last executing test programs:

6m4.639550992s ago: executing program 32 (id=305):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x2}})
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fe})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
io_uring_enter(r0, 0x2219, 0x7721, 0x3c, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$tipc(0x1e, 0x5, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b)

5m52.124661879s ago: executing program 33 (id=400):
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x1ffff, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a0e9, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302000020000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b"], 0x134}}, 0x4000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="560609000c0000001c00128009000100626f6e43000000000c00028008000b00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
close(r5)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
write$binfmt_format(r7, &(0x7f0000000040)='1\x00', 0x2)
r8 = add_key$user(&(0x7f0000000b00), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000900)="9aa7", 0x2, 0xfffffffffffffffe)
keyctl$read(0xb, r8, 0x0, 0x0)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xffc, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r9 = epoll_create1(0x0)
r10 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000000)={0xa0028010})
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

4m21.562397676s ago: executing program 34 (id=1125):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x7, 0x8000, 0x1, 0x2, 0x9, 0x0, [{0x7, 0xc, 0x7, '\x00', 0x804}, {0x3, 0x4, 0x100, '\x00', 0x1108}, {0x2, 0x8001, 0x1ff, '\x00', 0x480}, {0x3c8, 0x7, 0xac, '\x00', 0x6a80}, {0x5, 0x7, 0x5}, {0x7fffffffffffffff, 0x2, 0x2}, {0x3, 0x8, 0xa00c, '\x00', 0x8}, {0x3, 0xe}, {0x6, 0xa655, 0x3ff, '\x00', 0x904}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)

3m59.288214265s ago: executing program 6 (id=1278):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x41, 0x8, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "4967b71d6022ec0b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20000)

3m59.287849085s ago: executing program 35 (id=1278):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x41, 0x8, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "4967b71d6022ec0b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20000)

3m33.380468289s ago: executing program 7 (id=1826):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xff, 0x0, 0x2}])
io_getevents(r1, 0x4, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r4 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000))
r5 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xc, 0x1, 0x7, 0x7f, 0x0, 0x9, 0x42108, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000540), 0x1}, 0x882, 0xd, 0x6, 0x9, 0x3, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x3}, 0xffffffffffffffff, 0x7, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000680)=""/239, 0xef}], 0x1, 0xa7, 0xf9)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x9, 0x8, 0x7, 0xc5, 0x0, 0x2, 0x220, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x1001c, 0x5, 0x62, 0x5, 0x1, 0x4, 0x5, 0x0, 0x9, 0x0, 0x41a3}, r4, 0x0, r5, 0xa)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
syz_open_dev$ptys(0xc, 0x3, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)

3m33.063726377s ago: executing program 7 (id=1835):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="8fdfd6e672e6", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010002}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000001bc0)=@chain={'key_or_keyring:', r4})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b000000950000000000000012543a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x0, &(0x7f00000005c0)="fb323929490bfddb6331b72222bf30399a9d594565d58737eb20d8ac6d85fccfa28f2b2c555f39f12a73aa", 0x2b, &(0x7f00000006c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='ext2\x00', 0x800018, &(0x7f0000001040)='acl=\x8cB\xd0\x02\x91\x91mt\x15\x85\xe4\xf2\xdd\r@B\xa7\x88\xbe\r\x82\x9c\x16h~u\xd0\xba\xc8f\xc2\x12!\xc1\xeek\xa5~\x8f\x9c\xbe\n:\x91<\xac\x9f\xaa$Q\xae\b\x9c\xe2v&\xbc\xab\xf7\x90\x84\xb6\x17\xf6\xabWt<4\'\x93\x87\xcfP\xa0h\xc0\xc4L\x1f\x11\x86\xfe\xccPS\x8e\xb3#\\\x89}')
socket$inet6_tcp(0xa, 0x1, 0x6)

3m32.613636587s ago: executing program 7 (id=1845):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xff, 0x0, 0x2}])
io_getevents(r1, 0x4, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r4 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000))
r5 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xc, 0x1, 0x7, 0x7f, 0x0, 0x9, 0x42108, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000540), 0x1}, 0x882, 0xd, 0x6, 0x9, 0x3, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x3}, 0xffffffffffffffff, 0x7, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000680)=""/239, 0xef}], 0x1, 0xa7, 0xf9)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x9, 0x8, 0x7, 0xc5, 0x0, 0x2, 0x220, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x1001c, 0x5, 0x62, 0x5, 0x1, 0x4, 0x5, 0x0, 0x9, 0x0, 0x41a3}, r4, 0x0, r5, 0xa)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
syz_open_dev$ptys(0xc, 0x3, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)

3m32.181413368s ago: executing program 7 (id=1861):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x4}, {0x20, 0x6}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
creat(&(0x7f0000000180)='./file1\x00', 0x1)

3m32.135800449s ago: executing program 36 (id=1861):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x4}, {0x20, 0x6}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
creat(&(0x7f0000000180)='./file1\x00', 0x1)

3m13.220036837s ago: executing program 8 (id=2124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4000058)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

3m13.185375468s ago: executing program 8 (id=2125):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xb0000004})
r2 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r0, r1, 0x3})

3m13.10768893s ago: executing program 8 (id=2126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000005400e50029bd7000fdffffff07000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010101000000000000000000000000000000000186dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3m13.027412412s ago: executing program 8 (id=2127):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="8fdfd6e672e6", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010002}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000001bc0)=@chain={'key_or_keyring:', r4})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b000000950000000000000012543a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, &(0x7f00000005c0)="fb323929490bfddb6331b72222bf30399a9d594565d58737eb20d8ac6d85fccfa28f2b2c555f39f12a73aa", 0x2b, &(0x7f00000006c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='ext2\x00', 0x800018, &(0x7f0000001040)='acl=\x8cB\xd0\x02\x91\x91mt\x15\x85\xe4\xf2\xdd\r@B\xa7\x88\xbe\r\x82\x9c\x16h~u\xd0\xba\xc8f\xc2\x12!\xc1\xeek\xa5~\x8f\x9c\xbe\n:\x91<\xac\x9f\xaa$Q\xae\b\x9c\xe2v&\xbc\xab\xf7\x90\x84\xb6\x17\xf6\xabWt<4\'\x93\x87\xcfP\xa0h\xc0\xc4L\x1f\x11\x86\xfe\xccPS\x8e\xb3#\\\x89}')
socket$inet6_tcp(0xa, 0x1, 0x6)

3m12.801416737s ago: executing program 8 (id=2131):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0)

3m12.232040781s ago: executing program 8 (id=2135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4000058)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

3m12.231870231s ago: executing program 37 (id=2135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4000058)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

1m19.400049526s ago: executing program 9 (id=3189):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
io_submit(r1, 0x0, 0x0)
io_getevents(r1, 0x4, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '@:^$[%!'}, {0x20, 'illinois'}], 0xa, "3591d427a1e3822f0ee7ad1f6cb9618f956f6784e1df77e21ce2036549587aa0247780ccf6d4ac4fcf85"}, 0x46)
r3 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000))
r4 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xc, 0x1, 0x7, 0x7f, 0x0, 0x9, 0x42108, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000540), 0x1}, 0x882, 0xd, 0x6, 0x9, 0x3, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x3}, 0xffffffffffffffff, 0x7, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000680)=""/239, 0xef}], 0x1, 0xa7, 0xf9)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x9, 0x8, 0x7, 0xc5, 0x0, 0x2, 0x220, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x1001c, 0x5, 0x62, 0x5, 0x1, 0x4, 0x5, 0x0, 0x9, 0x0, 0x41a3}, r3, 0x0, r4, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
syz_open_dev$ptys(0xc, 0x3, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)

1m19.132424793s ago: executing program 9 (id=3199):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r3, 0xba8}, &(0x7f00000000c0)=0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) (async)
r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x9000)
write(r4, &(0x7f0000000440)='nf', 0x2)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080))
openat2(r4, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0xc80, 0x48, 0x4}, 0x18) (async)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/52, 0x34) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x0, 0x1}, 0xc) (async)
preadv(r6, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4120, 0x1018}], 0x1, 0x800, 0x8)

1m19.028113815s ago: executing program 9 (id=3201):
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
rt_sigprocmask(0x1, 0x0, 0x0, 0x0)
clock_nanosleep(0x6, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
nanosleep(&(0x7f0000000b00)={0x77359400}, &(0x7f0000000b40))
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x1a1081, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

1m18.159838176s ago: executing program 9 (id=3208):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001340)=""/27, 0x1b}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x4af, &(0x7f0000000940)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)="29249b", 0x0, 0x0, 0xa20}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='net_prio.prioidx\x00', 0x26e1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]})
r2 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2})
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a8", 0x1c, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, 0x0, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffd6d, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x64000}, 0x20000090)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x4, r4, &(0x7f00000000c0), 0x1fb)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9})
socket$packet(0x11, 0x2, 0x300)
socket(0x2, 0x6, 0x0)

1m16.951433485s ago: executing program 9 (id=3220):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0xbc, &(0x7f0000000480)=""/188}, &(0x7f0000000200)="259374c94991", 0x0, 0x2, 0x1c, 0xbfffffff, 0x0})

1m15.656329846s ago: executing program 9 (id=3232):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, r1}, 0x10)
pipe2$9p(&(0x7f0000000100), 0x80080)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
lseek(r2, 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
acct(&(0x7f0000000040)='./file0\x00')
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040)
ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x0, 0x12, 0x2, 0x5eb, "7edcf0e1613c1722e73bf5557700de89deea7558b65083e9b1982b28539c1d4f"})

1m15.602922347s ago: executing program 38 (id=3232):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, r1}, 0x10)
pipe2$9p(&(0x7f0000000100), 0x80080)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
lseek(r2, 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
acct(&(0x7f0000000040)='./file0\x00')
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040)
ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x0, 0x12, 0x2, 0x5eb, "7edcf0e1613c1722e73bf5557700de89deea7558b65083e9b1982b28539c1d4f"})

48.092188829s ago: executing program 5 (id=3473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44490}, 0x20040844)

48.091764099s ago: executing program 5 (id=3474):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x3f815000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x2800, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffb, &(0x7f0000002cc0)=""/4091, 0x41100, 0x5}, 0x94)

48.024212491s ago: executing program 5 (id=3475):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200001e04000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = gettid()
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

47.117845892s ago: executing program 5 (id=3483):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0)
r1 = socket(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf", 0x1e)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800)
accept$nfc_llcp(r1, &(0x7f00000002c0), 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
inotify_init1(0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/syzkaller0/carrier\x00', 0x0, 0x0)
read(r4, &(0x7f0000000800)=""/32, 0x20)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{}]})

46.390070309s ago: executing program 5 (id=3495):
ioctl$FIBMAP(0xffffffffffffffff, 0x5385, 0x0)

46.098581466s ago: executing program 5 (id=3499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0)

46.069081597s ago: executing program 39 (id=3499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0)

20.571330312s ago: executing program 2 (id=3723):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x12061)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf25070026", @ANYRES32, @ANYBLOB='\f\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

20.538814203s ago: executing program 2 (id=3724):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

20.486611594s ago: executing program 2 (id=3725):
mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x51, 0xffff0000}}], 0x18}, 0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}], 0x38)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0xd00c8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x4b3, 0xf6, 0xff, 0x7}, {0xfff, 0x81, 0xa1, 0xffffffff}, {0x10, 0x3, 0x8, 0x1ff}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = dup(r4)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})

20.382184926s ago: executing program 2 (id=3729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r1, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000200000004000000a4"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000400)="605668067293451d3d56921a26aeb0e48a0fe9ec2c18f6b8d3e49228ccf3a88a7cddb3235faedf9f9cbffe5dd44c4650f8b1ab68af64fed0820cd927d353b0becf5a1303000e89e2e14d7ff8f157bf53e18b58dbabedab086179a4c451587225ee7f7b5cd64164a9062e6605b79c85b9001f520ff76c085a04b30da5e30000", &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20)
close(r4)
recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="d1", 0x1}], 0x1}, 0x404c0c4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r6 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0)
pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00')
recvmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060)
sendto(r1, &(0x7f0000000680)="8f820610cfdba7427b28dee15a96b4b7f4f33c355d43c369de65aded93b73ed1c5b22f5f115d9fe9b377923e3cf84077ebdd4c5de8b17ac3736ece6c280e6552093258bc59acf7e9281c61d12d632ef4cd139d73c2ad3ff1ebe2205588f5cd8e17c29b5d402f836ce42cc617190fce5f8d3922bee1e45017db1b5d76f1ded0eb65d766b3e28bed3173a74758d454c133fa154348f9765ee06077c76295b7236eb8ef44e3759c0a845b7f9fb43ab19731a214f4e4a3ece90de2fd7ef035a22ca882445b8c18855235d35e", 0xca, 0x40881, &(0x7f0000000780)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(ccm-aes-ce)\x00'}, 0x80)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c094)

20.269989439s ago: executing program 2 (id=3731):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
unshare(0x22020600)
r2 = socket(0x26, 0x2, 0x40000b7c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4018}, 0x0)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
clock_getres(0x3, &(0x7f0000000000))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bind$rxrpc(r1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb2000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800013eb70300000000004085000000d400000095"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)

19.900117017s ago: executing program 2 (id=3735):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x12061)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf25070026", @ANYRES32, @ANYBLOB='\f\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

19.899924257s ago: executing program 40 (id=3735):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x12061)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf25070026", @ANYRES32, @ANYBLOB='\f\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

17.223394721s ago: executing program 6 (id=3736):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socket$inet(0x2, 0x3, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x31, 0x0, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ffff000057000000000000"], 0x50)
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

15.686417528s ago: executing program 6 (id=3790):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xa1ffffffffffffff, 0x44800}, 0x40004046)

15.528695332s ago: executing program 6 (id=3792):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
close(r0)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000000), 0x0, 0x458, &(0x7f0000000a80)="$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")
lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x2, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

11.512083847s ago: executing program 6 (id=3833):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
r2 = syz_io_uring_setup(0x1949, &(0x7f00000005c0)={0x0, 0x4a94, 0x80000, 0x2, 0x32c}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r2, 0x24, &(0x7f0000000700)={0x330f, 0x1}, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x4001)
r3 = socket$tipc(0x1e, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'pimreg\x00', {}, 0x8})
r4 = socket(0x10, 0x80000, 0x2)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r3, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000002940)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000028c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x38}, 0x4044004)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000040), 0x4)
sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x44011}, 0x4000000)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x56, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/23, 0x23}], 0x1, 0x0, 0x1e}, 0x10040)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r11 = syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x501000)
syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r11)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff59}], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)

11.054831818s ago: executing program 6 (id=3838):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619, r0}, 0x38)

10.990139689s ago: executing program 41 (id=3838):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619, r0}, 0x38)

8.830044431s ago: executing program 1 (id=3859):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x6ff9d, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0xffff, 0x0, {"00000000009de402e395c51a00000009"}, 0x80000, 0x0, 0x3ff}}}, 0x118)

8.763575342s ago: executing program 1 (id=3861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x134}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000180)=0xc4d7, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x100, @private0, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000003c0)=@ccm_128={{0x303}, "64fb76685cfdb102", "e367ff6851a2ed9a7674a7000071c1ef", "9107458a", "080088e100d80eec"}, 0x28)
sendfile(r3, r5, &(0x7f0000000100)=0x1010, 0x10001)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r7)
write$tun(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="000022f0aaaaaaaaaaaa0180c200000286dd61000700ef082c00fd0100000000000000000000000000012001000000000000000023eb00"/66], 0x42)

