last executing test programs:

5m22.177949435s ago: executing program 0 (id=11):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2}]}, @enum={0x1}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x48}, 0x28)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x1100)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x200600, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x423, &(0x7f0000000980)="$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")
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x0, 0x0, 0x0)

5m21.99386577s ago: executing program 0 (id=13):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xff, 0x3, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
io_uring_enter(0xffffffffffffffff, 0x7200, 0x1855, 0xc, &(0x7f0000000040)={[0xde]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r3, 0x89f4, &(0x7f0000000000))
socket$inet(0x2, 0x2, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x4, 0x10000000})
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}})
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
io_uring_enter(r4, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000080), &(0x7f0000000140)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r1}, 0x10)
sendmsg$sock(r7, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000008c0)}, 0x0)

5m21.705024799s ago: executing program 0 (id=18):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r0=>0x0})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044}, 0x1)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
pselect6(0x40, &(0x7f0000000280)={0x6, 0x3ff, 0x100000000, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x8}, &(0x7f00000002c0)={0x3, 0x6, 0x9c4b, 0x2, 0xffff, 0x8, 0x0, 0x8}, &(0x7f0000000440)={0x0, 0x5, 0x4, 0x68, 0xa4d, 0x8000000000000000, 0xcf, 0x10000}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8})
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000540)={'pimreg0\x00', @remote})
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000001940)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC], 0xfe, 0x122a, &(0x7f00000005c0)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x8, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x420, &(0x7f0000000800)={[{@usrjquota}, {@nodelalloc}, {@test_dummy_encryption_v1}, {@data_journal}]}, 0x2, 0x7b4, &(0x7f0000001740)="$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")
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

5m21.026226941s ago: executing program 0 (id=20):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
socket$netlink(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)
socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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")
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = accept(r7, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80)
fallocate(r8, 0x2, 0x4, 0x5)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x58}}, 0x8000)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$peeksig(0x1a, r9, 0x0, &(0x7f0000000040))

5m18.298376168s ago: executing program 0 (id=28):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x40)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xa, 0x0, 0x17, r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x200000, 0x81})
ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r8], 0x30}, 0x4004000)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000400000001000000090000004c0003800800030000000004140002007663616e3000000000000000000039f4f1b65f"], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x7e7b, 0x0)

5m17.892069441s ago: executing program 0 (id=33):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r1 = creat(0x0, 0xecf86c37d53049cc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd5, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000580)={0x1, {{0xa, 0x4e23, 0x103, @mcast2, 0xfffffffc}}, {{0xa, 0x4e22, 0x10006, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x0)
setreuid(r4, 0x0)
ioprio_set$uid(0x3, r4, 0x2004)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000440)={[], [{@euid_lt={'euid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r4}}, {@appraise}, {@flag='nolazytime'}, {@fsname={'fsname', 0x3d, '!'}}]}, 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=")
mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000800)=ANY=[@ANYBLOB="ca98166d656d6f72795f726570726f742c72646d612c6d656d6f72795f68756765746c625fcf4a2eae756e74696e672c6661766f7264796e6d6f64732c6d656d6f72795f68756765746c625f6163636f756e74696e672c666f778cfcf016afc6b3e1b69bd805d65b36debe170bf09ad67dec544a85d9e92e21093efd2cec09d51dc2f3efd7f6693f9281ab0dc14373eb9fcc1d29140d69255e1db87b16038a5c5ffe4444cc4e3e640000", @ANYRESDEC=r4, @ANYBLOB=',fowne', @ANYRESDEC])
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffffffff, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, 0x0)
r7 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r7, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0)
unshare(0x8000000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000305000000000000070000000000", @ANYRES32=0x0, @ANYRESOCT], 0x5c}}, 0x0)

5m17.853468092s ago: executing program 32 (id=33):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r1 = creat(0x0, 0xecf86c37d53049cc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd5, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000580)={0x1, {{0xa, 0x4e23, 0x103, @mcast2, 0xfffffffc}}, {{0xa, 0x4e22, 0x10006, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x0)
setreuid(r4, 0x0)
ioprio_set$uid(0x3, r4, 0x2004)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000440)={[], [{@euid_lt={'euid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r4}}, {@appraise}, {@flag='nolazytime'}, {@fsname={'fsname', 0x3d, '!'}}]}, 0x1, 0xb87, &(0x7f0000002380)="$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")
mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000800)=ANY=[@ANYBLOB="ca98166d656d6f72795f726570726f742c72646d612c6d656d6f72795f68756765746c625fcf4a2eae756e74696e672c6661766f7264796e6d6f64732c6d656d6f72795f68756765746c625f6163636f756e74696e672c666f778cfcf016afc6b3e1b69bd805d65b36debe170bf09ad67dec544a85d9e92e21093efd2cec09d51dc2f3efd7f6693f9281ab0dc14373eb9fcc1d29140d69255e1db87b16038a5c5ffe4444cc4e3e640000", @ANYRESDEC=r4, @ANYBLOB=',fowne', @ANYRESDEC])
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffffffff, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, 0x0)
r7 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r7, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0)
unshare(0x8000000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000305000000000000070000000000", @ANYRES32=0x0, @ANYRESOCT], 0x5c}}, 0x0)

2.48359202s ago: executing program 5 (id=3763):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x800000, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0xaea5)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (fail_nth: 6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r4], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'})

2.458972761s ago: executing program 1 (id=3764):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ffd, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x818)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, 0x0, 0x40)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000380), 0x4)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000002c0), 0x10000, r3, 0x0, 0x1c000000007400}, 0x38)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000005500)={{}, "593f082ff74e1e29695ab9c3455abdcbdde2932e665c6cd293c9aaf6497d6e419eef5e350365d0356e14b8bee74218b11cf0b7e9fe02737b352bf27fac05cf81a4fc56cf19e5650ba9f62da563feb7db782a8c7ccdbf84b936c69146af47896b20961f048caed70901c8460747e289e1fc1f93dca014a9553c44e1f6a7aae7c7c5baac9e1bfb928247bb5e005cef402de3a4c147b701f3f90e04f649ee82b21571f1a0dae6866d365d740aac9343d924db84aa83c21fcd95c8853f2a2ff9061db80a247dc14290f529da9c41d7fdcaf7ae7a8ce8acb3694ce150a6b379594d429ddf3888b82247441dd67b3da4bdc18b3738c92e9f03770b2bdc0c7a92dd9ecfc1886180ae78575d10b89ba1348df7a9cbbf42daf92fb6ef50b3d6edf666065f5d30fe1ad47c61976fe4d6b75f836386489d5737e56f7fe8f081578140884da3267f5195726b8d4916082d689c16a8f0c5cddd5d72f6df9a6a39e9bedbfb30283fe5bcfc13a61e0297247a4517399a65dfcd7ca87d475e3e63436a88c9ec1ad3511b62836db36af3e7d125c239c4e140d89febd7d2b1f53d0fdb1c5cc81ed65f719b46228809cfc07208f0540eb3839c1eeae8846302ab0ee9299d1059571324e4abe1bdbe22539178decc8b53e721e6d8be0c3c24a79d2a1b0c8f64b0c025dcacd2546d61d077070cc7f3d09661b61ad0c4e710bead394525b4b8e0864c3598aadf13a939c52b137c321947667da9a7ceef3c829c4cc8c9c872d6f4719d0d9bc7ec5968925fa481c8565aba069c88cbdfbba0622332786f6eb95e0c5a163cf6c41cae8cbdb651dad7e368715ead24301a5732344aa35a57012eee1699e4ae0230cdfdd5ab902048f424fc2e1898c70d0bd21323598079b2cc421bc4c2857a39543d02800e4d7dcc531c0152cbe19e36c309046185e12e9f1eda50d1c70946853c2e6f04bc37bc9e333d817f5a80f94f89fe1713e20dc20687044ea09c971fa4333dee74323a0badd63030e4f2e2381043778881d2677890d55ad574353aafe6a0855d2737b62ae5e5790deb54f1ed08816d190b6f54c9860c0311e1524876280c719ece972be497b92f604c246070101c5563d6c8075bf398bb5c49406d9b62b2f36cfec52c42f2a464b4aef23c94bc1554d4061cfcab86d16e09d41454de25ab184458846a779645e9f602c91ca1742f8d4a4e9035c27db6e35efb4efd7ce6b97cd7e1aca1016b109cd023a3918d79c172a8f604618071fcca11f2941ff8253e0aece89fba17e997a2f97a47260bc2d6ac75e8f08d356e4daa9d41da1985c5b5159e77cc132a45a74c42ece870fa0c53198be1fb9bd227d81cfb5d7b8ba9383445fb2bba000f5a2a014965d936fcfe72afe56bbb90796ef141b9f9d10db58a2ca6fbf5353c5a5f61fb1c0f38177b87868c5c30d92df339c101d5d50a2b505fa4c790a1143e153c8efc571f95d6e59412f4f502d0423acdc0573fb9a3388455bcfd1321f81c98d4d26546af3161537421be2f91a562565dff34c9656e1719408e6ac236d69303b74ec53e9f35cb6eafea92290206beb09c4afeca7d4efeb44c5442368413bb483eafcf2bc578f8a44bd6f6ff732d756bc9dde69142c0b12c55651bdb3b55a9e348c75785188f1cebd8e1de6d101b182986a2f5ae5491841dd0df8438339e41680c52b51cfcefff499f1ce84ae81b266b2b749662dcd196722ad950ef37721be4c64cd44b14f54299b40b486954ab33b3dc9c46c50ceb546f513b7430f3b9395dcc8bf29485db70447993310780d764dc793ab2cde4197f9cb7b6f591196796cb277642813056037ad95ebcdb72afd7449c41dc9cf4b6b57a19d20068273cdbf011fef03b329cdc48c8cd447fe58970ad6e2ea7d97ceae048f4f97fe66747d0473cd60c201d565c209aaea775318ba0190fbb5fa691e8acf37a208960c02eea556acbab4befdebf0fd1a1b718ff8b6faee0fa0c196b33145a563e43f4c49f6f68102d9294837e546d42a93a21f737012fb4b7d12b9a6c6e4296f12537f27b92ae6f6f98f7777033f84d5d29d2c96860bf1ef0b0b16bf96ce5031cf3c9f7891c927bc844b9066d5f10349d8247f498f28ce1915ec7df34ee67d7bff830080ec31c4a7e96c00d33f71646feb15c2081efa7aa7729346e9e6035f98f32a8d49401a983c57d9fb554138bf0d142d68cb439bea344729ffcbcff3cae1f59e79573be316f9d8b41762ab3b3edc9b86c24b8b54ae153b8e90d3f5266756fc83ab421e3d00f6a4ab612936568ce8056afbf943b0a083eace22a49a6bcc4623e488a70a0dda70c137f3c67ce41066f168b300369b715c10b65ee276215cbcfb4d8111c2343804540bc4acd87887b146dd49a27f6cd6744f6f7039a9795fbac6c71f88a3bb87e79f6716166db1e2d291a283db12b2ef96e3a164676247f4c8f94ade684b19f6eee1b762a649db7bbf91b67f76cf5e5706259867ab79ab4754f78bd9c9d7b3b5438177657fc1fc648b62c084c213849be402dea529251c7f6ca37e4fb61e9fbf9609325246de80051e2d91ac4fbff2c1e1a2759704cc73d6541c17949a899000a788f86953f55b447f688ad93c9279bceb563982dca9a04ef61f9ab255d1582d5d4e73dc57d83ccfaa677491119fe5c0ac1372fcf91301d1fc4116f17565f63804bbfdd382ec3801a813db1f861b53d1e83a90735f1e2e71306d73ec80cf47ab606fc3d01ca702be30f4f9a6281c99271281fbda62a157b81fbfad41b6a6f32a37464144d60ba3244a2229dfd98a34a74dd2087590d59563eb68adb57270695faa4b929f40685f62104a89438563292997a0787aa3ebef4f6ffeedf0667d5051302f7dc04cf24dc5eb0706ff59dcd30f32564b1e3c63fb6b76eed1f84decfa8b95738a45b858a9e251f9d004d5b2008ecaa12ff1e9053ec1c45acd0a4e08d7bf463d42ec6cf5cfcdae788b5123b357a9269406fbb83a62d73402791bc56e57119647670cc24e1e002a0be192d1505c0f9fe0855dc26b27d5b2c4f4bdd12c381228860ec84e31c21ef629b9e24511403a7f3ebbc99376b72a07368d324b69324dbaac41f31e8a5cfb0cb73fcf67d57d5cd6ef00a7d5431e59bab4904bc4552d8fcbcdf31500c93e4fcd7aaba695774787050568f5ef41c7f9483ebac0e9e764a57875c5cef284f5fc55542bbdfc0de1c560609a850571b50c5d6ddb9b05c99b3d8da37515431c63a0964d38807fd343c490afafa769c651f89cb2169fa30564baae996c517bfe46de0d2962ad0b00dc917f36e7e1a8004d72eb9cd8384fefa8ff608213c63bb480fe637aca33d9ac6fddd4ee94fe66084d24b53a525528e7689b2a9e0986cdb4aefe4a04873b2f4a0a4b2464fc8031decd7ab3a85b97b1711fe218d232cc2c426046034471346dd3fe19c4ae1d1394b218162b0dce447bd511e7b377a81fbefecb3682821fc9c4b5161da3e42f2eacced9531a977995a0cff2da9b4abb58701202b8c12f55a1dbaa25d9a34ebafc28129b3a80e47c110c8baf5c3302d8fbd21753600d134e30ec3db94cd008e924ed20f62669d930ac7d33a942353440b73c183fe6014703f3b79ef0bdcf797dd7c69ad47360439eff37630d8b1ae1f485a31cea9c2ab691e019d7bca29ca71f0d3711523246aadee51d745086dd01d6284a07625dbd64e06d9b790940afd8fcb7a22b03e0ed417b30b129fda00d42aee1e0a3de382bcc29ac220bf69ae165bc35eac92015ed1bfcc51829c59fceaebaa4e8dbc11f7483ad2159b1ffda9338c42bd16b043490c04ebf3d45834447078a7a19547fb68eb65ef1f7c38e488bba73505a21c5ff38fbadd5281bd6bc651af0e16cbacf036f0c2a5ae5fccf92bb20a87db3a7f7b57db5dd36de03cc4e5fb216f92dea2181543ad6b1224cb62e9afecc7c6299315aa68a5599aa2e8b63f921fbf7af4a2c02eda9989881fa90803135dc160a4a71eaaa9182c848d52ecc7bb28e8ea104da91fe0bea24668efa029073e7d3c76b0622cad5777bc77e8d2518527601822d1db7866258dae30f39c0e77796eb9a0f03cfcb890fe62736b686e414fe3fd405db9a2e15c1fb0404fe9e4facea18a832ac6aea425bccb196b695344dc7383431972d3f5fc8f7d5f4bb34d6a69052a5265eacbc4ccbfd0102b1506ca6ff0fe0525967af6b04185bad135822ebf5e082667934f0e10b77e9605ea8d685414104f9100003b036cd2f32670b2151ab22c02a3582abba93dbcbf5eed864fdfcd4c023edfaf9eeea4b0acc1d80ec6cc5abbb36005c9f128f4286443479a6330e7b6b3dcfc3ecc6441a5ec03c2f481840a8c6889d369a573f396884c52bdaec8e5c380cf33309f0436e627ebec20b36aeb6913c3f6b766a2ce6b015db3d15696fc9eb1adb0346190663a980cb6d2df177633288538780c71ed60e8c517f05283ec2f3c9e51516cf7cb77527e4760051fcc4daa8893bddcd15096e1180098034229d2592dec7217c3275a46e49434c435afe499663edd81e34d66c267b9846bcceea5a17840c019caa67660a435139696e913ae43336b92a9bc542594d20aad1cde69460aea4f12a9d3d73d00b401e82bb2c1a351efd2bf0854ef6f4d225b9dc06840e8149aa1648dbed9dcbd072113929ce3fd4588ecb48ae27809e10649876e6eef03afc9f02ee147716048cb0342993689d312cf8cf8aab7c36357ca14a4909bd63958bfc32c4a225362817805c736a41f42fc270e8d73721623ecd0e74122fdca0c2cd83a65d1b5f337644762bd1e5d2532c75819d9bb2a08224e4b48f29f926ad5e8b3121296f90c09f1c82a4e14e390d65a48fb6a997c59c93e460288ee09dc9b54a7747b7e18b885814207d6807ea082bc5999ca8f809e4218361a5b254dd2b674dfa5020e917e5a5f7530fdd9868e96dd74f950172d19e1c91277637993297167e615c8b25afca30f79ccd94ea761930cb88f75cf74ed43a653f8de5baff5db1524e5ce4f85b43a229a8dc4a3ebbba5d2e05e6d245dce05f1c4d2900390a20894c07f9df6109d4a3f643409e577945796fed701e65fde764bd6335756aa851bd4130b8f657cabe9d409e02e56bc9e7991827a6d6a07e2b15007c7e59483a65e22acc5fd31231fd8fbfb97b49bddb02a11f5ca6259fa19377efeaa93a5d410012f05247e1b61160ce543cdcdfc2cfaf3a9525986062c82585cae77f233d764600a8ae8ffa080a344b65ef96d74571da0910c0d164ae919163853999ed31f304d33f0bb2a30c919abf8eb1631d1587657eeedeb16f06f7a437150c8b4ea08c22de72ee1f01c8f7f98282918962fc73eb20525c2e618483b15a3a77c0e0221018e807ed0539c29bad1d7da182e8d40485c19f2a6c81cb6481bf4a70559b3488c33e593f929139abe733b055a6879173ee53bff5229594a36311c491151e74fbd9e42e61080d4be9cdf2a4dbe5f0a174dd70ba6d314e454ebf80c2fa7a19696a4b21332e7072c44e39fb9711b59817880ebe70e6050e0aa2d00de458206238ae060f30224abaaca5b6203824044c92fa723d1bbfdcf36dec56ed7f9e75d69d26553b26d7ea4a8598f03d06275ae96531a608719185b72b6a390159ea01b6a3e644978cc71dfcb3e207e5d9b10b7fcf852f8a64cca775539ec67f741deb6c43b2d5e0b01ff8210fd786b0c9c9edd977bdf1d76e2987a6d7659bedf2bb206a00c62925979a141fed0cdbd57aa7efd8da2a3bde819485fd43b6cd308f2363d7c5ff6bd3cbef5b45a9a11a89125a5"})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000031000/0x2000)=nil, 0x2000)
ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f00000004c0)={0x7, 0xfff, 0x7f, 0x0, 0x8, 0x5, 0x0, &(0x7f0000000440)=[{0x10, 0x1ff, 0x401}, {0x8, 0x1ff, 0x6}, {0xffffffff, 0xfe, 0x6}, {0x15, 0xfe, 0x7}, {0xffffffff, 0x1ff, 0xe0}]})
r5 = socket(0x29, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0xe1, 0x4)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x2b, 0xb, 0x17, 0x800002, 0x8, 0xa9, 0x2, 0x2})
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000340)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/147, 0x93}], 0x2, 0x0, 0x0, 0x2001}, 0x38, 0x2001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu!=0||!')
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")

