last executing test programs:

6.939858118s ago: executing program 3 (id=16):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x2, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0)
rmdir(&(0x7f0000000180)='./file0\x00')
pread64(r1, 0x0, 0x0, 0x7)
unshare(0x24020400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket(0xa, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000004c0)=ANY=[@ANYBLOB='inode32,nr_inodes=4'])
dup(r3)
syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x3)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x300, 0x0)

4.749166393s ago: executing program 3 (id=24):
r0 = socket(0x2b, 0x80801, 0x1)
bind$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000600)={[0x1000]}, 0x0, 0x8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
accept4$inet(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000ffff00009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000", @ANYRES32=0x0, @ANYRES32], 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x401, @any, 0x9000, 0x1}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
write$sndseq(r3, &(0x7f0000000180)=[{0xfd, 0x40, 0x2, 0xbf, @tick=0x9, {0x7f, 0x2}, {0x1, 0xf2}, @note={0x6, 0x5, 0xb1, 0x4, 0x2}}, {0x7, 0x5, 0x1, 0x80, @tick=0xa146, {0xc0, 0x8}, {0x1, 0x3}, @result={0x8, 0x6}}, {0x5f, 0x2, 0x3, 0x5, @tick=0x7fffffff, {0x1, 0x17}, {0x8, 0x5}, @result={0x9, 0x2}}], 0x54)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)

3.721949502s ago: executing program 3 (id=32):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_names\x00')
readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1)
readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000001240)=""/213, 0xd5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x10, 0x0, 0x3c1}, &(0x7f0000001140), &(0x7f0000000000), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
capset(0x0, 0x0)
pread64(r6, &(0x7f0000001480)=""/265, 0x109, 0x6)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

3.054597244s ago: executing program 0 (id=34):
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x21, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x21, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0) (async)
r1 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'})
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2b, @private=0xa010100, 0x4e23, 0x3, 'nq\x00', 0x12, 0x660f537e, 0x3}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2b, @private=0xa010100, 0x4e23, 0x3, 'nq\x00', 0x12, 0x660f537e, 0x3}, 0x2c)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x4, 0x1, 0x1}}, 0x44)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x1000001, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0xff, 0x2b1, &(0x7f0000000100)="$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")
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x62040200) (async)
unshare(0x62040200)
r3 = socket(0x10, 0x803, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001400b595002fb3d9fc8e2c8c030026a6", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14)
close(r0)

2.777055188s ago: executing program 3 (id=38):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x40, 0x2, 0x87, 0xffffffff, 0x2})
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x10000}, 0x14433, 0xfffc, 0x0, 0x5, 0x583, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x8, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x4a2143, 0x0)
syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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")
syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x842}, 0x40)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0xc934c28db5340663, &(0x7f0000000640)={[{@lazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}], [{@fsname={'fsname', 0x3d, 'lazytime'}}, {@appraise}, {@obj_user}]}, 0x0, 0x53a, &(0x7f0000000c80)="$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")
r3 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10)
fallocate(r3, 0x0, 0x0, 0x8800000)
r4 = open(&(0x7f0000000100)='./file1\x00', 0x24842, 0x21)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x5a, 0x2, 0xfffe})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r5, &(0x7f00000011c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x8, 0x3, 0x3, 0x5, 0x333, 0x38, 0xbf, 0xe, 0x7, 0x20, 0x0, 0x5, 0x1005}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x538)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x52000a11)
close(r5)

2.7231299s ago: executing program 2 (id=39):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40000000000005, 0x6}, 0x8040, 0x0, 0x8006, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000240), 0x0}, 0x20)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f00000001c0)='dir0/trace_marker\x00', 0x21)

2.500417691s ago: executing program 2 (id=40):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$TIOCGSERIAL(r1, 0x541e, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
pidfd_getfd(r0, r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000ffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202fcff0000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x88, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xfffffffb, 0xfff}]}}}}}}}, 0x0)

2.451253713s ago: executing program 2 (id=42):
socket(0x1, 0x4, 0xfffffffe)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0xf, 0x2, 0x800, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x4a421}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x44}}, 0x4000844)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(r2, 0x0, 0x40000000, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x8)
fchdir(r4)
r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x152)
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x2c040080, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x48c0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

2.389733696s ago: executing program 4 (id=43):
r0 = gettid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

2.283727861s ago: executing program 2 (id=45):
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x68a}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
accept(r0, &(0x7f00000002c0)=@tipc=@name, &(0x7f0000000340)=0x80)
r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5)
lseek(r4, 0x101, 0x1)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x25, 0x301, 0x70bd2a, 0x25dfdbfc, {0x15}, [@typed={0x4, 0x15e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008841}, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
readv(r5, &(0x7f0000003400)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$inet_buf(r6, 0x118, 0x2b, 0x0, &(0x7f0000000280)=0x2c)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@i_version}], [{@obj_role={'obj_role', 0x3d, 'bsddf'}}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

2.235160483s ago: executing program 1 (id=46):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x5}, 0x2, 0x0, 0x3, 0x0, 0x2, 0x8000040f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x18, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc810)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb903b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb092, 0x800000, 0x2, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()

2.055902842s ago: executing program 0 (id=47):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='timerslack_ns\x00')
write$binfmt_format(r0, &(0x7f0000000180)='0\x00', 0x2)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x10, r1)
ptrace$peekuser(0x3, r1, 0x7)

1.859022291s ago: executing program 0 (id=48):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x36}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) (fail_nth: 4)

1.858522501s ago: executing program 3 (id=49):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1400c003}, 0x80)
mq_open(&(0x7f0000000100)='-}@]+\x00', 0x40, 0x9, &(0x7f0000000140)={0x878c, 0x2766, 0x400, 0x6})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r0=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1)
splice(r1, 0x0, r2, 0x0, 0x2, 0x5)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e)
r3 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x40, &(0x7f0000000700)={0xa, 0x4a24, 0x0, @empty}, 0x1b)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
write(r4, &(0x7f0000000400)='PING', 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x8, &(0x7f0000000080)=[{0xbc, 0xcb, 0x9, 0xe}, {0xfff2, 0xc, 0xb1, 0x9}, {0xdf, 0x0, 0x6, 0x7fff}, {0x5, 0xa2, 0x4b, 0xbd13}, {0x621, 0x7f, 0x8, 0x5}, {0x0, 0x2, 0x2}, {0x7c9, 0x1, 0x3, 0x4}, {0xf, 0x7, 0x0, 0x8}]})

1.657600221s ago: executing program 2 (id=50):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1224, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44ebfe24}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e0000001000000000000000000000000000000000000000000000000000000003735035fe6bdd06f62356bddee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c0004000000000000000000e0000002000000000000000000000000e8001100"], 0x154}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0x14, 0x0, &(0x7f0000000240)="259a53f271a76d2688644c6588a8e85e88642f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x8000)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
splice(r6, 0x0, r5, 0x0, 0x6, 0x8)
vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="17", 0x1}], 0x1, 0x6)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428e06800fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES16], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2400c0d4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000001c0), 0xe}, 0x4105, 0xfffffffffffffffe, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r11, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001000), 0x0, 0x0, 0x10, 0x8, 0x1d, 0x0}}, 0x10)