8.278965643s ago: executing program 1 (id=3864):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x24000800}, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
setgroups(0x0, 0x0)
keyctl$chown(0x4, r2, 0xee01, 0xee01)
keyctl$setperm(0x5, r2, 0x30925)
keyctl$read(0xb, r2, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180))
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00')
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x408c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x2, 0x3}}, 0x20)
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
read$msr(r4, &(0x7f0000000340)=""/238, 0xee)
ptrace$cont(0x9, r3, 0x5, 0x40)
ptrace$cont(0x21, r3, 0x5, 0x4)
r6 = syz_open_pts(r1, 0x60300)
dup3(r6, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0)

7.918488652s ago: executing program 1 (id=3866):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000340)=ANY=[], 0x1, 0x58d, &(0x7f0000001fc0)="$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")
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000140)=0x400, 0x8, 0x1)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}])
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x18000, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3b6b627, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048055}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0xd4000)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x280000, 0x4c, 0x8001, 0x9})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x6, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4000)

7.476392132s ago: executing program 1 (id=3867):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xff, 0x0, 0x2}])
io_getevents(r1, 0x4, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'illinois'}], 0xa, "3591d427a1e3822f0ee7ad1f6cb9618f956f6784e1df77e21ce2036549587aa0247780ccf6d4ac4fcf85bc9005c49c080d1690faaecfbc"}, 0x4b)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000))
r4 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xc, 0x1, 0x7, 0x7f, 0x0, 0x9, 0x42108, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000540), 0x1}, 0x882, 0xd, 0x6, 0x9, 0x3, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x3}, 0xffffffffffffffff, 0x7, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000680)=""/239, 0xef}], 0x1, 0xa7, 0xf9)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x9, 0x8, 0x7, 0xc5, 0x0, 0x2, 0x220, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x1001c, 0x5, 0x62, 0x5, 0x1, 0x4, 0x5, 0x0, 0x9, 0x0, 0x41a3}, 0x0, 0x0, r4, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0xb74f, 0x10, 0x6, 0x7}, {0x5, 0xd5, 0x7, 0xc}]}, 0x10)
syz_open_dev$ptys(0xc, 0x3, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)

7.428247294s ago: executing program 3 (id=3868):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.406058214s ago: executing program 3 (id=3870):
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
io_setup(0x6, &(0x7f0000001380))
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
unshare(0x20000400)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$cgroup(0x0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@none}, {@name={'name', 0x3d, 'kfree\x00'}}]})
r5 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00')
lseek(r5, 0xfffffffffffffffd, 0x1)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x8000, &(0x7f0000000300)=ANY=[@ANYBLOB="747a3d5554432c6572726f72733d72656d6f756e742d726f2c644c73f400e2ea57f4bb152c6e66733d7374616c655f72772c6e6f646f74732c6e6f646f74732c757365667265652c646f74732c666c7573682c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c636865636b3d72656c617865642c6e6f636173652c6e6f646f74732c6e6f646f74732c6e6f646f74732c00"], 0x21, 0x24a, &(0x7f00000003c0)="$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")

6.834909997s ago: executing program 1 (id=3873):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200001e04000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = gettid()
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

6.240227272s ago: executing program 3 (id=3878):
futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, 0x0, 0x1)
unshare(0x2a060400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x104805, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0)
lseek(r0, 0x4, 0x1)

6.195045433s ago: executing program 3 (id=3879):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x889e, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
syz_read_part_table(0x644, &(0x7f0000000000)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xa}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x1e1282)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000280)='.\x00', 0x20000, 0x4)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r3, 0xc17a)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x4000004)
ioctl$FS_IOC_SETFSLABEL(r0, 0x8004550f, 0x0)

5.855322581s ago: executing program 3 (id=3881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7], 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000018000000000000020000000008001e0001000000"], 0x24}}, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2f, 0x0, @private1, @private1, [@routing]}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r8, @ANYBLOB="100001800400048008"], 0x28}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x50)
syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r9, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
r11 = socket$inet(0x2, 0x2, 0x1)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, 0x0)
setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)

5.772158843s ago: executing program 3 (id=3883):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200001e04000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_hci(r4, 0x0, 0x31, 0x0, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ffff000057000000000000"], 0x50)
r5 = gettid()
process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

5.289957834s ago: executing program 0 (id=3887):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b040000000900000001000013"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x600, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.273826175s ago: executing program 4 (id=3888):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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")
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0xfffffffffffffffc, 0x4}}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "706d768ce86269a616ddb3f95199de953734a7b195441ef015db3999c9e30032f05dc9c034ab3cf78bde5f273e2ae9e9d1fe87bb255b178665a364bd6c704003"}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000)

5.265232745s ago: executing program 7 (id=3839):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_sctp(0xa, 0x5, 0x84)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x7ee20210, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x6, 0x10080)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_OIF={0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x16, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r3 = socket$inet(0xa, 0x801, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
inotify_init1(0x800)
fcntl$setown(r4, 0x8, 0x0)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x3, 0x0, {@empty, {[0x0, 0xff, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r6 = accept4(r3, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x600bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x8}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, 0x0, 0x40020)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendto$l2tp(r1, &(0x7f0000000000)="acab018b1fdbb099184c9e6de7b46053eb7f1ae08ee7ee52dea034985be907a47b4a5dff6a43e2ab978b50d780fe1dac207d547108b0ea88a1c20381b0e727954320c2bd7a8579d6e805c96f76934633d2d766dd02120c8e398b37f466208b0cfd61a268906a77a0212b8172f7af9dacde79897d89eca0a2f9ebf333b351ab90794180d5825c63c2e31244d60ddf83829f2923841b0753da0b7644331ca4cebe0abc3ed975fe41529e61b3293c2467d6f210eb83ed40a454d2913e38343aad91335353f64b073d69b433a7f6d32fe3b7df3f7665", 0xd4, 0x20048480, &(0x7f0000000100)={0x2, 0x0, @local, 0x3}, 0x10)

5.074291339s ago: executing program 0 (id=3889):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
recvmsg(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x40002143)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="0a58679515719990cb89602ae96f6869bb4b8b8769bd54b658cbb97d2f9c3f9c6296d97f6bdee393475189c65c40f939a3b676e92e2b9476aaa7ddec2695746a9f173f7d653e6df3d9aa2ca27e6f504260e8625a", 0x54}, {&(0x7f0000000100)="4ed50d3198062d05e4", 0x9}], 0x2, 0x8)
write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1300000002"], 0x8)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$vsock_stream(0x28, 0x1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x22c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x12041f31, 0x65}}}}, [@NL80211_ATTR_FRAME_MATCH={0xa1, 0x5b, "9bff8f0e78112909b140981fa76e8ed3ad35e0f17b9770548a897206baaf945571a2e717d6c45aa468a4fc076edf7f298417ca47cab61fdf15cc9c15d4d24aa0ca8f04106dbd84a5c782f315cfc347b2ad597b078431a346e0c2f8236e515daa28500971238d8e74b2cd6406f040977da16df0cea8175a9e932e53c7c30823c4e835a9c7afe8edbdb0c112edd0c5360cd5cefb12aa46aa1792c2b25c87"}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "e82f2e95872bd9402212ec349f29cd7e3105c914dd15"}, @NL80211_ATTR_FRAME_MATCH={0xbc, 0x5b, "12ff62b527e800f7d4a1fbd815be9a80db25d6121851226c81950906f0c5aeccdc656889b11ec8a238b5fdd308fe440a22fdcb8e53c27300e60388c9f64375d03266821ffe4ed68ff888e2fcd8df90f975614af4b34d2c593b4336c1bebaf6d6f67b5a70f900a90be28794d3986c261f3cb7d03e739dce53f281c874f605780dbc7690beeef78f4afe76360d63536fd7ca8911958867248393f1b89077e5d74cc44fda48e67c362728991ad825898bed57f3352f3508eee5"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xa}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x6f, 0x5b, "6f3211e039fd96a7872f93c54c5f929a9eb5718b2372308b6cdb82b752bcf2395f7272b73e12963ce309d616dc2a708f7d71cae27147a86fbdbb29dcf2ac7037f75d966c8c031eb1bfff7d56482ac0ff36e61be2790bf0a0166944743b058e37d731bb4b6fede13431eeb9"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
socket$phonet(0x23, 0x2, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2)
r5 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32], 0x30}}, 0x0)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x19, &(0x7f0000000940)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff}, @generic={0x67, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x155a}}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@loopback, @loopback, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200})

5.02965419s ago: executing program 0 (id=3890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socket$inet(0x2, 0x3, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x31, 0x0, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ffff000057000000000000"], 0x50)
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

3.36039379s ago: executing program 0 (id=3891):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200001e04000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socket$inet(0x2, 0x3, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x31, 0x0, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ffff000057000000000000"], 0x50)
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

1.992156502s ago: executing program 4 (id=3892):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffa3, 0x40040c0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100)}, 0x2402, 0x40, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46d}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0)
fgetxattr(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="25e6abb4d2995b31f46a83ea4cf19a7980b6554410881ff001ca70fed46338498081f44a818d0000000000000000fca9c3724838e39fef1d12edc9c38d21eb185cbfdc1d072675a304c508ce0e206e73c5004535725fb8f51b7ea277a252c661383cdeaca7cbd3543b2f5bd8535060dac1e457f14ec9"], 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84080)
write$P9_RREAD(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="4100000075020036000000d9226bc0bb951e2f2a9e9fcecc8b648cecd7884fa8109cfb499480d0a967e6554f3d5c57becebecde45eb4ab3806550860d5a34e583e"], 0x41)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xf9, 0x0, 0xfe, 0x1f, 0x0, 0x7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xfea0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7)
syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r7)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x17, &(0x7f0000000200)=0x523f, 0x4)
ioctl$FIBMAP(r4, 0x5385, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x2, 0x6, 0x5)

1.991752173s ago: executing program 7 (id=3893):
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r2, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) (fail_nth: 1)
dup2(r2, r3)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x13)

1.647696791s ago: executing program 0 (id=3894):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000a80)='./bus\x00', 0x1008050, &(0x7f0000000140), 0x1, 0x5e9, &(0x7f0000000180)="$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")
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20004800)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x1, 0x9, 0x0, 0x4}, 0x20)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x1, 0x9, 0x0, 0x3ff}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001010004ffffffff0000000002000000000000000000000000000009030000000000000000000006020000000000"], 0x0, 0x4a}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
close(r0)
unlink(&(0x7f00000000c0)='./file0\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="550a00000000000061111000000000001800000000000000000000000000000095000000000000004186b1cd87a2310daec6d1786c40971efd22d635df8102caa5c4963ca0cb1140c5e7e144cec3a072854e8ff4c8c24306c630066e5faad3117c5e830664f88d49527d619ac8937542b925141e615903efff5ba5cbbea8b316c9ca8734c4f38aef502416ba9ed455e751d6dcf880374f302dd4eed53008bde07615edd59768015eca1229"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0)
timer_create(0x0, 0x0, 0xfffffffffffffffe)
socketpair(0x6, 0xa, 0x80000001, &(0x7f0000000180))
syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf2510000000200005800c000280080001001300000008000100657468000800010075647000ee36545f8fa74a6023262a9e5aed21893736dda5b59c6f4efe7d4844b23f0429395a465b5dad0cfd4fbb06213c3a65617790879174a59a5f2be0a625"], 0x34}}, 0x8000080)

1.136976173s ago: executing program 4 (id=3895):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c"], 0xec}, 0x1, 0x0, 0x0, 0x40006}, 0x40)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004704002c00650000042190780a010101ec14140c8305a464e60000004e214e2204519078089cc7e80394125faa46e7c33bcabe25c8ef4d3b6480faee7e74acec9168268d054a09a3ee20d00b4a3c78e5477c679133b72eb101ac85f4e059799f8fe7c844d23409fbd05146c2aebf62e566501b4b9c5d783a80b9f058803c779d53f628e5eb8520ef1f12"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x4, 0x0, 0xfffffffb}, 0x10}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=<r2=>r0, 0xa, 0x1, 0x1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0}}, 0x10)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000040)=0x7, 0x4)
sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004)
readv(r4, &(0x7f00000002c0), 0x44)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r7=>r6, {0x5}}, './file0\x00'})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r6, 0x4000, r7}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6)
pread64(0xffffffffffffffff, &(0x7f00000024c0)=""/209, 0xd1, 0xa)

927.981318ms ago: executing program 0 (id=3896):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000000f4000a90000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a700000000008000540008a001c0900020073797a3200000000080003400000000c44000980400002800c00018008000128ab000008040001802c00018008000140000000070800014080000001080001400000000208000140000002200800014000000005140000001000010000000000000000000384000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0)
close_range(r2, r3, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='\\x01-00000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x1, @loopback}, 0x10)
write(r6, &(0x7f0000000300)="80000060000000010000000000000002000186a0000000030000000000000006000000010000001800000001000000000000000400000001000000020000000401000000000000060000000000000000000000040000000000000020020100ff00"/124, 0x64)
socket$packet(0x11, 0x2, 0x300)

321.621952ms ago: executing program 4 (id=3897):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0)

204.949405ms ago: executing program 4 (id=3898):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001400000000008"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r3, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 4 (id=3899):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3132418, &(0x7f0000000000)={[], [{@permit_directio}]}, 0x5, 0x4de, &(0x7f0000000580)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) (async)
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x8) (async)
write$rfkill(r0, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66)

kernel console output (not intermixed with test programs):