2.438505302s ago: executing program 3 (id=3765):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10000, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'pimreg\x00', 0x1ff})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, <r2=>0x0, 0x0]}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0xac, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10001}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0xc009, @empty, 0xaf}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x8000, @empty, 0xc}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}]}, &(0x7f00000002c0)=0x10)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x2001)
readv(r3, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38)

2.132684072s ago: executing program 5 (id=3768):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0xfd, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa, 0x3}, 0x10ecc8, 0x1224, 0x0, 0x8, 0xc, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0xcd)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2f)
socket$inet6_sctp(0xa, 0x5, 0x84)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x5}, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r4=>0x0})
r5 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400fcc7f372945a0018fe8c4cd9a5000019000109000000002000000002185172ba846b5458db8385bb00000002fd0008000400", @ANYRES32=r4, @ANYRESOCT=r5], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x13)
r6 = semget$private(0x0, 0x20000000102, 0x0)
semop(r6, &(0x7f0000000240)=[{0x4, 0x0, 0x1800}], 0x1)
semctl$GETNCNT(r6, 0x3, 0xe, &(0x7f0000000680)=""/200)
ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3e)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c8c, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000000800)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x50c0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x3, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x7, 0x2, 0x80000014, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x79, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x2f)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

1.905318389s ago: executing program 5 (id=3773):
getpid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xf}, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x1, 0x63, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r1, &(0x7f0000000680)={0xf7b, 0x7, 0x0, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x2, 0x320000}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000240)={0xa})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0xa1ff, 0x0, 0x41}, 0x0)

1.528112171s ago: executing program 3 (id=3778):
modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10)
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a320000000005000400010000001400078005001500000000000800114000000046050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}}, 0x84000)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000005c0), 0x10)
read(r2, &(0x7f00000027c0)=""/4073, 0xfe9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040)

1.512543641s ago: executing program 1 (id=3779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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")
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x6)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x11)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40000c4)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0xc000, 0x0, 0xfffffffffffffff7, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") (async)
creat(&(0x7f0000000080)='./bus\x00', 0x0) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x6) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x11) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40000c4) (async)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0xc000, 0x0, 0xfffffffffffffff7, 0x2) (async)

1.419331084s ago: executing program 3 (id=3780):
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3c001b2659f341f2dce7b458c1dc0c80a4bbffb45e017511ee44aa08905"], 0x68)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a5010000"], 0x18)
sendmmsg$inet6(r0, 0x0, 0x0, 0x44)

1.350346827s ago: executing program 3 (id=3781):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x9, 0x3, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000380)={@initdev, <r11=>0x0}, &(0x7f0000000400)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440))
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1ac, r10, 0x701, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x4}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x280408c5)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440f0)

1.333438747s ago: executing program 3 (id=3782):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0x1, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x80000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x404c010)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = socket(0x400000000010, 0x3, 0x0)
getsockopt$netlink(r5, 0x10e, 0x5, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x5a)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c916, &(0x7f0000000240)={[{@dioread_nolock}, {@noblock_validity}, {@noquota}, {@resgid}, {@data_err_ignore}, {@abort}, {@minixdf}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$eJzs3V1PZGcdAPD/GZgtr0KjF7VJa+PWANEdQOyWeFFrYvSqiVrvK8JACANDYGgXUpXGD2BijDXxqlfemPgBTEw/gjFpovdGjS/RXb3YRHfHnDMvy7JnFtgdZhB+v+RwnvOc58z/+c+Eh/PGmQCurJci4npE3K/X6zMRMdGsLzSnOGxMabs7t99dTqck6vU3/5FEJI26tNn0kdccbW42FBHf/FrEd5JH4+7uH2wsVSrlnebybG1ze3Z3/+DG+ubSWnmtvLWwMH9z8dXFVxbnupLnWES89pU//+SHP//qa7/+3Dt/eOuv099LmvURD/Lotkbqxey9aBmMiJ3zCNYng1mGAAD8P2jt5386ImZiIgayvTkAAADgMql/aSz+m0TUT2XodM0AAACAC6WQ3QObFErN+wDG4oX3S6XGPbyfiJFCpbpb++xqdW9rpXGv7GQUC6vrlfJc817hySgm6fJ8Vm4vR8Tdo8vlhYh4NiJ+PDGcLZeWq5WVfp/8AAAAgCti9Njx/78fbfKffvQLAAAA6LLJfncAAAAAOHeO/wEAAODyc/wPAAAAl9rX33gjneqt779eeXt/b6P69o2V8u5GaXNvubRc3dkurVWra9kz+zZPer1Ktbr9hdjauzVbK/9tvFFX3duqvbX+0FdgAwAAAD307Kc+/H0SEYdfHM6m1LV+dwroicGzNP7T+fUD6L2BfncA6Jsz/f0HLpVivzsA9F1ywvqhD76bv+I3HTfxX0UAAHDBTH0y//r/wInnBg4LPeoicE6c/4Ory/V/uLrOev3f/gJcHsUYCAfycLW1L9YPP1w/2px3fHhH5+v/x9TrT9QxAACga8ayKSmUIrLzAGNRKJRKEePZMUExWV2vlOci4mMR8buJ4jPp8ny2ZRLJSTcNAwAAAAAAAAAAAAAAAAAAAAAAAACZej2J+hksnqk1AAAAcBFEFP6SZE/zj5iaeHns+PmBa8ndiWweEe/87M33by3Vajvzaf0/2/W1nzbrP9+PMxgAAADAca3j9Gw+3O/eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDZ3Ln97nJr6mXcv385Iibz4g/GUDYfimJEjPwricEj2yURMdCF+IfvRcRzefGTtFsx2exFXvzhPscf7UJ8uMo+TMef1/N+/wrxUjbP//27mY1QT6/z+Fdoj38DOfHTuvF26fGe/+iXsx3jvxfx/GD++NOKn8T4w/EPG+PP9VPm+O1vHRx0Wlf/IGIq9+9P0m6TlmZrm9uzu/sHN9Y3l9bKa+WthYX5m4uvLr6yODe7ul4pN3/mxvjRC7+6/7j8RzrEn2znnz/+vnzK/O99dOv2xxvFYnvz5EH86ev5n/9zHeIXmp/6Z5rldP1Uq3zYKB/14i9++2Kr/HpO/ivH85+JY59/fv7Tp8x/5hs/+OMpmwIAPbC7f7CxVKmUd3pVKETvYp268FTvRrpb1KwZuRjpPEnh2oMsuvvK6ft6ERLMK3z/STdPd387rBrovOpCFYZOaBPxTF9HJgAAoNsePQYGAAAAAAAAAAAAAAAAAAAAeu2cnzR2Ly0Uj8U8zH524+n5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd878AAAD//+w2y28=")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22406e, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r8, 0x25, 0x0, @void}, 0x10)
r9 = socket(0x10, 0x803, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{0x0, 0xdd12}], 0x1}, 0x20040890)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r10, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc68}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6006}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x802}, 0x20040000)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

1.218638381s ago: executing program 2 (id=3785):
r0 = socket(0x1d, 0x80802, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
writev(r0, &(0x7f0000000580), 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000ffffff00"/26], 0x50)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0xfffd, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000006faff0000000011900ce8ce2a1a71403f0384dcca0ec3f9c05a389611bb441f7950ff82f9d332eb0d9dc41cc3ead56877aa1849cf0e8ec58e885ceee964f041a02b98f870bd37c630e2efd77643b76e653476a6ff73d9c64e1edbcccdda56bc1e85487be6db7e9bfc2e68fd4724438cc26aec09550e0ae62791b3311ea681deadc125e27a57f992e3cb4a413a15da9bdb3eff891b60", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f0000001400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r10=>0x0}})
r11 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4041)
msgsnd(0x0, &(0x7f0000000e40)=ANY=[@ANYRESDEC=r10, @ANYRESOCT=r11], 0x8, 0x800)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000006c0)={r10, 0x0, 0x0, [0x3, 0x7f, 0xa1fb, 0x86ee, 0x4], [0x3, 0x4, 0x4, 0x2, 0x2, 0x10000, 0x7fffffff, 0x8, 0x9, 0x7f, 0x8, 0x2, 0x5, 0x1ff, 0x5, 0x0, 0x7, 0x1, 0x9, 0xc, 0x329, 0x10000, 0x9b, 0x4, 0x100000000, 0x9, 0x8, 0x8, 0x40, 0x5, 0x4, 0x2, 0x7, 0xfffffffffffffff9, 0xa8, 0x3, 0x6, 0x20, 0x8001, 0x1, 0x5, 0x8001, 0x8, 0x4, 0x2, 0x9, 0x10, 0x4, 0x78, 0x2, 0x7, 0xfffffffffffffffd, 0x55, 0x9, 0x101, 0x6e247ec8, 0x100, 0x9, 0x1bc1, 0x4, 0x4, 0xd, 0x3, 0x4, 0x2d, 0x80000001, 0x24000, 0x4, 0x4, 0x8, 0x5, 0xfffffffffffffff8, 0x5, 0x9, 0x6c97, 0x55, 0x5, 0x4, 0x7, 0xd1ae, 0x2e, 0x80, 0x7fff, 0x1, 0x5, 0x0, 0x15bf, 0xbaae, 0x39f, 0x3, 0x3, 0xff, 0x8000000000000001, 0x4, 0x2, 0x8, 0x5, 0x400, 0x6, 0xe, 0x7ff, 0x6, 0x1, 0x5, 0x5, 0xf994, 0x10, 0x1ff, 0x1, 0x0, 0x322e, 0xf, 0x2, 0x3, 0xdf, 0xede7, 0x2, 0xffffffffffffffff, 0x8, 0xa, 0x8000000000000000]})
listen(r9, 0x5)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r9, 0x894b, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x90}, 0x24004004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = io_uring_setup(0x115a, &(0x7f0000000440)={0x0, 0x4042, 0x8, 0x4, 0x150})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r14, 0x25, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x30, "5c76276f6c86622447099377e66e2ebe40de"}})

1.175445352s ago: executing program 2 (id=3786):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r1, 0x0, 0x0, 0x4100, 0x0, 0x0)

1.175181482s ago: executing program 1 (id=3787):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000700)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x1f0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110, 0x11}, @unspec=@MARK={0x0, 'MARK\x00', 0x2, {0xadae, 0x8001}}}, {{@arp={@loopback, @rand_addr=0x64010101, 0xff000000, 0xffffff00, 0x2, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x1, 0xec0e, 0x5, 0x4, 0x5, 0x6, 'pim6reg\x00', 'pim6reg\x00', {}, {0xff}, 0x0, 0x2bc}, 0xc0, 0xe8}, @unspec=@LED={0x0, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8000, {0x401}}}}, {{@arp={@remote, @local, 0x0, 0xff000000, 0x1, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff8, 0xfff7, 0x1, 0x6, 0x3, 0x1, 'gretap0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x5}, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @private=0xa010901, @loopback, 0x2, 0x1}}}], {{'\x00', 0x21, 0xe8}, {0x28}}}}, 0x450)

