][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  467.543602][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  468.934708][T10866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2081'.
[  468.953847][   T28] audit: type=1400 audit(1777770874.972:1965): avc:  denied  { ioctl } for  pid=10868 comm="syz.2.2082" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28586 ioctlcmd=0x5206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  469.830901][ T2980]  loop2: p1
[  470.031595][ T2980]  loop2: p1
[  470.044055][T10878] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2087'.
[  470.053785][T10878] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2087'.
[  470.090583][T10878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2087'.
[  470.701924][T10889] syz_tun: entered allmulticast mode
[  470.847422][T10890] syz_tun: left allmulticast mode
[  470.874514][   T28] audit: type=1400 audit(1777770876.743:1966): avc:  denied  { setopt } for  pid=10895 comm="syz.6.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  471.122787][T10901] syz_tun: entered allmulticast mode
[  471.188931][T10907] netlink: 'syz.6.2092': attribute type 11 has an invalid length.
[  471.211686][T10907] netlink: 'syz.6.2092': attribute type 27 has an invalid length.
[  471.219677][T10907] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2092'.
[  471.473181][T10904] syz_tun: left allmulticast mode
[  471.503120][T10908] random: crng reseeded on system resumption
[  472.230426][T10915] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2095'.
[  472.996801][T10921] loop3: detected capacity change from 0 to 1024
[  473.219108][T10921] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  473.249079][T10921] System zones: 0-1, 3-36
[  473.319851][T10921] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2097: bad orphan inode 134217728
[  473.427741][T10921] loop3: lost filesystem error report for type 5 error -117
[  473.470639][T10921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.619223][T10936] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  473.619223][T10936] Please contact the netfilter-devel mailing list or update your nftables rules.
[  473.720908][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.749461][T10939] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2104'.
[  473.758733][T10939] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2104'.
[  473.771121][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2104'.
[  473.985967][ T2980]  loop2: p1
[  474.304512][ T2980]  loop2: p1
[  474.488417][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[  474.769441][T10963] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2109'.
[  474.832123][T10968] loop3: detected capacity change from 0 to 512
[  474.836527][T10963] loop5: detected capacity change from 0 to 512
[  474.849922][T10963] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  474.860244][T10968] EXT4-fs (loop3): 1 truncate cleaned up
[  474.882225][T10968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.933219][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.965706][T10963] Quota error (device loop5): v2_read_file_info: Free block number 7 out of range (1, 6).
[  475.011374][T10963] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  475.017497][T10975] loop3: detected capacity change from 0 to 1024
[  475.030988][T10963] EXT4-fs (loop5): mount failed
[  475.044891][T10975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  475.053140][T10975] System zones: 0-1, 3-36
[  475.070726][T10975] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2113: bad orphan inode 134217728
[  475.132450][ T2980]  loop2: p1
[  475.248666][T10975] loop3: lost filesystem error report for type 5 error -117
[  475.284527][T10975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.454869][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.059251][T10990] __nla_validate_parse: 1 callbacks suppressed
[  477.059302][T10990] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2114'.
[  478.833297][T10994] loop3: detected capacity change from 0 to 1024
[  478.856757][T10994] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  478.917093][T10994] EXT4-fs (loop3): group descriptors corrupted!
[  478.937999][T10996] loop5: detected capacity change from 0 to 512
[  479.038203][ T2980]  loop2: p1
[  479.043591][T11000] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2119'.
[  479.092179][T10996] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  479.148884][T11000] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2119'.
[  479.211529][T10996] System zones: 0-2, 18-18, 34-35
[  479.272871][T11000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'.
[  479.291605][T10996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.414396][T10996] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.965632][ T2980]  loop2: p1
[  481.003035][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.012410][ T2980]  loop2: p1
[  481.073828][T11017] random: crng reseeded on system resumption
[  481.105051][   T28] audit: type=1400 audit(1777771142.198:1967): avc:  denied  { accept } for  pid=11023 comm="syz.5.2124" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  481.183188][T11022] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2125'.
[  481.192287][T11022] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2125'.
[  481.257028][T11037] loop3: detected capacity change from 0 to 512
[  481.280018][ T2980]  loop2: p1
[  481.282682][T11037] EXT4-fs: Invalid want_extra_isize 7
[  481.334941][ T2980]  loop2: p1
[  481.462943][T11039] random: crng reseeded on system resumption
[  482.658923][T11054] loop3: detected capacity change from 0 to 512
[  482.678659][T11054] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  482.712471][ T2980]  loop2: p1
[  482.725782][T11054] EXT4-fs (loop3): 1 truncate cleaned up
[  482.732107][T11054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.774866][T11057] syzkaller0: entered promiscuous mode
[  482.813750][T11057] syzkaller0: entered allmulticast mode
[  482.836855][   T28] audit: type=1400 audit(1777771143.797:1968): avc:  denied  { setattr } for  pid=11053 comm="syz.3.2135" path="/401/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  482.876018][   T28] audit: type=1400 audit(1777771143.797:1969): avc:  denied  { write } for  pid=11053 comm="syz.3.2135" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  483.039128][   T28] audit: type=1400 audit(1777771143.797:1970): avc:  denied  { write } for  pid=11053 comm="syz.3.2135" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  483.061234][   T28] audit: type=1400 audit(1777771143.797:1971): avc:  denied  { rename } for  pid=11053 comm="syz.3.2135" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  483.093214][   T28] audit: type=1400 audit(1777771143.797:1972): avc:  denied  { rename } for  pid=11053 comm="syz.3.2135" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  483.372694][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.467686][T11070] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2141'.
[  483.476709][T11070] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2141'.
[  483.501593][T11066] random: crng reseeded on system resumption
[  483.553744][T11070] loop4: detected capacity change from 0 to 512
[  483.577640][T11070] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  483.700971][ T2980]  loop2: p1
[  483.719674][T11070] Quota error (device loop4): v2_read_file_info: Free block number 7 out of range (1, 6).
[  483.772854][T11070] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  483.790109][T11070] EXT4-fs (loop4): mount failed
[  483.965410][ T2980]  loop2: p1
[  485.498113][T11092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2142'.
[  485.510415][T11093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2144'.
[  486.123969][T11102] loop4: detected capacity change from 0 to 512
[  486.180514][T11102] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  486.270029][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  486.299516][T11102] loop4: detected capacity change from 0 to 512
[  486.324794][T11102] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2146: inode has both inline data and extents flags
[  486.568068][T11102] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  486.572841][T11102] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2146: couldn't read orphan inode 15 (err -117)
[  486.582154][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  486.582185][    C1] EXT4-fs (loop4): initial error at time 1777771147: ext4_orphan_get:1397: inode 15
[  486.582224][    C1] EXT4-fs (loop4): last error at time 1777771147: ext4_orphan_get:1397: inode 15
[  486.918629][T11102] loop4: lost filesystem error report for type 5 error -117
[  486.919260][T11102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.971725][T11113] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2151'.
[  486.999953][   T28] audit: type=1400 audit(1777771147.602:1973): avc:  denied  { map } for  pid=11109 comm="syz.5.2152" path="socket:[29343]" dev="sockfs" ino=29343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  487.082658][T11111] loop5: detected capacity change from 0 to 4096
[  487.119641][   T28] audit: type=1400 audit(1777771147.602:1974): avc:  denied  { read accept } for  pid=11109 comm="syz.5.2152" path="socket:[29343]" dev="sockfs" ino=29343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  487.153388][T11111] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.2152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  487.176714][T11112] random: crng reseeded on system resumption
[  487.212974][T11111] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  487.213196][T11111] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.2152: Bad quota inode: 4, type: 1
[  487.222408][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  487.222426][    C1] EXT4-fs (loop5): initial error at time 1777771147: ext4_ext_check_inode:521: inode 4
[  487.222453][    C1] EXT4-fs (loop5): last error at time 1777771147: ext4_ext_check_inode:521: inode 4
[  487.283796][   T28] audit: type=1400 audit(1777771147.722:1975): avc:  denied  { write } for  pid=11101 comm="syz.4.2146" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  487.349745][T11117] loop3: detected capacity change from 0 to 512
[  487.375140][ T2980]  loop2: p1
[  487.398861][T11117] EXT4-fs (loop3): 1 truncate cleaned up
[  487.430566][T11117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.474016][T11111] loop5: lost filesystem error report for type 5 error -117
[  487.474363][T11111] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  487.503540][ T2980]  loop2: p1
[  487.663329][T11111] EXT4-fs (loop5): mount failed
[  487.675132][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.728201][   T28] audit: type=1400 audit(1777771148.323:1976): avc:  denied  { ioctl } for  pid=11109 comm="syz.5.2152" path="socket:[29377]" dev="sockfs" ino=29377 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  487.763275][T11111] netlink: 'syz.5.2152': attribute type 1 has an invalid length.