1.574128325s ago: executing program 0 (id=51):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
r2 = gettid()
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xca8dc428011b07a5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYRES8=r0], &(0x7f0000000180)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000001680)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xcd, 0x0, &(0x7f00000005c0)="b9ff03030018698cb89e40f065586000000e000011086306778c8b07bc9855cba9d3d6cbe2fd5401a7c843a88806d459c21d31c6478125ae04000000000000009423603a31406c31ef84913e871e6f6f091d51f4b0b154feec1b68a4be8bfe14306b599452c0085ba7a930fb56a21805671fb95100c75e45347f8ac843630eb65ba6c7952130f652322610a592863036bcb867069b5e8351bc5e4c7f6ecf9c0e1e8362730fd9a0d94f7d9285f42967c5bab2424134a365fb7153f570516b97884c53ced6e72c34e59ea8b92d19", 0x0, 0x100, 0x2000000, 0x24, 0x58, &(0x7f0000000440), &(0x7f0000000540)="f0478e42c8a36cd95dd280226aaa5069cdfa4ba823b92f5727f0258ce34b3017ee6158b474fadfe61a5695140106010100000000000041a44525c2ee146708a5e8febddc13f57fd0f5a5b57bf4d38adc3ed1e9cbf8872bd0"}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f0000001dc0)={0x1, 0x100072, 0x80000}, 0x20)
splice(r1, 0x0, r5, 0x0, 0x7, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000000000108000000000000000000002200ef31af86f042ece2e8d454bb69e9683d828d319e3703a962a2fa0c6a48a3a4a11e5b37db93975950a1f8b564b27d98c894b12e87fd438c27faccf51191e7d7bfc65acb5d36be3492aff622052c030c7a71667108c04ab50b367d79722daac9d0d5f28f56640c8a74bdb4351fe4f67dd2ce87ff602512d1ce58c3cac76072f5b61322d2741c775ec3b80422928c9b0b82f5bddad02c4c200f60adba40a5eaad26207311446ccb931d92176ac1fd9f81bf51c37c11e8d5e8909b90fdc0976c4dfcf5e1ba43f468bf9177462a580ce528b6417dc8419af53d162ccbdcd9a6a0e87871563adbc81898c517e54a1816e469d4d695e53826dc6e0eaea3ac49542eee25d45b5484c692c214e7c45f30172f57", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="f00000001000010000000000fdfffffffe881a00000000000000000000000001000000000000000000000000000000000000000000010000000000001d000000", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x10000, 0x2, 0x5, 0x6, 0x4}, 0x9c)

1.507097688s ago: executing program 4 (id=52):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$TIOCGSERIAL(r1, 0x541e, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pidfd_getfd(r0, r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000ffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202fcff0000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x88, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xfffffffb, 0xfff}]}}}}}}}, 0x0)

932.957065ms ago: executing program 4 (id=53):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r2=>0x0})
ioperm(0x7, 0x81, 0xfffffffffffffffe)
r3 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syslog(0x2, &(0x7f0000000180)=""/117, 0x75)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
acct(&(0x7f0000000080)='./tracing\x00')
fchmod(r1, 0xc0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

867.591879ms ago: executing program 1 (id=54):
socket$key(0xf, 0x3, 0x2)
fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x804)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket(0x10, 0x803, 0x4)
lseek(0xffffffffffffffff, 0x7, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendto$packet(r3, 0x0, 0x0, 0x20000085, &(0x7f0000000180)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @local}, 0x14)

802.551072ms ago: executing program 2 (id=55):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x216842, &(0x7f0000000600)={[{@nojournal_checksum}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x147142, 0xc1)
add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0ea, 0x0, 0x0, 0x3, 0x8ac, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, r0, 0x1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000004c0)=0x8)
syz_open_dev$vcsu(0x0, 0x7, 0x80600)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x20, r3, 0x5a, 0x0)
ptrace(0x11, r3)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x3)
getresuid(0x0, &(0x7f0000000140), &(0x7f0000000340))
r4 = socket(0xf, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000001040)={0x0}, 0x8}, 0x8001)
timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
tkill(r7, 0x7)
close_range(r6, 0xffffffffffffffff, 0x0)
setitimer(0x1, &(0x7f0000001d80)={{0x77359400}}, 0x0)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400))

723.855786ms ago: executing program 0 (id=56):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x40)
r4 = openat(r2, &(0x7f0000000180)='./file1\x00', 0x82040, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r5=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000d80)={{}, r5, 0x10, @inherit={0x0, 0x0}, @devid})
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0x43, 0xffff, 0x2, 0x3ff}})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x2, @perf_bp={0x0, 0x9}, 0x106414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_SET_RESBLKS(r9, 0xc0105872, &(0x7f0000000080)={0x8, 0x793})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0)

722.530706ms ago: executing program 3 (id=57):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0xf01, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0xf01, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x103}, 0x204, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000a50000002e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3) (async)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x7fffffff) (async)
sendfile(r5, r4, 0x0, 0x7fffffff)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000000000002000006040000000500003a04"], 0x0, 0x3b, 0x0, 0x8}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000000000002000006040000000500003a04"], 0x0, 0x3b, 0x0, 0x8}, 0x28)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x12, &(0x7f0000001300)={@broadcast, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@generic={0xe0c5}}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)

645.34203ms ago: executing program 1 (id=58):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket(0x10, 0x803, 0x2)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000600), 0xe}, 0x0, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x6, 0x30}, &(0x7f00000005c0)=0xc)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001106c696d69740000001c0002800c00024000000000800000010c000140000000000000000814000000110001000000000000"], 0xe0}}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000b40)={<r8=>r1, 0x4, 0x5, 0x7})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x0, 0xf, 0x8, 0x3, 0x10104, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)
r10 = openat2(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x400000, 0x0, 0x3c}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000840)='GPL\x00', 0x2c000000, 0xde, &(0x7f0000000880)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000d00)=[{0x4, 0x1, 0x2, 0x4}, {0x1, 0x1, 0x5, 0xc}, {0x1, 0x1, 0x8, 0x3}, {0x5, 0x4, 0xb, 0x9}, {0x0, 0x5, 0xe, 0x5}, {0x1, 0x5, 0x7, 0x5}, {0x3, 0x1, 0x5}, {0x2, 0x4, 0xa, 0x2}, {0x3, 0x3, 0xd, 0x8}], 0x10, 0x1}, 0x94)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000100)={0x4}, 0x1)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r11=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000680)={r11}, &(0x7f0000001400)=0x8)

569.567573ms ago: executing program 4 (id=59):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) (fail_nth: 1)

434.257039ms ago: executing program 1 (id=60):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