8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  365.303169][T10778] RSP: 002b:00007ffd840fa6f0 EFLAGS: 00010202
[  365.303187][T10778] RAX: 0000000000000000 RBX: 0000555580c11500 RCX: 00007fbfe9209117
[  365.303203][T10778] RDX: 00007ffd840fa730 RSI: 0000000000000000 RDI: 0000000000000000
[  365.303222][T10778] RBP: 00007ffd840fa79c R08: 0000000000000000 R09: 0000000000000000
[  365.303252][T10778] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  365.303270][T10778] R13: 00000000000927c0 R14: 0000000000058fe9 R15: 00007ffd840fa7f0
[  365.303293][T10778]  </TASK>
[  365.508904][T10778] memory: usage 10280kB, limit 307200kB, failcnt 518
[  365.578083][T10778] memory+swap: usage 11312kB, limit 9007199254740988kB, failcnt 0
[  365.608374][T10778] kmem: usage 944kB, limit 9007199254740988kB, failcnt 0
[  365.623247][T10778] Memory cgroup stats for /syz3:
[  365.623487][T10778] cache 1273856
[  365.778282][T10778] rss 9547776
[  365.781746][T10778] shmem 0
[  365.784787][T10778] mapped_file 606208
[  365.788819][T10778] dirty 4096
[  365.792055][T10778] writeback 0
[  365.795427][T10778] workingset_refault_anon 5229
[  365.800254][T10778] workingset_refault_file 1453
[  365.805405][T10778] swap 8192
[  365.808651][T10778] swapcached 21426176
[  365.812705][T10778] pgpgin 205407
[  365.816203][T10778] pgpgout 202765
[  365.820091][T10778] pgfault 125441
[  365.823727][T10778] pgmajfault 929
[  365.827420][T10778] inactive_anon 0
[  365.831369][T10778] active_anon 8192
[  365.835119][T10778] inactive_file 0
[  365.839006][T10778] active_file 638976
[  365.843018][T10778] unevictable 10096640
[  365.847145][T10778] hierarchical_memory_limit 314572800
[  365.852796][T10778] hierarchical_memsw_limit 9223372036854771712
[  365.859227][T10778] total_cache 1273856
[  365.863265][T10778] total_rss 9547776
[  365.867164][T10778] total_shmem 0
[  365.871054][T10778] total_mapped_file 606208
[  365.885244][ T8706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.893087][T10778] total_dirty 4096
[  365.894071][ T8706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.906474][ T8706] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.907260][T10778] total_writeback 0
[  365.919028][T10778] total_workingset_refault_anon 5229
[  365.924357][T10778] total_workingset_refault_file 1453
[  365.929680][T10778] total_swap 8192
[  365.933338][T10778] total_swapcached 21426176
[  365.938156][T10778] total_pgpgin 205407
[  365.942282][T10778] total_pgpgout 202765
[  365.946371][T10778] total_pgfault 125441
[  365.950486][T10778] total_pgmajfault 929
[  365.954569][T10778] total_inactive_anon 0
[  365.958753][T10778] total_active_anon 8192
[  365.963011][T10778] total_inactive_file 0
[  365.967192][T10778] total_active_file 638976
[  365.971621][T10778] total_unevictable 10096640
[  365.976228][T10778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3276,pid=15767,uid=0
[  365.991104][T10778] Memory cgroup out of memory: Killed process 15767 (syz.3.3276) total-vm:100600kB, anon-rss:30008kB, file-rss:70392kB, shmem-rss:0kB, UID:0 pgtables:260kB oom_score_adj:0
[  366.183755][   T28] audit: type=1326 audit(1785393516.677:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.252038][   T28] audit: type=1326 audit(1785393516.677:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.288421][T15877] loop1: detected capacity change from 0 to 1024
[  366.295007][   T28] audit: type=1326 audit(1785393516.677:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.357371][T15877] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  366.377546][   T28] audit: type=1326 audit(1785393516.677:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.408919][T15877] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  366.429483][T15877] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  366.450767][T15877] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #32: comm syz.1.3284: iget: special inode unallocated
[  366.467149][   T28] audit: type=1326 audit(1785393516.787:11142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.505014][T15877] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  366.507116][T15877] EXT4-fs (loop1): no journal found
[  366.516352][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  366.516373][    C0] EXT4-fs (loop1): initial error at time 1785393517: ext4_get_journal_inode:5900: inode 32
[  366.516399][    C0] EXT4-fs (loop1): last error at time 1785393517: ext4_get_journal_inode:5900: inode 32
[  366.560558][T15877] EXT4-fs (loop1): can't get journal size
[  366.570093][   T28] audit: type=1326 audit(1785393516.787:11143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.619233][T15877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  366.637664][   T28] audit: type=1326 audit(1785393516.787:11144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f21a8b8df99 code=0x7ffc0000
[  366.667257][   T28] audit: type=1326 audit(1785393516.787:11145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.1.3284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21a8b8dd02 code=0x7ffc0000
[  366.697903][T15896] netlink: 'syz.5.3287': attribute type 1 has an invalid length.
[  366.759820][T15896] bond1 (unregistering): Released all slaves
[  366.803751][T15904] geneve0: entered promiscuous mode
[  366.823770][T13227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.849713][T15904] geneve0: left promiscuous mode
[  366.949216][T15905] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3287'.
[  366.975115][T15926] netlink: 'syz.4.3290': attribute type 4 has an invalid length.
[  367.004179][T15926] netlink: 'syz.4.3290': attribute type 16 has an invalid length.
[  367.060242][T15926] netlink: 'syz.4.3290': attribute type 29 has an invalid length.
[  367.609004][T15989] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3299'.
[  367.698913][T15997] netlink: 'syz.5.3303': attribute type 4 has an invalid length.
[  367.706824][T15997] netlink: 'syz.5.3303': attribute type 16 has an invalid length.
[  367.720716][T15997] netlink: 'syz.5.3303': attribute type 29 has an invalid length.
[  367.809914][T16003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3306'.
[  367.869537][T16008] loop1: detected capacity change from 0 to 512
[  367.942796][T16008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.955541][T16010] loop5: detected capacity change from 0 to 512
[  367.967026][T16008] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.085810][T13227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.086283][T16010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.107470][T16010] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.155996][T16010] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3308: corrupted xattr block 33: invalid checksum
[  368.176472][T16010] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop5 ino=15
[  368.194187][T16026] syzkaller0: entered promiscuous mode
[  368.199774][T16026] syzkaller0: entered allmulticast mode
[  368.224245][T15466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.289952][T16033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3311'.
[  368.304592][T16033] sctp: [Deprecated]: syz.3.3311 (pid 16033) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.304592][T16033] Use struct sctp_sack_info instead
[  368.356050][T16036] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3317'.
[  368.400048][T16038] loop5: detected capacity change from 0 to 512
[  369.110487][T16059] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  369.190441][T16066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3329'.
[  369.215118][T16068] syzkaller0: entered promiscuous mode
[  369.232267][T16068] syzkaller0: entered allmulticast mode
[  369.294547][T16070] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3331'.
[  369.470552][T16075] loop5: detected capacity change from 0 to 736
[  370.558772][   T28] kauditd_printk_skb: 167 callbacks suppressed
[  370.558792][   T28] audit: type=1400 audit(1785393521.067:11313): avc:  denied  { mount } for  pid=16101 comm="syz.4.3342" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  370.616114][   T28] audit: type=1400 audit(1785393521.117:11314): avc:  denied  { unmount } for  pid=14295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  370.760839][T16106] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.3344'.
[  370.996055][T16108] nfs: Unknown parameter ''
[  372.663090][T16092] syz.0.3339 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  372.674358][T16092] CPU: 1 UID: 0 PID: 16092 Comm: syz.0.3339 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  372.674450][T16092] Tainted: [W]=WARN
[  372.674457][T16092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  372.674471][T16092] Call Trace:
[  372.674479][T16092]  <TASK>
[  372.674488][T16092]  __dump_stack+0x1d/0x30
[  372.674515][T16092]  dump_stack_lvl+0x95/0xd0
[  372.674545][T16092]  dump_stack+0x15/0x1b
[  372.674632][T16092]  dump_header+0x80/0x240
[  372.674659][T16092]  oom_kill_process+0x295/0x350
[  372.674752][T16092]  out_of_memory+0x981/0xbc0
[  372.674793][T16092]  try_charge_memcg+0x621/0xa00
[  372.674818][T16092]  ? should_fail_ex+0x30/0x270
[  372.674924][T16092]  charge_memcg+0x6d/0x120
[  372.674981][T16092]  __mem_cgroup_charge+0x28/0xb0
[  372.675058][T16092]  filemap_add_folio+0x110/0x350
[  372.675098][T16092]  __filemap_get_folio_mpol+0x32e/0x840
[  372.675151][T16092]  filemap_fault+0x458/0xb60
[  372.675186][T16092]  handle_mm_fault+0x167a/0x2da0
[  372.675239][T16092]  __get_user_pages+0x129c/0x1f10
[  372.675377][T16092]  __mm_populate+0x242/0x390
[  372.675422][T16092]  __se_sys_mlockall+0x35e/0x3c0
[  372.675490][T16092]  __x64_sys_mlockall+0x1f/0x30
[  372.675543][T16092]  x64_sys_call+0xf90/0x3020
[  372.675640][T16092]  do_syscall_64+0x136/0x3c0
[  372.675707][T16092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.675734][T16092] RIP: 0033:0x7f64c869df99
[  372.675757][T16092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.675842][T16092] RSP: 002b:00007f64c70f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[  372.675914][T16092] RAX: ffffffffffffffda RBX: 00007f64c8925fa0 RCX: 00007f64c869df99
[  372.675935][T16092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  372.675968][T16092] RBP: 00007f64c8734ec4 R08: 0000000000000000 R09: 0000000000000000
[  372.675985][T16092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.676068][T16092] R13: 00007f64c8926038 R14: 00007f64c8925fa0 R15: 00007ffe6748e248
[  372.676097][T16092]  </TASK>
[  372.676127][T16092] memory: usage 307200kB, limit 307200kB, failcnt 4927
[  373.041857][T16092] memory+swap: usage 61356kB, limit 9007199254740988kB, failcnt 0
[  373.111489][T16092] kmem: usage 46644kB, limit 9007199254740988kB, failcnt 0
[  373.149390][T16092] Memory cgroup stats for /syz0:
[  373.150059][T16092] cache 25788416
[  373.213968][T16092] rss 9564160
[  373.232892][T16092] shmem 0
[  373.250831][T16092] mapped_file 24936448
[  373.275317][T16092] dirty 20480
[  373.293263][T16092] writeback 0
[  373.314147][T16092] workingset_refault_anon 12032
[  373.347222][T16092] workingset_refault_file 19059
[  373.375770][T16092] swap 4096
[  373.399195][T16092] swapcached 127909888
[  373.424282][T16092] pgpgin 448538
[  373.445794][T16092] pgpgout 439907
[  373.494277][T16092] pgfault 307982
[  373.511357][T16092] pgmajfault 1762
[  373.532964][T16092] inactive_anon 4096
[  373.572547][T16092] active_anon 0
[  373.628071][T16092] inactive_file 454656
[  373.759497][T16092] active_file 12288
[  373.767511][T16092] unevictable 34877440
[  373.785725][T16092] hierarchical_memory_limit 314572800
[  373.799221][T16092] hierarchical_memsw_limit 9223372036854771712
[  373.827439][T16092] total_cache 25788416
[  373.831619][T16092] total_rss 9564160
[  373.835460][T16092] total_shmem 0
[  373.839025][T16092] total_mapped_file 24936448
[  373.843642][T16092] total_dirty 20480
[  373.847476][T16092] total_writeback 0
[  373.851355][T16092] total_workingset_refault_anon 12032
[  373.856871][T16092] total_workingset_refault_file 19059
[  373.862277][T16092] total_swap 4096
[  373.865939][T16092] total_swapcached 127909888
[  373.870690][T16092] total_pgpgin 448538
[  373.874678][T16092] total_pgpgout 439907
[  373.878751][T16092] total_pgfault 307982
[  373.882827][T16092] total_pgmajfault 1762
[  373.886986][T16092] total_inactive_anon 4096
[  373.891545][T16092] total_active_anon 0
[  373.895567][T16092] total_inactive_file 454656
[  373.900226][T16092] total_active_file 12288
[  373.904557][T16092] total_unevictable 34877440
[  373.909182][T16092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3339,pid=16091,uid=0
[  373.925737][T16092] Memory cgroup out of memory: Killed process 16092 (syz.0.3339) total-vm:100600kB, anon-rss:10576kB, file-rss:61124kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000
[  374.094510][T16154] loop1: detected capacity change from 0 to 512
[  374.101333][T16154] ext2: Unknown parameter 'noacl'
[  374.147076][T16159] loop1: detected capacity change from 0 to 512
[  374.150990][   T28] audit: type=1326 audit(1785393524.627:11315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.155149][T16159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  374.189173][T16159] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3359: iget: bad i_size value: 38620345925642
[  374.201892][T16159] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  374.202001][   T28] audit: type=1326 audit(1785393524.627:11316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.237313][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  374.237345][    C0] EXT4-fs (loop1): initial error at time 1785393524: ext4_orphan_get:1399: inode 15
[  374.237396][    C0] EXT4-fs (loop1): last error at time 1785393524: ext4_orphan_get:1399: inode 15
[  374.264151][T16159] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3359: couldn't read orphan inode 15 (err -117)
[  374.276450][T16159] loop1: lost filesystem error report for type 5 error -117
[  374.276825][   T28] audit: type=1326 audit(1785393524.627:11317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.310019][   T28] audit: type=1326 audit(1785393524.627:11319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.313916][T16159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.336029][   T28] audit: type=1326 audit(1785393524.627:11320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.375094][   T28] audit: type=1326 audit(1785393524.707:11321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.406984][   T28] audit: type=1326 audit(1785393524.627:11318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.449204][   T28] audit: type=1326 audit(1785393524.707:11322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.0.3358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  374.588178][T16161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  374.659145][ T8695] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 516 with error 28
[  374.692384][ T8695] EXT4-fs (loop1): This should not happen!! Data will be lost
[  374.692384][ T8695] 
[  374.702177][ T8695] EXT4-fs (loop1): Total free blocks count 0
[  374.708212][ T8695] EXT4-fs (loop1): Free/Dirty block details
[  374.714140][ T8695] EXT4-fs (loop1): free_blocks=0
[  374.719152][ T8695] EXT4-fs (loop1): dirty_blocks=516
[  374.724385][ T8695] EXT4-fs (loop1): Block reservation details
[  374.730416][ T8695] EXT4-fs (loop1): i_reserved_data_blocks=516
[  374.765114][T16159] EXT4-fs (loop1): shut down requested (0)
[  375.320735][T16226] loop5: detected capacity change from 0 to 256
[  375.947763][ T8706] kworker/u8:17: attempt to access beyond end of device
[  375.947763][ T8706] loop5: rw=1, sector=1800, nr_sectors = 4 limit=256
[  375.963314][T16232] FAULT_INJECTION: forcing a failure.
[  375.963314][T16232] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  375.977946][T16232] CPU: 1 UID: 0 PID: 16232 Comm: syz.1.3379 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  375.977988][T16232] Tainted: [W]=WARN
[  375.977998][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  375.978016][T16232] Call Trace:
[  375.978025][T16232]  <TASK>
[  375.978035][T16232]  __dump_stack+0x1d/0x30
[  375.978065][T16232]  dump_stack_lvl+0x95/0xd0
[  375.978166][T16232]  dump_stack+0x15/0x1b
[  375.978192][T16232]  should_fail_ex+0x25e/0x270
[  375.978282][T16232]  should_fail_alloc_page+0xf2/0x100
[  375.978309][T16232]  __alloc_frozen_pages_noprof+0x108/0x350
[  375.978430][T16232]  alloc_pages_mpol+0xa9/0x1d0
[  375.978480][T16232]  vma_alloc_folio_noprof+0x1a9/0x2f0
[  375.978515][T16232]  do_wp_page+0x6f6/0x2030
[  375.978625][T16232]  ? __rcu_read_lock+0x36/0x50
[  375.978659][T16232]  handle_mm_fault+0x8bc/0x2da0
[  375.978743][T16232]  do_user_addr_fault+0x634/0x1060
[  375.978783][T16232]  ? __x64_sys_sendto+0x76/0x90
[  375.978869][T16232]  ? trace_page_fault_user+0x1f/0xa0
[  375.978911][T16232]  exc_page_fault+0x62/0xa0
[  375.978956][T16232]  asm_exc_page_fault+0x26/0x30
[  375.978986][T16232] RIP: 0033:0x7f21a8b4dd85
[  375.979003][T16232] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[  375.979023][T16232] RSP: 002b:00007f21a75e5de0 EFLAGS: 00010293
[  375.979068][T16232] RAX: 0000000000000008 RBX: 00007f21a9947e20 RCX: 0000000000000000
[  375.979087][T16232] RDX: 0000000000000000 RSI: 00007f21a8c42529 RDI: 00007f21a9947e20
[  375.979106][T16232] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[  375.979121][T16232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21a8c42241
[  375.979135][T16232] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f21a8c42529
[  375.979224][T16232]  </TASK>