[  487.778353][T11120] random: crng reseeded on system resumption
[  487.849696][   T28] audit: type=1400 audit(1777771148.350:1977): avc:  denied  { write } for  pid=11109 comm="syz.5.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  487.896194][ T2980]  loop2: p1
[  487.942770][T11124] loop3: detected capacity change from 0 to 512
[  487.982355][T11128] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2158'.
[  488.003411][T11124] EXT4-fs: Ignoring removed nomblk_io_submit option
[  488.045938][T11128] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2158'.
[  488.078039][T11124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  488.096762][T11131] loop5: detected capacity change from 0 to 512
[  488.126848][T11131] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  488.175567][T11131] Quota error (device loop5): v2_read_file_info: Free block number 7 out of range (1, 6).
[  488.200211][T11124] EXT4-fs (loop3): 1 truncate cleaned up
[  488.206275][T11131] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  488.221820][T11124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.234482][T11131] EXT4-fs (loop5): mount failed
[  488.265208][   T28] audit: type=1400 audit(1777771148.812:1978): avc:  denied  { write } for  pid=11122 comm="syz.3.2156" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  488.458550][T11143] random: crng reseeded on system resumption
[  488.473630][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.498916][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  488.505045][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  488.546324][T11147] loop3: detected capacity change from 0 to 512
[  488.556860][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.597487][T11147] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  488.608327][T11149] loop5: detected capacity change from 0 to 512
[  488.616990][   T28] audit: type=1400 audit(1777771149.144:1979): avc:  denied  { read } for  pid=11150 comm="syz.4.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  488.640309][T11149] EXT4-fs (loop5): 1 truncate cleaned up
[  488.646675][T11149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.675740][ T3429] Bluetooth: hci0: Frame reassembly failed (-84)
[  488.719659][   T28] audit: type=1400 audit(1777771149.237:1980): avc:  denied  { setopt } for  pid=11150 comm="syz.4.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  488.740367][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'.
[  488.754531][T11147] loop3: detected capacity change from 0 to 512
[  488.769390][T11147] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2163: inode has both inline data and extents flags
[  488.782991][T11147] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  488.783516][T11147] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2163: couldn't read orphan inode 15 (err -117)
[  488.785138][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.796713][T11147] loop3: lost filesystem error report for type 5 error -117
[  488.813923][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  488.813995][    C1] EXT4-fs (loop3): initial error at time 1777771149: ext4_orphan_get:1397: inode 15
[  488.814136][    C1] EXT4-fs (loop3): last error at time 1777771149: ext4_orphan_get:1397: inode 15
[  488.875530][T11147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.968952][   T28] audit: type=1400 audit(1777771149.458:1981): avc:  denied  { connect } for  pid=11163 comm="syz.5.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  489.118617][T11171] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2170'.
[  489.128840][T11171] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  489.136703][T11171] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  489.144574][T11171] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  489.253292][T11166] loop4: detected capacity change from 0 to 512
[  489.372568][T11166] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  489.460489][T11166] EXT4-fs (loop4): 1 truncate cleaned up
[  489.482923][T11166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.722987][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.038307][ T2980]  loop2: p1
[  490.148198][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2175'.
[  490.169855][T11182] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2171'.
[  490.239362][T11182] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2171'.
[  490.300143][ T2980]  loop2: p1
[  490.350728][T11190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.399966][T11190] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  490.415128][ T2980]  loop2: p1
[  490.472998][ T2980]  loop2: p1
[  490.588313][T11196] random: crng reseeded on system resumption
[  490.815090][ T2980]  loop2: p1
[  490.889130][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  490.895342][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  490.901359][T11201] syz_tun: entered allmulticast mode
[  490.934143][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.021552][ T2980]  loop2: p1
[  491.026469][T11190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2176: bg 0: block 345: padding at end of block bitmap is not set
[  491.052152][T11204] syz_tun: left allmulticast mode
[  491.116552][T11190] EXT4-fs (loop4): Remounting filesystem read-only
[  491.138614][T11013] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 5: len 11: ext4_ext_map_blocks returned -30
[  491.170320][T11215] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2185'.
[  491.194141][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'.
[  492.247087][ T2980]  loop2: p1
[  492.309607][T11224] random: crng reseeded on system resumption
[  493.513591][T11226] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2188'.
[  493.545678][T11226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2188'.
[  493.635203][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.700617][ T2980]  loop2: p1
[  493.701159][T11231] random: crng reseeded on system resumption
[  493.705874][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  493.705927][   T28] audit: type=1400 audit(1777771153.835:1987): avc:  denied  { write } for  pid=11234 comm="syz.3.2192" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  493.753840][   T28] audit: type=1400 audit(1777771153.890:1988): avc:  denied  { write } for  pid=11237 comm="syz.4.2189" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  493.884636][T11244] syzkaller0: entered promiscuous mode
[  493.890341][T11244] syzkaller0: entered allmulticast mode
[  494.021687][T11251] xt_hashlimit: size too large, truncated to 1048576
[  494.371015][ T2980]  loop2: p1
[  494.405954][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  494.503987][T11261] set_capacity_and_notify: 1 callbacks suppressed
[  494.504563][T11261] loop5: detected capacity change from 0 to 1024
[  494.579779][T11266] syz_tun: entered allmulticast mode
[  494.586637][T11261] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  494.630194][T11261] System zones: 0-1, 3-36
[  494.636492][ T2980]  loop2: p1
[  494.642497][T11261] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2201: bad orphan inode 134217728
[  494.662450][T11261] loop5: lost filesystem error report for type 5 error -117
[  494.688210][T11261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.778494][T11267] syz_tun: left allmulticast mode
[  494.964033][T11278] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2204'.
[  494.973198][T11278] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2204'.
[  494.985735][T11278] loop3: detected capacity change from 0 to 512
[  495.003910][T11278] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  495.034931][T11278] Quota error (device loop3): v2_read_file_info: Free block number 7 out of range (1, 6).
[  495.180471][T11278] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  495.195692][T11278] EXT4-fs (loop3): mount failed
[  495.204397][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2206'.
[  495.486177][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.947887][T11291] loop4: detected capacity change from 0 to 128
[  496.011727][ T2980]  loop2: p1
[  496.164350][T11295] random: crng reseeded on system resumption
[  496.450142][T11301] syzkaller0: entered promiscuous mode
[  496.468324][T11301] syzkaller0: entered allmulticast mode
[  496.841694][T11308] loop5: detected capacity change from 0 to 1024
[  496.940082][T11308] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  496.954533][T11308] EXT4-fs (loop5): group descriptors corrupted!
[  497.388842][T11316] FAULT_INJECTION: forcing a failure.
[  497.388842][T11316] name failslab, interval 1, probability 0, space 0, times 0
[  497.401594][T11316] CPU: 0 UID: 0 PID: 11316 Comm: syz.3.2218 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  497.401638][T11316] Tainted: [W]=WARN
[  497.401648][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  497.401701][T11316] Call Trace:
[  497.401710][T11316]  <TASK>
[  497.401720][T11316]  __dump_stack+0x1d/0x30
[  497.401761][T11316]  dump_stack_lvl+0x95/0xd0
[  497.401867][T11316]  dump_stack+0x15/0x1b
[  497.401906][T11316]  should_fail_ex+0x263/0x280
[  497.401949][T11316]  should_failslab+0x8c/0xb0
[  497.401993][T11316]  kmem_cache_alloc_noprof+0x66/0x3f0
[  497.402084][T11316]  ? skb_clone+0x151/0x1f0
[  497.402113][T11316]  skb_clone+0x151/0x1f0
[  497.402177][T11316]  dev_queue_xmit_nit+0x13e/0x510
[  497.402232][T11316]  dev_hard_start_xmit+0xd8/0x3a0
[  497.402268][T11316]  __dev_queue_xmit+0xbd5/0x1ec0
[  497.402296][T11316]  ? __dev_queue_xmit+0x165/0x1ec0
[  497.402326][T11316]  ? __schedule+0x936/0xd20
[  497.402423][T11316]  __netlink_deliver_tap+0x3c3/0x500
[  497.402520][T11316]  netlink_unicast+0x653/0x680
[  497.402552][T11316]  netlink_sendmsg+0x5c8/0x6f0
[  497.402649][T11316]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.402691][T11316]  ____sys_sendmsg+0x563/0x5b0
[  497.402724][T11316]  ___sys_sendmsg+0x195/0x1e0
[  497.402833][T11316]  __x64_sys_sendmsg+0xd4/0x160
[  497.402866][T11316]  x64_sys_call+0x194c/0x3020
[  497.402906][T11316]  do_syscall_64+0x12c/0x3b0
[  497.402975][T11316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.403003][T11316] RIP: 0033:0x7f4ce2a6cdd9
[  497.403020][T11316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.403042][T11316] RSP: 002b:00007f4ce14bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.403107][T11316] RAX: ffffffffffffffda RBX: 00007f4ce2ce5fa0 RCX: 00007f4ce2a6cdd9
[  497.403122][T11316] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000016
[  497.403136][T11316] RBP: 00007f4ce14bf090 R08: 0000000000000000 R09: 0000000000000000
[  497.403212][T11316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.403225][T11316] R13: 00007f4ce2ce6038 R14: 00007f4ce2ce5fa0 R15: 00007fff91ba9b78
[  497.403249][T11316]  </TASK>
[  497.915682][ T2980]  loop2: p1
[  498.240975][T11322] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2220'.