418.83988ms ago: executing program 4 (id=61):
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000804)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xffffffffffffffff}}, './bus\x00'})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r3], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r4, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x3c, 0x26, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xe}, {0xc, 0x4}, {0x3, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2f8fba6333a2f6ed, 0x0)
ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246)
r9 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xfffffe01, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x8, 0x0, 0x0, 0x0)
writev(r8, &(0x7f0000000a40)=[{&(0x7f0000000680)="f7c993", 0x3}, {0x0}], 0x2)
fremovexattr(r0, &(0x7f0000000400)=@known='system.posix_acl_access\x00')

356.620993ms ago: executing program 0 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
epoll_create1(0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x12, 0x2, {0x7, 0xfffffffa, 0x3, 0x3, 0x2}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xc0000000, 0x6, 0xa, 0x2, 0x5}}]}, {0x11}, {0xc}, {0xc, 0x4}}}]}]}, 0x80}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x4000, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@nobarrier}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x400000001}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket(0x23, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000bc0)=ANY=[], 0x1, 0x2b4, &(0x7f0000001440)="$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")
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r2, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x10c0ec, 0x0, 0x4, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3)
symlink(0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8600440}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x80, r4, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004810}, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3, 0x8000, 0x8, 0x200, r2, 0x6, '\x00', r5, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x8}, 0x50)
lgetxattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)=@random={'os2.', 'sample\x00'}, &(0x7f0000000500)=""/231, 0xe7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000240))
mmap(&(0x7f000063f000/0x3000)=nil, 0x3000, 0x2000002, 0x1010, 0xffffffffffffffff, 0xfff9a000)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0)
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x6, 0x200000)
ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000200))

305.483266ms ago: executing program 1 (id=63):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xed, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0xfff}, 0xffffffffffffffff, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2)
unshare(0x22020400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x10000000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x39, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd52, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x3efd7ab4c41335d9, @perf_config_ext={0xa, 0x1}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x80007, 0x2, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, r3, 0xb)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e18, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r7, 0x3)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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")

24.311609ms ago: executing program 4 (id=64):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x110c0, 0x0, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_flags_required={0x3, 0x4}, @ioring_restriction_sqe_op={0x1, 0xa}], 0x2)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
syz_io_uring_setup(0x191c, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
setrlimit(0x6, &(0x7f0000000000)={0xc, 0x4c})
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r2)
sendmsg$TIPC_CMD_GET_LINKS(r1, 0x0, 0x24000800)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
syslog(0x4, &(0x7f00000001c0)=""/99, 0x63)