[  375.979249][T16232] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  376.411159][T16246] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  376.567229][T16248] loop1: detected capacity change from 0 to 1024
[  376.685330][T16248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[  376.693540][T16248] System zones: 0-1, 3-12
[  376.698632][T16248] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.713649][   T28] kauditd_printk_skb: 119 callbacks suppressed
[  376.713669][   T28] audit: type=1400 audit(1785393527.187:11442): avc:  denied  { write } for  pid=16247 comm="syz.1.3385" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  376.758730][   T28] audit: type=1400 audit(1785393527.187:11443): avc:  denied  { write } for  pid=16247 comm="syz.1.3385" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  376.783036][T13227] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  376.853437][T16265] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3389'.
[  376.915585][ T3390] IPVS: starting estimator thread 0...
[  376.960930][   T28] audit: type=1400 audit(1785393527.377:11444): avc:  denied  { write } for  pid=16262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.010690][   T28] audit: type=1400 audit(1785393527.507:11445): avc:  denied  { write } for  pid=16278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.067842][T16270] IPVS: using max 2208 ests per chain, 110400 per kthread
[  377.110969][T16282] GUP no longer grows the stack in syz.1.3390 (16282): 200000004000-20000000a000 (200000002000)
[  377.140679][T16282] CPU: 1 UID: 0 PID: 16282 Comm: syz.1.3390 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  377.140724][T16282] Tainted: [W]=WARN
[  377.140771][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.140784][T16282] Call Trace:
[  377.140792][T16282]  <TASK>
[  377.140799][T16282]  __dump_stack+0x1d/0x30
[  377.140825][T16282]  dump_stack_lvl+0x95/0xd0
[  377.140855][T16282]  dump_stack+0x15/0x1b
[  377.140882][T16282]  __get_user_pages+0x1b27/0x1f10
[  377.141004][T16282]  ? __rcu_read_unlock+0x4e/0x70
[  377.141042][T16282]  get_user_pages_remote+0x1d5/0x6b0
[  377.141100][T16282]  __access_remote_vm+0x156/0x4d0
[  377.141140][T16282]  access_remote_vm+0x32/0x40
[  377.141242][T16282]  proc_pid_cmdline_read+0x334/0x710
[  377.141265][T16282]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  377.141287][T16282]  vfs_readv+0x417/0x6d0
[  377.141407][T16282]  ? restore_fpregs_from_fpstate+0x61/0x110
[  377.141440][T16282]  __x64_sys_preadv+0xfd/0x1c0
[  377.141472][T16282]  x64_sys_call+0x2915/0x3020
[  377.141503][T16282]  do_syscall_64+0x136/0x3c0
[  377.141671][T16282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.141825][T16282] RIP: 0033:0x7f21a8b8df99
[  377.141842][T16282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.141869][T16282] RSP: 002b:00007f21a75e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  377.141894][T16282] RAX: ffffffffffffffda RBX: 00007f21a8e15fa0 RCX: 00007f21a8b8df99
[  377.141914][T16282] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000a
[  377.141952][T16282] RBP: 00007f21a8c24ec4 R08: 00000000fffffff9 R09: 0000000000000000
[  377.141970][T16282] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  377.141983][T16282] R13: 00007f21a8e16038 R14: 00007f21a8e15fa0 R15: 00007ffdfcb21c38
[  377.142009][T16282]  </TASK>
[  377.486915][T16304] printk: legacy console [ttyGS0] disabled
[  377.506775][   T28] audit: type=1400 audit(1785393527.987:11446): avc:  denied  { write } for  pid=16303 comm="syz.5.3397" name="functions" dev="configfs" ino=7287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  377.602472][T16315] FAULT_INJECTION: forcing a failure.
[  377.602472][T16315] name failslab, interval 1, probability 1, space 0, times 0
[  377.616881][T16315] CPU: 0 UID: 0 PID: 16315 Comm: syz.5.3401 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  377.616968][T16315] Tainted: [W]=WARN
[  377.616978][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.616995][T16315] Call Trace:
[  377.617004][T16315]  <TASK>
[  377.617014][T16315]  __dump_stack+0x1d/0x30
[  377.617047][T16315]  dump_stack_lvl+0x95/0xd0
[  377.617108][T16315]  dump_stack+0x15/0x1b
[  377.617200][T16315]  should_fail_ex+0x25e/0x270
[  377.617240][T16315]  should_failslab+0x8c/0xb0
[  377.617271][T16315]  __kmalloc_noprof+0xd4/0x4a0
[  377.617303][T16315]  ? copy_splice_read+0xc2/0x6b0
[  377.617328][T16315]  ? copy_splice_read+0xc2/0x6b0
[  377.617420][T16315]  copy_splice_read+0xc2/0x6b0
[  377.617452][T16315]  ? __kmalloc_noprof+0x252/0x4a0
[  377.617483][T16315]  ? alloc_pipe_info+0x1c8/0x340
[  377.617518][T16315]  ? __pfx_copy_splice_read+0x10/0x10
[  377.617566][T16315]  splice_direct_to_actor+0x261/0x680
[  377.617652][T16315]  ? __pfx_direct_splice_actor+0x10/0x10
[  377.617709][T16315]  do_splice_direct+0x119/0x1a0
[  377.617744][T16315]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  377.617786][T16315]  do_sendfile+0x37d/0x640
[  377.617819][T16315]  __x64_sys_sendfile64+0xb8/0x150
[  377.617886][T16315]  x64_sys_call+0x2dc4/0x3020
[  377.617916][T16315]  do_syscall_64+0x136/0x3c0
[  377.617975][T16315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.617999][T16315] RIP: 0033:0x7f651a96df99
[  377.618100][T16315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.618127][T16315] RSP: 002b:00007f65193c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  377.618148][T16315] RAX: ffffffffffffffda RBX: 00007f651abf5fa0 RCX: 00007f651a96df99
[  377.618162][T16315] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004
[  377.618294][T16315] RBP: 00007f65193c7090 R08: 0000000000000000 R09: 0000000000000000
[  377.618308][T16315] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  377.618324][T16315] R13: 00007f651abf6038 R14: 00007f651abf5fa0 R15: 00007ffcc27fef08
[  377.618395][T16315]  </TASK>
[  377.878012][ T3404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.913583][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'.
[  378.022385][T16334] loop4: detected capacity change from 0 to 128
[  378.040761][T16334] FAT-fs (loop4): bogus number of reserved sectors
[  378.047333][T16334] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  378.056662][T16334] FAT-fs (loop4): Can't find a valid FAT filesystem
[  378.072309][T16334] loop4: detected capacity change from 0 to 512
[  378.079097][T16334] msdos: Unknown parameter '01777777777777777777777
[  378.079097][T16334] ci�sV�CAkЌKk��г�~��k������e�a������&�U]��itFA�żh�$m��M�+~�D2�}�
˥U
[  378.079097][T16334] �hס�%��Rz<��sˈL_�]�T��v��ޙ?�MWA�vwfp��}A!�T?�(�0�b�ɘ�"��ɳ��G$��z�_�(>V ��T�_O'
[  378.113200][ T3684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.225718][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3413'.
[  378.258433][T16349] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.3414'.
[  378.289175][T16349] netlink: zone id is out of range
[  378.301709][T16349] netlink: zone id is out of range
[  378.307103][T16349] netlink: zone id is out of range
[  378.312464][T16349] netlink: zone id is out of range
[  378.317657][T16349] netlink: zone id is out of range
[  378.322845][T16349] netlink: zone id is out of range
[  378.328080][T16349] netlink: zone id is out of range
[  378.333222][T16349] netlink: zone id is out of range
[  378.368472][   T28] audit: type=1400 audit(1785393528.867:11447): avc:  denied  { setopt } for  pid=16355 comm="syz.1.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  378.391210][T16356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.406489][T16356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.907079][T16368] loop4: detected capacity change from 0 to 512
[  379.374837][T16341] syz.0.3410 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  379.554518][T16341] CPU: 0 UID: 0 PID: 16341 Comm: syz.0.3410 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  379.554555][T16341] Tainted: [W]=WARN
[  379.554562][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  379.554591][T16341] Call Trace:
[  379.554601][T16341]  <TASK>
[  379.554610][T16341]  __dump_stack+0x1d/0x30
[  379.554636][T16341]  dump_stack_lvl+0x95/0xd0
[  379.554660][T16341]  dump_stack+0x15/0x1b
[  379.554725][T16341]  dump_header+0x80/0x240
[  379.554749][T16341]  oom_kill_process+0x295/0x350
[  379.554800][T16341]  out_of_memory+0x981/0xbc0
[  379.554835][T16341]  try_charge_memcg+0x621/0xa00
[  379.554978][T16341]  ? should_fail_ex+0x30/0x270
[  379.555027][T16341]  charge_memcg+0x6d/0x120
[  379.555065][T16341]  __mem_cgroup_charge+0x28/0xb0
[  379.555176][T16341]  filemap_add_folio+0x110/0x350
[  379.555225][T16341]  __filemap_get_folio_mpol+0x32e/0x840
[  379.555314][T16341]  filemap_fault+0x458/0xb60
[  379.555341][T16341]  handle_mm_fault+0x167a/0x2da0
[  379.555389][T16341]  __get_user_pages+0x129c/0x1f10
[  379.555581][T16341]  __mm_populate+0x242/0x390
[  379.555615][T16341]  __se_sys_mlockall+0x35e/0x3c0
[  379.555704][T16341]  __x64_sys_mlockall+0x1f/0x30
[  379.555727][T16341]  x64_sys_call+0xf90/0x3020
[  379.555788][T16341]  do_syscall_64+0x136/0x3c0
[  379.555820][T16341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.555925][T16341] RIP: 0033:0x7f64c869df99
[  379.555949][T16341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.555977][T16341] RSP: 002b:00007f64c70f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[  379.556066][T16341] RAX: ffffffffffffffda RBX: 00007f64c8925fa0 RCX: 00007f64c869df99
[  379.556087][T16341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  379.556105][T16341] RBP: 00007f64c8734ec4 R08: 0000000000000000 R09: 0000000000000000
[  379.556123][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.556136][T16341] R13: 00007f64c8926038 R14: 00007f64c8925fa0 R15: 00007ffe6748e248
[  379.556157][T16341]  </TASK>
[  379.557794][T16341] memory: usage 307120kB, limit 307200kB, failcnt 5272
[  379.954065][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3425'.
[  379.977257][T16341] memory+swap: usage 307220kB, limit 9007199254740988kB, failcnt 0
[  380.001066][T16341] kmem: usage 266980kB, limit 9007199254740988kB, failcnt 0
[  380.082759][T16341] Memory cgroup stats for /syz0:
[  380.083014][T16341] cache 31637504
[  380.091624][T16341] rss 9547776
[  380.095258][T16341] shmem 0
[  380.130240][T16341] mapped_file 31637504
[  380.134386][T16341] dirty 12288
[  380.137704][T16341] writeback 0
[  380.159048][T16341] workingset_refault_anon 13344
[  380.170162][T16341] workingset_refault_file 20812
[  380.175086][T16341] swap 20480
[  380.178309][T16341] swapcached 133292032
[  380.182435][T16341] pgpgin 457009
[  380.185948][T16341] pgpgout 446954
[  380.189510][T16341] pgfault 315293
[  380.193093][T16341] pgmajfault 1944
[  380.196750][T16341] inactive_anon 0
[  380.200451][T16341] active_anon 0
[  380.203934][T16341] inactive_file 0
[  380.207587][T16341] active_file 0
[  380.211134][T16341] unevictable 41185280
[  380.215256][T16341] hierarchical_memory_limit 314572800
[  380.220651][T16341] hierarchical_memsw_limit 9223372036854771712
[  380.226890][T16341] total_cache 31637504
[  380.230981][T16341] total_rss 9547776
[  380.234813][T16341] total_shmem 0
[  380.238298][T16341] total_mapped_file 31637504
[  380.242917][T16341] total_dirty 12288
[  380.246751][T16341] total_writeback 0
[  380.250627][T16341] total_workingset_refault_anon 13344
[  380.256099][T16341] total_workingset_refault_file 20812
[  380.310456][T16341] total_swap 20480
[  380.322154][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3426'.
[  380.354161][T16341] total_swapcached 133292032
[  380.358825][T16341] total_pgpgin 457009
[  380.362829][T16341] total_pgpgout 446954
[  380.366970][T16341] total_pgfault 315293
[  380.371070][T16341] total_pgmajfault 1944
[  380.375293][T16341] total_inactive_anon 0
[  380.379472][T16341] total_active_anon 0
[  380.383514][T16341] total_inactive_file 0
[  380.387686][T16341] total_active_file 0
[  380.391695][T16341] total_unevictable 41185280
[  380.396312][T16341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3410,pid=16340,uid=0
[  380.411094][T16341] Memory cgroup out of memory: Killed process 16340 (syz.0.3410) total-vm:100600kB, anon-rss:10564kB, file-rss:67916kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000
[  380.520176][   T28] audit: type=1400 audit(1785393530.977:11448): avc:  denied  { write } for  pid=16378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.581746][   T28] audit: type=1400 audit(1785393531.087:11449): avc:  denied  { write } for  pid=16417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.584142][T16413] loop5: detected capacity change from 0 to 1024
[  380.613229][T16414] loop4: detected capacity change from 0 to 128
[  380.683674][T16414] FAT-fs (loop4): bogus number of reserved sectors
[  380.703069][T16413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  380.728486][T16414] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  380.751306][T16413] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  380.763910][T16414] FAT-fs (loop4): Can't find a valid FAT filesystem
[  380.802567][T16410] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3428: bg 0: block 112: padding at end of block bitmap is not set
[  380.851786][T16414] loop4: detected capacity change from 0 to 512
[  380.858335][T16414] msdos: Unknown parameter '01777777777777777777777
[  380.858335][T16414] ci�sV�CAkЌKk��г�~��k������e�a������&�U]��itFA�żh�$m��M�+~�D2�}�
˥U
[  380.858335][T16414] �hס�%��Rz<��sˈL_�]�T��v��ޙ?�MWA�vwfp��}A!�T?�(�0�b�ɘ�"��ɳ��G$��z�_�(>V ��T�_O'
[  380.876249][   T28] audit: type=1400 audit(1785393531.357:11450): avc:  denied  { write } for  pid=16420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  381.025910][T15466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  381.055398][   T28] audit: type=1400 audit(1785393531.527:11451): avc:  denied  { write } for  pid=16449 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  382.044118][T16489] xt_l2tp: v2 tid > 0xffff: 117440512
[  382.135941][T16495] netlink: 'syz.0.3450': attribute type 11 has an invalid length.
[  382.201771][T16495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3450'.
[  382.974253][T16520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3460'.
[  383.453545][   T11] net_ratelimit: 3685 callbacks suppressed
[  383.453565][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.574289][T16534] syzkaller0: entered promiscuous mode
[  383.587301][T16534] syzkaller0: entered allmulticast mode
[  383.798823][   T28] audit: type=1400 audit(1785393534.297:11452): avc:  denied  { append } for  pid=16542 comm="syz.5.3468" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  384.016659][T16548] loop5: detected capacity change from 0 to 512
[  384.027612][T16548] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  384.046594][T16548] EXT4-fs (loop5): 1 truncate cleaned up
[  384.054501][T16548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.083171][   T28] audit: type=1400 audit(1785393534.577:11453): avc:  denied  { write } for  pid=16547 comm="syz.5.3470" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  384.122423][T15466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.198391][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.541284][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.586401][T16569] syzkaller0: entered promiscuous mode
[  384.605117][T16569] syzkaller0: entered allmulticast mode
[  384.768262][   T28] audit: type=1400 audit(1785393535.227:11454): avc:  denied  { name_bind } for  pid=16572 comm="syz.0.3480" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  385.255370][   T28] audit: type=1400 audit(1785393535.747:11455): avc:  denied  { accept } for  pid=16582 comm="syz.5.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  385.304166][T16583] loop5: detected capacity change from 0 to 512
[  385.354887][T16589] syzkaller0: entered promiscuous mode
[  385.364463][T16583] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  385.375101][T16589] syzkaller0: entered allmulticast mode
[  385.404786][T16583] EXT4-fs (loop5): 1 truncate cleaned up
[  385.435623][T16583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.552447][   T28] audit: type=1400 audit(1785393536.057:11456): avc:  denied  { write } for  pid=16582 comm="syz.5.3483" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  385.574644][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.635168][   T28] audit: type=1400 audit(1785393536.137:11457): avc:  denied  { mounton } for  pid=16582 comm="syz.5.3483" path="/60/file2/sys" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  385.700236][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3490'.
[  385.894667][T15466] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[  385.909234][   T28] audit: type=1400 audit(1785393536.397:11458): avc:  denied  { write } for  pid=15466 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  385.910883][T15466] EXT4-fs (loop5): Remounting filesystem read-only
[  385.946183][   T28] audit: type=1400 audit(1785393536.447:11459): avc:  denied  { write } for  pid=15466 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  386.123359][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3498'.
[  386.134813][   T28] audit: type=1400 audit(1785393536.637:11460): avc:  denied  { map } for  pid=16623 comm="syz.3.3498" path="socket:[50455]" dev="sockfs" ino=50455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  386.160777][   T28] audit: type=1400 audit(1785393536.637:11461): avc:  denied  { read } for  pid=16623 comm="syz.3.3498" path="socket:[50455]" dev="sockfs" ino=50455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  386.210300][T15466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.224054][ T8706] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.293327][ T8706] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.357178][ T8706] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.405277][ T8706] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.510964][ T8706] bridge_slave_1: left allmulticast mode