[  498.286060][T11322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2220'.
[  498.298752][ T2980]  loop2: p1
[  498.507801][T11322] loop3: detected capacity change from 0 to 512
[  498.517768][T11327] random: crng reseeded on system resumption
[  499.606424][T11322] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  500.130576][T11338] batadv_slave_1: entered promiscuous mode
[  500.137012][T11338] macsec1: entered promiscuous mode
[  500.142981][T11338] macsec1: entered allmulticast mode
[  500.148614][T11338] batadv_slave_1: entered allmulticast mode
[  500.162241][T11322] Quota error (device loop3): v2_read_file_info: Free block number 7 out of range (1, 6).
[  500.179444][T11322] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  500.293077][T11338] batadv_slave_1: left allmulticast mode
[  500.298915][T11338] batadv_slave_1: left promiscuous mode
[  500.333617][T11322] EXT4-fs (loop3): mount failed
[  500.501022][ T2980]  loop2: p1
[  500.518745][T11350] loop5: detected capacity change from 0 to 7
[  500.582576][    C0] blk_print_req_error: 6 callbacks suppressed
[  500.582599][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.597952][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.607114][   T28] audit: type=1400 audit(1777771160.186:1989): avc:  denied  { accept } for  pid=11351 comm="syz.2.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  500.643071][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.652324][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.668364][T11350]  loop5: unable to read partition table
[  500.677931][T11350] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  500.692605][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.701801][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.711140][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.715112][   T28] audit: type=1326 audit(1777771160.233:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.2.2228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0xa940000
[  500.720450][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.869287][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.882670][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.891907][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.902718][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.911956][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.924301][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  500.933516][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  500.946183][T11350] loop4: detected capacity change from 0 to 512
[  501.003466][T11350] ext4: Invalid gid '0x00000000ffffffff'
[  502.327703][T11363] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2231'.
[  504.153673][T11361] loop3: detected capacity change from 0 to 128
[  504.177358][T11365] loop5: detected capacity change from 0 to 512
[  504.194407][T11361] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  504.206686][T11361] ext4 filesystem being mounted at /422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  504.256754][   T28] audit: type=1400 audit(1777771163.575:1991): avc:  denied  { write } for  pid=11358 comm="syz.3.2230" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.321617][T11365] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.2232: corrupted inode contents
[  504.365164][T11365] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  504.375033][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  504.391747][    C0] EXT4-fs (loop5): initial error at time 1777771163: ext4_do_update_inode:5690: inode 15
[  504.401624][    C0] EXT4-fs (loop5): last error at time 1777771163: ext4_do_update_inode:5690: inode 15
[  504.429946][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  504.447936][   T28] audit: type=1400 audit(1777771163.704:1992): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.455415][T11365] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.2232: mark_inode_dirty error
[  504.481519][   T28] audit: type=1400 audit(1777771163.704:1993): avc:  denied  { rmdir } for  pid=3296 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  504.507269][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  504.511787][T11365] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  504.521619][T11365] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.2232: corrupted inode contents
[  504.553674][ T3296] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  504.591660][   T28] audit: type=1400 audit(1777771163.851:1994): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.616715][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  504.630868][T11365] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  504.635294][T11365] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.2232: mark_inode_dirty error
[  504.657096][ T2980]  loop2: p1
[  504.660647][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  504.675732][T11365] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  504.678545][T11365] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.2232: mark inode dirty (error -117)
[  504.686341][ T3296] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  504.707789][   T28] audit: type=1400 audit(1777771163.972:1995): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.737932][T11365] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  504.738968][T11365] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117)
[  504.749033][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  504.767867][T11365] EXT4-fs (loop5): 1 orphan inode deleted
[  504.778523][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  504.780800][T11365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.808718][ T3296] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  504.821925][   T28] audit: type=1400 audit(1777771164.064:1996): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.848206][ T3296] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  504.868813][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.878578][   T28] audit: type=1400 audit(1777771164.147:1997): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  504.914687][ T2980]  loop2: p1
[  504.981334][T11381] loop4: detected capacity change from 0 to 128
[  505.022965][T11381] netlink: 'syz.4.2238': attribute type 10 has an invalid length.
[  505.032665][T11381] batman_adv: batadv0: Interface deactivated: dummy0
[  505.055332][T11381] batman_adv: batadv0: Removing interface: dummy0
[  505.078065][T11384] netlink: 'syz.4.2238': attribute type 10 has an invalid length.
[  505.088581][T11382] netlink: 'syz.4.2238': attribute type 10 has an invalid length.
[  505.144718][T11381] team0: Port device dummy0 added
[  505.150651][T11386] xt_hashlimit: size too large, truncated to 1048576
[  505.178714][T11384] team0: Port device dummy0 removed
[  505.211331][T11384] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  505.320337][ T4415] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  505.471103][T11392] loop4: detected capacity change from 0 to 1024
[  505.613962][T11392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  505.683212][ T2980]  loop2: p1
[  505.710062][T11392] System zones: 0-1, 3-36
[  505.761383][T11397] random: crng reseeded on system resumption
[  505.788101][T11392] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2241: bad orphan inode 134217728
[  505.817424][   T28] kauditd_printk_skb: 97 callbacks suppressed
[  505.817445][   T28] audit: type=1400 audit(1777771165.024:2095): avc:  denied  { associate } for  pid=11398 comm="syz.2.2243" name="1395" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  505.851542][T11392] loop4: lost filesystem error report for type 5 error -117
[  505.858406][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  505.872474][    C1] EXT4-fs (loop4): initial error at time 1777771165: ext4_orphan_get:1423
[  505.881165][    C1] EXT4-fs (loop4): last error at time 1777771165: ext4_orphan_get:1423
[  505.916693][T11392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.404468][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.416538][T11404] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.426503][T11404] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.433830][T11404] bridge_slave_0: entered allmulticast mode
[  506.440549][T11404] bridge_slave_0: entered promiscuous mode
[  506.447634][T11404] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.454859][T11404] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.462232][T11404] bridge_slave_1: entered allmulticast mode
[  506.468870][T11404] bridge_slave_1: entered promiscuous mode
[  506.490592][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.501739][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.524589][T11404] team0: Port device team_slave_0 added
[  506.532316][T11404] team0: Port device team_slave_1 added
[  506.570054][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.691026][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.717243][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.729056][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.734691][ T2980]  loop2: p1
[  506.736152][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.794537][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.864571][T11404] hsr_slave_0: entered promiscuous mode
[  506.878792][T11404] hsr_slave_1: entered promiscuous mode
[  506.904386][T11404] debugfs: 'hsr0' already exists in 'hsr'
[  506.920785][T11404] Cannot create hsr debugfs directory
[  507.085219][T11436] loop5: detected capacity change from 0 to 1024
[  507.106295][T11436] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  507.117327][T11436] EXT4-fs (loop5): group descriptors corrupted!