0s ago: executing program 1 (id=65):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4)
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711037000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff"], 0x60}}, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000005c0)={&(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffc371, 0x0, 0x59, 0x4, 0x7fffffff, 0x6}], 0x1, 0x38, 0x1, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xfffff802, 0x4)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x21, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xbaf, &(0x7f0000000a40)="$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")
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x4000000)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(r4, &(0x7f0000000240)='+1', 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts.
[   31.301904][   T29] audit: type=1400 audit(1789298437.552:117): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   31.302140][   T29] audit: type=1400 audit(1789298437.552:118): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   31.302594][ T3287] cgroup: Unknown subsys name 'net'
[   31.302806][   T29] audit: type=1400 audit(1789298437.552:119): avc:  denied  { unmount } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   31.452230][ T3287] cgroup: Unknown subsys name 'cpuset'
[   31.452813][ T3287] cgroup: Unknown subsys name 'rlimit'
[   31.557386][   T29] audit: type=1400 audit(1789298437.802:120): avc:  denied  { setattr } for  pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.558175][   T29] audit: type=1400 audit(1789298437.802:121): avc:  denied  { create } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.558262][   T29] audit: type=1400 audit(1789298437.802:122): avc:  denied  { write } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.558429][   T29] audit: type=1400 audit(1789298437.802:123): avc:  denied  { read } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   31.583923][   T29] audit: type=1400 audit(1789298437.812:124): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   31.583971][   T29] audit: type=1400 audit(1789298437.812:125): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   31.605540][   T29] audit: type=1400 audit(1789298437.832:126): avc:  denied  { read } for  pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   31.616010][ T3292] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   31.717116][ T3287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   33.098244][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.098278][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.098397][ T3298] bridge_slave_0: entered allmulticast mode
[   33.098953][ T3298] bridge_slave_0: entered promiscuous mode
[   33.117736][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.117767][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.117890][ T3298] bridge_slave_1: entered allmulticast mode
[   33.118318][ T3298] bridge_slave_1: entered promiscuous mode
[   33.160935][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.171188][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.171288][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.171338][ T3307] bridge_slave_0: entered allmulticast mode
[   33.172289][ T3307] bridge_slave_0: entered promiscuous mode
[   33.179540][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.203106][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.203138][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.203212][ T3307] bridge_slave_1: entered allmulticast mode
[   33.203716][ T3307] bridge_slave_1: entered promiscuous mode
[   33.218747][ T3298] team0: Port device team_slave_0 added
[   33.218818][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.218848][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.218955][ T3304] bridge_slave_0: entered allmulticast mode
[   33.219348][ T3304] bridge_slave_0: entered promiscuous mode
[   33.220256][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.220285][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.220337][ T3303] bridge_slave_0: entered allmulticast mode
[   33.220843][ T3303] bridge_slave_0: entered promiscuous mode
[   33.232139][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.232169][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.232256][ T3303] bridge_slave_1: entered allmulticast mode
[   33.232756][ T3303] bridge_slave_1: entered promiscuous mode
[   33.233576][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.233605][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.233664][ T3304] bridge_slave_1: entered allmulticast mode
[   33.234122][ T3304] bridge_slave_1: entered promiscuous mode
[   33.239876][ T3298] team0: Port device team_slave_1 added
[   33.255123][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.255154][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.255251][ T3299] bridge_slave_0: entered allmulticast mode
[   33.255752][ T3299] bridge_slave_0: entered promiscuous mode
[   33.267239][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.272593][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.272629][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.272679][ T3299] bridge_slave_1: entered allmulticast mode
[   33.273082][ T3299] bridge_slave_1: entered promiscuous mode
[   33.274716][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.275778][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.276081][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.276093][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.276122][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.276717][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.276757][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.276844][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.280630][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.294065][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.309788][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.316368][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.317100][ T3307] team0: Port device team_slave_0 added
[   33.329345][ T3298] hsr_slave_0: entered promiscuous mode
[   33.329653][ T3298] hsr_slave_1: entered promiscuous mode
[   33.330755][ T3307] team0: Port device team_slave_1 added
[   33.331499][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.337182][ T3303] team0: Port device team_slave_0 added
[   33.338087][ T3303] team0: Port device team_slave_1 added
[   33.367260][ T3299] team0: Port device team_slave_0 added
[   33.368091][ T3299] team0: Port device team_slave_1 added
[   33.373851][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.373864][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.373895][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.379513][ T3304] team0: Port device team_slave_0 added
[   33.380574][ T3304] team0: Port device team_slave_1 added
[   33.386347][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.386359][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.386390][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.387059][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.387071][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.387101][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.390357][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.390369][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.390400][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.415823][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.415837][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.415868][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.416361][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.416384][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.416413][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.426585][ T3303] hsr_slave_0: entered promiscuous mode
[   33.426944][ T3303] hsr_slave_1: entered promiscuous mode
[   33.427217][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   33.427229][ T3303] Cannot create hsr debugfs directory
[   33.456830][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.456844][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.456875][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.457367][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.457379][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.457477][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.462480][ T3304] hsr_slave_0: entered promiscuous mode
[   33.462915][ T3304] hsr_slave_1: entered promiscuous mode
[   33.463217][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   33.463229][ T3304] Cannot create hsr debugfs directory
[   33.475173][ T3307] hsr_slave_0: entered promiscuous mode
[   33.475594][ T3307] hsr_slave_1: entered promiscuous mode
[   33.475810][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   33.475823][ T3307] Cannot create hsr debugfs directory
[   33.509084][ T3299] hsr_slave_0: entered promiscuous mode
[   33.509455][ T3299] hsr_slave_1: entered promiscuous mode
[   33.509641][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   33.509654][ T3299] Cannot create hsr debugfs directory