1.096503115s ago: executing program 2 (id=3788):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0xffea}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.050006586s ago: executing program 2 (id=3789):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ffd, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x818)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, 0x0, 0x40)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000380), 0x4)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000002c0), 0x10000, r3, 0x0, 0x1c000000007400}, 0x38)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000005500)={{}, "593f082ff74e1e29695ab9c3455abdcbdde2932e665c6cd293c9aaf6497d6e419eef5e350365d0356e14b8bee74218b11cf0b7e9fe02737b352bf27fac05cf81a4fc56cf19e5650ba9f62da563feb7db782a8c7ccdbf84b936c69146af47896b20961f048caed70901c8460747e289e1fc1f93dca014a9553c44e1f6a7aae7c7c5baac9e1bfb928247bb5e005cef402de3a4c147b701f3f90e04f649ee82b21571f1a0dae6866d365d740aac9343d924db84aa83c21fcd95c8853f2a2ff9061db80a247dc14290f529da9c41d7fdcaf7ae7a8ce8acb3694ce150a6b379594d429ddf3888b82247441dd67b3da4bdc18b3738c92e9f03770b2bdc0c7a92dd9ecfc1886180ae78575d10b89ba1348df7a9cbbf42daf92fb6ef50b3d6edf666065f5d30fe1ad47c61976fe4d6b75f836386489d5737e56f7fe8f081578140884da3267f5195726b8d4916082d689c16a8f0c5cddd5d72f6df9a6a39e9bedbfb30283fe5bcfc13a61e0297247a4517399a65dfcd7ca87d475e3e63436a88c9ec1ad3511b62836db36af3e7d125c239c4e140d89febd7d2b1f53d0fdb1c5cc81ed65f719b46228809cfc07208f0540eb3839c1eeae8846302ab0ee9299d1059571324e4abe1bdbe22539178decc8b53e721e6d8be0c3c24a79d2a1b0c8f64b0c025dcacd2546d61d077070cc7f3d09661b61ad0c4e710bead394525b4b8e0864c3598aadf13a939c52b137c321947667da9a7ceef3c829c4cc8c9c872d6f4719d0d9bc7ec5968925fa481c8565aba069c88cbdfbba0622332786f6eb95e0c5a163cf6c41cae8cbdb651dad7e368715ead24301a5732344aa35a57012eee1699e4ae0230cdfdd5ab902048f424fc2e1898c70d0bd21323598079b2cc421bc4c2857a39543d02800e4d7dcc531c0152cbe19e36c309046185e12e9f1eda50d1c70946853c2e6f04bc37bc9e333d817f5a80f94f89fe1713e20dc20687044ea09c971fa4333dee74323a0badd63030e4f2e2381043778881d2677890d55ad574353aafe6a0855d2737b62ae5e5790deb54f1ed08816d190b6f54c9860c0311e1524876280c719ece972be497b92f604c246070101c5563d6c8075bf398bb5c49406d9b62b2f36cfec52c42f2a464b4aef23c94bc1554d4061cfcab86d16e09d41454de25ab184458846a779645e9f602c91ca1742f8d4a4e9035c27db6e35efb4efd7ce6b97cd7e1aca1016b109cd023a3918d79c172a8f604618071fcca11f2941ff8253e0aece89fba17e997a2f97a47260bc2d6ac75e8f08d356e4daa9d41da1985c5b5159e77cc132a45a74c42ece870fa0c53198be1fb9bd227d81cfb5d7b8ba9383445fb2bba000f5a2a014965d936fcfe72afe56bbb90796ef141b9f9d10db58a2ca6fbf5353c5a5f61fb1c0f38177b87868c5c30d92df339c101d5d50a2b505fa4c790a1143e153c8efc571f95d6e59412f4f502d0423acdc0573fb9a3388455bcfd1321f81c98d4d26546af3161537421be2f91a562565dff34c9656e1719408e6ac236d69303b74ec53e9f35cb6eafea92290206beb09c4afeca7d4efeb44c5442368413bb483eafcf2bc578f8a44bd6f6ff732d756bc9dde69142c0b12c55651bdb3b55a9e348c75785188f1cebd8e1de6d101b182986a2f5ae5491841dd0df8438339e41680c52b51cfcefff499f1ce84ae81b266b2b749662dcd196722ad950ef37721be4c64cd44b14f54299b40b486954ab33b3dc9c46c50ceb546f513b7430f3b9395dcc8bf29485db70447993310780d764dc793ab2cde4197f9cb7b6f591196796cb277642813056037ad95ebcdb72afd7449c41dc9cf4b6b57a19d20068273cdbf011fef03b329cdc48c8cd447fe58970ad6e2ea7d97ceae048f4f97fe66747d0473cd60c201d565c209aaea775318ba0190fbb5fa691e8acf37a208960c02eea556acbab4befdebf0fd1a1b718ff8b6faee0fa0c196b33145a563e43f4c49f6f68102d9294837e546d42a93a21f737012fb4b7d12b9a6c6e4296f12537f27b92ae6f6f98f7777033f84d5d29d2c96860bf1ef0b0b16bf96ce5031cf3c9f7891c927bc844b9066d5f10349d8247f498f28ce1915ec7df34ee67d7bff830080ec31c4a7e96c00d33f71646feb15c2081efa7aa7729346e9e6035f98f32a8d49401a983c57d9fb554138bf0d142d68cb439bea344729ffcbcff3cae1f59e79573be316f9d8b41762ab3b3edc9b86c24b8b54ae153b8e90d3f5266756fc83ab421e3d00f6a4ab612936568ce8056afbf943b0a083eace22a49a6bcc4623e488a70a0dda70c137f3c67ce41066f168b300369b715c10b65ee276215cbcfb4d8111c2343804540bc4acd87887b146dd49a27f6cd6744f6f7039a9795fbac6c71f88a3bb87e79f6716166db1e2d291a283db12b2ef96e3a164676247f4c8f94ade684b19f6eee1b762a649db7bbf91b67f76cf5e5706259867ab79ab4754f78bd9c9d7b3b5438177657fc1fc648b62c084c213849be402dea529251c7f6ca37e4fb61e9fbf9609325246de80051e2d91ac4fbff2c1e1a2759704cc73d6541c17949a899000a788f86953f55b447f688ad93c9279bceb563982dca9a04ef61f9ab255d1582d5d4e73dc57d83ccfaa677491119fe5c0ac1372fcf91301d1fc4116f17565f63804bbfdd382ec3801a813db1f861b53d1e83a90735f1e2e71306d73ec80cf47ab606fc3d01ca702be30f4f9a6281c99271281fbda62a157b81fbfad41b6a6f32a37464144d60ba3244a2229dfd98a34a74dd2087590d59563eb68adb57270695faa4b929f40685f62104a89438563292997a0787aa3ebef4f6ffeedf0667d5051302f7dc04cf24dc5eb0706ff59dcd30f32564b1e3c63fb6b76eed1f84decfa8b95738a45b858a9e251f9d004d5b2008ecaa12ff1e9053ec1c45acd0a4e08d7bf463d42ec6cf5cfcdae788b5123b357a9269406fbb83a62d73402791bc56e57119647670cc24e1e002a0be192d1505c0f9fe0855dc26b27d5b2c4f4bdd12c381228860ec84e31c21ef629b9e24511403a7f3ebbc99376b72a07368d324b69324dbaac41f31e8a5cfb0cb73fcf67d57d5cd6ef00a7d5431e59bab4904bc4552d8fcbcdf31500c93e4fcd7aaba695774787050568f5ef41c7f9483ebac0e9e764a57875c5cef284f5fc55542bbdfc0de1c560609a850571b50c5d6ddb9b05c99b3d8da37515431c63a0964d38807fd343c490afafa769c651f89cb2169fa30564baae996c517bfe46de0d2962ad0b00dc917f36e7e1a8004d72eb9cd8384fefa8ff608213c63bb480fe637aca33d9ac6fddd4ee94fe66084d24b53a525528e7689b2a9e0986cdb4aefe4a04873b2f4a0a4b2464fc8031decd7ab3a85b97b1711fe218d232cc2c426046034471346dd3fe19c4ae1d1394b218162b0dce447bd511e7b377a81fbefecb3682821fc9c4b5161da3e42f2eacced9531a977995a0cff2da9b4abb58701202b8c12f55a1dbaa25d9a34ebafc28129b3a80e47c110c8baf5c3302d8fbd21753600d134e30ec3db94cd008e924ed20f62669d930ac7d33a942353440b73c183fe6014703f3b79ef0bdcf797dd7c69ad47360439eff37630d8b1ae1f485a31cea9c2ab691e019d7bca29ca71f0d3711523246aadee51d745086dd01d6284a07625dbd64e06d9b790940afd8fcb7a22b03e0ed417b30b129fda00d42aee1e0a3de382bcc29ac220bf69ae165bc35eac92015ed1bfcc51829c59fceaebaa4e8dbc11f7483ad2159b1ffda9338c42bd16b043490c04ebf3d45834447078a7a19547fb68eb65ef1f7c38e488bba73505a21c5ff38fbadd5281bd6bc651af0e16cbacf036f0c2a5ae5fccf92bb20a87db3a7f7b57db5dd36de03cc4e5fb216f92dea2181543ad6b1224cb62e9afecc7c6299315aa68a5599aa2e8b63f921fbf7af4a2c02eda9989881fa90803135dc160a4a71eaaa9182c848d52ecc7bb28e8ea104da91fe0bea24668efa029073e7d3c76b0622cad5777bc77e8d2518527601822d1db7866258dae30f39c0e77796eb9a0f03cfcb890fe62736b686e414fe3fd405db9a2e15c1fb0404fe9e4facea18a832ac6aea425bccb196b695344dc7383431972d3f5fc8f7d5f4bb34d6a69052a5265eacbc4ccbfd0102b1506ca6ff0fe0525967af6b04185bad135822ebf5e082667934f0e10b77e9605ea8d685414104f9100003b036cd2f32670b2151ab22c02a3582abba93dbcbf5eed864fdfcd4c023edfaf9eeea4b0acc1d80ec6cc5abbb36005c9f128f4286443479a6330e7b6b3dcfc3ecc6441a5ec03c2f481840a8c6889d369a573f396884c52bdaec8e5c380cf33309f0436e627ebec20b36aeb6913c3f6b766a2ce6b015db3d15696fc9eb1adb0346190663a980cb6d2df177633288538780c71ed60e8c517f05283ec2f3c9e51516cf7cb77527e4760051fcc4daa8893bddcd15096e1180098034229d2592dec7217c3275a46e49434c435afe499663edd81e34d66c267b9846bcceea5a17840c019caa67660a435139696e913ae43336b92a9bc542594d20aad1cde69460aea4f12a9d3d73d00b401e82bb2c1a351efd2bf0854ef6f4d225b9dc06840e8149aa1648dbed9dcbd072113929ce3fd4588ecb48ae27809e10649876e6eef03afc9f02ee147716048cb0342993689d312cf8cf8aab7c36357ca14a4909bd63958bfc32c4a225362817805c736a41f42fc270e8d73721623ecd0e74122fdca0c2cd83a65d1b5f337644762bd1e5d2532c75819d9bb2a08224e4b48f29f926ad5e8b3121296f90c09f1c82a4e14e390d65a48fb6a997c59c93e460288ee09dc9b54a7747b7e18b885814207d6807ea082bc5999ca8f809e4218361a5b254dd2b674dfa5020e917e5a5f7530fdd9868e96dd74f950172d19e1c91277637993297167e615c8b25afca30f79ccd94ea761930cb88f75cf74ed43a653f8de5baff5db1524e5ce4f85b43a229a8dc4a3ebbba5d2e05e6d245dce05f1c4d2900390a20894c07f9df6109d4a3f643409e577945796fed701e65fde764bd6335756aa851bd4130b8f657cabe9d409e02e56bc9e7991827a6d6a07e2b15007c7e59483a65e22acc5fd31231fd8fbfb97b49bddb02a11f5ca6259fa19377efeaa93a5d410012f05247e1b61160ce543cdcdfc2cfaf3a9525986062c82585cae77f233d764600a8ae8ffa080a344b65ef96d74571da0910c0d164ae919163853999ed31f304d33f0bb2a30c919abf8eb1631d1587657eeedeb16f06f7a437150c8b4ea08c22de72ee1f01c8f7f98282918962fc73eb20525c2e618483b15a3a77c0e0221018e807ed0539c29bad1d7da182e8d40485c19f2a6c81cb6481bf4a70559b3488c33e593f929139abe733b055a6879173ee53bff5229594a36311c491151e74fbd9e42e61080d4be9cdf2a4dbe5f0a174dd70ba6d314e454ebf80c2fa7a19696a4b21332e7072c44e39fb9711b59817880ebe70e6050e0aa2d00de458206238ae060f30224abaaca5b6203824044c92fa723d1bbfdcf36dec56ed7f9e75d69d26553b26d7ea4a8598f03d06275ae96531a608719185b72b6a390159ea01b6a3e644978cc71dfcb3e207e5d9b10b7fcf852f8a64cca775539ec67f741deb6c43b2d5e0b01ff8210fd786b0c9c9edd977bdf1d76e2987a6d7659bedf2bb206a00c62925979a141fed0cdbd57aa7efd8da2a3bde819485fd43b6cd308f2363d7c5ff6bd3cbef5b45a9a11a89125a5"})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000031000/0x2000)=nil, 0x2000)
ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f00000004c0)={0x7, 0xfff, 0x7f, 0x0, 0x8, 0x5, 0x0, &(0x7f0000000440)=[{0x10, 0x1ff, 0x401}, {0x8, 0x1ff, 0x6}, {0xffffffff, 0xfe, 0x6}, {0x15, 0xfe, 0x7}, {0xffffffff, 0x1ff, 0xe0}]})
r5 = socket(0x29, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0xe1, 0x4)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x2b, 0xb, 0x17, 0x800002, 0x8, 0xa9, 0x2, 0x2})
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000340)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/147, 0x93}], 0x2, 0x0, 0x0, 0x2001}, 0x38, 0x2001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu!=0||!')
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")

1.026336027s ago: executing program 4 (id=3790):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x668000, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0x53ba, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1f4}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc61914f", 0x1e}], 0x3}, 0x0)

940.09072ms ago: executing program 1 (id=3791):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
sendfile(r1, r1, &(0x7f0000000040)=0x1, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmsg(r2, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000)

893.728861ms ago: executing program 5 (id=3792):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000401000010000000000000000000000000a3c000000120a09"], 0x98}}, 0x0)

755.717876ms ago: executing program 5 (id=3793):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x20000000)
unshare(0x26020480)
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x6, 0x1, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10)
r3 = fsmount(r1, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080), 0x4)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r5 = fcntl$dupfd(r4, 0x0, r4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="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", 0x100}, {&(0x7f00000004c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99df928e46e25366db886525ab80ef54836d05b03d0b4bfe7a6a614713", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba2187907201a5edf75900ea24c56f4b2f453054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2d4e9dd17699a099d14f5ee5b3932061f3b51f72d3ad7b5627838", 0xe2}, {&(0x7f00000008c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320e", 0xce}], 0x5}, 0xc0d0)
close_range(r1, 0xffffffffffffffff, 0x0)

723.905096ms ago: executing program 4 (id=3794):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x28081, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa)
lsm_set_self_attr(0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="b30000000000000405000000000000002000"/32], 0x20, 0x0)
preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/132, 0x84}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/246, 0xf6}, {&(0x7f0000001740)=""/137, 0x89}], 0x4, 0xf31d, 0x402de6b5)

682.939428ms ago: executing program 4 (id=3795):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})

682.576408ms ago: executing program 4 (id=3796):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0)
socket(0x18, 0x803, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0xc, 0x4, 0x1, 0x80, r0, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000d40), 0x0}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x300, 0xce5ba66a3b447375}}, 0x20}}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r4, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0x10000, 0x0, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000))
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

573.992621ms ago: executing program 4 (id=3797):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000038ff9c0000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000560800000200000085000000b4000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000038ff9c0000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000560800000200000085000000b4000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400500000005000200890000000800014000000009080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

503.926114ms ago: executing program 4 (id=3798):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x5}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20008041)
recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
ioprio_get$pid(0x2, r4)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x12, @val=@netkit={@void, @value=r0}}, 0x1c)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000003000000", 0xfe60)
r10 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, [0x6, 0xf1bd, 0x2, 0x2724da0b, 0x3, 0x2716d711, 0xe000000, 0x4, 0x7f, 0x9, 0xcada, 0xd, 0x2, 0x901, 0xe80a]}, &(0x7f00000004c0)=0x100)
getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r11, @ANYBLOB="28001280090001007665746800", @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

401.533957ms ago: executing program 3 (id=3799):
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000f8ff1c000000000000000000850000003600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001940)={r1, r4, 0x25, 0x4}, 0x14)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

171.012424ms ago: executing program 5 (id=3800):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000005e7918e30b1b3d60000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a0104000000000000000003000a0a0900010073797a30000000000800024000000007"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080)
close(r0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
write(r3, &(0x7f0000000a00)="c7", 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

129.842455ms ago: executing program 2 (id=3801):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x18, 0x803, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0xc, 0x4, 0x1, 0x80, r0, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000d40), 0x0}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x300, 0xce5ba66a3b447375}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

64.519948ms ago: executing program 1 (id=3802):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68380, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x2, @perf_bp={0x0, 0x1}, 0x10c8ec, 0x0, 0x1, 0x3, 0x6, 0x5ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="f49a97019e", 0x5}], 0x1, &(0x7f00000004c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xf, 0x200, 0x0, 0x2}}], 0x38}, 0x20000010)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xd, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0xa0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000008000000010a0000fd", @ANYRES32=r2, @ANYBLOB="1400020006000000000000000000ffff0000000008000800f4020000"], 0x34}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1e, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_clone(0x0, &(0x7f00000003c0)="c37587a1b7f2c674fe263cd1520867c8e67dd8bb24245322a1d9cdf131fdd0f1e8c2e0719c83fb2e", 0x28, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580))

63.247028ms ago: executing program 2 (id=3803):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x10001, 0x134}, 0x8a92, 0x9, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "68df1757947b2cf6"}, 0x10}, 0x1, 0x0, 0x0, 0x240480c1}, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x141a82, 0x4)
sendfile(r7, r7, 0x0, 0x6)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES64=r6, @ANYRES32=r8, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008800)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)
sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r9, &(0x7f0000000240)={0x2, 0x0, @empty, 0x5}, 0x10)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r12=>r11}, './file0\x00'})
close(r12)
r13 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendfile(r11, r13, 0x0, 0x8000fffffffe)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_read_part_table(0x105a, &(0x7f0000001080)="$eJzsz82JwlAUBeDzJpOZZDUpIWVMBy5dWYE7tzYglmMDdmEBVuJCUJIQEPciwvct3s/lwOGGt2pLkmr7X+ZB9zvd3+mmR52v8ftozDTL45zI6a9qkpLzot+3l804/hmO62391NjXSXZDX8nq8MLVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBj3AMAAP//n0MKKw==")
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000001f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

0s ago: executing program 1 (id=3804):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x668000, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0x53ba, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb205848aa1febd8dd07bc25978ee5c6f83db659433b6187af151b76870a994fe4440c46b27fc4fae2e4ed9d711e652e6c397ccd89fc7181d168405d21d9f218508d0af65af34d43b9", 0x218}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc61914f", 0x1e}], 0x3}, 0x0)

kernel console output (not intermixed with test programs):