[  507.437343][ T2980]  loop2: p1
[  507.692545][ T2980]  loop2: p1
[  507.908066][T11442] xt_hashlimit: size too large, truncated to 1048576
[  508.669634][   T28] audit: type=1400 audit(1777771167.655:2096): avc:  denied  { read } for  pid=11452 comm="syz.2.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  508.860914][T11404] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  508.870088][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  508.878201][T11404] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  508.965140][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  508.973594][T11404] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  508.984361][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  508.995610][T11404] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  509.008668][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.058233][T11404] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.068374][ T2980]  loop2: p1
[  509.074796][T11404] 8021q: adding VLAN 0 to HW filter on device team0
[  509.085980][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.093216][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.140863][T11478] loop4: detected capacity change from 0 to 512
[  509.151831][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.159019][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.166401][T11480] loop5: detected capacity change from 0 to 512
[  509.210012][T11480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002]
[  509.218235][T11478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002]
[  509.226275][T11478] System zones: 1-12
[  509.230480][ T2980]  loop2: p1
[  509.236615][T11480] System zones: 1-12
[  509.249517][T11478] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2262: corrupted in-inode xattr: e_value size too large
[  509.261469][T11480] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2263: corrupted in-inode xattr: e_value size too large
[  509.278130][T11404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  509.288783][T11404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  509.294710][T11478] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  509.309078][T11480] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  509.330084][T11478] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2262: couldn't read orphan inode 15 (err -117)
[  509.330143][T11480] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2263: couldn't read orphan inode 15 (err -117)
[  509.330227][T11480] loop5: lost filesystem error report for type 5 error -117
[  509.339383][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  509.339386][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  509.339406][    C1] EXT4-fs (loop5): initial error at time 1777771168: ext4_iget_extra_inode:5128
[  509.339415][    C0] EXT4-fs (loop4): initial error at time 1777771168: ext4_iget_extra_inode:5128
[  509.339432][    C1] : inode 15
[  509.339446][    C0] : inode 15
[  509.339449][    C1] EXT4-fs (loop5): last error at time 1777771168: ext4_iget_extra_inode:5128
[  509.339462][    C0] EXT4-fs (loop4): last error at time 1777771168: ext4_iget_extra_inode:5128
[  509.339473][    C1] : inode 15
[  509.339488][    C0] : inode 15
[  509.372245][T11478] loop4: lost filesystem error report for type 5 error -117
[  509.395982][T11480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.419750][T11485] xt_hashlimit: size too large, truncated to 1048576
[  509.462048][T11478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.692005][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.707967][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.775212][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.897976][T11507] random: crng reseeded on system resumption
[  509.989065][T11404] veth0_vlan: entered promiscuous mode
[  509.994841][   T28] audit: type=1400 audit(1777771168.874:2097): avc:  denied  { setopt } for  pid=11518 comm="syz.6.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  510.021357][T11404] veth1_vlan: entered promiscuous mode
[  510.164361][T11404] veth0_macvtap: entered promiscuous mode
[  510.172843][T11404] veth1_macvtap: entered promiscuous mode
[  510.186227][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.207409][ T2980]  loop2: p1
[  510.213274][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.285072][T11532] loop5: detected capacity change from 0 to 1024
[  510.359806][T11532] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  510.370863][T11532] EXT4-fs (loop5): group descriptors corrupted!
[  510.431319][ T7501] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.709872][ T7501] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.826990][ T7501] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.893641][ T7501] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.264544][ T2980]  loop2: p1
[  511.399503][T11554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2275'.
[  511.589321][T11565] xt_hashlimit: size too large, truncated to 1048576
[  512.165531][ T2980]  loop2: p1
[  512.190175][T11574] syz_tun: entered allmulticast mode
[  512.204689][ T2980]  loop2: p1
[  512.297978][T11578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2283'.
[  512.307321][T11578] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2283'.
[  512.322621][T11580] loop5: detected capacity change from 0 to 1024
[  512.343346][ T2980]  loop2: p1
[  512.344001][T11580] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  512.356157][T11580] System zones: 0-1, 3-36
[  512.363552][T11580] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2284: bad orphan inode 134217728
[  512.374858][T11580] loop5: lost filesystem error report for type 5 error -117
[  512.375546][T11580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.435225][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.457514][T11576] syz_tun: left allmulticast mode
[  512.466993][ T2980]  loop2: p1
[  512.637912][T11592] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.2287'.
[  512.682924][ T2980]  loop2: p1
[  512.713623][T11589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=11589 comm=syz.4.2289
[  512.825462][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2290'.
[  512.828747][T11604] random: crng reseeded on system resumption
[  512.854727][T11587] FAULT_INJECTION: forcing a failure.
[  512.854727][T11587] name failslab, interval 1, probability 0, space 0, times 0
[  512.869572][T11587] CPU: 0 UID: 0 PID: 11587 Comm: syz.7.2286 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  512.869621][T11587] Tainted: [W]=WARN
[  512.869630][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  512.869646][T11587] Call Trace:
[  512.869699][T11587]  <TASK>
[  512.869712][T11587]  __dump_stack+0x1d/0x30
[  512.869752][T11587]  dump_stack_lvl+0x95/0xd0
[  512.869785][T11587]  dump_stack+0x15/0x1b
[  512.869823][T11587]  should_fail_ex+0x263/0x280
[  512.869870][T11587]  ? __se_sys_memfd_create+0x1df/0x3b0
[  512.869947][T11587]  should_failslab+0x8c/0xb0
[  512.870012][T11587]  __kmalloc_cache_noprof+0x5f/0x400
[  512.870069][T11587]  ? fput+0x8f/0xc0
[  512.870152][T11587]  __se_sys_memfd_create+0x1df/0x3b0
[  512.870199][T11587]  __x64_sys_memfd_create+0x31/0x40
[  512.870373][T11587]  x64_sys_call+0x1f22/0x3020
[  512.870408][T11587]  do_syscall_64+0x12c/0x3b0
[  512.870454][T11587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.870491][T11587] RIP: 0033:0x7f589dafcdd9
[  512.870638][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.870664][T11587] RSP: 002b:00007f589c54ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  512.870745][T11587] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007f589dafcdd9
[  512.870769][T11587] RDX: 00007f589c54eee0 RSI: 0000000000000000 RDI: 00007f589db92f49
[  512.870792][T11587] RBP: 0000200000000bc0 R08: 00000000ffffffff R09: 0000000000000000
[  512.870814][T11587] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0
[  512.870836][T11587] R13: 00007f589c54eee0 R14: 00007f589c54eea0 R15: 00002000000000c0
[  512.870870][T11587]  </TASK>
[  512.872276][T11587] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2286'.
[  513.201922][ T2980]  loop2: p1
[  513.325182][T11612] netlink: 380 bytes leftover after parsing attributes in process `syz.4.2292'.
[  513.632759][T11614] loop7: detected capacity change from 0 to 1024
[  513.958461][   T28] audit: type=1400 audit(1777771171.957:2098): avc:  denied  { setopt } for  pid=11605 comm="syz.4.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  514.020400][T11614] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  514.031523][T11614] EXT4-fs (loop7): group descriptors corrupted!
[  514.073947][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2294'.
[  514.171427][   T28] audit: type=1400 audit(1777771172.714:2099): avc:  denied  { read } for  pid=11610 comm="syz.2.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  514.333707][T11624] syz_tun: entered allmulticast mode
[  514.577748][T11620] syz_tun: left allmulticast mode
[  515.383289][ T2980]  loop2: p1
[  515.550524][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2300'.
[  515.565968][T11638] random: crng reseeded on system resumption
[  515.566614][T11652] loop5: detected capacity change from 0 to 512
[  515.610767][T11652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002]
[  515.635873][T11652] System zones: 1-12
[  515.643192][T11652] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2304: corrupted in-inode xattr: e_value size too large
[  515.657924][T11652] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  515.658414][T11657] random: crng reseeded on system resumption
[  515.667633][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  515.667659][    C0] EXT4-fs (loop5): initial error at time 1777771174: ext4_iget_extra_inode:5128: inode 15
[  515.667699][    C0] EXT4-fs (loop5): last error at time 1777771174: ext4_iget_extra_inode:5128: inode 15
[  515.701623][T11652] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2304: couldn't read orphan inode 15 (err -117)
[  515.718457][T11652] loop5: lost filesystem error report for type 5 error -117
[  515.720588][T11652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.753475][ T2980]  loop2: p1
[  515.975190][T11662] random: crng reseeded on system resumption
[  516.048551][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.070132][T11666] atomic_op ffff88811e35f928 conn xmit_atomic 0000000000000000
[  516.366890][T11671] random: crng reseeded on system resumption
[  516.516432][   T28] audit: type=1326 audit(1777771174.893:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  516.604292][T11677] loop7: detected capacity change from 0 to 1024
[  516.626555][T11677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  516.628363][   T28] audit: type=1326 audit(1777771174.893:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  516.634751][T11677] System zones: 0-1, 3-36
[  516.683566][T11677] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2310: bad orphan inode 134217728
[  516.694286][T11677] loop7: lost filesystem error report for type 5 error -117
[  516.714484][   T28] audit: type=1326 audit(1777771174.902:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  516.766937][   T28] audit: type=1326 audit(1777771174.902:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  516.779757][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  516.799104][    C0] EXT4-fs (loop7): initial error at time 1777771175: ext4_orphan_get:1423
[  516.803716][   T28] audit: type=1326 audit(1777771174.902:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  516.807672][    C0] EXT4-fs (loop7): last error at time 1777771175: ext4_orphan_get:1423
[  516.854019][T11677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.898487][T11404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.902673][   T28] audit: type=1326 audit(1777771174.911:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  517.008283][   T28] audit: type=1326 audit(1777771174.930:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  517.127380][   T28] audit: type=1326 audit(1777771174.930:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.6.2309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a0a7cdd9 code=0x7ffc0000
[  517.270553][T11683] loop7: detected capacity change from 0 to 1024
[  517.294965][T11683] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  517.305977][T11683] EXT4-fs (loop7): group descriptors corrupted!