[   33.718654][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.741443][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.742373][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.750987][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.784601][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.794314][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.811806][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.827126][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.827775][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.837711][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.845354][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   33.870792][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.883922][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   33.886567][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   33.895185][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   33.898353][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   33.903300][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.910660][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.920091][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.920123][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.920189][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.920284][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.928380][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.936519][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   33.948340][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.948457][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.948611][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.948685][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.951741][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.979984][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   33.980458][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.990337][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.001031][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   34.007200][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.010915][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.016315][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.055296][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.064973][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.196211][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   34.202269][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.202688][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   34.209441][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.220349][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   34.224272][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   34.228294][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   34.237476][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.245707][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   34.252566][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   34.256957][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   34.265882][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   34.271342][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   34.279417][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   34.289163][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.298345][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.383698][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   34.394630][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.394663][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.399406][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.399444][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.405361][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   34.425198][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.425231][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.434159][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.434190][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.507035][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.520773][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.536652][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   34.542971][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.543004][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.544981][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   34.549695][  T108] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.549726][  T108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.553031][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.553061][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.558773][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.560314][  T108] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.560345][  T108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.620939][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   34.633082][  T108] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.633116][  T108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.640119][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.640151][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.745604][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.807649][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.900551][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.911165][ T3298] veth0_vlan: entered promiscuous mode
[   34.915739][ T3298] veth1_vlan: entered promiscuous mode
[   34.934384][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.936392][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.946096][ T3298] veth0_macvtap: entered promiscuous mode
[   34.948966][ T3298] veth1_macvtap: entered promiscuous mode
[   34.962170][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.968849][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.985582][   T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.985736][   T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.985838][   T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.985895][   T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.055776][ T3304] veth0_vlan: entered promiscuous mode
[   35.061302][ T3304] veth1_vlan: entered promiscuous mode
[   35.077057][ T3304] veth0_macvtap: entered promiscuous mode
[   35.078678][ T3304] veth1_macvtap: entered promiscuous mode
[   35.101997][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.105889][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.129039][ T3298] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.152632][ T3426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.154085][ T3426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.169336][ T3303] veth0_vlan: entered promiscuous mode
[   35.184216][ T3307] veth0_vlan: entered promiscuous mode
[   35.190654][ T3303] veth1_vlan: entered promiscuous mode
[   35.192060][  T108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.192172][  T108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.193901][ T3307] veth1_vlan: entered promiscuous mode
[   35.221386][ T3303] veth0_macvtap: entered promiscuous mode
[   35.226048][ T3303] veth1_macvtap: entered promiscuous mode
[   35.232703][ T3307] veth0_macvtap: entered promiscuous mode
[   35.237058][ T3307] veth1_macvtap: entered promiscuous mode
[   35.241102][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.247601][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.260014][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.262159][  T108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.284423][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.312633][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.313654][ T3426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.314559][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.314614][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.314650][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.314685][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.314794][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.390855][ T3498] loop1: detected capacity change from 0 to 512
[   35.426401][ T3498] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2: inode has both inline data and extents flags
[   35.426488][ T3498] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   35.426814][ T3498] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2: couldn't read orphan inode 15 (err -117)
[   35.426877][ T3498] loop1: lost filesystem error report for type 5 error -117
[   35.429526][ T3498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.484063][ T3299] veth0_vlan: entered promiscuous mode
[   35.490567][ T3299] veth1_vlan: entered promiscuous mode
[   35.517182][ T3299] veth0_macvtap: entered promiscuous mode
[   35.518706][ T3299] veth1_macvtap: entered promiscuous mode
[   35.535338][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.538496][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.564487][ T3426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.565201][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.565243][   T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.582953][   T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.613403][ T3517] FAULT_INJECTION: forcing a failure.
[   35.613403][ T3517] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.613444][ T3517] CPU: 1 UID: 0 PID: 3517 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(lazy) 
[   35.613472][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.613491][ T3517] Call Trace:
[   35.613499][ T3517]  <TASK>
[   35.613507][ T3517]  __dump_stack+0x1d/0x30
[   35.613594][ T3517]  dump_stack_lvl+0x95/0xd0
[   35.613615][ T3517]  dump_stack+0x15/0x1b
[   35.613634][ T3517]  should_fail_ex+0x262/0x280
[   35.613658][ T3517]  should_fail+0xb/0x20
[   35.613690][ T3517]  should_fail_usercopy+0x1a/0x20
[   35.613720][ T3517]  _copy_from_user+0x1c/0xb0
[   35.613750][ T3517]  ___sys_sendmsg+0xc1/0x1e0
[   35.613783][ T3517]  __x64_sys_sendmsg+0xd4/0x160
[   35.613816][ T3517]  x64_sys_call+0x22ab/0x2550