1: entered allmulticast mode
[  278.658422][ T6273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.776895][ T6273] syz_tun (unregistering): left allmulticast mode
[  278.895506][T12075] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.902551][T12075] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.911193][T12075] bridge_slave_0: entered allmulticast mode
[  278.917723][T12075] bridge_slave_0: entered promiscuous mode
[  278.924545][T12075] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.931767][T12075] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.939335][T12075] bridge_slave_1: entered allmulticast mode
[  278.945931][T12075] bridge_slave_1: entered promiscuous mode
[  278.963197][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.973682][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.009680][T12075] team0: Port device team_slave_0 added
[  279.016464][T12075] team0: Port device team_slave_1 added
[  279.036563][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.043950][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.078508][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.093951][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.101066][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.127275][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.164033][T12075] hsr_slave_0: entered promiscuous mode
[  279.178292][T12075] hsr_slave_1: entered promiscuous mode
[  279.184316][T12075] debugfs: 'hsr0' already exists in 'hsr'
[  279.190155][T12075] Cannot create hsr debugfs directory
[  279.403682][T12104] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3027'.
[  279.465952][T12075] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  279.474971][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.482891][T12075] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  279.491472][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  279.499348][T12075] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  279.508053][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  279.515782][T12075] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  279.524244][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.562186][T12075] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.575283][T12075] 8021q: adding VLAN 0 to HW filter on device team0
[  279.584829][ T2222] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.591899][ T2222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.603362][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.610467][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.735195][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.831029][T12141] loop1: detected capacity change from 0 to 512
[  279.851755][T12075] veth0_vlan: entered promiscuous mode
[  279.859768][T12075] veth1_vlan: entered promiscuous mode
[  279.861785][T12141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.874121][T12075] veth0_macvtap: entered promiscuous mode
[  279.881240][T12141] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  279.890882][T12075] veth1_macvtap: entered promiscuous mode
[  279.905736][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.916775][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.927795][ T1945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.937218][ T1945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.946320][ T1945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.955309][ T1945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.004405][T12148] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3021'.
[  280.013736][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3021'.
[  280.023148][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3021'.
[  280.197477][T12167] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3038'.
[  280.210819][T12169] erspan1: entered promiscuous mode
[  280.216036][T12169] erspan1: entered allmulticast mode
[  280.334707][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'.
[  280.379604][T12182] syzkaller1: entered promiscuous mode
[  280.385177][T12182] syzkaller1: entered allmulticast mode
[  280.579414][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.814906][ T8208] syz_tun (unregistering): left allmulticast mode
[  280.858402][T12191] loop5: detected capacity change from 0 to 512
[  280.886998][T12191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.925040][T12191] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  281.073435][T12197] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.080533][T12197] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.088070][T12197] bridge_slave_0: entered allmulticast mode
[  281.099360][T12197] bridge_slave_0: entered promiscuous mode
[  281.106472][T12197] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.113824][T12197] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.121468][T12197] bridge_slave_1: entered allmulticast mode
[  281.127939][T12197] bridge_slave_1: entered promiscuous mode
[  281.146025][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.158713][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.187163][T12197] team0: Port device team_slave_0 added
[  281.194119][T12197] team0: Port device team_slave_1 added
[  281.217683][T12197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.224732][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.251212][T12197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.263223][T12197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.270170][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.296151][T12197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.342943][T12197] hsr_slave_0: entered promiscuous mode
[  281.350388][T12197] hsr_slave_1: entered promiscuous mode
[  281.357939][T12197] debugfs: 'hsr0' already exists in 'hsr'
[  281.363803][T12197] Cannot create hsr debugfs directory
[  281.370846][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'.
[  281.426078][ T3625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.443941][T12197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.494623][T12197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.544577][T12197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.590105][T12235] loop5: detected capacity change from 0 to 512
[  281.603914][T12235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.616701][T12235] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  281.617459][T12197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.390299][ T3625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.108740][T12156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.121590][T12197] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  283.154925][T12197] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  283.164015][T12197] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  283.187613][T12197] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  283.202424][T12244] loop3: detected capacity change from 0 to 512
[  283.209688][T12197] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  283.218915][T12197] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  283.226811][T12244] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024)
[  283.229333][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'.
[  283.236242][T12197] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  283.291890][T12197] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  283.321594][   T28] audit: type=1326 audit(2000000254.425:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.413489][T12266] syzkaller0: entered promiscuous mode
[  283.421590][T12254] loop4: detected capacity change from 0 to 512
[  283.428374][   T28] audit: type=1326 audit(2000000254.455:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.454218][T12266] syzkaller0: entered allmulticast mode
[  283.464477][T12254] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  283.490758][   T28] audit: type=1326 audit(2000000254.455:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.517025][   T28] audit: type=1326 audit(2000000254.455:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.527693][T12254] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3067: iget: bad i_size value: 38620345925642
[  283.542949][   T28] audit: type=1326 audit(2000000254.455:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.584227][   T28] audit: type=1326 audit(2000000254.455:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.609853][   T28] audit: type=1326 audit(2000000254.455:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.621096][T12254] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  283.635540][   T28] audit: type=1326 audit(2000000254.465:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.663366][T12254] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3067: couldn't read orphan inode 15 (err -117)
[  283.670107][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  283.670139][    C1] EXT4-fs (loop4): initial error at time 2000000254: ext4_orphan_get:1399: inode 15
[  283.670256][    C1] EXT4-fs (loop4): last error at time 2000000254: ext4_orphan_get:1399
[  283.670271][   T28] audit: type=1326 audit(2000000254.465:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.670293][    C1] : inode 15
[  283.670300][   T28] audit: type=1326 audit(2000000254.465:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.670324][    C1] 
[  283.670339][   T28] audit: type=1326 audit(2000000254.465:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.4.3067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb71ffce59 code=0x7ffc0000
[  283.690436][T12197] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.709636][T12254] loop4: lost filesystem error report for type 5 error -117
[  283.806555][T12274] loop2: detected capacity change from 0 to 512
[  283.833631][T12254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.873455][T12276] wireguard0: entered promiscuous mode
[  283.878949][T12276] wireguard0: entered allmulticast mode
[  283.900168][T12197] 8021q: adding VLAN 0 to HW filter on device team0
[  283.917990][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.925186][ T1816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.959991][T12274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.981909][T12274] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  283.995770][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.002860][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.031211][T12197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  284.083714][T12285] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3067: bg 0: block 5: invalid block bitmap
[  284.110326][T12285] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 472 with error 28
[  284.125050][T12285] EXT4-fs (loop4): This should not happen!! Data will be lost
[  284.125050][T12285] 
[  284.134931][T12285] EXT4-fs (loop4): Total free blocks count 0
[  284.141092][T12285] EXT4-fs (loop4): Free/Dirty block details
[  284.155174][T12285] EXT4-fs (loop4): free_blocks=0
[  284.163916][T12285] EXT4-fs (loop4): dirty_blocks=476
[  284.179840][T12285] EXT4-fs (loop4): Block reservation details
[  284.193974][T12285] EXT4-fs (loop4): i_reserved_data_blocks=476
[  284.236713][T12197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.244119][T11464] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.254725][T12254] EXT4-fs (loop4): shut down requested (0)
[  284.258813][T12291] loop5: detected capacity change from 0 to 512
[  284.301429][T12291] EXT4-fs (loop5): fragment/cluster size (4096) != block size (1024)
[  284.390598][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'.
[  284.457945][T12197] veth0_vlan: entered promiscuous mode
[  284.476848][T12314] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3082'.
[  284.477489][T12197] veth1_vlan: entered promiscuous mode
[  284.545850][T12319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3083'.
[  284.564210][T12197] veth0_macvtap: entered promiscuous mode
[  284.581841][T12197] veth1_macvtap: entered promiscuous mode
[  284.620575][T12197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.640623][T12197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.661459][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.682874][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.834041][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.843750][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.859972][T12332] syzkaller1: entered promiscuous mode
[  284.865535][T12332] syzkaller1: entered allmulticast mode
[  285.067664][T12334] loop3: detected capacity change from 0 to 512
[  285.207227][T12334] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024)
[  286.063311][T12354] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3050'.
[  286.111812][T12357] netlink: 'syz.3.3094': attribute type 15 has an invalid length.
[  286.152623][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'.
[  286.237068][ T1945] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  286.280558][ T1945] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  286.347462][ T1945] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  286.375855][ T1945] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  286.544615][T12381] loop1: detected capacity change from 0 to 512
[  286.567830][T12381] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024)
[  286.756999][T12386] SELinux:  Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped).
[  286.767424][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3101'.
[  286.776371][T12386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3101'.
[  286.783035][T12398] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3105'.
[  286.789859][T12386] loop3: detected capacity change from 0 to 512
[  286.834396][T12402] loop1: detected capacity change from 0 to 512
[  286.844665][T12364] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.851980][T12364] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.859416][T12364] bridge_slave_0: entered allmulticast mode
[  286.866044][T12364] bridge_slave_0: entered promiscuous mode
[  286.872743][T12364] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.879844][T12364] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.887588][T12364] bridge_slave_1: entered allmulticast mode
[  286.894102][T12364] bridge_slave_1: entered promiscuous mode
[  286.912809][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.923284][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.966658][T12364] team0: Port device team_slave_0 added
[  286.977504][T12409] loop4: detected capacity change from 0 to 256
[  286.986968][T12364] team0: Port device team_slave_1 added
[  286.994164][T12402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.008609][T12386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.021148][T12402] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.032215][T12386] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.040104][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.045166][T12386] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.059379][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.065437][T12409] vfat: Unknown parameter '0000000000000000000000000000000000000000000'
[  287.085755][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.104952][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.111906][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.138393][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.175618][T12364] hsr_slave_0: entered promiscuous mode
[  287.192229][T12364] hsr_slave_1: entered promiscuous mode
[  287.198177][T12364] debugfs: 'hsr0' already exists in 'hsr'
[  287.206816][T12364] Cannot create hsr debugfs directory
[  287.283284][T12364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.357628][T12364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.469037][T12431] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3115'.
[  287.499108][T12364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.563673][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.591204][T12364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.672480][T12445] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3119'.
[  287.719277][T12364] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  287.754111][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  287.763525][T12364] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  287.788120][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  287.798445][T12364] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  287.809238][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  287.840019][T12364] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  287.849008][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  287.867625][T12455] loop1: detected capacity change from 0 to 512
[  287.885089][T12455] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024)
[  288.111595][T12473] loop4: detected capacity change from 0 to 1764
[  288.158763][T12364] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.234196][T12364] 8021q: adding VLAN 0 to HW filter on device team0
[  288.267616][ T2422] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.274722][ T2422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.342859][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.349957][ T1945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.800214][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.090551][T12364] veth0_vlan: entered promiscuous mode
[  289.145420][T12364] veth1_vlan: entered promiscuous mode
[  289.221726][T12364] veth0_macvtap: entered promiscuous mode
[  289.253369][T12364] veth1_macvtap: entered promiscuous mode
[  289.311999][T12364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.431060][T12364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.608325][ T5775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.633629][T12517] loop1: detected capacity change from 0 to 512
[  289.799402][T12517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  289.939817][T12517] EXT4-fs (loop1): 1 truncate cleaned up
[  290.013608][T12517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.434547][ T5775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.449057][ T5775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.496519][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.603384][T12539] syzkaller0: entered promiscuous mode
[  290.613987][T12539] syzkaller0: entered allmulticast mode
[  290.759820][   T28] kauditd_printk_skb: 233 callbacks suppressed
[  290.759836][   T28] audit: type=1400 audit(2000000261.853:2197): avc:  denied  { mount } for  pid=12364 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  291.117219][ T5775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.556911][T12553] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  291.663986][T12566] __nla_validate_parse: 4 callbacks suppressed
[  291.664053][T12566] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3146'.
[  292.813766][T12593] syzkaller0: entered promiscuous mode
[  292.820817][T12593] syzkaller0: entered allmulticast mode
[  293.545272][T12611] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3161'.
[  293.559121][T12613] loop1: detected capacity change from 0 to 512
[  293.579219][T12613] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  293.632660][T12613] EXT4-fs (loop1): orphan cleanup on readonly fs
[  293.657996][T12613] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3162: Block bitmap for bg 0 marked uninitialized
[  293.787958][T12613] loop1: lost filesystem error report for type 5 error -117
[  293.791776][T12613] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  293.799190][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  293.799250][    C0] EXT4-fs (loop1): initial error at time 2000000264: ext4_read_block_bitmap_nowait:517
[  293.799279][    C0] EXT4-fs (loop1): last error at time 2000000264: ext4_read_block_bitmap_nowait:517
[  293.884608][T12613] loop1: lost filesystem error report for type 5 error -117
[  293.902474][T12613] EXT4-fs (loop1): 1 orphan inode deleted
[  293.918045][T12613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  293.943451][   T28] audit: type=1400 audit(2000000265.038:2198): avc:  denied  { remount } for  pid=12612 comm="syz.1.3162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  293.957673][T12633] syzkaller0: entered promiscuous mode
[  293.969155][T12613] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  293.986709][T12613] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  293.996626][T12633] syzkaller0: entered allmulticast mode
[  294.009636][T12613] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3162: Block bitmap for bg 0 marked uninitialized
[  294.013325][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'.
[  294.024886][   T28] audit: type=1400 audit(2000000265.098:2199): avc:  denied  { write } for  pid=12612 comm="syz.1.3162" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  294.061272][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3162'.