[  517.427693][ T2980]  loop2: p1
[  518.099596][T11693] loop5: detected capacity change from 0 to 2048
[  518.130480][T11693] EXT4-fs (loop5): #clusters per group too big: 16384
[  518.454770][T11703] loop5: detected capacity change from 0 to 512
[  518.480435][T11703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002]
[  518.527105][T11703] System zones: 1-12
[  518.549548][T11703] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2317: corrupted in-inode xattr: e_value size too large
[  518.610133][T11703] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  518.610502][T11703] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2317: couldn't read orphan inode 15 (err -117)
[  518.619931][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  518.619952][    C0] EXT4-fs (loop5): initial error at time 1777771176: ext4_iget_extra_inode:5128: inode 15
[  518.620001][    C0] EXT4-fs (loop5): last error at time 1777771176: ext4_iget_extra_inode:5128: inode 15
[  518.815151][T11703] loop5: lost filesystem error report for type 5 error -117
[  518.815853][T11703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.145082][T11685] dvmrp2: entered allmulticast mode
[  519.188641][ T2980]  loop2: p1
[  519.230569][T11725] random: crng reseeded on system resumption
[  519.369661][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.451921][   T28] kauditd_printk_skb: 147 callbacks suppressed
[  519.451942][   T28] audit: type=1400 audit(1777771177.607:2255): avc:  denied  { read } for  pid=11730 comm="syz.5.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  519.482836][   T28] audit: type=1400 audit(1777771177.635:2256): avc:  denied  { create } for  pid=11730 comm="syz.5.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  519.638753][   T28] audit: type=1400 audit(1777771177.783:2257): avc:  denied  { write } for  pid=11730 comm="syz.5.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  519.660419][T11736] loop7: detected capacity change from 0 to 764
[  519.668224][T11734] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2325'.
[  519.692674][T11733] atomic_op ffff8881306b2d28 conn xmit_atomic 0000000000000000
[  519.718391][   T28] audit: type=1400 audit(1777771177.783:2258): avc:  denied  { read } for  pid=11726 comm="syz.4.2324" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  519.746466][ T2980]  loop2: p1
[  519.813544][   T28] audit: type=1400 audit(1777771177.783:2259): avc:  denied  { open } for  pid=11726 comm="syz.4.2324" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  519.920545][   T28] audit: type=1400 audit(1777771177.783:2260): avc:  denied  { ioctl } for  pid=11726 comm="syz.4.2324" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  519.984710][   T28] audit: type=1400 audit(1777771177.783:2261): avc:  denied  { mounton } for  pid=11735 comm="syz.7.2326" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  520.009896][T11731] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.017922][   T28] audit: type=1400 audit(1777771177.783:2262): avc:  denied  { create } for  pid=11726 comm="syz.4.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  520.036554][T11731] team0: Port device bond0 added
[  520.037547][   T28] audit: type=1400 audit(1777771177.783:2263): avc:  denied  { bind } for  pid=11726 comm="syz.4.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  520.037589][   T28] audit: type=1400 audit(1777771177.783:2264): avc:  denied  { write } for  pid=11726 comm="syz.4.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  520.166078][T11732] bridge0: port 3(team0) entered blocking state
[  520.188829][T11732] bridge0: port 3(team0) entered disabled state
[  520.199992][T11732] team0: entered allmulticast mode
[  520.207751][T11732] team_slave_0: entered allmulticast mode
[  520.213754][T11732] team_slave_1: entered allmulticast mode
[  520.219663][T11732] bond0: entered allmulticast mode
[  520.225842][T11732] bond_slave_0: entered allmulticast mode
[  520.231793][T11732] bond_slave_1: entered allmulticast mode
[  520.239447][T11732] team0: entered promiscuous mode
[  520.244664][T11732] team_slave_0: entered promiscuous mode
[  520.250494][T11732] team_slave_1: entered promiscuous mode
[  520.257334][T11732] bond0: entered promiscuous mode
[  520.262511][T11732] bond_slave_0: entered promiscuous mode
[  520.268489][T11732] bond_slave_1: entered promiscuous mode
[  520.275042][T11732] bridge0: port 3(team0) entered blocking state
[  520.281499][T11732] bridge0: port 3(team0) entered forwarding state
[  520.289577][ T7501] dvmrp2: left allmulticast mode
[  520.573526][ T2980]  loop2: p1
[  520.781105][T11767] loop5: detected capacity change from 0 to 2048
[  520.833555][T11767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.004854][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.024813][T11772] random: crng reseeded on system resumption
[  521.338764][T11784] loop5: detected capacity change from 0 to 512
[  521.369672][T11779] loop4: detected capacity change from 0 to 1024
[  521.382138][T11784] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  521.413424][ T2980]  loop2: p1
[  521.449610][T11779] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  521.491248][T11013] Bluetooth: hci0: Frame reassembly failed (-84)
[  521.506896][T11785] random: crng reseeded on system resumption
[  521.532114][T11779] System zones: 0-1, 3-36
[  521.539329][T11779] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2338: bad orphan inode 134217728
[  521.587617][T11779] loop4: lost filesystem error report for type 5 error -117
[  521.588256][ T2980]  loop2: p1
[  521.610010][T11784] loop5: detected capacity change from 0 to 512
[  521.640937][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  521.648291][    C1] EXT4-fs (loop4): initial error at time 1777771179: ext4_orphan_get:1423
[  521.660078][    C1] EXT4-fs (loop4): last error at time 1777771179: ext4_orphan_get:1423
[  521.661013][T11784] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2340: inode has both inline data and extents flags
[  521.661041][    C1] 
[  521.669458][T11784] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  521.669930][T11784] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2340: couldn't read orphan inode 15 (err -117)
[  521.670009][T11784] loop5: lost filesystem error report for type 5 error -117
[  521.760638][T11784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.849682][T11779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.946138][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.067361][ T2980]  loop2: p1
[  522.395422][T11805] random: crng reseeded on system resumption
[  522.409691][ T2980]  loop2: p1
[  522.510944][ T2980]  loop2: p1
[  522.524390][T11814] atomic_op ffff88811f217528 conn xmit_atomic 0000000000000000
[  522.724115][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'.
[  522.796894][T11827] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2353'.
[  523.539438][T11836] xt_hashlimit: size too large, truncated to 1048576
[  523.644370][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  523.666058][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  523.748456][ T2980]  loop2: p1
[  523.752312][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.803195][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.872952][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.007954][ T2980]  loop2: p1
[  524.112200][T11857] random: crng reseeded on system resumption
[  524.374209][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2365'.
[  524.474270][ T2980]  loop2: p1
[  524.520964][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2364'.
[  524.608460][T11874] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.670475][T11874] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.800803][T11879] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2364'.
[  524.819319][T11874] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.862913][T11874] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.903739][T11886] xt_hashlimit: size too large, truncated to 1048576
[  524.916366][   T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.940088][   T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.957285][T11889] atomic_op ffff888141fbf128 conn xmit_atomic 0000000000000000
[  524.989783][   T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.020216][   T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.359328][   T28] kauditd_printk_skb: 93 callbacks suppressed
[  525.359363][   T28] audit: type=1326 audit(1777771183.063:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.427640][ T2980]  loop2: p1
[  525.449078][   T28] audit: type=1326 audit(1777771183.063:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.544537][   T28] audit: type=1326 audit(1777771183.100:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.596214][ T2980]  loop2: p1
[  525.629429][   T28] audit: type=1326 audit(1777771183.100:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.681656][T11904] random: crng reseeded on system resumption
[  525.692196][ T2980]  loop2: p1
[  525.720425][   T28] audit: type=1326 audit(1777771183.100:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.763646][   T28] audit: type=1326 audit(1777771183.100:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.844848][   T28] audit: type=1326 audit(1777771183.100:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.896397][   T28] audit: type=1326 audit(1777771183.109:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.960899][   T28] audit: type=1326 audit(1777771183.109:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  525.963375][T11912] FAULT_INJECTION: forcing a failure.