[   35.613846][ T3517]  do_syscall_64+0x112/0x360
[   35.613886][ T3517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.613913][ T3517] RIP: 0033:0x7f951cfee159
[   35.613956][ T3517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.613977][ T3517] RSP: 002b:00007f951ba47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.614019][ T3517] RAX: ffffffffffffffda RBX: 00007f951d275fa0 RCX: 00007f951cfee159
[   35.614036][ T3517] RDX: 0000000000004000 RSI: 00002000000003c0 RDI: 0000000000000003
[   35.614068][ T3517] RBP: 00007f951ba47090 R08: 0000000000000000 R09: 0000000000000000
[   35.614081][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.614093][ T3517] R13: 00007f951d276038 R14: 00007f951d275fa0 R15: 00007ffd4978f1a8
[   35.614110][ T3517]  </TASK>
[   35.635756][ T3515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'.
[   35.994600][ T3532] FAULT_INJECTION: forcing a failure.
[   35.994600][ T3532] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.994677][ T3532] CPU: 0 UID: 0 PID: 3532 Comm: syz.4.9 Not tainted syzkaller #0 PREEMPT(lazy) 
[   35.994706][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.994719][ T3532] Call Trace:
[   35.994725][ T3532]  <TASK>
[   35.994732][ T3532]  __dump_stack+0x1d/0x30
[   35.994755][ T3532]  dump_stack_lvl+0x95/0xd0
[   35.994922][ T3532]  dump_stack+0x15/0x1b
[   35.994946][ T3532]  should_fail_ex+0x262/0x280
[   35.994974][ T3532]  should_fail+0xb/0x20
[   35.994998][ T3532]  should_fail_usercopy+0x1a/0x20
[   35.995040][ T3532]  _copy_from_user+0x1c/0xb0
[   35.995065][ T3532]  ___sys_sendmsg+0xc1/0x1e0
[   35.995099][ T3532]  __x64_sys_sendmsg+0xd4/0x160
[   35.995148][ T3532]  x64_sys_call+0x22ab/0x2550
[   35.995178][ T3532]  do_syscall_64+0x112/0x360
[   35.995226][ T3532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.995315][ T3532] RIP: 0033:0x7f43015fe159
[   35.995333][ T3532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.995355][ T3532] RSP: 002b:00007f4300057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.995402][ T3532] RAX: ffffffffffffffda RBX: 00007f4301885fa0 RCX: 00007f43015fe159
[   35.995416][ T3532] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[   35.995428][ T3532] RBP: 00007f4300057090 R08: 0000000000000000 R09: 0000000000000000
[   35.995458][ T3532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.995470][ T3532] R13: 00007f4301886038 R14: 00007f4301885fa0 R15: 00007fffc46fce28
[   35.995491][ T3532]  </TASK>
[   36.224821][ T3505] syz.3.4 (3505) used greatest stack depth: 11008 bytes left
[   36.262494][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.335015][   T29] kauditd_printk_skb: 76 callbacks suppressed
[   36.335030][   T29] audit: type=1400 audit(1789298442.582:203): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   36.404896][ T3538] loop0: detected capacity change from 0 to 512
[   36.426092][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.426414][ T3538] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.640858][   T29] audit: type=1400 audit(1789298442.882:204): avc:  denied  { allowed } for  pid=3542 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   36.695466][ T3547] netlink: 'syz.4.15': attribute type 27 has an invalid length.
[   36.700985][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.801568][   T29] audit: type=1400 audit(1789298443.042:205): avc:  denied  { create } for  pid=3555 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   36.808076][ T3543] FAULT_INJECTION: forcing a failure.
[   36.808076][ T3543] name failslab, interval 1, probability 0, space 0, times 1
[   36.808152][ T3543] CPU: 0 UID: 0 PID: 3543 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(lazy) 
[   36.808177][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.808260][ T3543] Call Trace:
[   36.808268][ T3543]  <TASK>
[   36.808277][ T3543]  __dump_stack+0x1d/0x30
[   36.808308][ T3543]  dump_stack_lvl+0x95/0xd0
[   36.808383][ T3543]  dump_stack+0x15/0x1b
[   36.808441][ T3543]  should_fail_ex+0x262/0x280
[   36.808517][ T3543]  should_failslab+0x8c/0xb0
[   36.808554][ T3543]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[   36.808590][ T3543]  ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0
[   36.808625][ T3543]  ? __d_alloc+0x34/0x320
[   36.808709][ T3543]  ? __d_alloc+0x34/0x320
[   36.808749][ T3543]  __d_alloc+0x34/0x320
[   36.808772][ T3543]  ? d_alloc_anon+0xd/0x20
[   36.808870][ T3543]  d_alloc_anon+0x17/0x20
[   36.808893][ T3543]  path_from_stashed+0x1cf/0x330
[   36.808917][ T3543]  ns_get_path+0x62/0x80
[   36.809026][ T3543]  perf_event_namespaces+0x37a/0x6f0
[   36.809057][ T3543]  __se_sys_setns+0x692/0xff0
[   36.809100][ T3543]  __x64_sys_setns+0x31/0x40
[   36.809188][ T3543]  x64_sys_call+0x1769/0x2550
[   36.809221][ T3543]  do_syscall_64+0x112/0x360
[   36.809275][ T3543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.809311][ T3543] RIP: 0033:0x7f951cfef457
[   36.809337][ T3543] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.809359][ T3543] RSP: 002b:00007f951ba46fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[   36.809408][ T3543] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f951cfef457
[   36.809421][ T3543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9
[   36.809435][ T3543] RBP: 00007f951d08503b R08: 0000000000000000 R09: 0000000000000000
[   36.809452][ T3543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.809478][ T3543] R13: 00007f951d276038 R14: 00007f951d275fa0 R15: 00007ffd4978f1a8
[   36.809501][ T3543]  </TASK>
[   36.837030][ T3526] syz.2.7 (3526) used greatest stack depth: 10744 bytes left
[   36.845849][ T3550] loop3: detected capacity change from 0 to 512
[   36.849298][ T3550] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.16: inode has both inline data and extents flags
[   36.849345][ T3550] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   36.849623][ T3550] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.16: couldn't read orphan inode 15 (err -117)
[   36.849671][ T3550] loop3: lost filesystem error report for type 5 error -117
[   36.850714][ T3550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.872372][   T29] audit: type=1400 audit(1789298443.112:206): avc:  denied  { write } for  pid=3549 comm="syz.3.16" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.872471][   T29] audit: type=1400 audit(1789298443.112:207): avc:  denied  { shutdown } for  pid=3555 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   36.872549][   T29] audit: type=1400 audit(1789298443.122:208): avc:  denied  { bind } for  pid=3555 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   36.877435][   T29] audit: type=1400 audit(1789298443.122:209): avc:  denied  { write } for  pid=3549 comm="syz.3.16" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.884874][   T29] audit: type=1400 audit(1789298443.122:210): avc:  denied  { getopt } for  pid=3555 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   36.903292][   T29] audit: type=1400 audit(1789298443.142:211): avc:  denied  { write } for  pid=3549 comm="syz.3.16" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.045273][   T29] audit: type=1400 audit(1789298443.252:212): avc:  denied  { create } for  pid=3542 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.076033][ T3556] Zero length message leads to an empty skb
[   38.731081][ T3574] loop2: detected capacity change from 0 to 512
[   38.763104][ T3571] FAULT_INJECTION: forcing a failure.
[   38.763104][ T3571] name failslab, interval 1, probability 0, space 0, times 0
[   38.763280][ T3571] CPU: 0 UID: 0 PID: 3571 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(lazy) 
[   38.763369][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   38.763383][ T3571] Call Trace:
[   38.763390][ T3571]  <TASK>
[   38.763400][ T3571]  __dump_stack+0x1d/0x30
[   38.763432][ T3571]  dump_stack_lvl+0x95/0xd0
[   38.763460][ T3571]  dump_stack+0x15/0x1b
[   38.763501][ T3571]  should_fail_ex+0x262/0x280
[   38.763545][ T3571]  should_failslab+0x8c/0xb0
[   38.763650][ T3571]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[   38.763684][ T3571]  ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0
[   38.763724][ T3571]  ? __d_alloc+0x34/0x320
[   38.763753][ T3571]  ? __d_alloc+0x34/0x320
[   38.763826][ T3571]  __d_alloc+0x34/0x320
[   38.763854][ T3571]  ? d_alloc_anon+0xd/0x20
[   38.763947][ T3571]  d_alloc_anon+0x17/0x20
[   38.763983][ T3571]  path_from_stashed+0x1cf/0x330
[   38.764012][ T3571]  ns_get_path+0x62/0x80
[   38.764119][ T3571]  perf_event_namespaces+0xf1/0x6f0
[   38.764155][ T3571]  __se_sys_setns+0x692/0xff0
[   38.764197][ T3571]  __x64_sys_setns+0x31/0x40
[   38.764266][ T3571]  x64_sys_call+0x1769/0x2550
[   38.764353][ T3571]  do_syscall_64+0x112/0x360
[   38.764389][ T3571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.764436][ T3571] RIP: 0033:0x7fb127a5f457
[   38.764455][ T3571] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.764478][ T3571] RSP: 002b:00007fb1264b6fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[   38.764504][ T3571] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fb127a5f457
[   38.764567][ T3571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9
[   38.764580][ T3571] RBP: 00007fb127af503b R08: 0000000000000000 R09: 0000000000000000
[   38.764593][ T3571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.764609][ T3571] R13: 00007fb127ce6038 R14: 00007fb127ce5fa0 R15: 00007fffb2c54ff8
[   38.764630][ T3571]  </TASK>
[   38.788502][ T3574] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.21: inode has both inline data and extents flags