[  386.517890][ T8706] bridge_slave_1: left promiscuous mode
[  386.525359][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.533684][ T8706] bridge_slave_0: left allmulticast mode
[  386.539768][ T8706] bridge_slave_0: left promiscuous mode
[  386.545635][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.702306][T16641] loop4: detected capacity change from 0 to 512
[  386.723734][ T8706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  386.751310][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'.
[  386.781091][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3503'.
[  386.802654][T16643] netlink: 'syz.0.3503': attribute type 18 has an invalid length.
[  386.858044][ T8706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.869132][ T8706] bond0 (unregistering): Released all slaves
[  386.998753][ T8706] hsr_slave_0: left promiscuous mode
[  387.004610][ T8706] hsr_slave_1: left promiscuous mode
[  387.010974][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.023972][ T8706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.043560][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.056672][ T8706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.087202][ T8706] veth1_macvtap: left promiscuous mode
[  387.096955][ T8706] veth0_macvtap: left promiscuous mode
[  387.104729][ T8706] veth1_vlan: left promiscuous mode
[  387.111184][ T8706] veth0_vlan: left promiscuous mode
[  387.386402][ T8706] team0 (unregistering): Port device team_slave_1 removed
[  387.400196][ T8706] team0 (unregistering): Port device team_slave_0 removed
[  387.464621][T16627] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.471983][T16627] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.479301][T16627] bridge_slave_0: entered allmulticast mode
[  387.487298][T16627] bridge_slave_0: entered promiscuous mode
[  387.494350][T16627] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.501914][T16627] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.509287][T16627] bridge_slave_1: entered allmulticast mode
[  387.528187][T16627] bridge_slave_1: entered promiscuous mode
[  387.555004][T16627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.565914][T16627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.602614][T16627] team0: Port device team_slave_0 added
[  387.620912][T16627] team0: Port device team_slave_1 added
[  387.664116][T16627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.676272][T16627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.724510][T16627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.736085][T16627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.743382][T16627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.811655][T16627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.836542][ T8706] IPVS: stop unused estimator thread 0...
[  387.843310][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5
[  387.949191][T16627] hsr_slave_0: entered promiscuous mode
[  387.963261][T16627] hsr_slave_1: entered promiscuous mode
[  387.981204][T16627] debugfs: 'hsr0' already exists in 'hsr'
[  388.000847][T16627] Cannot create hsr debugfs directory
[  388.263742][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6
[  388.473387][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  388.557602][T16627] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  388.580307][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  388.604022][T16627] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  388.629900][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  388.653902][T16627] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  388.681905][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  388.707192][T16627] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  388.735765][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  388.867796][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  388.867814][   T28] audit: type=1400 audit(1785393539.317:11468): avc:  denied  { write } for  pid=16744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  388.953270][   T28] audit: type=1326 audit(1785393539.457:11469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.021386][   T28] audit: type=1326 audit(1785393539.487:11470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.050319][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7
[  389.081441][T16627] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.091006][   T28] audit: type=1326 audit(1785393539.487:11471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.116646][   T28] audit: type=1326 audit(1785393539.487:11472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.142210][   T28] audit: type=1326 audit(1785393539.487:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.153708][T16627] 8021q: adding VLAN 0 to HW filter on device team0
[  389.202266][T16685] syz.3.3511 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  389.212244][   T28] audit: type=1326 audit(1785393539.487:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.238668][T16685] CPU: 0 UID: 0 PID: 16685 Comm: syz.3.3511 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  389.238761][T16685] Tainted: [W]=WARN
[  389.238799][T16685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  389.238819][T16685] Call Trace:
[  389.238829][T16685]  <TASK>
[  389.238840][T16685]  __dump_stack+0x1d/0x30
[  389.238872][T16685]  dump_stack_lvl+0x95/0xd0
[  389.238902][T16685]  dump_stack+0x15/0x1b
[  389.238975][T16685]  dump_header+0x80/0x240
[  389.239007][T16685]  oom_kill_process+0x295/0x350
[  389.239094][T16685]  out_of_memory+0x981/0xbc0
[  389.239141][T16685]  try_charge_memcg+0x621/0xa00
[  389.239179][T16685]  charge_memcg+0x6d/0x120
[  389.239269][T16685]  __mem_cgroup_charge+0x28/0xb0
[  389.239308][T16685]  handle_mm_fault+0x1041/0x2da0
[  389.239356][T16685]  ? _raw_spin_lock+0x52/0xa0
[  389.239453][T16685]  __get_user_pages+0x129c/0x1f10
[  389.239501][T16685]  __mm_populate+0x242/0x390
[  389.239564][T16685]  __se_sys_mlockall+0x35e/0x3c0
[  389.239598][T16685]  __x64_sys_mlockall+0x1f/0x30
[  389.239631][T16685]  x64_sys_call+0xf90/0x3020
[  389.239667][T16685]  do_syscall_64+0x136/0x3c0
[  389.239771][T16685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.239804][T16685] RIP: 0033:0x7fbfe924df99
[  389.239821][T16685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.239842][T16685] RSP: 002b:00007fbfe7ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[  389.239862][T16685] RAX: ffffffffffffffda RBX: 00007fbfe94d5fa0 RCX: 00007fbfe924df99
[  389.239956][T16685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  389.239975][T16685] RBP: 00007fbfe92e4ec4 R08: 0000000000000000 R09: 0000000000000000
[  389.239992][T16685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.240005][T16685] R13: 00007fbfe94d6038 R14: 00007fbfe94d5fa0 R15: 00007ffd840fa3f8
[  389.240060][T16685]  </TASK>
[  389.240295][T16685] memory: usage 307200kB, limit 307200kB, failcnt 651
[  389.300807][T11947] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.311358][   T28] audit: type=1326 audit(1785393539.487:11475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.313628][T11947] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.324368][   T28] audit: type=1326 audit(1785393539.487:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  389.397599][  T361] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.410122][T16685] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0
[  389.414847][  T361] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.423764][   T28] audit: type=1400 audit(1785393539.487:11477): avc:  denied  { write } for  pid=16763 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  389.508769][T16685] kmem: usage 289400kB, limit 9007199254740988kB, failcnt 0
[  389.614168][T16785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3531'.
[  389.643138][T16685] Memory cgroup stats for /syz3:
[  389.643662][T16685] cache 1576960
[  389.661767][T16685] rss 16650240
[  389.666133][T16685] shmem 0
[  389.671342][T16685] mapped_file 1576960
[  389.725065][T16685] dirty 61440
[  389.730513][T16794] loop4: detected capacity change from 0 to 1764
[  389.738645][T16685] writeback 0
[  389.742918][T16685] workingset_refault_anon 6533
[  389.761713][T16800] netlink: 'syz.0.3533': attribute type 4 has an invalid length.
[  389.789096][T16685] workingset_refault_file 1581
[  389.813418][T16685] swap 8192
[  389.826518][T16685] swapcached 26767360
[  389.839705][T16685] pgpgin 255636
[  389.852029][T16685] pgpgout 251186
[  389.864165][T16685] pgfault 147988
[  389.875285][T16685] pgmajfault 1099
[  389.884617][T16685] inactive_anon 0
[  389.907629][T16685] active_anon 0
[  389.922943][T16685] inactive_file 0
[  389.934457][T16685] active_file 0
[  389.964904][T16685] unevictable 18227200
[  389.973069][T16685] hierarchical_memory_limit 314572800
[  389.979229][T16685] hierarchical_memsw_limit 9223372036854771712
[  389.987054][T16627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.987315][T16685] total_cache 1576960
[  390.001382][T16819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3537'.
[  390.010703][T16685] total_rss 16650240
[  390.014737][T16685] total_shmem 0
[  390.026426][T16685] total_mapped_file 1576960
[  390.041562][T16685] total_dirty 61440
[  390.056831][T16685] total_writeback 0
[  390.069483][T16685] total_workingset_refault_anon 6533
[  390.092425][T16685] total_workingset_refault_file 1581
[  390.097840][T16685] total_swap 8192
[  390.101521][T16685] total_swapcached 26767360
[  390.106120][T16685] total_pgpgin 255636
[  390.110134][T16685] total_pgpgout 251186
[  390.114242][T16685] total_pgfault 147988
[  390.118330][T16685] total_pgmajfault 1099
[  390.122594][T16685] total_inactive_anon 0
[  390.126801][T16685] total_active_anon 0
[  390.133651][T16685] total_inactive_file 0
[  390.141485][T16685] total_active_file 0
[  390.150281][T16685] total_unevictable 18227200
[  390.156445][T16685] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3511,pid=16684,uid=0
[  390.181811][T16685] Memory cgroup out of memory: Killed process 16684 (syz.3.3511) total-vm:96232kB, anon-rss:17496kB, file-rss:64456kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:0
[  390.269676][T16627] veth0_vlan: entered promiscuous mode
[  390.276465][T16627] veth1_vlan: entered promiscuous mode
[  390.290268][T16627] veth0_macvtap: entered promiscuous mode
[  390.293950][T16627] veth1_macvtap: entered promiscuous mode
[  390.308533][T16627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.314284][T16627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.322700][ T8706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.322799][ T8706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.322845][ T8706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.322931][ T8706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.609721][T16858] loop2: detected capacity change from 0 to 2048
[  390.671393][T16858]  loop2: p1 p2 < > p3 < p5 p6 > p4
[  390.671406][T16858] loop2: partition table partially beyond EOD, truncated
[  390.671479][T16858] loop2: p1 start 385023 is beyond EOD, truncated
[  390.671505][T16858] loop2: p2 start 4278190080 is beyond EOD, truncated
[  390.672393][T16858] loop2: p4 start 1979908096 is beyond EOD, truncated
[  390.672420][T16858] loop2: p5 start 385023 is beyond EOD, truncated
[  390.672444][T16858] loop2: p6 start 1979908096 is beyond EOD, truncated
[  390.996882][T16890] loop4: detected capacity change from 0 to 512
[  391.022895][T16890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  391.092869][T16890] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3542: iget: bad i_size value: 38620345925642
[  391.143985][T16890] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  391.144393][T16890] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3542: couldn't read orphan inode 15 (err -117)
[  391.153769][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  391.153817][    C0] EXT4-fs (loop4): initial error at time 1785393541: ext4_orphan_get:1399: inode 15
[  391.153930][    C0] EXT4-fs (loop4): last error at time 1785393541: ext4_orphan_get:1399: inode 15
[  391.274799][T16890] loop4: lost filesystem error report for type 5 error -117
[  391.277051][T16890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.554462][T16953] SET target dimension over the limit!
[  391.587834][T16931] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3542: bg 0: block 5: invalid block bitmap
[  391.634484][T16931] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 396 with error 28
[  391.658038][T16931] EXT4-fs (loop4): This should not happen!! Data will be lost
[  391.658038][T16931] 
[  391.680419][T16931] EXT4-fs (loop4): Total free blocks count 0
[  391.691605][T16931] EXT4-fs (loop4): Free/Dirty block details
[  391.714429][T16931] EXT4-fs (loop4): free_blocks=0
[  391.722459][T16931] EXT4-fs (loop4): dirty_blocks=396
[  391.728103][T16931] EXT4-fs (loop4): Block reservation details
[  391.734585][T16931] EXT4-fs (loop4): i_reserved_data_blocks=396
[  391.753508][T16890] EXT4-fs (loop4): shut down requested (0)
[  392.292514][T17035] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.3567'.
[  392.311193][T17035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=17035 comm=syz.2.3567
[  392.364933][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'.
[  392.469654][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3568'.
[  392.602826][T17068] netlink: 'syz.3.3573': attribute type 4 has an invalid length.
[  392.625123][T17070] loop2: detected capacity change from 0 to 512
[  392.635413][T17070] EXT4-fs: Ignoring removed bh option
[  392.703183][T17070] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #11: comm syz.2.3572: corrupted in-inode xattr: bad e_name length
[  392.717031][T17070] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  392.717366][T17070] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3572: couldn't read orphan inode 11 (err -117)
[  392.739970][T17070] loop2: lost filesystem error report for type 5 error -117
[  392.740149][T17070] EXT4-fs (loop2): 1 truncate cleaned up
[  392.753618][T17070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.777344][T17070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.958881][T17090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3581'.
[  393.082524][T17093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'.
[  393.384122][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.392698][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.403875][T17109] tmpfs: Bad value for 'nr_inodes'
[  393.410080][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3588'.
[  393.419229][T17109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.490043][T17109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.533320][T17115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3591'.
[  393.752165][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3596'.
[  393.783838][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.3.3596
[  393.862075][T17133] xt_hashlimit: size too large, truncated to 1048576
[  393.896480][T17110] loop4: detected capacity change from 0 to 8192
[  393.910656][T17110] vfat: Unknown parameter '����`�NX#�EeOn��ø�H�Թ���]�����%�Ցew'
[  394.223744][T17137] netlink: 'syz.3.3597': attribute type 13 has an invalid length.
[  394.596817][T17105] syz.4.3587 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  394.647705][T17105] CPU: 0 UID: 0 PID: 17105 Comm: syz.4.3587 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  394.647747][T17105] Tainted: [W]=WARN
[  394.647757][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  394.647773][T17105] Call Trace:
[  394.647782][T17105]  <TASK>
[  394.647793][T17105]  __dump_stack+0x1d/0x30
[  394.647827][T17105]  dump_stack_lvl+0x95/0xd0
[  394.647855][T17105]  dump_stack+0x15/0x1b
[  394.647875][T17105]  dump_header+0x80/0x240
[  394.647897][T17105]  oom_kill_process+0x295/0x350
[  394.647936][T17105]  out_of_memory+0x981/0xbc0
[  394.647979][T17105]  try_charge_memcg+0x621/0xa00
[  394.648019][T17105]  __obj_cgroup_charge+0x105/0x230
[  394.648053][T17105]  __memcg_slab_post_alloc_hook+0x492/0x860
[  394.648090][T17105]  kmem_cache_alloc_noprof+0x1f1/0x3c0
[  394.648119][T17105]  ? vm_area_alloc+0x2c/0xb0
[  394.648148][T17105]  ? vm_area_alloc+0x2c/0xb0
[  394.648174][T17105]  vm_area_alloc+0x2c/0xb0
[  394.648197][T17105]  mmap_region+0x112b/0x20c0
[  394.648217][T17105]  ? mas_ascend+0x1d1/0x570
[  394.648274][T17105]  do_mmap+0x970/0xbc0
[  394.648304][T17105]  vm_mmap_pgoff+0x183/0x2d0
[  394.648332][T17105]  ksys_mmap_pgoff+0xc1/0x310
[  394.648366][T17105]  ? __x64_sys_mmap+0x49/0x70
[  394.648399][T17105]  x64_sys_call+0x14df/0x3020
[  394.648425][T17105]  do_syscall_64+0x136/0x3c0
[  394.648458][T17105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.648487][T17105] RIP: 0033:0x7fc7b843dd02
[  394.648509][T17105] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  394.648529][T17105] RSP: 002b:00007ffc5a7f4a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  394.648550][T17105] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc7b843dd02
[  394.648563][T17105] RDX: 0000000000000000 RSI: 0000000000402000 RDI: 0000000000000000
[  394.648576][T17105] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  394.648593][T17105] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000003
[  394.648611][T17105] R13: 0000000000000002 R14: 0000000000000000 R15: 00007fc7b86c5fa0
