last executing test programs:

2.265668508s ago: executing program 4 (id=185):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000240)={0x101, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]})
perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/184)

2.02356957s ago: executing program 4 (id=189):
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x6, 0xa0, 0x7, 0x0, 0x5, 0x25, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc, 0xb92502c628ebdae2, @perf_config_ext={0x2, 0x59a}, 0x200000, 0x400, 0x1000, 0x7, 0x5, 0x7, 0xc60, 0x0, 0x1ff, 0x0, 0x7ff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@loopback={0x1000000}, 0x800, 0x0, 0x2, 0x9, 0x600, 0x80}, 0x20)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ftruncate(0xffffffffffffffff, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r2, &(0x7f0000000000)="4400000030000504000000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
readv(r3, &(0x7f0000000300)=[{0x0}], 0x1)
r4 = fsopen(0x0, 0x0)
fsmount(r4, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
write(r1, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xb)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4c010)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080))

1.893908618s ago: executing program 4 (id=193):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x802, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000009c80), 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000009d00)=ANY=[@ANYBLOB='system_u:objectib_t:s0 /sbin/dhclient 0'], 0x48)
write(r0, &(0x7f0000000000)='\nau', 0x3)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01225e80030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x20000010)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x32, 0x1, {0x6, @struct={0x80000001, 0x7f}, <r3=>0x0, 0x1, 0x1, 0x81, 0x6577, 0x4, 0xf, @struct={0x52be, 0x2}, 0x8, 0x7, [0x2, 0x230, 0x3ff, 0x71c, 0x8000000000000000, 0x7]}, {0x5, @struct={0x0, 0x1}, 0x0, 0xd4, 0xffffffff7fffffff, 0xfa00, 0x2be, 0x0, 0x408, @struct={0x400, 0x1}, 0xff, 0x9, [0x3, 0xffffffffffffffff, 0xffffffff, 0x1, 0x5, 0x1]}, {0x80000001, @usage=0x942, 0x0, 0x4, 0x10001, 0x8, 0x400, 0xfff, 0x29, @struct={0xfffffffb, 0x3}, 0x4, 0x8000, [0x3, 0xffffffffffffff80, 0x3, 0x9, 0x7, 0x1]}, {0xd, 0x10, 0x5}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000ac0)={r3, "b1a3823550810b53d2a097334a173b28"})
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc640df5b43295982, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x3, 0x7fffffff}, 0x10e4c8, 0x1224, 0xfffeffff, 0x0, 0x6, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfff)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})

1.811439186s ago: executing program 0 (id=196):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000004c0))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={'\x00', 0xd8, 0x9, 0xfff, 0x8, 0x94})
lstat(0x0, &(0x7f0000000680))
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r2=>0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{0x2, 0x6}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x0, r2}], {0x10, 0x2}}, 0x3c, 0x1)
accept(r0, 0x0, &(0x7f0000000940))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980))
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0xf0ff, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x0, 0xe4ffffff}}]}, {0xfffffffffffffe91}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)
sendmsg$AUDIT_TTY_SET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfc, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c051)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)

1.811127707s ago: executing program 3 (id=197):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb301b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000000084}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
unshare(0x62040200)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "814e402ee9513e5a", "61497295f16b43d550a324fbfd7a5b13", "39db41d6", "40d2ec3d5401e355"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "89ea2969e09141d4", "f7f5d0b16b6c94cb2864c3db89208c82", "50aab2ae", "84ff76479ebdc964"}, 0x28)
writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="bdc9", 0x2}], 0x1)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000003a00)=""/4115, 0x1013}], 0x1)

1.60694784s ago: executing program 0 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x5, @perf_config_ext={0x5, 0x31}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0)
write(r0, &(0x7f0000002f40)='44', 0x2)

1.4758241s ago: executing program 0 (id=202):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x1004, 0x80000000, 0x0, 0x4, 0x7ffffc, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
personality(0x87bf5ac905ea0f7f)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa0d8, 0xa, 0x7f00, 0x0, 0xd99}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x17, 0x1d, 0x11, 0x3, 0x6, {0x6, 0x81, 0x6, 0x80006, 0x9, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20, 0x40044}}], 0x1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x2, {0x2, 0x20, 0x20, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1100}, [@RTA_IIF={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_METRICS={0x4}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_OIF={0x8}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_UID={0x8, 0x19, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x0)
faccessat(0xffffffffffffff9c, 0x0, 0x6)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00)

1.453706234s ago: executing program 0 (id=203):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x9, 0x5, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0x8, 0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
r1 = open(&(0x7f0000000100)='./file2\x00', 0xde000, 0x1)
read$msr(r1, &(0x7f0000000600)=""/175, 0xfffffe51)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2)
munmap(&(0x7f0000761000/0x2000)=nil, 0x2000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001a8020000a8014000700fc0100000000000000000000000000000500080100000000"], 0x44}}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x20)
write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x2a, 0x29, 0xb, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0x7, './file0'}]}}, 0x2a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)

1.256776917s ago: executing program 2 (id=204):
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x6, 0xa0, 0x7, 0x0, 0x5, 0x25, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc, 0xb92502c628ebdae2, @perf_config_ext={0x2, 0x59a}, 0x200000, 0x400, 0x1000, 0x7, 0x5, 0x7, 0xc60, 0x0, 0x1ff, 0x0, 0x7ff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@loopback={0x1000000}, 0x800, 0x0, 0x2, 0x9, 0x600, 0x80}, 0x20)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ftruncate(0xffffffffffffffff, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r2, &(0x7f0000000000)="4400000030000504000000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
readv(r3, &(0x7f0000000300)=[{0x0}], 0x1)
r4 = fsopen(0x0, 0x0)
fsmount(r4, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
write(r1, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xb)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4c010)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080))