[   38.788538][ T3574] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   38.788791][ T3574] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.21: couldn't read orphan inode 15 (err -117)
[   38.788826][ T3574] loop2: lost filesystem error report for type 5 error -117
[   38.789755][ T3574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.856904][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.116115][ T3579] loop1: detected capacity change from 0 to 8192
[   39.118142][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'.
[   39.118163][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'.
[   39.123905][ T3589] loop4: detected capacity change from 0 to 512
[   39.124238][ T3589] ext4: Bad value for 'mb_optimize_scan'
[   39.219999][ T3589] loop4: detected capacity change from 0 to 256
[   39.229104][ T3589] vfat: Unknown parameter 'xœìÛÍoå'
[   39.276885][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'.
[   39.374212][ T3594] loop0: detected capacity change from 0 to 128
[   39.683331][ T3602] loop0: detected capacity change from 0 to 512
[   39.818515][ T3602] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.30: inode has both inline data and extents flags
[   39.818660][ T3602] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   39.818921][ T3602] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.30: couldn't read orphan inode 15 (err -117)
[   39.819084][ T3602] loop0: lost filesystem error report for type 5 error -117
[   39.859092][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.870249][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.601587][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.638186][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   40.649422][   T24] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   40.688668][ T3625] netlink: 260 bytes leftover after parsing attributes in process `syz.4.36'.
[   40.693559][ T3622] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003
[   40.694400][ T3623] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003
[   40.727438][ T3630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'.
[   40.730357][ T3622] loop0: detected capacity change from 0 to 128
[   40.781308][ T3628] fido_id[3628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   40.827499][ T3630] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   40.861115][ T3633] capability: warning: `syz.3.38' uses 32-bit capabilities (legacy support in use)
[   40.980124][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[   40.989026][ T3633] loop3: detected capacity change from 0 to 128
[   41.198245][ T3647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3647 comm=syz.1.41
[   41.272511][ T3646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   41.483096][   T29] kauditd_printk_skb: 61 callbacks suppressed
[   41.483114][   T29] audit: type=1400 audit(1789298447.712:274): avc:  denied  { watch watch_reads } for  pid=3632 comm="syz.3.38" path="/5/file0/file0" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   41.514842][   T29] audit: type=1400 audit(1789298447.762:275): avc:  denied  { create } for  pid=3654 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   41.517347][   T29] audit: type=1400 audit(1789298447.762:276): avc:  denied  { getopt } for  pid=3654 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   41.594347][ T3655] loop2: detected capacity change from 0 to 512
[   41.742345][   T29] audit: type=1400 audit(1789298447.962:277): avc:  denied  { write } for  pid=3654 comm="syz.2.45" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   41.892309][ T3666] FAULT_INJECTION: forcing a failure.
[   41.892309][ T3666] name failslab, interval 1, probability 0, space 0, times 0
[   41.892336][ T3666] CPU: 1 UID: 0 PID: 3666 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.892365][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.892377][ T3666] Call Trace:
[   41.892384][ T3666]  <TASK>
[   41.892419][ T3666]  __dump_stack+0x1d/0x30
[   41.892460][ T3666]  dump_stack_lvl+0x95/0xd0
[   41.892527][ T3666]  dump_stack+0x15/0x1b
[   41.892550][ T3666]  should_fail_ex+0x262/0x280
[   41.892612][ T3666]  should_failslab+0x8c/0xb0
[   41.892649][ T3666]  __kmalloc_node_noprof+0xdb/0x500
[   41.892686][ T3666]  ? __vmalloc_node_range_noprof+0x3ef/0x1000
[   41.892722][ T3666]  ? __vmalloc_node_range_noprof+0x3ef/0x1000
[   41.892856][ T3666]  __vmalloc_node_range_noprof+0x3ef/0x1000
[   41.893045][ T3666]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   41.893092][ T3666]  __vmalloc_noprof+0xa4/0xf0
[   41.893149][ T3666]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   41.893173][ T3666]  bpf_prog_alloc_no_stats+0x47/0x390
[   41.893198][ T3666]  ? bpf_prog_alloc+0x2a/0x150
[   41.893219][ T3666]  bpf_prog_alloc+0x3c/0x150
[   41.893241][ T3666]  bpf_prog_load+0x54b/0x1060
[   41.893307][ T3666]  __sys_bpf+0xbae/0xc30
[   41.893372][ T3666]  __x64_sys_bpf+0x69/0x80
[   41.893397][ T3666]  x64_sys_call+0xf26/0x2550
[   41.893426][ T3666]  do_syscall_64+0x112/0x360
[   41.893462][ T3666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.893567][ T3666] RIP: 0033:0x7fb127a5e159
[   41.893583][ T3666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.893680][ T3666] RSP: 002b:00007fb1264b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   41.893704][ T3666] RAX: ffffffffffffffda RBX: 00007fb127ce5fa0 RCX: 00007fb127a5e159
[   41.893718][ T3666] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[   41.893730][ T3666] RBP: 00007fb1264b7090 R08: 0000000000000000 R09: 0000000000000000
[   41.893753][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.893837][ T3666] R13: 00007fb127ce6038 R14: 00007fb127ce5fa0 R15: 00007fffb2c54ff8
[   41.893866][ T3666]  </TASK>
[   41.950738][ T3666] syz.0.48: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[   41.950840][ T3666] CPU: 0 UID: 0 PID: 3666 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.950866][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.950880][ T3666] Call Trace:
[   41.950893][ T3666]  <TASK>
[   41.950900][ T3666]  __dump_stack+0x1d/0x30
[   41.951033][ T3666]  dump_stack_lvl+0x95/0xd0
[   41.951056][ T3666]  dump_stack+0x15/0x1b
[   41.951077][ T3666]  warn_alloc+0x146/0x1c0
[   41.951108][ T3666]  ? should_failslab+0x8c/0xb0
[   41.951140][ T3666]  ? __kmalloc_node_noprof+0xdb/0x500
[   41.951213][ T3666]  __vmalloc_node_range_noprof+0x70d/0x1000
[   41.951320][ T3666]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   41.951347][ T3666]  __vmalloc_noprof+0xa4/0xf0
[   41.951381][ T3666]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   41.951451][ T3666]  bpf_prog_alloc_no_stats+0x47/0x390
[   41.951476][ T3666]  ? bpf_prog_alloc+0x2a/0x150
[   41.951500][ T3666]  bpf_prog_alloc+0x3c/0x150
[   41.951525][ T3666]  bpf_prog_load+0x54b/0x1060
[   41.951604][ T3666]  __sys_bpf+0xbae/0xc30
[   41.951642][ T3666]  __x64_sys_bpf+0x69/0x80
[   41.951708][ T3666]  x64_sys_call+0xf26/0x2550
[   41.951743][ T3666]  do_syscall_64+0x112/0x360
[   41.951847][ T3666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.951873][ T3666] RIP: 0033:0x7fb127a5e159
[   41.951898][ T3666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.951919][ T3666] RSP: 002b:00007fb1264b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   41.951944][ T3666] RAX: ffffffffffffffda RBX: 00007fb127ce5fa0 RCX: 00007fb127a5e159
[   41.951961][ T3666] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[   41.951977][ T3666] RBP: 00007fb1264b7090 R08: 0000000000000000 R09: 0000000000000000
[   41.951992][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.952007][ T3666] R13: 00007fb127ce6038 R14: 00007fb127ce5fa0 R15: 00007fffb2c54ff8
[   41.952078][ T3666]  </TASK>
[   41.952154][ T3666] Mem-Info:
[   41.952162][ T3666] active_anon:9909 inactive_anon:0 isolated_anon:0
[   41.952162][ T3666]  active_file:0 inactive_file:20764 isolated_file:0
[   41.952162][ T3666]  unevictable:0 dirty:1706 writeback:0
[   41.952162][ T3666]  slab_reclaimable:3117 slab_unreclaimable:15443
[   41.952162][ T3666]  mapped:32210 shmem:3069 pagetables:1072
[   41.952162][ T3666]  sec_pagetables:0 bounce:0
[   41.952162][ T3666]  kernel_misc_reclaimable:0
[   41.952162][ T3666]  free:1882010 free_pcp:11035 free_cma:0
[   41.952231][ T3666] Node 0 active_anon:39636kB inactive_anon:0kB active_file:0kB inactive_file:83056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128840kB dirty:6824kB writeback:0kB shmem:12276kB kernel_stack:3424kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   41.952401][ T3666] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   41.952539][ T3666] lowmem_reserve[]: 0 2878 7856 7856
[   41.952642][ T3666] Node 0 DMA32 free:2943720kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947244kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[   41.952740][ T3666] lowmem_reserve[]: 0 0 4978 4978
[   41.952771][ T3666] Node 0 Normal free:4568960kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39636kB inactive_anon:0kB active_file:0kB inactive_file:83056kB unevictable:0kB writepending:6824kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:40616kB local_pcp:3304kB free_cma:0kB
[   41.952917][ T3666] lowmem_reserve[]: 0 0 0 0
[   41.952947][ T3666] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   41.953092][ T3666] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943720kB
[   41.953384][ T3666] Node 0 Normal: 30*4kB (UME) 23*8kB (UME) 48*16kB (UME) 73*32kB (UME) 76*64kB (UME) 77*128kB (UM) 73*256kB (UM) 8*512kB (UM) 6*1024kB (UME) 0*2048kB 1104*4096kB (UM) = 4569040kB
[   41.959763][ T3666] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   41.959782][ T3666] 23800 total pagecache pages