[  525.963375][T11912] name failslab, interval 1, probability 0, space 0, times 0
[  526.037986][   T28] audit: type=1326 audit(1777771183.119:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.4.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d148cdd9 code=0x7ffc0000
[  526.067798][T11912] CPU: 1 UID: 0 PID: 11912 Comm: syz.4.2377 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  526.067907][T11912] Tainted: [W]=WARN
[  526.067917][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  526.067936][T11912] Call Trace:
[  526.067946][T11912]  <TASK>
[  526.067958][T11912]  __dump_stack+0x1d/0x30
[  526.067992][T11912]  dump_stack_lvl+0x95/0xd0
[  526.068016][T11912]  dump_stack+0x15/0x1b
[  526.068126][T11912]  should_fail_ex+0x263/0x280
[  526.068229][T11912]  should_failslab+0x8c/0xb0
[  526.068300][T11912]  __kmalloc_noprof+0xb8/0x4d0
[  526.068337][T11912]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  526.068364][T11912]  genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  526.068398][T11912]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  526.068505][T11912]  ? selinux_capable+0x31/0x40
[  526.068545][T11912]  ? security_capable+0x7b/0x90
[  526.068583][T11912]  ? ns_capable+0x7c/0xb0
[  526.068650][T11912]  genl_rcv_msg+0x432/0x470
[  526.068674][T11912]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  526.068784][T11912]  netlink_rcv_skb+0x123/0x220
[  526.068816][T11912]  ? __pfx_genl_rcv_msg+0x10/0x10
[  526.068848][T11912]  genl_rcv+0x28/0x40
[  526.068923][T11912]  netlink_unicast+0x5a8/0x680
[  526.068953][T11912]  netlink_sendmsg+0x5c8/0x6f0
[  526.068990][T11912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.069165][T11912]  ____sys_sendmsg+0x563/0x5b0
[  526.069197][T11912]  ___sys_sendmsg+0x195/0x1e0
[  526.069250][T11912]  __x64_sys_sendmsg+0xd4/0x160
[  526.069280][T11912]  x64_sys_call+0x194c/0x3020
[  526.069439][T11912]  do_syscall_64+0x12c/0x3b0
[  526.069475][T11912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.069501][T11912] RIP: 0033:0x7f84d148cdd9
[  526.069518][T11912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.069544][T11912] RSP: 002b:00007f84cfedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.069580][T11912] RAX: ffffffffffffffda RBX: 00007f84d1705fa0 RCX: 00007f84d148cdd9
[  526.069609][T11912] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000005
[  526.069629][T11912] RBP: 00007f84cfedf090 R08: 0000000000000000 R09: 0000000000000000
[  526.069646][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.069660][T11912] R13: 00007f84d1706038 R14: 00007f84d1705fa0 R15: 00007ffcaefce698
[  526.069682][T11912]  </TASK>
[  526.356121][ T2980]  loop2: p1
[  526.552170][T11917] loop4: detected capacity change from 0 to 512
[  526.579278][ T2980]  loop2: p1
[  526.712717][T11926] xt_hashlimit: size too large, truncated to 1048576
[  526.722955][T11917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.935068][T11928] random: crng reseeded on system resumption
[  527.155691][T11917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.243757][T11933] loop4: detected capacity change from 0 to 2048
[  527.268169][T11933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.325668][T11933] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #12: block 2: comm syz.4.2382: lblock 0 mapped to illegal pblock 2 (length 1)
[  527.438465][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.654492][T11946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2385'.
[  527.664860][ T2980]  loop2: p1
[  527.679022][T11946] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2385'.
[  527.729263][T11946] loop4: detected capacity change from 0 to 512
[  527.746677][T11946] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  527.770168][T11946] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  527.796131][T11946] EXT4-fs (loop4): mount failed
[  527.807403][ T2980]  loop2: p1
[  527.884511][T11953] random: crng reseeded on system resumption
[  527.937388][T11955] syz_tun: entered allmulticast mode
[  528.110463][ T2980]  loop2: p1
[  528.133228][T11956] syz_tun: left allmulticast mode
[  528.393023][T11966] atomic_op ffff88810d325928 conn xmit_atomic 0000000000000000
[  529.081694][T11974] loop7: detected capacity change from 0 to 512
[  529.185980][T11974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.202580][ T2980]  loop2: p1
[  529.230047][T11978] xt_hashlimit: size too large, truncated to 1048576
[  529.333086][T11974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.717186][T11989] loop7: detected capacity change from 0 to 128
[  529.856118][T11996] syz_tun: entered allmulticast mode
[  529.955059][T11993] loop4: detected capacity change from 0 to 128
[  530.011105][T11997] syz_tun: left allmulticast mode
[  530.139497][ T2980]  loop2: p1
[  530.165934][T12002] random: crng reseeded on system resumption
[  530.607497][T12017] atomic_op ffff888141fbdd28 conn xmit_atomic 0000000000000000
[  530.637796][ T2980]  loop2: p1
[  530.713823][ T2980]  loop2: p1
[  530.760239][   T30] Bluetooth: hci0: Frame reassembly failed (-84)
[  530.825284][ T2980]  loop2: p1
[  530.938194][ T2980]  loop2: p1
[  530.943576][T12022] loop4: detected capacity change from 0 to 512
[  530.953623][T12022] EXT4-fs: inline encryption not supported
[  530.965217][T12022] EXT4-fs: Invalid want_extra_isize -2147483648
[  531.119338][   T28] kauditd_printk_skb: 282 callbacks suppressed
[  531.119360][   T28] audit: type=1400 audit(1777771188.372:2649): avc:  denied  { block_suspend } for  pid=12021 comm="syz.4.2407" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  531.300288][T12023] loop4: detected capacity change from 0 to 8192
[  531.356392][   T28] audit: type=1400 audit(1777771188.593:2650): avc:  denied  { create } for  pid=12024 comm="syz.6.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  531.389656][T12023] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  531.417231][   T28] audit: type=1400 audit(1777771188.593:2651): avc:  denied  { write } for  pid=12024 comm="syz.6.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  531.467078][T12022] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  531.486821][   T28] audit: type=1400 audit(1777771188.593:2652): avc:  denied  { getopt } for  pid=12024 comm="syz.6.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  531.488149][T12023] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  531.512470][T12022] FAT-fs (loop4): Filesystem has been set read-only
[  531.548178][   T28] audit: type=1400 audit(1777771188.593:2653): avc:  denied  { ioctl } for  pid=12024 comm="syz.6.2408" path="socket:[33808]" dev="sockfs" ino=33808 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  531.584816][T12022] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  531.622449][T12022] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  531.648492][   T28] audit: type=1400 audit(1777771188.870:2654): avc:  denied  { write } for  pid=12031 comm="syz.6.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  531.705747][   T28] audit: type=1400 audit(1777771188.916:2655): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  531.794634][T12036] syz_tun: entered allmulticast mode
[  531.922907][T12042] xt_hashlimit: size too large, truncated to 1048576
[  532.176801][T12037] syz_tun: left allmulticast mode
[  532.732158][T12050] random: crng reseeded on system resumption
[  533.003154][ T7608] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  533.009331][ T3945] Bluetooth: hci0: command 0x1003 tx timeout
[  533.792048][   T28] audit: type=1400 audit(1777771190.846:2656): avc:  denied  { create } for  pid=12054 comm="syz.4.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  534.164747][   T28] audit: type=1400 audit(1777771190.846:2657): avc:  denied  { ioctl } for  pid=12054 comm="syz.4.2417" path="socket:[33875]" dev="sockfs" ino=33875 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  534.191492][   T28] audit: type=1400 audit(1777771190.846:2658): avc:  denied  { bind } for  pid=12054 comm="syz.4.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  534.213881][ T2980]  loop2: p1
[  534.444668][ T2980]  loop2: p1
[  534.541170][T12077] syz_tun: entered allmulticast mode
[  534.555364][T12073] random: crng reseeded on system resumption
[  534.585181][T12084] atomic_op ffff88811f167928 conn xmit_atomic 0000000000000000
[  534.658923][T12079] syz_tun: left allmulticast mode
[  535.364695][T12087] syz_tun: entered allmulticast mode
[  535.501473][T12088] syz_tun: left allmulticast mode
[  535.538823][ T2980]  loop2: p1
[  535.619282][T12097] xt_hashlimit: size too large, truncated to 1048576
[  536.176520][T12108] loop7: detected capacity change from 0 to 128
[  536.566483][T12127] loop4: detected capacity change from 0 to 512
[  536.576670][ T2980]  loop2: p1
[  536.595532][T12127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002]
[  536.618094][T12127] System zones: 1-12
[  536.664454][T12127] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2434: corrupted in-inode xattr: e_value size too large
[  536.686335][ T2980]  loop2: p1
[  536.693721][T12127] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  536.694033][T12127] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2434: couldn't read orphan inode 15 (err -117)
[  536.715185][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  536.715211][    C1] EXT4-fs (loop4): initial error at time 1777771193: ext4_iget_extra_inode:5128: inode 15
[  536.715262][    C1] EXT4-fs (loop4): last error at time 1777771193: ext4_iget_extra_inode:5128: inode 15
[  536.760185][T12127] loop4: lost filesystem error report for type 5 error -117
[  536.769520][T12127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.888279][T12135] random: crng reseeded on system resumption
[  536.930968][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.024120][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'.
[  537.045484][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'.