[  394.648636][T17105]  </TASK>
[  394.648663][T17105] memory: usage 307200kB, limit 307200kB, failcnt 3023
[  394.906189][T17105] memory+swap: usage 299140kB, limit 9007199254740988kB, failcnt 0
[  394.916412][T17105] kmem: usage 281644kB, limit 9007199254740988kB, failcnt 0
[  394.924303][T17105] Memory cgroup stats for /syz4:
[  394.924507][T17105] cache 2277376
[  394.933355][T17105] rss 9551872
[  394.938459][T17105] shmem 0
[  394.941495][T17105] mapped_file 2211840
[  394.945593][T17105] dirty 0
[  394.948701][T17105] writeback 0
[  394.952123][T17105] workingset_refault_anon 6592
[  394.957250][T17105] workingset_refault_file 11004
[  395.001803][T17105] swap 0
[  395.009796][T17105] swapcached 40140800
[  395.020544][T17105] pgpgin 332614
[  395.024122][T17105] pgpgout 329724
[  395.033503][T17105] pgfault 321264
[  395.041442][T17105] pgmajfault 950
[  395.049466][T17105] inactive_anon 0
[  395.057514][T17105] active_anon 8192
[  395.064238][T17105] inactive_file 0
[  395.072271][T17105] active_file 4096
[  395.086051][T17105] unevictable 11825152
[  395.090500][T17105] hierarchical_memory_limit 314572800
[  395.095938][T17105] hierarchical_memsw_limit 9223372036854771712
[  395.102649][T17105] total_cache 2277376
[  395.107286][T17105] total_rss 9551872
[  395.111429][T17105] total_shmem 0
[  395.114935][T17105] total_mapped_file 2211840
[  395.119731][T17105] total_dirty 0
[  395.123238][T17105] total_writeback 0
[  395.127139][T17105] total_workingset_refault_anon 6592
[  395.133067][T17105] total_workingset_refault_file 11004
[  395.138609][T17105] total_swap 0
[  395.142171][T17105] total_swapcached 40140800
[  395.146700][T17105] total_pgpgin 332614
[  395.151125][T17105] total_pgpgout 329724
[  395.155319][T17105] total_pgfault 321264
[  395.159912][T17105] total_pgmajfault 950
[  395.164049][T17105] total_inactive_anon 0
[  395.168757][T17105] total_active_anon 8192
[  395.173042][T17105] total_inactive_file 0
[  395.177230][T17105] total_active_file 4096
[  395.187129][T17105] total_unevictable 11825152
[  395.213005][T17105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3587,pid=17105,uid=0
[  395.232857][T17105] Memory cgroup out of memory: Killed process 17105 (syz.4.3587) total-vm:96364kB, anon-rss:10568kB, file-rss:57016kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000
[  395.546714][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  395.546740][   T28] audit: type=1400 audit(1785393546.047:11510): avc:  denied  { append } for  pid=17168 comm="syz.2.3604" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  396.192070][T17176] IPv6: NLM_F_CREATE should be specified when creating new route
[  396.211640][   T28] audit: type=1400 audit(1785393546.717:11511): avc:  denied  { execute } for  pid=17177 comm="syz.3.3607" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  396.243422][T17180] cgroup: noprefix used incorrectly
[  397.478885][   T28] audit: type=1400 audit(1785393547.987:11512): avc:  denied  { connect } for  pid=17188 comm="syz.0.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  398.227447][T17202] veth1_to_bond: entered promiscuous mode
[  398.280758][T17202] veth1_to_bond: entered allmulticast mode
[  398.292516][T17202] __nla_validate_parse: 2 callbacks suppressed
[  398.292834][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'.
[  398.334091][T17185] loop4: detected capacity change from 0 to 4096
[  398.415999][T17202] veth1_to_bond (unregistering): left promiscuous mode
[  398.423303][T17202] veth1_to_bond (unregistering): left allmulticast mode
[  398.464463][T17202] bond0: (slave bond_slave_1): Releasing backup interface
[  398.511714][T17203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3615'.
[  398.546031][T17185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.663692][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3617'.
[  398.716349][   T28] audit: type=1400 audit(1785393549.217:11513): avc:  denied  { write } for  pid=17184 comm="syz.4.3610" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  398.838673][T14295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.921470][T17222] loop2: detected capacity change from 0 to 256
[  400.084196][   T28] audit: type=1400 audit(1785393550.587:11514): avc:  denied  { write } for  pid=17244 comm="syz.1.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  400.146591][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'.
[  400.235988][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3630'.
[  400.269788][T17254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3631'.
[  400.283452][T17252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3630'.
[  400.372172][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3633'.
[  401.282645][T17275] loop4: detected capacity change from 0 to 128
[  401.307416][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'.
[  401.345044][T17283] FAULT_INJECTION: forcing a failure.
[  401.345044][T17283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.364354][T17283] CPU: 1 UID: 0 PID: 17283 Comm: syz.1.3642 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  401.364402][T17283] Tainted: [W]=WARN
[  401.364413][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  401.364431][T17283] Call Trace:
[  401.364441][T17283]  <TASK>
[  401.364450][T17283]  __dump_stack+0x1d/0x30
[  401.364507][T17283]  dump_stack_lvl+0x95/0xd0
[  401.364530][T17283]  dump_stack+0x15/0x1b
[  401.364555][T17283]  should_fail_ex+0x25e/0x270
[  401.364622][T17283]  should_fail+0xb/0x20
[  401.364729][T17283]  should_fail_usercopy+0x1a/0x20
[  401.364793][T17283]  _copy_from_user+0x1c/0xb0
[  401.364817][T17283]  ___sys_sendmsg+0xc1/0x1e0
[  401.364851][T17283]  ? terminate_walk+0x1d5/0x200
[  401.364908][T17283]  __sys_sendmmsg+0x185/0x320
[  401.364964][T17283]  __x64_sys_sendmmsg+0x57/0x70
[  401.365017][T17283]  x64_sys_call+0x27aa/0x3020
[  401.365079][T17283]  do_syscall_64+0x136/0x3c0
[  401.365114][T17283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.365210][T17283] RIP: 0033:0x7f21a8b8df99
[  401.365231][T17283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.365287][T17283] RSP: 002b:00007f21a75e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  401.365344][T17283] RAX: ffffffffffffffda RBX: 00007f21a8e15fa0 RCX: 00007f21a8b8df99
[  401.365364][T17283] RDX: 000000000000002d RSI: 0000200000007fc0 RDI: 0000000000000004
[  401.365380][T17283] RBP: 00007f21a75e7090 R08: 0000000000000000 R09: 0000000000000000
[  401.365393][T17283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.365441][T17283] R13: 00007f21a8e16038 R14: 00007f21a8e15fa0 R15: 00007ffdfcb21c38
[  401.365469][T17283]  </TASK>
[  401.547528][T17293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3644'.
[  401.777630][   T28] audit: type=1400 audit(1785393552.277:11515): avc:  denied  { write } for  pid=17269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  401.820818][T17313] FAULT_INJECTION: forcing a failure.
[  401.820818][T17313] name failslab, interval 1, probability 1, space 0, times 0
[  401.833489][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.2.3650 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  401.833533][T17313] Tainted: [W]=WARN
[  401.833544][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  401.833563][T17313] Call Trace:
[  401.833572][T17313]  <TASK>
[  401.833584][T17313]  __dump_stack+0x1d/0x30
[  401.833688][T17313]  dump_stack_lvl+0x95/0xd0
[  401.833716][T17313]  dump_stack+0x15/0x1b
[  401.833747][T17313]  should_fail_ex+0x25e/0x270
[  401.833821][T17313]  should_failslab+0x8c/0xb0
[  401.833847][T17313]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  401.833877][T17313]  ? skb_clone+0x151/0x1f0
[  401.833928][T17313]  ? skb_clone+0x151/0x1f0
[  401.833972][T17313]  skb_clone+0x151/0x1f0
[  401.834042][T17313]  __netlink_deliver_tap+0x2be/0x510
[  401.834092][T17313]  netlink_unicast+0x654/0x680
[  401.834149][T17313]  netlink_sendmsg+0x5be/0x6f0
[  401.834288][T17313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.834327][T17313]  ____sys_sendmsg+0x532/0x580
[  401.834454][T17313]  ___sys_sendmsg+0x195/0x1e0
[  401.834520][T17313]  __x64_sys_sendmsg+0xd4/0x160
[  401.834572][T17313]  x64_sys_call+0x194c/0x3020
[  401.834654][T17313]  do_syscall_64+0x136/0x3c0
[  401.834689][T17313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.834718][T17313] RIP: 0033:0x7f2be107df99
[  401.834810][T17313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.834835][T17313] RSP: 002b:00007f2bdfad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.834890][T17313] RAX: ffffffffffffffda RBX: 00007f2be1305fa0 RCX: 00007f2be107df99
[  401.834910][T17313] RDX: 0000000024008040 RSI: 0000200000000080 RDI: 0000000000000003
[  401.834929][T17313] RBP: 00007f2bdfad7090 R08: 0000000000000000 R09: 0000000000000000
[  401.834966][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.835007][T17313] R13: 00007f2be1306038 R14: 00007f2be1305fa0 R15: 00007ffddb9373b8
[  401.835036][T17313]  </TASK>
[  401.845976][   T28] audit: type=1400 audit(1785393552.287:11516): avc:  denied  { write } for  pid=17315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  401.982975][T17314] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  401.993835][   T28] audit: type=1400 audit(1785393552.437:11517): avc:  denied  { bind } for  pid=17319 comm="syz.2.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  402.216980][T17330] FAULT_INJECTION: forcing a failure.
[  402.216980][T17330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.230205][T17330] CPU: 1 UID: 0 PID: 17330 Comm: syz.2.3654 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  402.230247][T17330] Tainted: [W]=WARN
[  402.230255][T17330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  402.230273][T17330] Call Trace:
[  402.230282][T17330]  <TASK>
[  402.230369][T17330]  __dump_stack+0x1d/0x30
[  402.230401][T17330]  dump_stack_lvl+0x95/0xd0
[  402.230443][T17330]  dump_stack+0x15/0x1b
[  402.230462][T17330]  should_fail_ex+0x25e/0x270
[  402.230494][T17330]  should_fail+0xb/0x20
[  402.230572][T17330]  should_fail_usercopy+0x1a/0x20
[  402.230629][T17330]  _copy_from_user+0x1c/0xb0
[  402.230657][T17330]  ___sys_sendmsg+0xc1/0x1e0
[  402.230775][T17330]  __x64_sys_sendmsg+0xd4/0x160
[  402.230814][T17330]  x64_sys_call+0x194c/0x3020
[  402.230851][T17330]  do_syscall_64+0x136/0x3c0
[  402.230883][T17330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.230913][T17330] RIP: 0033:0x7f2be107df99
[  402.230935][T17330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.230994][T17330] RSP: 002b:00007f2bdfad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.231021][T17330] RAX: ffffffffffffffda RBX: 00007f2be1305fa0 RCX: 00007f2be107df99
[  402.231040][T17330] RDX: 0000000004000020 RSI: 0000200000000080 RDI: 0000000000000003
[  402.231058][T17330] RBP: 00007f2bdfad7090 R08: 0000000000000000 R09: 0000000000000000
[  402.231114][T17330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.231127][T17330] R13: 00007f2be1306038 R14: 00007f2be1305fa0 R15: 00007ffddb9373b8
[  402.231229][T17330]  </TASK>
[  402.444123][T17338] loop2: detected capacity change from 0 to 512
[  402.477641][T17338] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  402.609529][T17338] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3656: bad orphan inode 15
[  402.619618][T17338] loop2: lost filesystem error report for type 5 error -117
[  402.619858][T17338] ext4_test_bit(bit=14, block=18) = 1
[  402.632548][T17338] is_bad_inode(inode)=0
[  402.636724][T17338] NEXT_ORPHAN(inode)=1023
[  402.641135][T17338] max_ino=32
[  402.644361][T17338] i_nlink=0
[  402.670623][T17338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3656: bg 0: block 161: padding at end of block bitmap is not set
[  402.684978][T17338] loop2: lost filesystem error report for type 5 error -117
[  402.689831][T17338] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  402.697292][    C0] EXT4-fs (loop2): error count since last fsck: 2
[  402.697327][    C0] EXT4-fs (loop2): initial error at time 1785393553: ext4_orphan_get:1425
[  402.697357][    C0] EXT4-fs (loop2): last error at time 1785393553: ext4_validate_block_bitmap:441
[  402.797846][T17338] loop2: lost filesystem error report for type 5 error -117
[  402.802235][T17338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.821818][T17338] ext2 filesystem being mounted at /37/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  403.049872][T16627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.226143][T17361] 8021q: VLANs not supported on ip6gre0
[  403.346499][   T28] audit: type=1400 audit(1785393553.847:11518): avc:  denied  { append } for  pid=17367 comm="syz.1.3668" name="pfkey" dev="proc" ino=4026533934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  403.392672][T17372] __nla_validate_parse: 5 callbacks suppressed
[  403.392691][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3670'.
[  403.776294][T17382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3672'.
[  404.225944][T17389] loop4: detected capacity change from 0 to 256
[  404.373893][T17389] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  404.452411][T17389] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  404.537600][   T28] audit: type=1400 audit(1785393555.037:11519): avc:  denied  { write } for  pid=17386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.620171][T17405] loop4: detected capacity change from 0 to 512
[  404.813616][T17409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3676'.
[  404.930360][   T28] audit: type=1400 audit(1785393555.307:11520): avc:  denied  { setopt } for  pid=17404 comm="syz.4.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  405.046965][T17415] Need at least one configuration in g1.
[  405.068717][T17417] FAULT_INJECTION: forcing a failure.
[  405.068717][T17417] name failslab, interval 1, probability 1, space 0, times 0
[  405.104688][T17415] udc usbip-vudc.0: failed to start g1: -22
[  405.117345][T17417] CPU: 0 UID: 0 PID: 17417 Comm: syz.4.3680 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  405.117430][T17417] Tainted: [W]=WARN
[  405.117438][T17417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  405.117451][T17417] Call Trace:
[  405.117458][T17417]  <TASK>
[  405.117468][T17417]  __dump_stack+0x1d/0x30
[  405.117629][T17417]  dump_stack_lvl+0x95/0xd0
[  405.117652][T17417]  dump_stack+0x15/0x1b
[  405.117700][T17417]  should_fail_ex+0x25e/0x270
[  405.117741][T17417]  ? configfs_write_iter+0x8a/0x250
[  405.117764][T17417]  should_failslab+0x8c/0xb0
[  405.117884][T17417]  __kmalloc_cache_noprof+0x7b/0x3d0
[  405.117918][T17417]  ? configfs_write_iter+0x8a/0x250
[  405.117942][T17417]  configfs_write_iter+0x8a/0x250
[  405.118036][T17417]  ? __pfx_configfs_write_iter+0x10/0x10
[  405.118086][T17417]  vfs_write+0x57d/0x990
[  405.118120][T17417]  ksys_write+0xdc/0x1a0
[  405.118150][T17417]  __x64_sys_write+0x40/0x50
[  405.118178][T17417]  x64_sys_call+0x27e1/0x3020
[  405.118206][T17417]  do_syscall_64+0x136/0x3c0
[  405.118256][T17417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.118285][T17417] RIP: 0033:0x7fc7b843df99
[  405.118308][T17417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.118334][T17417] RSP: 002b:00007fc7b6e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  405.118358][T17417] RAX: ffffffffffffffda RBX: 00007fc7b86c5fa0 RCX: 00007fc7b843df99
[  405.118374][T17417] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000005
[  405.118421][T17417] RBP: 00007fc7b6e97090 R08: 0000000000000000 R09: 0000000000000000
[  405.118439][T17417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.118457][T17417] R13: 00007fc7b86c6038 R14: 00007fc7b86c5fa0 R15: 00007ffc5a7f4958
[  405.118544][T17417]  </TASK>
[  405.321066][T17415] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  405.390168][T17415] UDC core: g1: couldn't find an available UDC or it's busy
[  405.488056][   T28] audit: type=1400 audit(1785393555.997:11521): avc:  denied  { write } for  pid=17419 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  405.542410][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3682'.
[  405.607099][T17430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3683'.
[  405.794309][   T28] audit: type=1400 audit(1785393556.297:11522): avc:  denied  { write } for  pid=17426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  405.878867][   T28] audit: type=1400 audit(1785393556.387:11523): avc:  denied  { write } for  pid=17448 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  406.162885][T17454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3687'.
[  406.165211][   T28] audit: type=1400 audit(1785393556.667:11524): avc:  denied  { ioctl } for  pid=17451 comm="syz.3.3687" path="socket:[52122]" dev="sockfs" ino=52122 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  406.361987][T17467] loop4: detected capacity change from 0 to 128
[  406.471198][T17467] FAT-fs (loop4): bogus number of reserved sectors
[  406.484062][T17467] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  406.599407][T17467] FAT-fs (loop4): Can't find a valid FAT filesystem
[  406.788383][T17467] loop4: detected capacity change from 0 to 512
[  406.794947][T17467] msdos: Unknown parameter '01777777777777777777777
[  406.794947][T17467] ci�sV�CAkЌKk��г�~��k������e�a������&�U]��itFA�żh�$m��M�+~�D2�}�
˥U
[  406.794947][T17467] �hס�%��Rz<��sˈL_�]�T��v��ޙ?�MWA�vwfp��}A!�T?�(�0�b�ɘ�"��ɳ��G$��z�_�(>V ��T�_O'
[  407.837977][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  407.837999][   T28] audit: type=1326 audit(1785393558.287:11527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  407.869846][   T28] audit: type=1326 audit(1785393558.287:11528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.179947][T17496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3695'.