[   41.959789][ T3666] 0 pages in swap cache
[   41.959796][ T3666] Free swap  = 124996kB
[   41.959803][ T3666] Total swap = 124996kB
[   41.959832][ T3666] 2097051 pages RAM
[   41.959838][ T3666] 0 pages HighMem/MovableOnly
[   41.959845][ T3666] 81843 pages reserved
[   41.973497][ T3669] netlink: 260 bytes leftover after parsing attributes in process `syz.2.50'.
[   42.105324][ T3674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3674 comm=syz.0.51
[   42.257468][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'.
[   42.758822][   T29] audit: type=1400 audit(1789298449.002:278): avc:  denied  { module_request } for  pid=3683 comm="syz.1.54" kmod="fs-ceph" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   42.770364][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'.
[   42.776644][ T3684] netlink: 'syz.1.54': attribute type 1 has an invalid length.
[   42.811214][ T3688] loop2: detected capacity change from 0 to 1024
[   42.811517][ T3688] =======================================================
[   42.811517][ T3688] WARNING: The mand mount option has been deprecated and
[   42.811517][ T3688]          and is ignored by this kernel. Remove the mand
[   42.811517][ T3688]          option from the mount to silence this warning.
[   42.811517][ T3688] =======================================================
[   42.879815][ T3684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3684 comm=syz.1.54
[   42.898195][   T29] audit: type=1400 audit(1789298449.142:279): avc:  denied  { mount } for  pid=3691 comm="syz.0.56" name="/" dev="autofs" ino=5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   42.923034][   T29] audit: type=1400 audit(1789298449.152:280): avc:  denied  { mount } for  pid=3693 comm="syz.3.57" name="/" dev="ramfs" ino=5577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   43.002328][   T29] audit: type=1400 audit(1789298449.252:281): avc:  denied  { ioctl } for  pid=3691 comm="syz.0.56" path="socket:[5596]" dev="sockfs" ino=5596 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   43.002905][ T3696] Illegal XDP return value 4294967282 on prog  (id 11) dev syz_tun, expect packet loss!
[   43.013725][   T29] audit: type=1400 audit(1789298449.252:282): avc:  denied  { map } for  pid=3691 comm="syz.0.56" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   43.085602][ T3702] FAULT_INJECTION: forcing a failure.
[   43.085602][ T3702] name failslab, interval 1, probability 0, space 0, times 0
[   43.085632][ T3702] CPU: 0 UID: 0 PID: 3702 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.085661][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   43.085673][ T3702] Call Trace:
[   43.085680][ T3702]  <TASK>
[   43.085687][ T3702]  __dump_stack+0x1d/0x30
[   43.085727][ T3702]  dump_stack_lvl+0x95/0xd0
[   43.085751][ T3702]  dump_stack+0x15/0x1b
[   43.085773][ T3702]  should_fail_ex+0x262/0x280
[   43.085796][ T3702]  ? __alloc_skb+0x2e0/0x6f0
[   43.085849][ T3702]  should_failslab+0x8c/0xb0
[   43.085884][ T3702]  kmem_cache_alloc_node_noprof+0x82/0x400
[   43.085928][ T3702]  ? __alloc_skb+0x2e0/0x6f0
[   43.085958][ T3702]  __alloc_skb+0x2e0/0x6f0
[   43.085989][ T3702]  ? __d_rehash+0x124/0x1d0
[   43.086020][ T3702]  ? __alloc_skb+0x209/0x6f0
[   43.086053][ T3702]  alloc_skb_with_frags+0x7e/0x3d0
[   43.086203][ T3702]  ? __rcu_read_unlock+0x4e/0x70
[   43.086239][ T3702]  ? avc_has_perm_noaudit+0xa3/0x120
[   43.086266][ T3702]  sock_alloc_send_pskb+0x44d/0x500
[   43.086344][ T3702]  ? selinux_file_open+0x2e6/0x330
[   43.086366][ T3702]  tun_get_user+0x96c/0x2870
[   43.086464][ T3702]  ? ref_tracker_alloc+0x1eb/0x2f0
[   43.086496][ T3702]  tun_chr_write_iter+0x15a/0x210
[   43.086524][ T3702]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   43.086619][ T3702]  vfs_write+0x57f/0x9a0
[   43.086652][ T3702]  ksys_write+0xdc/0x1a0
[   43.086687][ T3702]  __x64_sys_write+0x40/0x50
[   43.086797][ T3702]  x64_sys_call+0x154e/0x2550
[   43.086827][ T3702]  do_syscall_64+0x112/0x360
[   43.086911][ T3702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.087010][ T3702] RIP: 0033:0x7f43015be98e
[   43.087025][ T3702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   43.087090][ T3702] RSP: 002b:00007f4300056fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   43.087109][ T3702] RAX: ffffffffffffffda RBX: 00007f43000576c0 RCX: 00007f43015be98e
[   43.087123][ T3702] RDX: 0000000000000d81 RSI: 0000200000000700 RDI: 00000000000000c8
[   43.087136][ T3702] RBP: 00007f4300057090 R08: 0000000000000000 R09: 0000000000000000
[   43.087148][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.087217][ T3702] R13: 00007f4301886038 R14: 00007f4301885fa0 R15: 00007fffc46fce28
[   43.087246][ T3702]  </TASK>
[   43.228365][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   43.228382][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   43.237509][ T3708] loop0: detected capacity change from 0 to 512
[   43.242791][ T3708] ext4: Bad value for 'mb_optimize_scan'
[   43.340726][ T3709] loop4: detected capacity change from 0 to 512
[   43.358277][ T3709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.358378][ T3709] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.450852][ T3708] loop0: detected capacity change from 0 to 256
[   43.467597][ T3708] vfat: Unknown parameter 'xœìÛÍoå'
[   43.534326][   T29] audit: type=1400 audit(1789298449.782:283): avc:  denied  { create } for  pid=3710 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.535622][ T3713] loop1: detected capacity change from 0 to 256
[   43.571055][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   43.581953][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.657325][ T3694] ==================================================================
[   43.657357][ T3694] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read
[   43.657385][ T3694] 
[   43.657391][ T3694] write to 0xffff888104b3f220 of 8 bytes by task 3695 on cpu 1:
[   43.657408][ T3694]  filemap_splice_read+0x52a/0x790
[   43.657434][ T3694]  splice_direct_to_actor+0x261/0x680
[   43.657454][ T3694]  do_splice_direct+0x119/0x1a0
[   43.657471][ T3694]  do_sendfile+0x37d/0x640
[   43.657489][ T3694]  __x64_sys_sendfile64+0x105/0x150
[   43.657520][ T3694]  x64_sys_call+0x1015/0x2550
[   43.657543][ T3694]  do_syscall_64+0x112/0x360
[   43.657575][ T3694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.657599][ T3694] 
[   43.657605][ T3694] write to 0xffff888104b3f220 of 8 bytes by task 3694 on cpu 0:
[   43.657621][ T3694]  filemap_splice_read+0x52a/0x790
[   43.657641][ T3694]  splice_direct_to_actor+0x261/0x680
[   43.657658][ T3694]  do_splice_direct+0x119/0x1a0
[   43.657674][ T3694]  do_sendfile+0x37d/0x640
[   43.657695][ T3694]  __x64_sys_sendfile64+0x105/0x150
[   43.657731][ T3694]  x64_sys_call+0x1015/0x2550
[   43.657760][ T3694]  do_syscall_64+0x112/0x360
[   43.657792][ T3694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.657816][ T3694] 
[   43.657821][ T3694] value changed: 0x0000000000004259 -> 0x000000000000425c
[   43.657834][ T3694] 
[   43.657839][ T3694] Reported by Kernel Concurrency Sanitizer on:
[   43.657851][ T3694] CPU: 0 UID: 0 PID: 3694 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.657878][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   43.657892][ T3694] ==================================================================
[   43.683981][ T3720] FAULT_INJECTION: forcing a failure.
[   43.683981][ T3720] name failslab, interval 1, probability 0, space 0, times 0
[   43.684010][ T3720] CPU: 0 UID: 0 PID: 3720 Comm: syz.4.64 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.684038][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   43.684052][ T3720] Call Trace:
[   43.684059][ T3720]  <TASK>
[   43.684067][ T3720]  __dump_stack+0x1d/0x30
[   43.684119][ T3720]  dump_stack_lvl+0x95/0xd0
[   43.684144][ T3720]  dump_stack+0x15/0x1b
[   43.684174][ T3720]  should_fail_ex+0x262/0x280
[   43.684256][ T3720]  ? syslog_print_all+0x79/0x3c0
[   43.684292][ T3720]  should_failslab+0x8c/0xb0
[   43.684391][ T3720]  __kmalloc_cache_noprof+0x7a/0x400
[   43.684426][ T3720]  ? syslog_print_all+0x79/0x3c0
[   43.684459][ T3720]  syslog_print_all+0x79/0x3c0
[   43.684505][ T3720]  ? avc_has_perm+0x101/0x190
[   43.684537][ T3720]  do_syslog+0x2fd/0x7f0
[   43.684570][ T3720]  ? restore_fpregs_from_fpstate+0x61/0x110
[   43.684598][ T3720]  __x64_sys_syslog+0x41/0x50
[   43.684690][ T3720]  x64_sys_call+0x1d36/0x2550
[   43.684719][ T3720]  do_syscall_64+0x112/0x360
[   43.684801][ T3720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.684826][ T3720] RIP: 0033:0x7f43015fe159
[   43.684844][ T3720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.684940][ T3720] RSP: 002b:00007f4300057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[   43.684986][ T3720] RAX: ffffffffffffffda RBX: 00007f4301885fa0 RCX: 00007f43015fe159
[   43.685072][ T3720] RDX: 0000000000000063 RSI: 00002000000001c0 RDI: 0000000000000004
[   43.685085][ T3720] RBP: 00007f430169503b R08: 0000000000000000 R09: 0000000000000000
[   43.685099][ T3720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   43.685135][ T3720] R13: 00007f4301886038 R14: 00007f4301885fa0 R15: 00007fffc46fce28
[   43.685164][ T3720]  </TASK>
[   43.705755][ T3719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'.
[   44.420882][ T3719] loop1: detected capacity change from 0 to 4096
[   44.438565][ T3719] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.475120][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.513065][ T3719] bond0: invalid ARP target specified
[   44.534471][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.