[  294.110813][T12640] bond1: option arp_interval: invalid value (18446744072925216768)
[  294.137040][T12640] bond1: option arp_interval: allowed values 0 - 2147483647
[  294.150450][T12640] bond1 (unregistering): Released all slaves
[  294.289203][T12651] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3175'.
[  294.315884][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.612521][T12650] loop3: detected capacity change from 0 to 512
[  294.746858][T12656] loop4: detected capacity change from 0 to 512
[  294.853253][T12683] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.915265][T12683] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.922397][T12683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.936911][T12656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.956189][T12685] loop5: detected capacity change from 0 to 512
[  294.962785][T12656] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  295.010331][T12685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.091137][T12685] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  295.810979][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.826090][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.916551][T12704] syzkaller0: entered promiscuous mode
[  295.930474][T12703] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3192'.
[  295.944269][T12704] syzkaller0: entered allmulticast mode
[  295.981512][T12699] loop3: detected capacity change from 0 to 4096
[  296.037063][T12699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.091189][   T28] audit: type=1326 audit(2000000267.175:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.171101][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.186907][   T28] audit: type=1326 audit(2000000267.175:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.252453][   T28] audit: type=1326 audit(2000000267.175:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.312300][   T28] audit: type=1326 audit(2000000267.175:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.364377][   T28] audit: type=1326 audit(2000000267.175:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.429691][   T28] audit: type=1326 audit(2000000267.175:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.474141][T12719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3198'.
[  296.500788][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'.
[  296.516603][   T28] audit: type=1326 audit(2000000267.175:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.542402][   T28] audit: type=1326 audit(2000000267.205:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.567862][   T28] audit: type=1326 audit(2000000267.205:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.593324][   T28] audit: type=1326 audit(2000000267.205:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.3196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe632ce59 code=0x7ffc0000
[  296.680551][T12726] loop4: detected capacity change from 0 to 512
[  296.690618][T12728] loop5: detected capacity change from 0 to 512
[  296.717161][T12728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.763385][T12728] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  296.810283][T12737] netlink: get zone limit has 8 unknown bytes
[  296.862619][T12727] loop1: detected capacity change from 0 to 512
[  296.874883][T12741] syzkaller0: entered promiscuous mode
[  296.880364][T12741] syzkaller0: entered allmulticast mode
[  296.979241][T12727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.991749][T12727] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  297.081411][T12759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3212'.
[  297.105704][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.117542][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'.
[  297.223765][T12767] erspan1: entered promiscuous mode
[  297.229069][T12767] erspan1: entered allmulticast mode
[  297.321178][T12775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12775 comm=syz.4.3219
[  297.365223][T12775] netlink: 'syz.4.3219': attribute type 1 has an invalid length.
[  297.399678][T12782] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3222'.
[  297.410514][T12775] 8021q: adding VLAN 0 to HW filter on device bond1
[  297.440441][T12775] bond1: (slave dummy0): making interface the new active one
[  297.449043][T12775] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  297.489606][T12772] loop3: detected capacity change from 0 to 512
[  297.519908][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3225'.
[  297.531474][T12790] geneve2: entered allmulticast mode
[  297.600535][T12798] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  297.613290][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.623318][T12795] loop3: detected capacity change from 0 to 512
[  297.631779][T12795] EXT4-fs: Ignoring removed mblk_io_submit option
[  297.691824][T12795] EXT4-fs: Invalid want_extra_isize 8
[  297.700904][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'.
[  297.741639][T12804] erspan1: entered promiscuous mode
[  297.747080][T12804] erspan1: entered allmulticast mode
[  297.827791][ T1816] Bluetooth: hci0: Frame reassembly failed (-84)
[  297.945465][T12819] xt_hashlimit: max too large, truncated to 1048576
[  298.624906][T12826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3238'.
[  298.883013][T12837] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  299.478463][T12837] syzkaller0: entered promiscuous mode
[  299.640164][T12840] set_capacity_and_notify: 1 callbacks suppressed
[  299.640265][T12840] loop3: detected capacity change from 0 to 512
[  299.658049][T12840] EXT4-fs: Ignoring removed oldalloc option
[  299.664978][T12840] EXT4-fs: Ignoring removed orlov option
[  299.807170][T12837] syzkaller0: entered allmulticast mode
[  299.901507][ T4574] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  300.849695][T12840] EXT4-fs: Invalid want_extra_isize 32768
[  301.839420][T12841] loop4: detected capacity change from 0 to 512
[  301.846489][T12852] FAULT_INJECTION: forcing a failure.
[  301.846489][T12852] name failslab, interval 1, probability 0, space 0, times 0
[  302.020140][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.1.3245 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  302.020172][T12852] Tainted: [W]=WARN
[  302.020179][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  302.020190][T12852] Call Trace:
[  302.020197][T12852]  <TASK>
[  302.020205][T12852]  __dump_stack+0x1d/0x30
[  302.020229][T12852]  dump_stack_lvl+0x95/0xd0
[  302.020314][T12852]  dump_stack+0x15/0x1b
[  302.020329][T12852]  should_fail_ex+0x25e/0x270
[  302.020391][T12852]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  302.020471][T12852]  should_failslab+0x8c/0xb0
[  302.020507][T12852]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  302.020553][T12852]  ? debugfs_alloc_inode+0x34/0x40
[  302.020579][T12852]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  302.020605][T12852]  debugfs_alloc_inode+0x34/0x40
[  302.020659][T12852]  alloc_inode+0x40/0x170
[  302.020678][T12852]  new_inode+0x1d/0xe0
[  302.020701][T12852]  __debugfs_create_file+0x97/0x2b0
[  302.020727][T12852]  debugfs_create_file_full+0x3f/0x60
[  302.020803][T12852]  ref_tracker_dir_debugfs+0x10e/0x220
[  302.020833][T12852]  ? __ns_common_init+0xd7/0x120
[  302.020880][T12852]  preinit_net+0x147/0x380
[  302.020900][T12852]  copy_net_ns+0x188/0x460
[  302.020921][T12852]  create_new_namespaces+0x1f6/0x420
[  302.020973][T12852]  unshare_nsproxy_namespaces+0x115/0x150
[  302.021016][T12852]  ksys_unshare+0x411/0x760
[  302.021038][T12852]  __x64_sys_unshare+0x1f/0x30
[  302.021134][T12852]  x64_sys_call+0x1cef/0x3020
[  302.021204][T12852]  do_syscall_64+0x136/0x3c0
[  302.021235][T12852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.021294][T12852] RIP: 0033:0x7fa8c327ce59
[  302.021310][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.021329][T12852] RSP: 002b:00007fa8c1cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  302.021350][T12852] RAX: ffffffffffffffda RBX: 00007fa8c34f5fa0 RCX: 00007fa8c327ce59
[  302.021362][T12852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  302.021448][T12852] RBP: 00007fa8c1cd7090 R08: 0000000000000000 R09: 0000000000000000
[  302.021459][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  302.021470][T12852] R13: 00007fa8c34f6038 R14: 00007fa8c34f5fa0 R15: 00007fffab3c08d8
[  302.021487][T12852]  </TASK>
[  302.414310][T12854] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3246'.
[  302.423399][T12852] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888105aa64c0'
[  302.460320][T12841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.487134][T12858] 9pnet_fd: Insufficient options for proto=fd
[  302.522712][T12841] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  302.659444][ T1816] team0: Port device xfrm0 removed
[  302.696193][ T1816] bond0 (unregistering): Released all slaves
[  302.704859][ T1816] bond1 (unregistering): Released all slaves
[  302.715210][ T1816] bond2 (unregistering): (slave lo): Releasing backup interface
[  302.725564][ T1816] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  302.746200][ T1816] bond2 (unregistering): Released all slaves
[  302.763366][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.770950][ T2422] smc: removing ib device syz1
[  302.958993][T12875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3253'.
[  302.998184][T12878] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3254'.
[  303.023059][T12880] loop4: detected capacity change from 0 to 512
[  303.056803][T12880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  303.939967][ T1816] tipc: Left network mode
[  303.962097][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'.
[  304.221509][   T28] kauditd_printk_skb: 231 callbacks suppressed
[  304.221523][   T28] audit: type=1400 audit(2000000275.293:2441): avc:  denied  { firmware_load } for  pid=12885 comm="syz.3.3257" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  304.584068][ T1816] hsr_slave_0: left promiscuous mode
[  304.596338][ T1816] veth0_macvtap: left promiscuous mode
[  304.602744][ T1816] veth1_vlan: left promiscuous mode
[  304.615562][ T1816] veth0_vlan: left promiscuous mode
[  304.703693][   T28] audit: type=1400 audit(2000000275.773:2442): avc:  denied  { write } for  pid=12897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.758580][   T28] audit: type=1400 audit(2000000275.833:2443): avc:  denied  { write } for  pid=12909 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.781408][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.949601][   T28] audit: type=1400 audit(2000000276.023:2444): avc:  denied  { write } for  pid=12916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.989513][   T28] audit: type=1400 audit(2000000276.023:2445): avc:  denied  { write } for  pid=12933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  305.080983][T12942] loop4: detected capacity change from 0 to 512
[  305.121420][T12942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.182164][T12942] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.206252][   T28] audit: type=1400 audit(2000000276.272:2446): avc:  denied  { write } for  pid=12935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  305.229904][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3266'.
[  305.325335][   T28] audit: type=1400 audit(2000000276.322:2447): avc:  denied  { write } for  pid=12959 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  305.369554][T12950] loop3: detected capacity change from 0 to 512
[  305.386168][   T28] audit: type=1400 audit(2000000276.452:2448): avc:  denied  { write } for  pid=12961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  305.421086][T12974] netlink: 'syz.1.3268': attribute type 3 has an invalid length.
[  305.462769][T12974] netlink: 'syz.1.3268': attribute type 1 has an invalid length.
[  305.473315][T12974] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3268'.
[  305.482821][   T28] audit: type=1400 audit(2000000276.492:2449): avc:  denied  { write } for  pid=12979 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  305.578623][   T28] audit: type=1400 audit(2000000276.492:2450): avc:  denied  { ioctl } for  pid=12973 comm="syz.1.3268" path="socket:[41564]" dev="sockfs" ino=41564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  305.772035][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.796111][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'.
[  305.810800][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'.
[  305.868927][T13034] syzkaller0: entered promiscuous mode
[  305.889167][T13034] syzkaller0: entered allmulticast mode
[  305.941565][T13044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3281'.
[  305.987444][T13044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3281'.
[  306.021600][ T1816] bridge_slave_1: left allmulticast mode
[  306.027412][ T1816] bridge_slave_1: left promiscuous mode
[  306.034795][ T1816] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.042749][ T1945] Bluetooth: hci1: Frame reassembly failed (-84)
[  306.052525][T13056] loop4: detected capacity change from 0 to 512
[  306.061669][ T1816] bridge_slave_0: left allmulticast mode
[  306.067539][ T1816] bridge_slave_0: left promiscuous mode
[  306.068227][T13056] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  306.090345][ T1816] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.137838][T13068] loop3: detected capacity change from 0 to 512
[  306.206927][ T1816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.216709][ T1816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.225989][ T1816] bond0 (unregistering): Released all slaves
[  306.235163][ T1816] bond1 (unregistering): Released all slaves
[  306.250449][ T1816] bond2 (unregistering): Released all slaves
[  306.261543][ T1816] bond3 (unregistering): Released all slaves
[  306.271618][ T1816] bond4 (unregistering): Released all slaves
[  306.327204][ T1816] tipc: Left network mode
[  306.342302][ T1816] hsr_slave_0: left promiscuous mode
[  306.367565][ T1816] hsr_slave_1: left promiscuous mode
[  306.377006][ T1816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.392898][ T1816] batadv0: mtu less than device minimum
[  306.405648][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.416487][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.427207][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.437990][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.449007][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.460137][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.471046][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.482047][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.492975][ T1816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.543154][T13104] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=13104 comm=syz.1.3293
[  306.556077][ T1816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.570348][ T1816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.605378][ T1816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.612967][ T1816] batman_adv: batadv0: Interface deactivated: dummy0
[  306.619751][ T1816] batman_adv: batadv0: Removing interface: dummy0
[  306.626385][T13104] loop1: detected capacity change from 0 to 8192
[  306.634912][ T1816] veth1_macvtap: left promiscuous mode
[  306.640486][ T1816] veth0_macvtap: left promiscuous mode
[  306.643255][T13112] loop5: detected capacity change from 0 to 512
[  306.646113][ T1816] veth1_vlan: left promiscuous mode
[  306.658740][ T1816] veth0_vlan: left promiscuous mode
[  306.667490][T13112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.680468][T13112] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  306.691685][T13104]  loop1: p1 < > p2 p4 < p5 >
[  306.697816][T13104] loop1: partition table partially beyond EOD, truncated
[  306.706075][T13104] loop1: p1 start 134217728 is beyond EOD, truncated
[  306.715559][T13104] loop1: p2 size 591360 extends beyond EOD, truncated
[  306.730000][T13104] loop1: p5 size 591360 extends beyond EOD, truncated
[  306.797762][ T1816] team0 (unregistering): Port device team_slave_1 removed
[  306.808780][ T1816] team0 (unregistering): Port device team_slave_0 removed
[  306.813871][ T5266] udevd[5266]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  306.827412][ T8262] udevd[8262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  306.840370][ T5314] udevd[5314]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  306.851662][ T3025] veth0_vlan: left promiscuous mode
[  306.858602][ T3025] veth0_vlan: entered promiscuous mode
[  307.119813][T13142] loop1: detected capacity change from 0 to 512
[  307.137852][T13142] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024)
[  307.490128][T13167] __nla_validate_parse: 2 callbacks suppressed
[  307.490250][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3306'.
[  308.071587][ T4574] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  308.189806][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.344609][T13187] loop4: detected capacity change from 0 to 512
[  308.374941][T13187] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024)
[  308.397063][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'.
[  308.859194][T13207] loop5: detected capacity change from 0 to 512
[  309.203898][T13244] loop4: detected capacity change from 0 to 512
[  309.706222][T13244] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024)
[  310.297797][T13270] xt_hashlimit: size too large, truncated to 1048576
[  310.323957][T13268] loop4: detected capacity change from 0 to 2048
[  310.396282][T13268]  loop4: p2 < > p3 p4
[  310.412306][T13268] loop4: p3 start 65535 is beyond EOD, truncated
[  310.452300][T13268] loop4: p4 size 8192 extends beyond EOD, truncated
[  310.520042][T13276] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3345'.
[  310.631357][T13283] syzkaller0: entered promiscuous mode
[  310.648950][T13283] syzkaller0: entered allmulticast mode
[  310.850089][T13286] syzkaller0: entered promiscuous mode
[  310.866570][T13286] syzkaller0: entered allmulticast mode
[  310.951692][T13294] loop5: detected capacity change from 0 to 512
[  310.967333][T13296] loop1: detected capacity change from 0 to 512
[  310.983241][T13296] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024)
[  311.137090][T13309] syzkaller0: entered promiscuous mode
[  311.168808][T13309] syzkaller0: entered allmulticast mode
[  311.437139][T13330] loop3: detected capacity change from 0 to 512
[  311.454590][T13330] EXT4-fs: Ignoring removed nobh option
[  311.481052][T13330] EXT4-fs (loop3): 1 orphan inode deleted
[  311.495825][T13330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.510101][T13324] loop5: detected capacity change from 0 to 512
[  311.528048][T13324] EXT4-fs (loop5): fragment/cluster size (4096) != block size (1024)
[  311.567818][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.616632][T13340] syzkaller0: entered promiscuous mode
[  311.622458][T13340] syzkaller0: entered allmulticast mode
[  311.634128][T13332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=13332 comm=syz.2.3368
[  311.651666][T13344] syzkaller0: entered promiscuous mode
[  311.657398][T13344] syzkaller0: entered allmulticast mode
[  312.053163][T13360] FAULT_INJECTION: forcing a failure.
[  312.053163][T13360] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.178888][T13360] CPU: 0 UID: 0 PID: 13360 Comm: syz.5.3377 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  312.178918][T13360] Tainted: [W]=WARN
[  312.178924][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  312.178936][T13360] Call Trace:
[  312.178984][T13360]  <TASK>
[  312.179064][T13360]  __dump_stack+0x1d/0x30
[  312.179088][T13360]  dump_stack_lvl+0x95/0xd0
[  312.179127][T13360]  dump_stack+0x15/0x1b
[  312.179142][T13360]  should_fail_ex+0x25e/0x270
[  312.179162][T13360]  should_fail+0xb/0x20
[  312.179179][T13360]  should_fail_usercopy+0x1a/0x20
[  312.179213][T13360]  _copy_from_user+0x1c/0xb0
[  312.179236][T13360]  ___sys_sendmsg+0xc1/0x1e0
[  312.179273][T13360]  __x64_sys_sendmsg+0xd4/0x160
[  312.179306][T13360]  x64_sys_call+0x194c/0x3020
[  312.179325][T13360]  do_syscall_64+0x136/0x3c0
[  312.179410][T13360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.179432][T13360] RIP: 0033:0x7fccd4f1ce59
[  312.179448][T13360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.179464][T13360] RSP: 002b:00007fccd3977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  312.179547][T13360] RAX: ffffffffffffffda RBX: 00007fccd5195fa0 RCX: 00007fccd4f1ce59
[  312.179561][T13360] RDX: 0000000020040024 RSI: 0000200000000200 RDI: 0000000000000003
[  312.179573][T13360] RBP: 00007fccd3977090 R08: 0000000000000000 R09: 0000000000000000
[  312.179584][T13360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.179598][T13360] R13: 00007fccd5196038 R14: 00007fccd5195fa0 R15: 00007ffd038742e8
[  312.179615][T13360]  </TASK>
[  312.513703][T13381] syzkaller0: entered promiscuous mode
[  312.525023][T13381] syzkaller0: entered allmulticast mode
[  312.584690][T13371] loop5: detected capacity change from 0 to 512