[  408.336285][T17498] loop4: detected capacity change from 0 to 512
[  408.419655][T17498] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3696: iget: bad i_size value: 38620345925642
[  408.482988][T17498] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  408.483189][T17498] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3696: couldn't read orphan inode 15 (err -117)
[  408.492484][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  408.492516][    C0] EXT4-fs (loop4): initial error at time 1785393558: ext4_orphan_get:1399: inode 15
[  408.492547][    C0] EXT4-fs (loop4): last error at time 1785393558: ext4_orphan_get:1399: inode 15
[  408.614466][   T28] audit: type=1326 audit(1785393558.287:11529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.640467][   T28] audit: type=1326 audit(1785393558.287:11530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.666516][   T28] audit: type=1326 audit(1785393558.287:11531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.692235][   T28] audit: type=1326 audit(1785393558.287:11532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.737735][   T28] audit: type=1326 audit(1785393558.287:11533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.787209][T17498] loop4: lost filesystem error report for type 5 error -117
[  408.789459][T17498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.822364][   T28] audit: type=1326 audit(1785393558.287:11534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.890600][   T28] audit: type=1326 audit(1785393558.287:11535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  408.950796][   T28] audit: type=1326 audit(1785393558.287:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17493 comm="syz.0.3694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64c869df99 code=0x7ffc0000
[  409.105505][T17509] netlink: 'syz.4.3696': attribute type 12 has an invalid length.
[  409.158759][T17509] netlink: 'syz.4.3696': attribute type 29 has an invalid length.
[  409.192782][T17510] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3696: bg 0: block 5: invalid block bitmap
[  409.237541][T17509] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3696'.
[  409.308766][T17510] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1168 with error 28
[  409.337978][T17509] netlink: 'syz.4.3696': attribute type 1 has an invalid length.
[  409.346174][T17509] netlink: 'syz.4.3696': attribute type 2 has an invalid length.
[  409.446257][T17510] EXT4-fs (loop4): This should not happen!! Data will be lost
[  409.446257][T17510] 
[  409.457166][T17510] EXT4-fs (loop4): Total free blocks count 0
[  409.461170][T17511] tipc: Failed to remove unknown binding: 66,0,0/1886753225:3400464637/3400464639
[  409.473044][T17510] EXT4-fs (loop4): Free/Dirty block details
[  409.479221][T17510] EXT4-fs (loop4): free_blocks=0
[  409.490573][T17510] EXT4-fs (loop4): dirty_blocks=1168
[  409.495979][T17510] EXT4-fs (loop4): Block reservation details
[  409.502061][T17510] EXT4-fs (loop4): i_reserved_data_blocks=1168
[  409.508929][T17514] tipc: Failed to remove unknown binding: 66,0,0/1886753225:2556064754/2556064755
[  409.527786][T17514] tipc: Failed to remove unknown binding: 66,0,0/1886753225:2556064754/2556064755
[  409.651025][T17509] EXT4-fs (loop4): shut down requested (0)
[  409.882374][T17538] syzkaller1: entered promiscuous mode
[  409.893334][T17538] syzkaller1: entered allmulticast mode
[  409.996176][T17545] tipc: Started in network mode
[  410.005372][T17545] tipc: Node identity 8684f319e9ae, cluster identity 4711
[  410.012780][T17545] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  410.040959][T17544] tipc: Resetting bearer <eth:syzkaller0>
[  410.053635][T17544] tipc: Disabling bearer <eth:syzkaller0>
[  411.112306][T17562] loop2: detected capacity change from 0 to 512
[  411.126628][T17564] netlink: 'syz.1.3718': attribute type 1 has an invalid length.
[  411.141697][T17564] netlink: 'syz.1.3718': attribute type 2 has an invalid length.
[  411.154161][T17562] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3717: Directory hole found for htree index block 0
[  411.197578][T17562] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  411.200101][T17562] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  411.209240][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  411.209280][    C1] EXT4-fs (loop2): initial error at time 1785393561: dx_probe:791: inode 2
[  411.209320][    C1] EXT4-fs (loop2): last error at time 1785393561: dx_probe:791: inode 2
[  411.270134][T17562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.316004][T17562] netlink: 'syz.2.3717': attribute type 5 has an invalid length.
[  411.326717][T17562] ip6erspan0: entered promiscuous mode
[  411.335362][T17572] syz_tun: entered allmulticast mode
[  411.354255][T16627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.366195][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'.
[  411.424896][T17576] sctp: [Deprecated]: syz.4.3719 (pid 17576) Use of int in maxseg socket option.
[  411.424896][T17576] Use struct sctp_assoc_value instead
[  411.513760][T17574] team0: Port device team_slave_0 removed
[  411.522527][T17576] tipc: Cannot configure node identity twice
[  411.534178][T17579] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  411.952872][T17596] tipc: Started in network mode
[  411.960128][T17596] tipc: Node identity 4, cluster identity 4711
[  411.966532][T17596] tipc: Node number set to 4
[  412.153617][T16627] syz_tun (unregistering): left allmulticast mode
[  412.803045][T17613] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.823788][T17613] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.842998][T17613] bridge_slave_0: entered allmulticast mode
[  412.856307][T17613] bridge_slave_0: entered promiscuous mode
[  412.865875][T17613] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.873167][T17613] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.880742][T17613] bridge_slave_1: entered allmulticast mode
[  412.888496][T17613] bridge_slave_1: entered promiscuous mode
[  412.909878][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.921613][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.945015][T17613] team0: Port device team_slave_0 added
[  412.952151][T17613] team0: Port device team_slave_1 added
[  412.974925][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.982183][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.008657][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.020251][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.027295][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.092675][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.123914][T17613] hsr_slave_0: entered promiscuous mode
[  413.155636][T17613] hsr_slave_1: entered promiscuous mode
[  413.162177][T17613] debugfs: 'hsr0' already exists in 'hsr'
[  413.168223][T17613] Cannot create hsr debugfs directory
[  413.278484][T17638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=17638 comm=syz.3.3740
[  413.295221][T17613] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.311403][T17613] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.355566][   T28] kauditd_printk_skb: 112 callbacks suppressed
[  413.355583][   T28] audit: type=1326 audit(1785393563.857:11649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  413.393553][T17642] gre1: entered promiscuous mode
[  413.401168][T17642] gre1: entered allmulticast mode
[  413.417963][T17613] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.436073][T17613] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.456074][   T28] audit: type=1326 audit(1785393563.857:11650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  413.493892][   T28] audit: type=1326 audit(1785393563.897:11651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  413.522255][   T28] audit: type=1326 audit(1785393563.897:11652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  413.561059][   T28] audit: type=1326 audit(1785393563.897:11653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  413.588767][   T28] audit: type=1326 audit(1785393563.897:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7b83fe7ce code=0x7ffc0000
[  413.621483][T17613] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.634164][T17613] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.645871][   T28] audit: type=1326 audit(1785393563.897:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc7b843f297 code=0x7ffc0000
[  413.682657][   T28] audit: type=1326 audit(1785393563.897:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  413.720786][   T28] audit: type=1326 audit(1785393563.897:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc7b843f297 code=0x7ffc0000
[  413.749334][   T28] audit: type=1326 audit(1785393563.897:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.4.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc7b83fe7ce code=0x7ffc0000
[  413.780583][T17613] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.805181][T17613] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.828868][T17649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3745'.
[  413.849405][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'.
[  413.861184][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'.
[  413.875678][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'.
[  413.884608][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'.
[  413.909688][T17651] loop4: detected capacity change from 0 to 512
[  413.938753][T17655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3748'.
[  413.986018][T17651] EXT4-fs (loop4): failed to initialize system zone (-117)
[  413.993607][T17651] EXT4-fs (loop4): mount failed
[  414.014094][T17613] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  414.049014][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  414.066913][T17613] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  414.089056][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  414.104551][T17613] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  414.118336][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  414.127904][T17613] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  414.145500][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  414.249501][T17613] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.266761][T17613] 8021q: adding VLAN 0 to HW filter on device team0
[  414.305513][  T361] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.312685][  T361] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.322840][T17687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3759'.
[  414.334371][  T361] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.341587][  T361] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.406213][T17692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3762'.
[  414.533353][T17613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.733498][T17733] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3771'.
[  414.795956][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3773'.
[  414.817100][T17613] veth0_vlan: entered promiscuous mode
[  414.837344][T17613] veth1_vlan: entered promiscuous mode
[  414.868146][T17613] veth0_macvtap: entered promiscuous mode
[  414.884922][T17613] veth1_macvtap: entered promiscuous mode
[  414.909548][T17613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.953822][T17613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.980764][T14039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.003264][T14039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.026158][T14039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.041725][T14039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.051753][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'.
[  416.191951][T17771] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3783'.
[  416.283980][T17778] loop4: detected capacity change from 0 to 1024
[  416.420121][T17778] EXT4-fs: Ignoring removed orlov option
[  416.459493][T17778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.487851][T17778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.500765][T17778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.741145][T17793] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  416.808292][T17796] loop6: detected capacity change from 0 to 512
[  416.846643][T17796] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  416.868530][T17796] EXT4-fs (loop6): 1 truncate cleaned up
[  416.874639][T17796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.133219][T17807] netlink: 'syz.3.3796': attribute type 2 has an invalid length.
[  417.248593][T14295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.501750][T17819] loop4: detected capacity change from 0 to 128
[  417.555225][T17819] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  417.567611][T17819] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  417.635490][T14295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  418.582600][T17834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3804'.
[  418.731406][T17836] loop4: detected capacity change from 0 to 128
[  418.767909][T17836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  418.800361][T17836] System zones: 1-3, 19-19, 35-36
[  418.817578][T17836] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  418.873934][T17836] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  419.022854][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  419.022873][   T28] audit: type=1400 audit(1785393569.527:11683): avc:  denied  { write } for  pid=17835 comm="syz.4.3805" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.273835][T17843] netlink: 'syz.0.3807': attribute type 10 has an invalid length.
[  419.452914][T17851] xt_hashlimit: max too large, truncated to 1048576
[  419.467134][T17851] Timeout policy `syz1' can only be used by L3 protocol number 22
[  419.496597][   T28] audit: type=1400 audit(1785393569.967:11684): avc:  denied  { unmount } for  pid=17850 comm="syz.3.3811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  419.575954][   T28] audit: type=1400 audit(1785393570.077:11685): avc:  denied  { write } for  pid=17835 comm="syz.4.3805" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.657241][T17859] x_tables: duplicate entry at hook 3
[  419.665793][   T28] audit: type=1400 audit(1785393570.077:11686): avc:  denied  { write } for  pid=17835 comm="syz.4.3805" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.720901][   T28] audit: type=1400 audit(1785393570.077:11687): avc:  denied  { write } for  pid=17835 comm="syz.4.3805" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.745240][T14295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  419.766876][   T28] audit: type=1400 audit(1785393570.077:11688): avc:  denied  { watch } for  pid=17835 comm="syz.4.3805" path="/150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file3" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  419.815303][T17866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3816'.
[  419.848661][   T28] audit: type=1400 audit(1785393570.077:11689): avc:  denied  { write } for  pid=17835 comm="syz.4.3805" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.870956][   T28] audit: type=1400 audit(1785393570.077:11690): avc:  denied  { write } for  pid=17835 comm="syz.4.3805" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.893105][   T28] audit: type=1400 audit(1785393570.087:11691): avc:  denied  { unlink } for  pid=17835 comm="syz.4.3805" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  420.216120][T17884] loop4: detected capacity change from 0 to 2048
[  420.267742][   T28] audit: type=1400 audit(1785393570.757:11692): avc:  denied  { create } for  pid=17888 comm="syz.0.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  420.304761][T17889] syzkaller0: entered promiscuous mode
[  420.310792][T17889] syzkaller0: entered allmulticast mode
[  420.319494][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3824'.
[  420.335966][   T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.348104][T17884]  loop4: p1 p2 < > p3 < p5 p6 > p4
[  420.353372][T17884] loop4: partition table partially beyond EOD, truncated
[  420.360909][T17884] loop4: p1 start 385023 is beyond EOD, truncated
[  420.371724][T17884] loop4: p2 start 4278190080 is beyond EOD, truncated
[  420.391886][T17884] loop4: p4 start 1979908096 is beyond EOD, truncated
[  420.408996][   T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.427513][T17884] loop4: p5 start 385023 is beyond EOD, truncated
[  420.446903][T17884] loop4: p6 start 1979908096 is beyond EOD, truncated
[  420.493705][   T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.549387][   T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.707152][   T30] bridge_slave_1: left allmulticast mode
[  420.722104][   T30] bridge_slave_1: left promiscuous mode
[  420.740634][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.774209][   T30] bridge_slave_0: left allmulticast mode
[  420.787238][   T30] bridge_slave_0: left promiscuous mode
[  420.793390][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.865022][T17924] loop4: detected capacity change from 0 to 4096
[  420.883782][T17924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.902107][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.923933][   T30] bond0 (unregistering): Released all slaves
[  420.952295][T14295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.971942][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9
[  420.981034][   T30] tipc: Left network mode