[  537.068718][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  537.068737][   T28] audit: type=1400 audit(1777771193.874:2671): avc:  denied  { bind } for  pid=12143 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  537.111750][   T28] audit: type=1400 audit(1777771193.874:2672): avc:  denied  { name_bind } for  pid=12143 comm="syz.4.2440" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  537.158055][   T28] audit: type=1400 audit(1777771193.874:2673): avc:  denied  { node_bind } for  pid=12143 comm="syz.4.2440" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  537.203509][   T28] audit: type=1400 audit(1777771193.902:2674): avc:  denied  { read } for  pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  537.525796][T12153] atomic_op ffff88811a8fed28 conn xmit_atomic 0000000000000000
[  537.541333][T12155] loop7: detected capacity change from 0 to 512
[  537.596367][T12155] EXT4-fs warning (device loop7): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  537.741845][T12155] loop7: detected capacity change from 0 to 512
[  537.776870][T12155] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2445: inode has both inline data and extents flags
[  537.803376][T12155] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  537.804031][T12155] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2445: couldn't read orphan inode 15 (err -117)
[  537.813654][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  537.813709][    C1] EXT4-fs (loop7): initial error at time 1777771194: ext4_orphan_get:1397: inode 15
[  537.813779][    C1] EXT4-fs (loop7): last error at time 1777771194: ext4_orphan_get:1397: inode 15
[  537.883976][T12155] loop7: lost filesystem error report for type 5 error -117
[  537.889131][ T2980]  loop2: p1
[  537.901742][T12155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.002083][   T28] audit: type=1400 audit(1777771194.723:2675): avc:  denied  { write } for  pid=12154 comm="syz.7.2445" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  538.058079][ T2980]  loop2: p1
[  538.299448][   T28] audit: type=1400 audit(1777771195.009:2676): avc:  denied  { create } for  pid=12159 comm="syz.6.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  538.626031][T12174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2447'.
[  538.644421][   T28] audit: type=1400 audit(1777771195.305:2677): avc:  denied  { write } for  pid=12165 comm="syz.2.2447" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  538.819351][T12176] xt_hashlimit: size too large, truncated to 1048576
[  539.742245][   T28] audit: type=1400 audit(1777771196.348:2678): avc:  denied  { getopt } for  pid=12180 comm="syz.6.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  539.810795][   T28] audit: type=1400 audit(1777771196.348:2679): avc:  denied  { name_connect } for  pid=12180 comm="syz.6.2451" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  539.935526][ T3945] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  539.977056][T11404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.072335][   T28] audit: type=1400 audit(1777771196.644:2680): avc:  denied  { ioctl } for  pid=12183 comm="syz.7.2452" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  540.381370][ T2980]  loop2: p1
[  540.576117][T12199] loop4: detected capacity change from 0 to 128
[  540.604140][T12199] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  541.240303][ T3307] FAT-fs (loop4): error, invalid access to FAT (entry 0x72656c61)
[  541.281405][ T3307] FAT-fs (loop4): Filesystem has been set read-only
[  541.288581][ T3307] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 73726c6c)
[  541.298733][ T3307] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 73726c6c)
[  541.366486][ T2980]  loop2: p1
[  541.486135][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  541.882459][T12189] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.889982][T12189] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.902415][T12189] bridge_slave_0: entered allmulticast mode
[  541.916759][T12189] bridge_slave_0: entered promiscuous mode
[  541.925703][T12189] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.933416][T12189] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.959493][T12189] bridge_slave_1: entered allmulticast mode
[  541.967963][T12189] bridge_slave_1: entered promiscuous mode
[  542.119268][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.132745][T12221] atomic_op ffff88811f165d28 conn xmit_atomic 0000000000000000
[  542.144722][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.276415][T12189] team0: Port device team_slave_0 added
[  542.283838][T12189] team0: Port device team_slave_1 added
[  542.303485][T12231] xt_hashlimit: size too large, truncated to 1048576
[  542.343240][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.350423][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.379908][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.444920][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.474507][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.544172][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.561206][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  542.561228][   T28] audit: type=1326 audit(1777771198.942:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  542.636090][T11013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.645469][   T28] audit: type=1326 audit(1777771198.942:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  542.655488][T11013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  542.716934][   T28] audit: type=1326 audit(1777771198.942:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  542.770782][T12189] hsr_slave_0: entered promiscuous mode
[  542.776750][   T28] audit: type=1326 audit(1777771198.942:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  542.787240][T12189] hsr_slave_1: entered promiscuous mode
[  542.834122][T12189] debugfs: 'hsr0' already exists in 'hsr'
[  542.840880][T12189] Cannot create hsr debugfs directory
[  542.846664][   T28] audit: type=1326 audit(1777771198.942:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  542.885737][T11013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.896186][T11013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  542.909925][   T28] audit: type=1326 audit(1777771198.942:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  542.947940][   T28] audit: type=1326 audit(1777771198.942:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  543.009272][T11013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.020741][   T28] audit: type=1326 audit(1777771198.988:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  543.047344][T11013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  543.066135][   T28] audit: type=1326 audit(1777771198.988:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  543.099563][   T28] audit: type=1326 audit(1777771198.998:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa064a2cdd9 code=0x7ffc0000
[  543.164004][T11013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.178411][T11013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  543.216749][T12189] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  543.230547][T12189] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.252181][T12189] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  543.263365][T12189] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  543.272058][T12189] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  543.285503][T12189] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  543.310137][T12189] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  543.320999][T12189] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  543.372658][T11013] bridge_slave_1: left allmulticast mode
[  543.392496][T11013] bridge_slave_1: left promiscuous mode
[  543.410179][T11013] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.427624][T11013] bridge_slave_0: left allmulticast mode
[  543.439849][T11013] bridge_slave_0: left promiscuous mode
[  543.452085][T11013] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.624802][T11013] bond2 (unregistering): (slave geneve2): Releasing active interface
[  543.633325][ T3777] SELinux: failure in sel_netif_sid_slow(), invalid network interface (79)
[  543.686291][T11013] bond1 (unregistering): (slave bridge1): Releasing active interface
[  543.740348][T11013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.750925][T11013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.762427][T11013] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  543.773533][T11013] bond0 (unregistering): Released all slaves
[  543.781948][T11013] bond1 (unregistering): Released all slaves
[  543.791504][T11013] bond2 (unregistering): Released all slaves
[  543.803564][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5
[  543.850105][T11013] tipc: Left network mode
[  543.873538][T12189] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.902847][T12189] 8021q: adding VLAN 0 to HW filter on device team0
[  543.950552][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.957839][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.007907][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.015088][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.115615][T11013] hsr_slave_0: left promiscuous mode
[  544.125479][T11013] hsr_slave_1: left promiscuous mode
[  544.137280][T11013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.150414][T11013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.159129][T11013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.167599][T11013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.194910][T11013] veth1_macvtap: left promiscuous mode
[  544.200748][T11013] veth0_macvtap: left promiscuous mode
[  544.207450][T11013] veth1_vlan: left promiscuous mode
[  544.212971][T11013] veth0_vlan: left promiscuous mode
[  544.307966][T11013] team0 (unregistering): Port device team_slave_1 removed
[  544.320534][T11013] team0 (unregistering): Port device team_slave_0 removed
[  544.405909][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6
[  545.121515][T12314] loop7: detected capacity change from 0 to 128
[  545.200051][T11013] IPVS: stop unused estimator thread 0...
[  545.233879][T12321] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2471'.