[  312.626751][T13371] EXT4-fs (loop5): fragment/cluster size (4096) != block size (1024)
[  312.701546][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  312.701560][   T28] audit: type=1400 audit(2000000283.763:2464): avc:  denied  { relabelfrom } for  pid=13391 comm="syz.1.3390" name="" dev="pipefs" ino=42507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  312.740483][T13393] loop1: detected capacity change from 0 to 512
[  312.748196][T13396] loop5: detected capacity change from 0 to 512
[  312.762495][T13393] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  312.845042][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'.
[  312.853939][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3391'.
[  312.890519][T13400] x_tables: duplicate underflow at hook 2
[  312.898064][   T28] audit: type=1400 audit(2000000283.953:2465): avc:  denied  { ioctl } for  pid=13404 comm="syz.2.3396" path="socket:[43240]" dev="sockfs" ino=43240 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  313.381273][T13423] loop1: detected capacity change from 0 to 512
[  313.411572][T13423] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024)
[  315.631928][T13445] netlink: 'syz.4.3407': attribute type 4 has an invalid length.
[  315.659517][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'.
[  315.749370][T13450] FAULT_INJECTION: forcing a failure.
[  315.749370][T13450] name failslab, interval 1, probability 0, space 0, times 0
[  315.779735][T13450] CPU: 0 UID: 0 PID: 13450 Comm: syz.5.3408 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  315.779764][T13450] Tainted: [W]=WARN
[  315.779770][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  315.779783][T13450] Call Trace:
[  315.779791][T13450]  <TASK>
[  315.779800][T13450]  __dump_stack+0x1d/0x30
[  315.779895][T13450]  dump_stack_lvl+0x95/0xd0
[  315.779913][T13450]  dump_stack+0x15/0x1b
[  315.779976][T13450]  should_fail_ex+0x25e/0x270
[  315.779997][T13450]  ? nfs_alloc_fhandle+0x2c/0x60
[  315.780028][T13450]  should_failslab+0x8c/0xb0
[  315.780125][T13450]  __kmalloc_cache_noprof+0x5f/0x400
[  315.780144][T13450]  ? __kmalloc_cache_noprof+0x18a/0x400
[  315.780188][T13450]  nfs_alloc_fhandle+0x2c/0x60
[  315.780212][T13450]  nfs_init_fs_context+0x4d/0x7b0
[  315.780235][T13450]  alloc_fs_context+0x490/0x570
[  315.780305][T13450]  fs_context_for_mount+0x22/0x30
[  315.780323][T13450]  do_new_mount+0xe7/0x8d0
[  315.780379][T13450]  ? security_capable+0x7b/0x90
[  315.780407][T13450]  path_mount+0x4ad/0xb90
[  315.780511][T13450]  __se_sys_mount+0x28c/0x2e0
[  315.780526][T13450]  ? fput+0x8f/0xc0
[  315.780582][T13450]  __x64_sys_mount+0x67/0x80
[  315.780612][T13450]  x64_sys_call+0x2d61/0x3020
[  315.780704][T13450]  do_syscall_64+0x136/0x3c0
[  315.780731][T13450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.780749][T13450] RIP: 0033:0x7fccd4f1ce59
[  315.780766][T13450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.780836][T13450] RSP: 002b:00007fccd3935028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  315.780853][T13450] RAX: ffffffffffffffda RBX: 00007fccd5196180 RCX: 00007fccd4f1ce59
[  315.780866][T13450] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  315.780878][T13450] RBP: 00007fccd3935090 R08: 0000200000000380 R09: 0000000000000000
[  315.780889][T13450] R10: 0000000000008402 R11: 0000000000000246 R12: 0000000000000001
[  315.780922][T13450] R13: 00007fccd5196218 R14: 00007fccd5196180 R15: 00007ffd038742e8
[  315.780968][T13450]  </TASK>
[  316.509018][   T28] audit: type=1326 audit(2000000287.569:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.4.3411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb71ffce59 code=0x0
[  316.685614][T13464] netlink: 'syz.2.3412': attribute type 49 has an invalid length.
[  316.923486][T13464] ip6gretap0: entered promiscuous mode
[  316.929362][T13464] ip6gretap0: entered allmulticast mode
[  317.438892][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'.
[  317.501741][T13485] netlink: 'syz.4.3419': attribute type 30 has an invalid length.
[  317.502088][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'.
[  317.502110][T13491] netlink: 'syz.4.3419': attribute type 30 has an invalid length.
[  317.621933][   T28] audit: type=1400 audit(2000000288.678:2467): avc:  denied  { write } for  pid=13490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.706218][T13508] loop4: detected capacity change from 0 to 512
[  317.849884][T13508] EXT4-fs: inline encryption not supported
[  317.884274][   T28] audit: type=1400 audit(2000000288.948:2468): avc:  denied  { write } for  pid=13510 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  318.201700][T13508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  318.477516][T13508] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  318.663806][T13520] loop5: detected capacity change from 0 to 512
[  318.670175][   T28] audit: type=1400 audit(2000000289.437:2469): avc:  denied  { write } for  pid=13518 comm="syz.3.3425" path="socket:[43588]" dev="sockfs" ino=43588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  318.720007][T13508] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  318.808787][T13508] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3419: bg 0: block 248: padding at end of block bitmap is not set
[  318.827068][   T28] audit: type=1400 audit(2000000289.857:2470): avc:  denied  { write } for  pid=13524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  318.917734][T13508] loop4: lost filesystem error report for type 5 error -117
[  318.920149][T13508] Quota error (device loop4): write_blk: dquota write failed
[  318.927498][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  318.927514][    C0] EXT4-fs (loop4): last error at time 2000000289: ext4_validate_block_bitmap:441
[  319.105403][   T28] audit: type=1400 audit(2000000290.057:2471): avc:  denied  { write } for  pid=13543 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.191377][T13508] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  319.231121][T13508] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.3419: Failed to acquire dquot type 1
[  319.281461][T13508] loop4: lost filesystem error report for type 5 error -28
[  319.410056][T13508] EXT4-fs (loop4): 1 truncate cleaned up
[  319.447355][T13508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  319.490928][T13546] loop3: detected capacity change from 0 to 512
[  319.639947][   T28] audit: type=1400 audit(2000000290.666:2472): avc:  denied  { setattr } for  pid=13483 comm="syz.4.3419" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  319.722748][   T28] audit: type=1326 audit(2000000290.716:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13483 comm="syz.4.3419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb71ffce59 code=0x0
[  319.760647][T13491] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3419: deleted inode referenced: 12
[  319.767843][   T28] audit: type=1400 audit(2000000290.816:2474): avc:  denied  { write } for  pid=13483 comm="syz.4.3419" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  319.790142][T13491] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3419: deleted inode referenced: 12
[  319.864484][T13546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.879783][   T28] audit: type=1400 audit(2000000290.916:2475): avc:  denied  { write } for  pid=13555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.916372][T13546] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  319.916907][T13559] loop5: detected capacity change from 0 to 512
[  320.051536][T13587] syzkaller0: entered promiscuous mode
[  320.088848][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  320.134491][T13587] syzkaller0: entered allmulticast mode
[  320.146850][ T2222] EXT4-fs error (device loop4): ext4_release_dquot:7068: comm kworker/u8:13: Failed to release dquot type 1
[  320.166621][ T2222] loop4: lost filesystem error report for type 5 error -117
[  320.173786][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.331347][T13559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.351674][T13559] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.673531][T13601] loop4: detected capacity change from 0 to 512
[  320.909400][T13605] sg_write: data in/out 570987785/91 bytes for SCSI command 0xf9-- guessing data in;
[  320.909400][T13605]    program syz.4.3440 not setting count and/or reply_len properly
[  321.354518][T13612] FAULT_INJECTION: forcing a failure.
[  321.354518][T13612] name failslab, interval 1, probability 0, space 0, times 0
[  321.832107][T13612] CPU: 0 UID: 0 PID: 13612 Comm: syz.4.3443 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  321.832144][T13612] Tainted: [W]=WARN
[  321.832171][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  321.832184][T13612] Call Trace:
[  321.832190][T13612]  <TASK>
[  321.832197][T13612]  __dump_stack+0x1d/0x30
[  321.832260][T13612]  dump_stack_lvl+0x95/0xd0
[  321.832296][T13612]  dump_stack+0x15/0x1b
[  321.832334][T13612]  should_fail_ex+0x25e/0x270
[  321.832356][T13612]  ? nsim_fib_event_nb+0x19c/0xd90
[  321.832380][T13612]  should_failslab+0x8c/0xb0
[  321.832410][T13612]  __kmalloc_cache_noprof+0x5f/0x400
[  321.832505][T13612]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  321.832536][T13612]  nsim_fib_event_nb+0x19c/0xd90
[  321.832558][T13612]  ? xas_load+0x413/0x430
[  321.832583][T13612]  ? try_charge_memcg+0x206/0xa00
[  321.832672][T13612]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  321.832693][T13612]  atomic_notifier_call_chain+0x79/0x1a0
[  321.832751][T13612]  call_fib_notifiers+0x65/0xa0
[  321.832770][T13612]  call_fib4_notifiers+0x77/0xb0
[  321.832798][T13612]  call_fib_entry_notifiers+0x113/0x140
[  321.832830][T13612]  fib_table_delete+0x658/0x740
[  321.832965][T13612]  fib_magic+0x233/0x270
[  321.832993][T13612]  fib_del_ifaddr+0x1c6/0xa90
[  321.833096][T13612]  ? nlmsg_notify+0xcf/0x170
[  321.833113][T13612]  ? nlmsg_notify+0x12e/0x170
[  321.833134][T13612]  ? addr_event+0x6d/0x270
[  321.833156][T13612]  fib_inetaddr_event+0x76/0x1e0
[  321.833184][T13612]  ? __pfx_fib_inetaddr_event+0x10/0x10
[  321.833208][T13612]  blocking_notifier_call_chain+0x9b/0x1e0
[  321.833258][T13612]  __inet_del_ifa+0x45d/0x710
[  321.833347][T13612]  devinet_ioctl+0x7bf/0xfa0
[  321.833375][T13612]  inet_ioctl+0x2f8/0x3a0
[  321.833475][T13612]  sock_do_ioctl+0x73/0x230
[  321.833544][T13612]  sock_ioctl+0x439/0x610
[  321.833560][T13612]  ? mutex_lock+0x57/0x90
[  321.833585][T13612]  ? __pfx_sock_ioctl+0x10/0x10
[  321.833601][T13612]  __se_sys_ioctl+0xce/0x140
[  321.833628][T13612]  __x64_sys_ioctl+0x43/0x50
[  321.833723][T13612]  x64_sys_call+0x1563/0x3020
[  321.833742][T13612]  do_syscall_64+0x136/0x3c0
[  321.833770][T13612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.833823][T13612] RIP: 0033:0x7fbb71ffce59
[  321.833837][T13612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.833908][T13612] RSP: 002b:00007fbb70a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.833927][T13612] RAX: ffffffffffffffda RBX: 00007fbb72275fa0 RCX: 00007fbb71ffce59
[  321.833942][T13612] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000006
[  321.833957][T13612] RBP: 00007fbb70a4f090 R08: 0000000000000000 R09: 0000000000000000
[  321.833997][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.834009][T13612] R13: 00007fbb72276038 R14: 00007fbb72275fa0 R15: 00007fffc6a1a928
[  321.834027][T13612]  </TASK>
[  322.398517][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.849178][T13633] syzkaller0: entered promiscuous mode
[  322.854696][T13633] syzkaller0: entered allmulticast mode
[  322.960008][T13627] loop4: detected capacity change from 0 to 512
[  323.104032][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  323.104119][   T28] audit: type=1400 audit(2000000294.123:2480): avc:  denied  { recv } for  pid=13607 comm="syz.1.3441" saddr=10.128.0.163 src=34948 daddr=10.128.0.157 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  323.321639][T13649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13649 comm=syz.3.3456
[  323.351088][T13649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13649 comm=syz.3.3456
[  323.373255][T13627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.402709][T13645] loop1: detected capacity change from 0 to 512
[  323.414339][T13645] EXT4-fs: Ignoring removed orlov option
[  323.457679][T13654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13654 comm=syz.3.3457
[  323.470142][T13654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13654 comm=syz.3.3457
[  323.518437][T13627] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.814142][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.871445][T13662] loop3: detected capacity change from 0 to 512
[  323.894276][T13660] loop5: detected capacity change from 0 to 512
[  323.902984][T13662] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024)
[  323.918731][T13660] EXT4-fs: Ignoring removed orlov option
[  323.965835][T13665] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  324.015507][T13665] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  324.029654][   T28] audit: type=1326 audit(2000000295.072:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13663 comm="syz.3.3463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f471af1ce59 code=0x0
[  324.074054][T13665] vhci_hcd vhci_hcd.4: default hub control req: 0303 v0014 i0003 l0
[  324.106327][T13645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.118825][T13645] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.131770][T13660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.144272][T13660] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.158204][T13667] loop4: detected capacity change from 0 to 512
[  324.200753][T13660] FAULT_INJECTION: forcing a failure.
[  324.200753][T13660] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.248711][   T28] audit: type=1400 audit(2000000295.301:2482): avc:  denied  { append } for  pid=13644 comm="syz.1.3455" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  324.282992][T13676] loop4: detected capacity change from 0 to 512
[  324.337988][T13660] CPU: 0 UID: 0 PID: 13660 Comm: syz.5.3460 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  324.338020][T13660] Tainted: [W]=WARN
[  324.338089][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  324.338101][T13660] Call Trace:
[  324.338108][T13660]  <TASK>
[  324.338117][T13660]  __dump_stack+0x1d/0x30
[  324.338140][T13660]  dump_stack_lvl+0x95/0xd0
[  324.338159][T13660]  dump_stack+0x15/0x1b
[  324.338177][T13660]  should_fail_ex+0x25e/0x270
[  324.338277][T13660]  should_fail+0xb/0x20
[  324.338295][T13660]  should_fail_usercopy+0x1a/0x20
[  324.338316][T13660]  _copy_to_user+0x20/0xa0
[  324.338343][T13660]  simple_read_from_buffer+0xb5/0x130
[  324.338427][T13660]  proc_fail_nth_read+0x10e/0x150
[  324.338455][T13660]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  324.338483][T13660]  vfs_read+0x18e/0x7c0
[  324.338557][T13660]  ? __rcu_read_unlock+0x4e/0x70
[  324.338579][T13660]  ? __fget_files+0x184/0x1c0
[  324.338597][T13660]  ? mutex_lock+0x57/0x90
[  324.338619][T13660]  ksys_read+0xdc/0x1a0
[  324.338723][T13660]  __x64_sys_read+0x40/0x50
[  324.338749][T13660]  x64_sys_call+0x2886/0x3020
[  324.338771][T13660]  do_syscall_64+0x136/0x3c0
[  324.338816][T13660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.338835][T13660] RIP: 0033:0x7fccd4edd68e
[  324.338851][T13660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  324.338944][T13660] RSP: 002b:00007fccd3976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  324.338965][T13660] RAX: ffffffffffffffda RBX: 00007fccd39776c0 RCX: 00007fccd4edd68e
[  324.338981][T13660] RDX: 000000000000000f RSI: 00007fccd39770a0 RDI: 0000000000000006
[  324.338994][T13660] RBP: 00007fccd3977090 R08: 0000000000000000 R09: 0000000000000000
[  324.339005][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.339090][T13660] R13: 00007fccd5196038 R14: 00007fccd5195fa0 R15: 00007ffd038742e8
[  324.339108][T13660]  </TASK>
[  324.348399][T13676] EXT4-fs: Ignoring removed orlov option
[  324.568207][T13679] loop3: detected capacity change from 0 to 164
[  324.633577][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.659641][T13682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13682 comm=syz.3.3467
[  324.672157][T13682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13682 comm=syz.3.3467
[  324.777748][T13693] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.852270][T13676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.870338][T13676] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.116496][   T28] audit: type=1400 audit(2000000296.101:2483): avc:  denied  { cpu } for  pid=13703 comm="syz.3.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  325.256074][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.557774][T13714] loop5: detected capacity change from 0 to 512
[  325.587780][T13717] loop4: detected capacity change from 0 to 512
[  325.605671][T13717] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024)
[  325.675500][T13732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13732 comm=syz.5.3478
[  325.688567][T13732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13732 comm=syz.5.3478
[  325.818115][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.874902][T13746] tipc: Started in network mode
[  325.922847][T13746] tipc: Node identity 76e565e5611d, cluster identity 4711
[  325.950038][T13746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.976332][T13746] tipc: Resetting bearer <eth:syzkaller0>
[  326.081586][T13742] tipc: Disabling bearer <eth:syzkaller0>
[  326.222890][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'.
[  326.657092][T13767] loop3: detected capacity change from 0 to 512
[  326.705980][   T28] audit: type=1400 audit(2000000297.759:2484): avc:  denied  { mount } for  pid=13768 comm="syz.1.3490" name="/" dev="hugetlbfs" ino=44235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  326.750795][T13769] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3490'.
[  326.766702][T13767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  326.813271][T13769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3490'.
[  326.849646][T13767] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3489: bg 0: block 441: padding at end of block bitmap is not set
[  326.865973][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  326.890715][T13767] loop3: lost filesystem error report for type 5 error -117
[  326.890989][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  326.904724][    C0] EXT4-fs (loop3): initial error at time 2000000297: ext4_validate_block_bitmap:441
[  326.914122][    C0] EXT4-fs (loop3): last error at time 2000000297: ext4_validate_block_bitmap:441
[  326.925373][T13769] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3490'.
[  326.952837][   T28] audit: type=1400 audit(2000000297.999:2485): avc:  denied  { create } for  pid=13768 comm="syz.1.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  327.008590][T13767] EXT4-fs (loop3): 1 truncate cleaned up
[  327.018975][T13767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.213373][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.303700][T13779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13779 comm=syz.5.3491
[  327.379064][T13779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13779 comm=syz.5.3491
[  327.417643][T13786] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3494'.
[  327.512441][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3497'.
[  327.554869][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'.
[  327.569681][   T28] audit: type=1400 audit(2000000298.618:2486): avc:  denied  { lock } for  pid=13796 comm="syz.1.3495" path="socket:[44316]" dev="sockfs" ino=44316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  327.637069][   T28] audit: type=1400 audit(2000000298.618:2487): avc:  denied  { getopt } for  pid=13799 comm="syz.3.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.658313][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3496'.
[  327.708861][T13793] geneve2: entered allmulticast mode
[  327.844955][   T28] audit: type=1400 audit(2000000298.898:2488): avc:  denied  { read } for  pid=13811 comm="syz.4.3501" path="socket:[42873]" dev="sockfs" ino=42873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  327.888717][T13814] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  327.926950][   T28] audit: type=1400 audit(2000000298.928:2489): avc:  denied  { write } for  pid=13813 comm="syz.5.3504" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  328.043732][T13825] pim6reg: entered allmulticast mode
[  328.133630][T13825] audit_log_lost: 2 callbacks suppressed
[  328.133661][T13825] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  328.163943][T13825] audit: out of memory in audit_log_start
[  328.412092][T13844] set_capacity_and_notify: 1 callbacks suppressed
[  328.412235][T13844] loop4: detected capacity change from 0 to 512