[  421.003375][   T30] hsr_slave_0: left promiscuous mode
[  421.011477][T17936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3836'.
[  421.020652][   T30] hsr_slave_1: left promiscuous mode
[  421.026493][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.034479][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.049611][   T30] veth1_macvtap: left promiscuous mode
[  421.057028][   T30] veth0_macvtap: left promiscuous mode
[  421.063073][   T30] veth1_vlan: left promiscuous mode
[  421.068649][   T30] veth0_vlan: left promiscuous mode
[  421.201301][   T30] team0 (unregistering): Port device team_slave_1 removed
[  421.215480][   T30] team0 (unregistering): Port device team_slave_0 removed
[  421.244566][T17613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.412857][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10
[  421.668253][T17988] vhci_hcd vhci_hcd.2: invalid port number 255
[  421.674557][T17988] vhci_hcd vhci_hcd.2: invalid port number 255
[  421.783672][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11
[  421.805902][   T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.891701][   T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.986534][   T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.060280][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12
[  422.087637][   T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.207103][T17961] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.217080][T17961] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.236308][T18030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3849'.
[  422.255134][T17961] bridge_slave_0: entered allmulticast mode
[  422.270627][T17961] bridge_slave_0: entered promiscuous mode
[  422.330266][T17961] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.347741][T17961] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.349854][T18032] x_tables: ip_tables: osf match: only valid for protocol 6
[  422.355474][T17961] bridge_slave_1: entered allmulticast mode
[  422.382308][T17961] bridge_slave_1: entered promiscuous mode
[  422.453814][   T30] bridge_slave_1: left allmulticast mode
[  422.459672][   T30] bridge_slave_1: left promiscuous mode
[  422.465481][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.476647][   T30] bridge_slave_0: left allmulticast mode
[  422.482425][   T30] bridge_slave_0: left promiscuous mode
[  422.488172][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.640301][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.668385][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.736434][   T30] bond0 (unregistering): Released all slaves
[  422.752454][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.773543][T18036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3851'.
[  422.804630][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.847929][   T30] hsr_slave_0: left promiscuous mode
[  422.857848][   T30] hsr_slave_1: left promiscuous mode
[  422.869647][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.883312][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.897964][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.913399][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.937877][   T30] veth1_macvtap: left promiscuous mode
[  422.943529][   T30] veth0_macvtap: left promiscuous mode
[  422.961018][   T30] veth1_vlan: left promiscuous mode
[  422.967156][   T30] veth0_vlan: left promiscuous mode
[  423.238332][   T30] team0 (unregistering): Port device team_slave_1 removed
[  423.260851][   T30] team0 (unregistering): Port device team_slave_0 removed
[  423.350674][T17961] team0: Port device team_slave_0 added
[  423.374991][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21
[  423.388122][T17961] team0: Port device team_slave_1 added
[  423.439765][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.462310][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.519495][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.548394][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.555679][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.589352][T18090] FAULT_INJECTION: forcing a failure.
[  423.589352][T18090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.610352][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.624446][T18090] CPU: 0 UID: 0 PID: 18090 Comm: syz.0.3860 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  423.624494][T18090] Tainted: [W]=WARN
[  423.624503][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  423.624539][T18090] Call Trace:
[  423.624546][T18090]  <TASK>
[  423.624554][T18090]  __dump_stack+0x1d/0x30
[  423.624581][T18090]  dump_stack_lvl+0x95/0xd0
[  423.624607][T18090]  dump_stack+0x15/0x1b
[  423.624633][T18090]  should_fail_ex+0x25e/0x270
[  423.624698][T18090]  should_fail+0xb/0x20
[  423.624733][T18090]  should_fail_usercopy+0x1a/0x20
[  423.624817][T18090]  _copy_to_user+0x20/0xa0
[  423.624843][T18090]  simple_read_from_buffer+0xb5/0x130
[  423.624879][T18090]  proc_fail_nth_read+0x10e/0x150
[  423.624908][T18090]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  423.625004][T18090]  vfs_read+0x18e/0x7c0
[  423.625053][T18090]  ? __rcu_read_unlock+0x4e/0x70
[  423.625080][T18090]  ? __fget_files+0x184/0x1c0
[  423.625112][T18090]  ? mutex_lock+0x57/0x90
[  423.625254][T18090]  ksys_read+0xdc/0x1a0
[  423.625276][T18090]  __x64_sys_read+0x40/0x50
[  423.625295][T18090]  x64_sys_call+0x2886/0x3020
[  423.625327][T18090]  do_syscall_64+0x136/0x3c0
[  423.625388][T18090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.625410][T18090] RIP: 0033:0x7f64c865e7ce
[  423.625427][T18090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  423.625498][T18090] RSP: 002b:00007f64c70d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  423.625520][T18090] RAX: ffffffffffffffda RBX: 00007f64c70d66c0 RCX: 00007f64c865e7ce
[  423.625535][T18090] RDX: 000000000000000f RSI: 00007f64c70d60a0 RDI: 0000000000000005
[  423.625552][T18090] RBP: 00007f64c70d6090 R08: 0000000000000000 R09: 0000000000000000
[  423.625569][T18090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.625584][T18090] R13: 00007f64c8926128 R14: 00007f64c8926090 R15: 00007ffe6748e248
[  423.625701][T18090]  </TASK>
[  423.813818][T17961] hsr_slave_0: entered promiscuous mode
[  423.873191][T17961] hsr_slave_1: entered promiscuous mode
[  423.879675][T17961] debugfs: 'hsr0' already exists in 'hsr'
[  423.892796][T17961] Cannot create hsr debugfs directory
[  424.177344][T18106] nfs: Unknown parameter 'retra/�ˉV�`@��ns'
[  424.638590][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  424.638616][   T28] audit: type=1400 audit(1785393575.147:11705): avc:  denied  { map } for  pid=18109 comm="syz.1.3866" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  424.735281][   T28] audit: type=1400 audit(1785393575.177:11706): avc:  denied  { execute } for  pid=18109 comm="syz.1.3866" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  425.006836][   T28] audit: type=1400 audit(1785393575.507:11707): avc:  denied  { write } for  pid=18113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.052588][T17961] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  425.083465][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  425.109136][T17961] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  425.135212][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  425.157295][T17961] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  425.174375][   T28] audit: type=1400 audit(1785393575.677:11708): avc:  denied  { write } for  pid=18134 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.204536][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  425.328192][T17961] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  425.341564][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  425.349723][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22
[  425.634771][T17961] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.651257][T17961] 8021q: adding VLAN 0 to HW filter on device team0
[  425.661503][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.668674][ T8706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.722086][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.729248][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.743715][T18164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3874'.
[  425.766362][   T28] audit: type=1400 audit(1785393576.267:11709): avc:  denied  { write } for  pid=18148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.819573][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3875'.
[  425.880411][   T28] audit: type=1400 audit(1785393576.317:11710): avc:  denied  { write } for  pid=18171 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.927511][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23
[  425.987494][   T28] audit: type=1326 audit(1785393576.487:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.4.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  426.081968][   T28] audit: type=1326 audit(1785393576.487:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.4.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  426.159468][   T28] audit: type=1326 audit(1785393576.487:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.4.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  426.217628][T17961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.221950][   T28] audit: type=1326 audit(1785393576.487:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.4.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc7b843df99 code=0x7ffc0000
[  426.406465][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24
[  426.655314][T17961] veth0_vlan: entered promiscuous mode
[  426.667164][T17961] veth1_vlan: entered promiscuous mode
[  426.696204][T17961] veth0_macvtap: entered promiscuous mode
[  426.705728][T17961] veth1_macvtap: entered promiscuous mode
[  426.718304][T17961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.730243][T17961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.798086][ T8706] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.819565][ T8706] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.849085][ T8706] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.866318][ T8706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.062499][T18268] loop4: detected capacity change from 0 to 256
[  427.323258][T18275] sctp: [Deprecated]: syz.7.3839 (pid 18275) Use of int in max_burst socket option.
[  427.323258][T18275] Use struct sctp_assoc_value instead
[  429.953547][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  429.953567][   T28] audit: type=1400 audit(1785393580.457:11727): avc:  denied  { write } for  pid=18296 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  430.480701][T18307] FAULT_INJECTION: forcing a failure.
[  430.480701][T18307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.504018][T18307] CPU: 0 UID: 0 PID: 18307 Comm: syz.7.3893 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  430.504105][T18307] Tainted: [W]=WARN
[  430.504113][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  430.504129][T18307] Call Trace:
[  430.504137][T18307]  <TASK>
[  430.504146][T18307]  __dump_stack+0x1d/0x30
[  430.504208][T18307]  dump_stack_lvl+0x95/0xd0
[  430.504230][T18307]  dump_stack+0x15/0x1b
[  430.504249][T18307]  should_fail_ex+0x25e/0x270
[  430.504359][T18307]  should_fail+0xb/0x20
[  430.504416][T18307]  should_fail_usercopy+0x1a/0x20
[  430.504555][T18307]  _copy_from_user+0x1c/0xb0
[  430.504581][T18307]  set_user_sigmask+0x60/0x140
[  430.504664][T18307]  __se_sys_ppoll+0x1b4/0x220
[  430.504695][T18307]  ? fput+0x8f/0xc0
[  430.504801][T18307]  __x64_sys_ppoll+0x67/0x80
[  430.504829][T18307]  x64_sys_call+0x28d3/0x3020
[  430.504854][T18307]  do_syscall_64+0x136/0x3c0
[  430.504932][T18307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.504965][T18307] RIP: 0033:0x7f982d1adf99
[  430.504982][T18307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.505003][T18307] RSP: 002b:00007f982bbe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  430.505031][T18307] RAX: ffffffffffffffda RBX: 00007f982d436090 RCX: 00007f982d1adf99
[  430.505064][T18307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100
[  430.505081][T18307] RBP: 00007f982bbe6090 R08: 0000000000000008 R09: 0000000000000000
[  430.505100][T18307] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  430.505118][T18307] R13: 00007f982d436128 R14: 00007f982d436090 R15: 00007fff933c9398
[  430.505177][T18307]  </TASK>
[  430.787411][   T28] audit: type=1400 audit(1785393581.287:11728): avc:  denied  { write } for  pid=18308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  430.861653][   T28] audit: type=1400 audit(1785393581.337:11729): avc:  denied  { write } for  pid=18322 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.016569][   T28] audit: type=1400 audit(1785393581.517:11730): avc:  denied  { write } for  pid=18325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.087816][   T28] audit: type=1400 audit(1785393581.587:11731): avc:  denied  { write } for  pid=18336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.252126][T18344] loop4: detected capacity change from 0 to 256
[  431.266953][T18344] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  431.325491][   T28] audit: type=1400 audit(1785393581.827:11732): avc:  denied  { write } for  pid=18339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.352394][T18353] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  431.387566][T18353] FAT-fs (loop4): Filesystem has been set read-only
[  431.412204][   T28] audit: type=1400 audit(1785393581.917:11733): avc:  denied  { write } for  pid=18355 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.437925][T18353] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  431.604483][T18292] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  431.612573][T18292] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  431.691453][T18360] hid-generic 0000:0000:0000.0005: pid 18360 passed too short report
[  431.725130][   T28] audit: type=1400 audit(1785393582.227:11734): avc:  denied  { write } for  pid=18359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.781574][   T28] audit: type=1400 audit(1785393582.287:11735): avc:  denied  { write } for  pid=18372 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.967394][   T28] audit: type=1400 audit(1785393582.467:11736): avc:  denied  { write } for  pid=18374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  432.289432][T18400] ==================================================================
[  432.297608][T18400] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk
[  432.305127][T18400] 
[  432.307485][T18400] write to 0xffff88811aef1a00 of 8 bytes by task 18399 on cpu 1:
[  432.315225][T18400]  mas_wmb_replace+0x22e/0x1770
[  432.320124][T18400]  mas_wr_store_entry+0x54a7/0x5a90
[  432.325357][T18400]  mas_store_prealloc+0x421/0x670
[  432.330420][T18400]  vma_complete+0x3c7/0x850
[  432.334967][T18400]  __split_vma+0x5da/0x640
[  432.339407][T18400]  vma_modify+0xbcc/0xc80
[  432.343793][T18400]  vma_modify_flags+0x182/0x210
[  432.348697][T18400]  mprotect_fixup+0x3a2/0x680
[  432.353403][T18400]  do_mprotect_pkey+0x69e/0x950
[  432.358285][T18400]  __x64_sys_mprotect+0x48/0x60
[  432.363168][T18400]  x64_sys_call+0x2768/0x3020
[  432.367882][T18400]  do_syscall_64+0x136/0x3c0
[  432.372513][T18400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.378433][T18400] 
[  432.380786][T18400] read to 0xffff88811aef1a00 of 8 bytes by task 18400 on cpu 0:
[  432.388446][T18400]  mtree_range_walk+0x35a/0x480
[  432.393341][T18400]  mas_walk+0x1ac/0x340
[  432.397532][T18400]  lock_vma_under_rcu+0xc9/0x210
[  432.402503][T18400]  do_user_addr_fault+0x237/0x1060
[  432.407649][T18400]  exc_page_fault+0x62/0xa0
[  432.412190][T18400]  asm_exc_page_fault+0x26/0x30
[  432.417063][T18400] 
[  432.419405][T18400] value changed: 0xffff88811df51541 -> 0xffff88811aef1a00
[  432.426529][T18400] 
[  432.428873][T18400] Reported by Kernel Concurrency Sanitizer on:
[  432.435051][T18400] CPU: 0 UID: 0 PID: 18400 Comm: syz.4.3899 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  432.446026][T18400] Tainted: [W]=WARN
[  432.449846][T18400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  432.459922][T18400] ==================================================================
[  435.244650][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  435.244765][   T28] audit: type=1400 audit(1785393585.747:11746): avc:  denied  { write } for  pid=18457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  435.285077][   T28] audit: type=1400 audit(1785393585.787:11747): avc:  denied  { write } for  pid=18468 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.143587][   T28] audit: type=1400 audit(1785393586.647:11748): avc:  denied  { write } for  pid=18472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.177884][   T28] audit: type=1400 audit(1785393586.687:11749): avc:  denied  { write } for  pid=18483 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.455612][   T28] audit: type=1400 audit(1785393586.957:11750): avc:  denied  { write } for  pid=18486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.489799][   T28] audit: type=1400 audit(1785393586.997:11751): avc:  denied  { write } for  pid=18497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  440.330391][   T28] audit: type=1400 audit(1785393590.837:11752): avc:  denied  { write } for  pid=18504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  440.363702][   T28] audit: type=1400 audit(1785393590.867:11753): avc:  denied  { write } for  pid=18515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1