[  545.243783][T12321] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  545.251201][T12321] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  545.258551][T12321] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  545.354330][T12240] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.379784][T12240] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.387088][T12240] bridge_slave_0: entered allmulticast mode
[  545.393591][T12240] bridge_slave_0: entered promiscuous mode
[  545.435992][T12330] xt_hashlimit: size too large, truncated to 1048576
[  545.454674][T12240] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.487226][T12240] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.518171][T12240] bridge_slave_1: entered allmulticast mode
[  545.545926][T12240] bridge_slave_1: entered promiscuous mode
[  545.629817][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.676620][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.720467][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7
[  545.825054][T12240] team0: Port device team_slave_0 added
[  545.856430][T12240] team0: Port device team_slave_1 added
[  545.875527][T12349] : Can't lookup blockdev
[  545.884501][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.944478][T12240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.969321][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.033443][T12240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.075957][T12240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.099664][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.253327][T12240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.426066][T12373] atomic_op ffff8881034d0128 conn xmit_atomic 0000000000000000
[  546.700185][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  546.904634][T12240] hsr_slave_0: entered promiscuous mode
[  546.918889][T12240] hsr_slave_1: entered promiscuous mode
[  546.926446][T12240] debugfs: 'hsr0' already exists in 'hsr'
[  546.932278][T12240] Cannot create hsr debugfs directory
[  547.074157][T12189] veth0_vlan: entered promiscuous mode
[  547.102207][T12189] veth1_vlan: entered promiscuous mode
[  547.165994][T12189] veth0_macvtap: entered promiscuous mode
[  547.188135][T12189] veth1_macvtap: entered promiscuous mode
[  547.223890][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.238030][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.268867][ T3429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.279340][T12240] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  547.290093][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  547.298010][ T3429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.310370][T12240] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  547.335742][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  547.343521][ T3429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.371137][T12240] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  547.390793][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  547.398134][T12401] xt_hashlimit: size too large, truncated to 1048576
[  547.410498][T12240] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  547.423308][T12240] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  547.442425][ T3429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.471484][ T3775] ==================================================================
[  547.479635][ T3775] BUG: KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
[  547.488889][ T3775] 
[  547.491237][ T3775] read-write to 0xffff88811a9c2370 of 8 bytes by task 12257 on cpu 1:
[  547.499418][ T3775]  wg_packet_rx_poll+0xed7/0x10f0
[  547.504484][ T3775]  __napi_poll+0x61/0x300
[  547.508859][ T3775]  napi_threaded_poll_loop+0x1db/0x660
[  547.514356][ T3775]  napi_threaded_poll+0x193/0x240
[  547.519421][ T3775]  kthread+0x22a/0x280
[  547.523529][ T3775]  ret_from_fork+0x146/0x330
[  547.528163][ T3775]  ret_from_fork_asm+0x1a/0x30
[  547.532957][ T3775] 
[  547.535297][ T3775] read-write to 0xffff88811a9c2370 of 8 bytes by task 3775 on cpu 0:
[  547.543385][ T3775]  wg_packet_handshake_receive_worker+0x49e/0x570
[  547.549838][ T3775]  process_scheduled_works+0x4f0/0x9c0
[  547.555323][ T3775]  worker_thread+0x58a/0x780
[  547.559964][ T3775]  kthread+0x22a/0x280
[  547.564046][ T3775]  ret_from_fork+0x146/0x330
[  547.568684][ T3775]  ret_from_fork_asm+0x1a/0x30
[  547.573480][ T3775] 
[  547.575822][ T3775] value changed: 0x0000000000000000 -> 0x0000000000000020
[  547.582946][ T3775] 
[  547.585282][ T3775] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  547.591469][ T3775] CPU: 0 UID: 0 PID: 3775 Comm: kworker/0:10 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  547.602520][ T3775] Tainted: [W]=WARN
[  547.606339][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  547.616418][ T3775] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
[  547.623654][ T3775] ==================================================================
[  547.759645][T12240] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.018531][   T30] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.093937][   T30] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.148421][   T30] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.223513][   T30] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.320687][   T30] bridge_slave_1: left allmulticast mode
[  548.326473][   T30] bridge_slave_1: left promiscuous mode
[  548.332406][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.340363][   T30] bridge_slave_0: left allmulticast mode
[  548.346494][   T30] bridge_slave_0: left promiscuous mode
[  548.353193][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.463381][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.474462][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.484290][   T30] bond0 (unregistering): Released all slaves
[  548.565688][   T28] kauditd_printk_skb: 50 callbacks suppressed
[  548.565778][   T28] audit: type=1400 audit(1777771204.482:2743): avc:  denied  { write } for  pid=12414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.621026][   T28] audit: type=1400 audit(1777771204.537:2744): avc:  denied  { write } for  pid=12426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.646040][   T30] hsr_slave_0: left promiscuous mode
[  548.652000][   T30] hsr_slave_1: left promiscuous mode
[  548.658090][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.665556][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.673588][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.681293][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.692515][   T30] veth1_macvtap: left promiscuous mode
[  548.698042][   T30] veth0_macvtap: left promiscuous mode
[  548.703673][   T30] veth1_vlan: left promiscuous mode
[  548.708919][   T30] veth0_vlan: left promiscuous mode
[  548.782894][   T30] team0 (unregistering): Port device team_slave_1 removed
[  548.793542][   T30] team0 (unregistering): Port device team_slave_0 removed
[  548.830620][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9
[  548.917221][   T28] audit: type=1400 audit(1777771204.814:2745): avc:  denied  { write } for  pid=12429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.952530][   T28] audit: type=1400 audit(1777771204.842:2746): avc:  denied  { write } for  pid=12440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  548.987543][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10
[  549.071969][   T28] audit: type=1400 audit(1777771204.952:2747): avc:  denied  { write } for  pid=12444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  549.108560][   T28] audit: type=1400 audit(1777771204.989:2748): avc:  denied  { write } for  pid=12455 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  549.145919][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11
[  549.178802][   T30] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.240858][   T28] audit: type=1400 audit(1777771205.119:2749): avc:  denied  { write } for  pid=12459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  549.275382][   T28] audit: type=1400 audit(1777771205.146:2750): avc:  denied  { write } for  pid=12470 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  549.310307][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12
[  549.752606][   T30] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.905313][   T30] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.958038][   T30] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.057266][   T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.109711][   T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.145885][   T28] audit: type=1400 audit(1777771205.949:2751): avc:  denied  { write } for  pid=12477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  550.179304][   T28] audit: type=1400 audit(1777771205.977:2752): avc:  denied  { write } for  pid=12488 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  550.205022][   T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.226865][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13
[  550.273278][   T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.350385][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14
[  550.379000][   T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.424038][   T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.467555][   T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.516702][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15
[  550.542735][   T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.641424][   T30] bridge_slave_1: left allmulticast mode
[  550.647620][   T30] bridge_slave_1: left promiscuous mode
[  550.653671][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.662835][   T30] bridge_slave_0: left allmulticast mode
[  550.668547][   T30] bridge_slave_0: left promiscuous mode
[  550.674662][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.684169][   T30] bridge_slave_1: left allmulticast mode
[  550.689917][   T30] bridge_slave_1: left promiscuous mode
[  550.696404][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.704219][   T30] bridge_slave_0: left allmulticast mode
[  550.709881][   T30] bridge_slave_0: left promiscuous mode
[  550.715687][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.724644][   T30] bridge_slave_1: left allmulticast mode
[  550.730316][   T30] bridge_slave_1: left promiscuous mode
[  550.736193][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.744082][   T30] bridge_slave_0: left allmulticast mode
[  550.749968][   T30] bridge_slave_0: left promiscuous mode
[  550.755655][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.859921][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.870082][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.880008][   T30] bond0 (unregistering): Released all slaves
[  550.922639][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.933354][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.943123][   T30] bond0 (unregistering): Released all slaves
[  550.950894][   T30] bond1 (unregistering): Released all slaves
[  551.040938][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.051382][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.061524][   T30] bond0 (unregistering): Released all slaves
[  551.069541][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16
[  551.233594][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17
[  551.260668][   T30] hsr_slave_0: left promiscuous mode
[  551.267566][   T30] hsr_slave_1: left promiscuous mode
[  551.273342][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.281041][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.288922][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.296336][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.306376][   T30] hsr_slave_0: left promiscuous mode
[  551.312257][   T30] hsr_slave_1: left promiscuous mode
[  551.317902][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.325397][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.333211][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.340609][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.350070][   T30] hsr_slave_0: left promiscuous mode
[  551.355980][   T30] hsr_slave_1: left promiscuous mode
[  551.361674][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.369119][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.384388][   T30] veth1_macvtap: left promiscuous mode
[  551.389999][   T30] veth0_macvtap: left promiscuous mode
[  551.395705][   T30] veth1_vlan: left promiscuous mode
[  551.400933][   T30] veth0_vlan: left promiscuous mode
[  551.407106][   T30] veth1_macvtap: left promiscuous mode
[  551.412681][   T30] veth0_macvtap: left promiscuous mode
[  551.418393][   T30] veth1_vlan: left promiscuous mode
[  551.423692][   T30] veth0_vlan: left promiscuous mode
[  551.430008][   T30] veth1_macvtap: left promiscuous mode
[  551.435572][   T30] veth0_macvtap: left promiscuous mode
[  551.441177][   T30] veth1_vlan: left promiscuous mode
[  551.446424][   T30] veth0_vlan: left promiscuous mode
[  551.582948][   T30] team0 (unregistering): Port device team_slave_1 removed
[  551.593274][   T30] team0 (unregistering): Port device team_slave_0 removed
[  551.656733][   T30] team0 (unregistering): Port device team_slave_1 removed
[  551.666764][   T30] team0 (unregistering): Port device team_slave_0 removed
[  551.701249][   T30] pim6reg2 (unregistering): left allmulticast mode
[  551.734778][   T30] team0 (unregistering): Port device team_slave_1 removed
[  551.744856][   T30] team0 (unregistering): Port device team_slave_0 removed
[  551.880295][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18
[  552.015610][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19
[  552.128910][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20
[  552.244814][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21
[  552.346299][   T30] IPVS: stop unused estimator thread 0...
[  552.366943][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22
[  552.483373][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23
[  552.601868][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24
[  552.639179][   T30] bridge_slave_1: left allmulticast mode
[  552.644955][   T30] bridge_slave_1: left promiscuous mode
[  552.650596][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.658458][   T30] bridge_slave_0: left allmulticast mode
[  552.664639][   T30] bridge_slave_0: left promiscuous mode
[  552.670373][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.730756][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  552.740858][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  552.750573][   T30] bond0 (unregistering): Released all slaves
[  552.839646][   T30] hsr_slave_0: left promiscuous mode
[  552.845499][   T30] hsr_slave_1: left promiscuous mode
[  552.851756][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.859543][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.903380][   T30] team0 (unregistering): Port device team_slave_1 removed
[  552.914281][   T30] team0 (unregistering): Port device team_slave_0 removed
[  552.952278][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25
[  553.068948][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26
[  553.189966][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27
[  553.314068][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28