[  328.578470][T13852] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  328.616268][T13852] batman_adv: batadv0: Adding interface: gretap1
[  328.622788][T13852] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.649439][T13852] batman_adv: batadv0: Interface activated: gretap1
[  328.729049][T13844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.742430][T13844] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.852100][T13844] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3511: corrupted xattr block 33: bad e_name length
[  328.886959][   T28] audit: type=1400 audit(2000000299.927:2492): avc:  denied  { create } for  pid=13859 comm="syz.5.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  328.932256][T13869] IPVS: length: 24 != 185957657016
[  328.949322][T13844] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  328.970060][T13844] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3511: corrupted xattr block 33: bad e_name length
[  328.988383][T13844] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  329.041096][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.089563][   T28] audit: type=1400 audit(2000000300.137:2493): avc:  denied  { map } for  pid=13875 comm="syz.4.3523" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  329.158410][   T28] audit: type=1400 audit(2000000300.137:2494): avc:  denied  { read } for  pid=13875 comm="syz.4.3523" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  329.246786][T13862] loop5: detected capacity change from 0 to 512
[  329.267868][T13880] loop4: detected capacity change from 0 to 512
[  329.325324][T13880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.337835][T13880] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.352042][   T28] audit: type=1400 audit(2000000300.357:2495): avc:  denied  { write } for  pid=13879 comm="syz.4.3525" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  329.360886][T13862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.395036][T13862] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  329.421445][   T28] audit: type=1400 audit(2000000300.357:2496): avc:  denied  { append } for  pid=13879 comm="syz.4.3525" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  329.484774][T13890] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.493454][T13890] bond0: (slave bond1): Enslaving as an active interface with an up link
[  329.733417][T13895] bond2: entered allmulticast mode
[  330.325163][   T28] audit: type=1400 audit(2000000301.376:2497): avc:  denied  { write } for  pid=13898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  330.467708][   T28] audit: type=1400 audit(2000000301.496:2498): avc:  denied  { write } for  pid=13918 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  330.940736][   T28] audit: type=1400 audit(2000000301.985:2499): avc:  denied  { write } for  pid=13931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  331.000742][T13962] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  331.111729][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.121595][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.157188][T13972] loop4: detected capacity change from 0 to 512
[  331.186756][T13972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.213760][T13972] FAULT_INJECTION: forcing a failure.
[  331.213760][T13972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.229240][T13972] CPU: 1 UID: 0 PID: 13972 Comm: syz.4.3543 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  331.229391][T13972] Tainted: [W]=WARN
[  331.229398][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  331.229412][T13972] Call Trace:
[  331.229418][T13972]  <TASK>
[  331.229426][T13972]  __dump_stack+0x1d/0x30
[  331.229457][T13972]  dump_stack_lvl+0x95/0xd0
[  331.229523][T13972]  dump_stack+0x15/0x1b
[  331.229541][T13972]  should_fail_ex+0x25e/0x270
[  331.229559][T13972]  should_fail+0xb/0x20
[  331.229577][T13972]  should_fail_usercopy+0x1a/0x20
[  331.229601][T13972]  strncpy_from_user+0x27/0x250
[  331.229627][T13972]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  331.229654][T13972]  do_getname+0x59/0x1c0
[  331.229670][T13972]  getname_flags+0x1d/0x30
[  331.229688][T13972]  vfs_fstatat+0x45/0x170
[  331.229742][T13972]  __se_sys_newfstatat+0x55/0x3e0
[  331.229768][T13972]  ? clockevents_program_event+0x2fd/0x340
[  331.229793][T13972]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  331.229901][T13972]  __x64_sys_newfstatat+0x55/0x70
[  331.229922][T13972]  x64_sys_call+0x2c64/0x3020
[  331.229945][T13972]  do_syscall_64+0x136/0x3c0
[  331.230055][T13972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.230077][T13972] RIP: 0033:0x7fbb71ffce59
[  331.230093][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.230172][T13972] RSP: 002b:00007fbb70a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  331.230220][T13972] RAX: ffffffffffffffda RBX: 00007fbb72275fa0 RCX: 00007fbb71ffce59
[  331.230236][T13972] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  331.230250][T13972] RBP: 00007fbb70a4f090 R08: 0000000000000000 R09: 0000000000000000
[  331.230265][T13972] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  331.230279][T13972] R13: 00007fbb72276038 R14: 00007fbb72275fa0 R15: 00007fffc6a1a928
[  331.230300][T13972]  </TASK>
[  331.468145][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.501140][T13993] loop3: detected capacity change from 0 to 512
[  331.525932][T13993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  331.555696][T13997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.562738][T13997] syzkaller0: entered promiscuous mode
[  331.574837][T13997] syzkaller0: entered allmulticast mode
[  331.592620][T13997] tipc: Resetting bearer <eth:syzkaller0>
[  331.602532][T13996] tipc: Resetting bearer <eth:syzkaller0>
[  331.609965][T13996] tipc: Disabling bearer <eth:syzkaller0>
[  331.837862][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'.
[  332.132966][T14009] loop1: detected capacity change from 0 to 512
[  332.181528][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3557'.
[  332.235083][T14009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.241332][T14017] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3557'.
[  332.269591][T14009] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  332.594690][T14034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3563'.
[  332.633700][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'.
[  332.653844][    T9] IPVS: starting estimator thread 0...
[  332.843217][T14040] loop5: detected capacity change from 0 to 256
[  332.864264][T14040] msdos: Bad value for 'uid'
[  332.869868][T14037] IPVS: using max 2352 ests per chain, 117600 per kthread
[  332.887964][T14040] msdos: Bad value for 'uid'
[  333.571184][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.601463][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.630632][T14042] tipc: Started in network mode
[  333.650981][T14042] tipc: Node identity 4634c58f50b, cluster identity 4711
[  333.666823][T14042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.737272][T14048] syzkaller0: entered promiscuous mode
[  333.754770][T14048] syzkaller0: entered allmulticast mode
[  333.765332][T14042] tipc: Resetting bearer <eth:syzkaller0>
[  333.779243][T14041] tipc: Resetting bearer <eth:syzkaller0>
[  333.786627][T14041] tipc: Disabling bearer <eth:syzkaller0>
[  333.895543][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3574'.
[  333.939971][T14067] loop5: detected capacity change from 0 to 512
[  333.981738][T14067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  334.000986][T14069] geneve2: entered allmulticast mode
[  334.022335][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'.
[  334.093022][T14076] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3577'.
[  334.120918][T14084] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  334.261781][T14091] loop4: detected capacity change from 0 to 512
[  334.367605][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3572'.
[  334.399143][T14091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.415790][T14091] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  334.455573][T14101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.478573][T14101] syzkaller0: entered promiscuous mode
[  334.485498][T14101] syzkaller0: entered allmulticast mode
[  334.500093][T14101] tipc: Resetting bearer <eth:syzkaller0>
[  334.775231][T14097] tipc: Resetting bearer <eth:syzkaller0>
[  334.793926][T14097] tipc: Disabling bearer <eth:syzkaller0>
[  334.876630][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.902409][T14111] syzkaller0: entered promiscuous mode
[  334.909613][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.913810][T14111] syzkaller0: entered allmulticast mode
[  334.970814][T14116] loop1: detected capacity change from 0 to 512
[  334.977548][T14116] EXT4-fs: Ignoring removed orlov option
[  334.989148][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3590'.
[  335.087036][T14134] tipc: Started in network mode
[  335.100805][T14116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.101867][T14140] loop5: detected capacity change from 0 to 512
[  335.113295][T14116] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.139145][T14134] tipc: Node identity 22a02d4a0131, cluster identity 4711
[  335.156654][T14134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.171183][T14141] syzkaller0: entered promiscuous mode
[  335.182724][T14141] syzkaller0: entered allmulticast mode
[  335.215184][T14134] tipc: Resetting bearer <eth:syzkaller0>
[  335.253603][T14140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  335.266153][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.275358][T14131] tipc: Resetting bearer <eth:syzkaller0>
[  335.366298][T14131] tipc: Disabling bearer <eth:syzkaller0>
[  335.544346][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  335.544359][   T28] audit: type=1400 audit(2000000306.582:2501): avc:  denied  { read } for  pid=14153 comm="syz.1.3601" name="file1" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  335.794867][   T28] audit: type=1400 audit(2000000306.612:2502): avc:  denied  { watch } for  pid=14153 comm="syz.1.3601" path="/89/file1" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  335.885598][T14145] loop3: detected capacity change from 0 to 512
[  336.016739][T14145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.030174][T14145] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.041824][T14167] sctp: [Deprecated]: syz.2.3606 (pid 14167) Use of struct sctp_assoc_value in delayed_ack socket option.
[  336.041824][T14167] Use struct sctp_sack_info instead
[  336.161463][T14177] syzkaller0: entered promiscuous mode
[  336.167133][T14177] syzkaller0: entered allmulticast mode
[  336.232834][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.379866][T14181] erspan1: entered promiscuous mode
[  336.385549][T14181] erspan1: entered allmulticast mode
[  336.571409][   T28] audit: type=1400 audit(2000000307.611:2503): avc:  denied  { connect } for  pid=14188 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  337.104894][   T28] audit: type=1400 audit(2000000308.151:2504): avc:  denied  { write } for  pid=14198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.185437][   T28] audit: type=1400 audit(2000000308.220:2505): avc:  denied  { write } for  pid=14214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.306218][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.360118][T14221] tipc: Started in network mode
[  337.411503][T14221] tipc: Node identity 46129cfb654d, cluster identity 4711
[  337.441063][T14233] loop3: detected capacity change from 0 to 512
[  337.455046][T14221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.486992][T14217] loop5: detected capacity change from 0 to 512
[  337.493565][T14217] EXT4-fs: Ignoring removed orlov option
[  337.501071][T14231] syzkaller0: entered promiscuous mode
[  337.506611][T14231] syzkaller0: entered allmulticast mode
[  337.550560][T14235] __nla_validate_parse: 2 callbacks suppressed
[  337.550643][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'.
[  337.567100][T14221] tipc: Resetting bearer <eth:syzkaller0>
[  337.576230][T14233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  337.592476][T14220] tipc: Resetting bearer <eth:syzkaller0>
[  337.608093][T14220] tipc: Disabling bearer <eth:syzkaller0>
[  337.760271][T14217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.772827][T14217] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.807215][T14241] syzkaller0: entered promiscuous mode
[  337.812720][T14241] syzkaller0: entered allmulticast mode
[  337.821183][   T28] audit: type=1400 audit(2000000308.860:2506): avc:  denied  { write } for  pid=14218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.844232][   T28] audit: type=1400 audit(2000000308.860:2507): avc:  denied  { write } for  pid=14244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.264272][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3617'.
[  338.371994][T14258] loop1: detected capacity change from 0 to 512
[  338.405745][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.415712][T14258] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  338.498085][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.546705][T14272] batman_adv: batadv0: Adding interface: dummy0
[  338.553658][T14272] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.594467][T14272] batman_adv: batadv0: Interface activated: dummy0
[  338.646626][T14284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.680988][T14284] syzkaller0: entered promiscuous mode
[  338.691110][T14284] syzkaller0: entered allmulticast mode
[  338.755749][T14267] net_ratelimit: 30 callbacks suppressed
[  338.755823][T14267] batadv0: mtu less than device minimum
[  338.772389][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.783827][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.795225][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.806393][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.817682][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.828740][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.840085][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.851127][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.862386][T14267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  338.927057][T14292] tipc: Resetting bearer <eth:syzkaller0>
[  338.940276][T14283] tipc: Resetting bearer <eth:syzkaller0>
[  338.953129][T14283] tipc: Disabling bearer <eth:syzkaller0>
[  338.990993][T14275] loop4: detected capacity change from 0 to 512
[  339.094040][T14304] loop5: detected capacity change from 0 to 512
[  339.102360][T14304] EXT4-fs: Ignoring removed orlov option
[  339.144418][T14304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.157107][T14304] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.228838][T14275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.241324][T14275] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  339.280903][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.372861][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3643'.
[  339.399642][T12075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.519223][T14338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.526331][T14338] syzkaller0: entered promiscuous mode
[  339.533693][T14340] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3649'.
[  339.537859][T14338] syzkaller0: entered allmulticast mode
[  339.542943][T14340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3649'.
[  339.554307][T14338] tipc: Resetting bearer <eth:syzkaller0>
[  339.567240][T14337] tipc: Resetting bearer <eth:syzkaller0>
[  339.589214][T14337] tipc: Disabling bearer <eth:syzkaller0>
[  339.597339][T14342] netlink: 'syz.5.3650': attribute type 10 has an invalid length.
[  339.606511][T14342] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  339.629239][T14342] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  339.640379][T14342] team0: Failed to send port change of device netdevsim2 via netlink (err -105)
[  339.651037][T14342] team0: Failed to send options change via netlink (err -105)
[  339.668334][T14342] team0: Port device netdevsim2 added
[  339.911909][   T28] audit: type=1400 audit(2000000310.898:2508): avc:  denied  { bind } for  pid=14357 comm="syz.2.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  339.951867][   T28] audit: type=1400 audit(2000000310.958:2509): avc:  denied  { write } for  pid=14366 comm="syz.1.3659" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  339.977663][   T28] audit: type=1400 audit(2000000310.958:2510): avc:  denied  { ioctl } for  pid=14366 comm="syz.1.3659" path="socket:[46230]" dev="sockfs" ino=46230 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  340.019907][T14370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.029012][T14370] syzkaller0: entered promiscuous mode
[  340.034759][T14370] syzkaller0: entered allmulticast mode
[  340.054659][T14370] tipc: Resetting bearer <eth:syzkaller0>
[  340.063933][T14369] tipc: Resetting bearer <eth:syzkaller0>
[  340.091881][T14369] tipc: Disabling bearer <eth:syzkaller0>
[  340.153252][T14361] loop3: detected capacity change from 0 to 512
[  340.304032][  T134] team0: Failed to send port change of device netdevsim2 via netlink (err -105)
[  340.341597][T14361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.358640][T14361] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  340.487920][T14403] loop5: detected capacity change from 0 to 512
[  340.494956][T14403] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  340.505866][T14403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  340.514407][T14403] System zones: 1-12
[  340.518964][T14403] EXT4-fs (loop5): 1 truncate cleaned up
[  340.525179][T14403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.547242][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.621811][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.639069][T14409] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3673'.
[  340.648241][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3673'.
[  340.657436][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3673'.
[  340.685860][T14411] FAULT_INJECTION: forcing a failure.
[  340.685860][T14411] name failslab, interval 1, probability 0, space 0, times 0
[  340.698548][T14411] CPU: 1 UID: 0 PID: 14411 Comm: syz.3.3674 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  340.698576][T14411] Tainted: [W]=WARN
[  340.698583][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  340.698595][T14411] Call Trace:
[  340.698603][T14411]  <TASK>
[  340.698611][T14411]  __dump_stack+0x1d/0x30
[  340.698635][T14411]  dump_stack_lvl+0x95/0xd0
[  340.698714][T14411]  dump_stack+0x15/0x1b
[  340.698732][T14411]  should_fail_ex+0x25e/0x270
[  340.698755][T14411]  should_failslab+0x8c/0xb0
[  340.698793][T14411]  kmem_cache_alloc_noprof+0x66/0x3f0
[  340.698823][T14411]  ? skb_clone+0x151/0x1f0
[  340.698890][T14411]  skb_clone+0x151/0x1f0
[  340.698916][T14411]  netlink_broadcast_filtered+0x511/0xd30
[  340.699011][T14411]  netlink_sendmsg+0x57f/0x6f0
[  340.699037][T14411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.699059][T14411]  ____sys_sendmsg+0x532/0x580
[  340.699125][T14411]  ___sys_sendmsg+0x195/0x1e0
[  340.699167][T14411]  __x64_sys_sendmsg+0xd4/0x160
[  340.699198][T14411]  x64_sys_call+0x194c/0x3020
[  340.699270][T14411]  do_syscall_64+0x136/0x3c0
[  340.699309][T14411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.699447][T14411] RIP: 0033:0x7f471af1ce59
[  340.699465][T14411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.699485][T14411] RSP: 002b:00007f4719977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.699506][T14411] RAX: ffffffffffffffda RBX: 00007f471b195fa0 RCX: 00007f471af1ce59
[  340.699522][T14411] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000004
[  340.699537][T14411] RBP: 00007f4719977090 R08: 0000000000000000 R09: 0000000000000000
[  340.699610][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.699623][T14411] R13: 00007f471b196038 R14: 00007f471b195fa0 R15: 00007fffb098f9f8
[  340.699644][T14411]  </TASK>
[  340.703098][T14413] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  341.115481][T14438] loop3: detected capacity change from 0 to 512
[  341.970219][T14443] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3684'.
[  341.979440][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3684'.
[  342.142769][T14455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.149801][T14455] syzkaller0: entered promiscuous mode
[  342.156660][T14455] syzkaller0: entered allmulticast mode
[  342.178682][T14455] tipc: Resetting bearer <eth:syzkaller0>
[  342.190900][T14454] tipc: Resetting bearer <eth:syzkaller0>
[  342.198146][T14454] tipc: Disabling bearer <eth:syzkaller0>
[  342.257841][T14471] FAULT_INJECTION: forcing a failure.
[  342.257841][T14471] name failslab, interval 1, probability 0, space 0, times 0
[  342.294346][T14453] loop5: detected capacity change from 0 to 512
[  342.300709][T14471] CPU: 0 UID: 0 PID: 14471 Comm: syz.1.3692 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  342.300801][T14471] Tainted: [W]=WARN
[  342.300808][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  342.300820][T14471] Call Trace:
[  342.300827][T14471]  <TASK>
[  342.300835][T14471]  __dump_stack+0x1d/0x30
[  342.300857][T14471]  dump_stack_lvl+0x95/0xd0
[  342.300941][T14471]  dump_stack+0x15/0x1b
[  342.300960][T14471]  should_fail_ex+0x25e/0x270
[  342.300990][T14471]  ? alloc_fs_context+0x41/0x570
[  342.301010][T14471]  should_failslab+0x8c/0xb0
[  342.301033][T14471]  __kmalloc_cache_noprof+0x5f/0x400
[  342.301051][T14471]  alloc_fs_context+0x41/0x570
[  342.301154][T14471]  ? fs_context_for_mount+0x11/0x30
[  342.301172][T14471]  fs_context_for_mount+0x22/0x30
[  342.301189][T14471]  do_new_mount+0xe7/0x8d0
[  342.301308][T14471]  ? security_capable+0x7b/0x90
[  342.301453][T14471]  path_mount+0x4ad/0xb90
[  342.301480][T14471]  __se_sys_mount+0x28c/0x2e0
[  342.301496][T14471]  ? fput+0x8f/0xc0
[  342.301517][T14471]  __x64_sys_mount+0x67/0x80
[  342.301545][T14471]  x64_sys_call+0x2d61/0x3020
[  342.301602][T14471]  do_syscall_64+0x136/0x3c0
[  342.301637][T14471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.301655][T14471] RIP: 0033:0x7fa8c327ce59
[  342.301670][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.301687][T14471] RSP: 002b:00007fa8c1cd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  342.301707][T14471] RAX: ffffffffffffffda RBX: 00007fa8c34f5fa0 RCX: 00007fa8c327ce59
[  342.301754][T14471] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[  342.301768][T14471] RBP: 00007fa8c1cd7090 R08: 0000200000000200 R09: 0000000000000000
[  342.301782][T14471] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001
[  342.301801][T14471] R13: 00007fa8c34f6038 R14: 00007fa8c34f5fa0 R15: 00007fffab3c08d8
[  342.301818][T14471]  </TASK>
[  342.591497][T14489] futex_wake_op: syz.2.3697 tries to shift op by -1; fix this program
[  342.639950][T14453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.655464][T14453] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  342.784458][T14504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.791465][T14504] syzkaller0: entered promiscuous mode
[  342.797075][T14504] syzkaller0: entered allmulticast mode
[  342.821093][T14504] tipc: Resetting bearer <eth:syzkaller0>
[  342.835251][T14503] tipc: Resetting bearer <eth:syzkaller0>
[  342.845716][T14503] tipc: Disabling bearer <eth:syzkaller0>
[  342.872848][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.937646][T14511] syzkaller0: entered promiscuous mode
[  342.946042][T14511] syzkaller0: entered allmulticast mode
[  342.958008][T14513] __nla_validate_parse: 4 callbacks suppressed
[  342.958022][T14513] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3708'.
[  342.977590][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3708'.
[  343.005934][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3708'.
[  343.015042][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  343.015092][   T28] audit: type=1400 audit(2000000314.046:2512): avc:  denied  { listen } for  pid=14517 comm="syz.2.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  343.058489][   T28] audit: type=1400 audit(2000000314.046:2513): avc:  denied  { accept } for  pid=14517 comm="syz.2.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  343.949730][T14533] loop1: detected capacity change from 0 to 512
[  344.018883][T14533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.049784][T14533] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  344.139875][T14560] netlink: 'syz.4.3725': attribute type 1 has an invalid length.
[  344.149099][T14560] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3725'.
[  344.165013][T14560] 9p: Bad value for 'wfdno'
[  344.177242][T14565] syzkaller0: entered promiscuous mode
[  344.182765][T14565] syzkaller0: entered allmulticast mode
[  344.216151][T14569] loop5: detected capacity change from 0 to 512
[  344.224046][T14569] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  344.247066][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.253036][T14569] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.3728: corrupted xattr entries
[  344.268769][T14569] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  344.274617][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  344.290200][    C0] EXT4-fs (loop5): initial error at time 2000000315: xattr_find_entry:337: inode 15
[  344.299637][    C0] EXT4-fs (loop5): last error at time 2000000315: xattr_find_entry:337: inode 15
[  344.312161][T14569] EXT4-fs (loop5): Remounting filesystem read-only
[  344.331083][T14569] EXT4-fs (loop5): 1 truncate cleaned up
[  344.337456][T14569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.846799][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.911956][T14592] syzkaller0: entered promiscuous mode
[  344.920380][T14592] syzkaller0: entered allmulticast mode
[  345.244211][T14608] FAULT_INJECTION: forcing a failure.
[  345.244211][T14608] name failslab, interval 1, probability 0, space 0, times 0
[  345.256977][T14608] CPU: 0 UID: 0 PID: 14608 Comm: syz.4.3738 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  345.257061][T14608] Tainted: [W]=WARN
[  345.257068][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  345.257081][T14608] Call Trace:
[  345.257090][T14608]  <TASK>
[  345.257098][T14608]  __dump_stack+0x1d/0x30
[  345.257119][T14608]  dump_stack_lvl+0x95/0xd0
[  345.257140][T14608]  dump_stack+0x15/0x1b
[  345.257191][T14608]  should_fail_ex+0x25e/0x270
[  345.257259][T14608]  should_failslab+0x8c/0xb0
[  345.257286][T14608]  __kmalloc_noprof+0xb8/0x4d0
[  345.257341][T14608]  ? kernfs_fop_write_iter+0xd4/0x2e0
[  345.257360][T14608]  kernfs_fop_write_iter+0xd4/0x2e0
[  345.257377][T14608]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  345.257419][T14608]  vfs_write+0x57d/0x990
[  345.257476][T14608]  ksys_write+0xdc/0x1a0
[  345.257505][T14608]  __x64_sys_write+0x40/0x50
[  345.257528][T14608]  x64_sys_call+0x27e1/0x3020
[  345.257589][T14608]  do_syscall_64+0x136/0x3c0
[  345.257619][T14608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.257641][T14608] RIP: 0033:0x7fbb71ffce59
[  345.257655][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.257671][T14608] RSP: 002b:00007fbb70a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  345.257688][T14608] RAX: ffffffffffffffda RBX: 00007fbb72275fa0 RCX: 00007fbb71ffce59
[  345.257711][T14608] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000003
[  345.257725][T14608] RBP: 00007fbb70a4f090 R08: 0000000000000000 R09: 0000000000000000
[  345.257739][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.257755][T14608] R13: 00007fbb72276038 R14: 00007fbb72275fa0 R15: 00007fffc6a1a928
[  345.257838][T14608]  </TASK>
[  345.598033][T14610] loop4: detected capacity change from 0 to 512
[  345.621651][T14612] syzkaller0: entered promiscuous mode
[  345.651066][T14610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  345.671740][T14612] syzkaller0: entered allmulticast mode
[  345.721638][T14610] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3741: corrupted in-inode xattr: bad e_name length
[  345.737411][T14610] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  345.737632][T14610] EXT4-fs (loop4): get orphan inode failed
[  345.753082][T14610] EXT4-fs (loop4): mount failed
[  345.811193][T14610] loop4: detected capacity change from 0 to 128
[  345.811617][   T28] audit: type=1400 audit(2000000316.834:2514): avc:  denied  { accept } for  pid=14595 comm="syz.2.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  345.827252][T14610] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  345.910505][T14610] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  345.980763][T14623] FAULT_INJECTION: forcing a failure.
[  345.980763][T14623] name failslab, interval 1, probability 0, space 0, times 0
[  346.023716][T14623] CPU: 1 UID: 0 PID: 14623 Comm: syz.1.3745 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  346.023802][T14623] Tainted: [W]=WARN
[  346.023809][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  346.023880][T14623] Call Trace:
[  346.023888][T14623]  <TASK>
[  346.023897][T14623]  __dump_stack+0x1d/0x30
[  346.023921][T14623]  dump_stack_lvl+0x95/0xd0
[  346.023937][T14623]  dump_stack+0x15/0x1b
[  346.024016][T14623]  should_fail_ex+0x25e/0x270
[  346.024038][T14623]  ? fl_change+0xff/0x1c00
[  346.024157][T14623]  should_failslab+0x8c/0xb0
[  346.024183][T14623]  __kmalloc_cache_noprof+0x5f/0x400
[  346.024202][T14623]  ? fl_change+0xcc/0x1c00
[  346.024224][T14623]  fl_change+0xff/0x1c00
[  346.024245][T14623]  ? __pfx_fl_get+0x10/0x10
[  346.024265][T14623]  ? fl_get+0x27/0x190
[  346.024323][T14623]  ? radix_tree_lookup+0x12d/0x140
[  346.024346][T14623]  ? __rcu_read_unlock+0x4e/0x70
[  346.024368][T14623]  tc_new_tfilter+0xf74/0x1170
[  346.024433][T14623]  ? _raw_spin_unlock+0x9/0x30
[  346.024461][T14623]  ? __pfx_tc_new_tfilter+0x10/0x10
[  346.024477][T14623]  rtnetlink_rcv_msg+0x64b/0x720
[  346.024500][T14623]  netlink_rcv_skb+0x11e/0x220
[  346.024552][T14623]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  346.024577][T14623]  rtnetlink_rcv+0x1c/0x30
[  346.024595][T14623]  netlink_unicast+0x5a7/0x680
[  346.024627][T14623]  netlink_sendmsg+0x5be/0x6f0
[  346.024666][T14623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.024689][T14623]  ____sys_sendmsg+0x532/0x580
[  346.024765][T14623]  ___sys_sendmsg+0x195/0x1e0
[  346.024807][T14623]  __x64_sys_sendmsg+0xd4/0x160
[  346.024878][T14623]  x64_sys_call+0x194c/0x3020
[  346.024902][T14623]  do_syscall_64+0x136/0x3c0
[  346.024979][T14623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.024998][T14623] RIP: 0033:0x7fa8c327ce59
[  346.025069][T14623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.025084][T14623] RSP: 002b:00007fa8c1cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.025101][T14623] RAX: ffffffffffffffda RBX: 00007fa8c34f5fa0 RCX: 00007fa8c327ce59
[  346.025192][T14623] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  346.025203][T14623] RBP: 00007fa8c1cd7090 R08: 0000000000000000 R09: 0000000000000000
[  346.025214][T14623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  346.025225][T14623] R13: 00007fa8c34f6038 R14: 00007fa8c34f5fa0 R15: 00007fffab3c08d8
[  346.025242][T14623]  </TASK>
[  347.271040][T14633] loop1: detected capacity change from 0 to 512
[  347.281285][T14633] EXT4-fs: Ignoring removed oldalloc option
[  347.287876][T14633] EXT4-fs: Ignoring removed orlov option
[  347.418557][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3747'.
[  347.569051][T14633] EXT4-fs: Invalid want_extra_isize 32768
[  347.834051][T14645] cgroup: noprefix used incorrectly
[  348.674670][T14662] syzkaller0: entered promiscuous mode
[  348.680350][T14662] syzkaller0: entered allmulticast mode
[  348.702425][T14673] syzkaller0: entered promiscuous mode
[  348.708001][T14673] syzkaller0: entered allmulticast mode
[  348.779968][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3758'.
[  348.855212][T14675] geneve2: entered allmulticast mode
[  348.933868][T14685] FAULT_INJECTION: forcing a failure.
[  348.933868][T14685] name failslab, interval 1, probability 0, space 0, times 0
[  348.946670][T14685] CPU: 0 UID: 0 PID: 14685 Comm: syz.5.3763 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  348.946761][T14685] Tainted: [W]=WARN
[  348.946769][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  348.946782][T14685] Call Trace:
[  348.946790][T14685]  <TASK>
[  348.946799][T14685]  __dump_stack+0x1d/0x30
[  348.946882][T14685]  dump_stack_lvl+0x95/0xd0
[  348.946905][T14685]  dump_stack+0x15/0x1b
[  348.946924][T14685]  should_fail_ex+0x25e/0x270
[  348.946947][T14685]  should_failslab+0x8c/0xb0
[  348.946977][T14685]  kmem_cache_alloc_noprof+0x66/0x3f0
[  348.947040][T14685]  ? skb_clone+0x151/0x1f0
[  348.947099][T14685]  skb_clone+0x151/0x1f0
[  348.947138][T14685]  dev_queue_xmit_nit+0x13e/0x510
[  348.947191][T14685]  dev_hard_start_xmit+0xba/0x380
[  348.947219][T14685]  __dev_queue_xmit+0xb97/0x1e60
[  348.947317][T14685]  ? __dev_queue_xmit+0x151/0x1e60
[  348.947346][T14685]  ? should_fail_ex+0xd9/0x270
[  348.947441][T14685]  ? __copy_skb_header+0x22f/0x2b0
[  348.947468][T14685]  ? __skb_clone+0x2a4/0x2c0
[  348.947529][T14685]  __netlink_deliver_tap+0x3c8/0x510
[  348.947556][T14685]  netlink_unicast+0x654/0x680
[  348.947588][T14685]  netlink_sendmsg+0x5be/0x6f0
[  348.947613][T14685]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.947717][T14685]  ____sys_sendmsg+0x532/0x580
[  348.947811][T14685]  ___sys_sendmsg+0x195/0x1e0
[  348.947857][T14685]  __x64_sys_sendmsg+0xd4/0x160
[  348.947932][T14685]  x64_sys_call+0x194c/0x3020
[  348.947955][T14685]  do_syscall_64+0x136/0x3c0
[  348.947985][T14685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.948004][T14685] RIP: 0033:0x7fccd4f1ce59
[  348.948018][T14685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.948067][T14685] RSP: 002b:00007fccd3977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  348.948106][T14685] RAX: ffffffffffffffda RBX: 00007fccd5195fa0 RCX: 00007fccd4f1ce59
[  348.948118][T14685] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 000000000000000a
[  348.948129][T14685] RBP: 00007fccd3977090 R08: 0000000000000000 R09: 0000000000000000
[  348.948140][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.948151][T14685] R13: 00007fccd5196038 R14: 00007fccd5195fa0 R15: 00007ffd038742e8
[  348.948172][T14685]  </TASK>
[  349.248572][T14701] loop5: detected capacity change from 0 to 2048
[  349.334400][T14687] loop1: detected capacity change from 0 to 512
[  349.353867][T14701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.379923][T14687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.392783][T14687] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  349.458851][T12364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.483772][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3774'.
[  349.555539][T14726] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.668751][T14726] team0: Port device netdevsim2 removed
[  349.675298][T14726] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.800843][T14726] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.850801][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.872409][T14736] loop1: detected capacity change from 0 to 512
[  349.896927][T14736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.911539][   T28] audit: type=1400 audit(2000000320.942:2515): avc:  denied  { write } for  pid=14735 comm="syz.1.3779" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  349.933472][T14736] EXT4-fs warning (device loop1): ext4_group_extend:1861: can't shrink FS - resize aborted
[  349.965808][T14746] netlink: 'syz.3.3781': attribute type 1 has an invalid length.
[  349.979067][T14746] bond1: entered promiscuous mode
[  349.984182][T14746] 8021q: adding VLAN 0 to HW filter on device bond1
[  350.001624][T14726] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.082527][T14749] loop3: detected capacity change from 0 to 512
[  350.097236][T14749] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  350.111337][   T28] audit: type=1400 audit(2000000321.122:2516): avc:  denied  { listen } for  pid=14754 comm="syz.2.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  350.130833][   T28] audit: type=1400 audit(2000000321.122:2517): avc:  denied  { ioctl } for  pid=14754 comm="syz.2.3785" path="socket:[46955]" dev="sockfs" ino=46955 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  350.149308][T14749] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  350.170677][T14749] Quota error (device loop3): write_blk: dquota write failed
[  350.178380][T14749] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  350.188617][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  350.188636][    C1] EXT4-fs (loop3): initial error at time 2000000321: ext4_mb_generate_buddy:1317
[  350.188659][    C1] EXT4-fs (loop3): last error at time 2000000321: ext4_mb_generate_buddy:1317
[  350.216352][T12197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.233265][T14749] Quota error (device loop3): write_blk: dquota write failed
[  350.244119][T14749] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  350.254929][T14749] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.3782: Failed to acquire dquot type 1
[  350.269711][T14749] loop3: lost filesystem error report for type 5 error -28
[  350.273922][ T5775] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.276712][T14749] EXT4-fs (loop3): 1 truncate cleaned up
[  350.281165][ T5775] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.281233][ T5775] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.281388][ T5775] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.297476][T14749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.371147][T14766] syzkaller0: entered promiscuous mode
[  350.389654][   T28] audit: type=1400 audit(2000000321.431:2518): avc:  denied  { read } for  pid=14769 comm="syz.1.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  350.394856][T14766] syzkaller0: entered allmulticast mode
[  350.541163][T14749] ext4: Unknown parameter ''
[  350.962444][T11735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.018361][T14793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3798'.
[  351.049142][T14793] selinux_netlink_send: 2 callbacks suppressed
[  351.049157][T14793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14793 comm=syz.4.3798
[  351.069128][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'.
[  351.078006][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3798'.
[  351.090999][T14793] veth3: entered allmulticast mode
[  351.097316][T14793] bond2: (slave veth3): Enslaving as an active interface with an up link
[  351.212518][   T28] audit: type=1400 audit(2000000322.251:2519): avc:  denied  { setopt } for  pid=14798 comm="syz.5.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  351.237715][T14799] loop5: detected capacity change from 0 to 128
[  351.377880][T14811] syzkaller0: entered promiscuous mode
[  351.386994][T14811] syzkaller0: entered allmulticast mode
[  351.428342][T14812] ==================================================================
[  351.436464][T14812] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  351.443601][T14812] 
[  351.445929][T14812] write to 0xffff88810869b95c of 4 bytes by task 14799 on cpu 1:
[  351.453652][T14812]  xas_set_mark+0x12b/0x140
[  351.458170][T14812]  __folio_start_writeback+0x16a/0x350
[  351.463644][T14812]  __mpage_writepages+0xd92/0x1370
[  351.468771][T14812]  fat_writepages+0x26/0x30
[  351.473292][T14812]  do_writepages+0x1b9/0x300
[  351.477899][T14812]  file_write_and_wait_range+0x178/0x2f0
[  351.483545][T14812]  mmb_fsync_noflush+0x48/0x140
[  351.488409][T14812]  fat_file_fsync+0x98/0x110
[  351.493004][T14812]  vfs_fsync_range+0xc5/0xe0
[  351.497605][T14812]  generic_file_write_iter+0x1a3/0x1f0
[  351.503072][T14812]  iter_file_splice_write+0x6a0/0xa60
[  351.508460][T14812]  direct_splice_actor+0x156/0x280
[  351.513577][T14812]  splice_direct_to_actor+0x2f9/0x680
[  351.518968][T14812]  do_splice_direct+0x119/0x1a0
[  351.523836][T14812]  do_sendfile+0x37d/0x640
[  351.528248][T14812]  __x64_sys_sendfile64+0x105/0x150
[  351.533450][T14812]  x64_sys_call+0x2dc4/0x3020
[  351.538134][T14812]  do_syscall_64+0x136/0x3c0
[  351.542739][T14812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.548641][T14812] 
[  351.550967][T14812] read to 0xffff88810869b95c of 4 bytes by task 14812 on cpu 0:
[  351.558590][T14812]  xas_find_marked+0x602/0x650
[  351.563371][T14812]  filemap_get_folios_tag+0xf7/0x400
[  351.568668][T14812]  writeback_iter+0x48f/0x7c0
[  351.573349][T14812]  __mpage_writepages+0x8a/0x1370
[  351.578382][T14812]  fat_writepages+0x26/0x30
[  351.582899][T14812]  do_writepages+0x1b9/0x300
[  351.587487][T14812]  file_write_and_wait_range+0x178/0x2f0
[  351.593128][T14812]  mmb_fsync_noflush+0x48/0x140
[  351.597978][T14812]  fat_file_fsync+0x98/0x110
[  351.602582][T14812]  vfs_fsync_range+0xc5/0xe0
[  351.607177][T14812]  generic_file_write_iter+0x1a3/0x1f0
[  351.612642][T14812]  iter_file_splice_write+0x6a0/0xa60
[  351.618030][T14812]  direct_splice_actor+0x156/0x280
[  351.623150][T14812]  splice_direct_to_actor+0x2f9/0x680
[  351.628538][T14812]  do_splice_direct+0x119/0x1a0
[  351.633397][T14812]  do_sendfile+0x37d/0x640
[  351.637814][T14812]  __x64_sys_sendfile64+0x105/0x150
[  351.643015][T14812]  x64_sys_call+0x2dc4/0x3020
[  351.647694][T14812]  do_syscall_64+0x136/0x3c0
[  351.652291][T14812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.658182][T14812] 
[  351.660508][T14812] value changed: 0x0a000021 -> 0x04000021
[  351.666223][T14812] 
[  351.668553][T14812] Reported by Kernel Concurrency Sanitizer on:
[  351.674712][T14812] CPU: 0 UID: 0 PID: 14812 Comm: syz.5.3800 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  351.685660][T14812] Tainted: [W]=WARN
[  351.689459][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  351.699516][T14812] ==================================================================