1.19429585s ago: executing program 2 (id=205):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0)

1.111339079s ago: executing program 2 (id=206):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41102, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e)

1.015829889s ago: executing program 2 (id=207):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x99, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1018, &(0x7f0000000940)=""/4120, 0x0, 0x8}, 0x94)

1.015542499s ago: executing program 2 (id=208):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
munmap(&(0x7f0000761000/0x2000)=nil, 0x2000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', <r3=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xd, 0x4e23, 0x8, 0x2, 0xe0, 0xc0, 0x0, r3}, {0x6, 0x3, 0x80000000, 0x800, 0xe, 0x8000, 0x40, 0x1}, {0x1, 0x100000000, 0xfffffffffffeffff, 0x5}, 0xf4, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3503, 0x2, 0x0, 0xff, 0x0, 0x6, 0x8}}, 0xe8)
sendmmsg$inet(r1, 0x0, 0x0, 0x20008000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xd851)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='alp', 0x3)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010031bd7000fcdbdf250a000000ff02ff030001000008000400", @ANYRES32=r7, @ANYBLOB="06001500080000000c00169e56fd96655bc068477d2ea5c570fe34080004006d000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0x5}, {0x0, 0xd}, {0x7, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x48840)
ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0)

887.315677ms ago: executing program 1 (id=209):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x8, 0x402, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) (fail_nth: 3)

814.373323ms ago: executing program 1 (id=210):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000004c0))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={'\x00', 0xd8, 0x9, 0xfff, 0x8, 0x94})
lstat(0x0, &(0x7f0000000680))
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r2=>0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{0x2, 0x6}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x0, r2}], {0x10, 0x2}}, 0x3c, 0x1)
accept(r0, 0x0, &(0x7f0000000940))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980))
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0xf0ff, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x0, 0xe4ffffff}}]}, {0xfffffffffffffe91}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)
sendmsg$AUDIT_TTY_SET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfc, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c051)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)

756.574125ms ago: executing program 3 (id=211):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000008000000080000000204000000000000", @ANYRES32, @ANYBLOB="e5f1f9000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d8, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c71}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6d7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4b8062d1e341f03e5370aa98f8a31654578e21e607c09dd1013f07fabec04103e2cdabfb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x100, 0x3, "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"}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)

707.399686ms ago: executing program 4 (id=212):
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x3}, 0x1004, 0x200, 0x0, 0x6, 0x7ffffc, 0x43, 0x6, 0x0, 0x0, 0x0, 0x92}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
pipe2$9p(0x0, 0x4800)
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
personality(0x87bf5ac905ea0f7f)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r1 = socket$inet(0x2, 0x356b0c09e961e69f, 0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mmap(&(0x7f00001c5000/0x3000)=nil, 0x3000, 0x300000b, 0x50, 0xffffffffffffffff, 0xe4777000)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4, 0x5}, {0x1, 0xe}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0x35}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x2}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6f18}]}}]}, 0x70}}, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x200, 0x0, 0x50, r0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
capset(0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000000ea"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "06da45c21f0c5249", "705d4ad47f60855c7f4b9d94378bb792", "f7ab8511", "bb238ee60f5936c7"}, 0x28)
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x5)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)

651.903258ms ago: executing program 0 (id=213):
unshare(0x20000600) (async, rerun: 64)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffffffffffff24, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48)

619.158585ms ago: executing program 1 (id=214):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x1004, 0x80000000, 0x0, 0x4, 0x7ffffc, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
personality(0x87bf5ac905ea0f7f)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa0d8, 0xa, 0x7f00, 0x0, 0xd99}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x17, 0x1d, 0x11, 0x3, 0x6, {0x6, 0x81, 0x6, 0x80006, 0x9, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20, 0x40044}}], 0x1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x2, {0x2, 0x20, 0x20, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1100}, [@RTA_IIF={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_METRICS={0x4}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_OIF={0x8}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_UID={0x8, 0x19, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x0)
faccessat(0xffffffffffffff9c, 0x0, 0x6)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00)

595.08571ms ago: executing program 3 (id=215):
socket$netlink(0x10, 0x3, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000180)=0x4)
socket(0x10, 0x803, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41102, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e)

503.81848ms ago: executing program 0 (id=216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write(r3, &(0x7f00000006c0)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90)
close(r2) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'batadv_slave_1\x00', @random})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x7a070e80) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002c9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000037c000/0x4000)=nil, &(0x7f000025e000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58}, 0x10) (async)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x5633, 0x1f480, 0x2, 0x321}) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x9}, 0x14413, 0xfffc, 0xffffffff, 0x5, 0x584, 0x20005, 0x6, 0x0, 0xfffffffc, 0x0, 0x80000001}, 0x0, 0xa, 0xffffffffffffffff, 0x8) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4010, 0x0, @remote, 0x4}, 0x1c) (async)
r6 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40002, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x106408, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, r6, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) (async)
semget(0x3, 0x4, 0x588) (async)
shmdt(0x0)

501.810671ms ago: executing program 1 (id=217):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0)

388.453216ms ago: executing program 1 (id=218):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41102, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e)

329.285268ms ago: executing program 1 (id=219):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff})
r1 = msgget$private(0x0, 0x193)
msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800)
msgsnd(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0x1008, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1e, 0x21, 0x70bd27, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0)

291.689576ms ago: executing program 4 (id=220):
unshare(0xc040480)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2680, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xdc)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x19)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345)
fallocate(r1, 0x20, 0x7fffffffffffffff, 0x3fff)
r2 = openat(r1, &(0x7f0000000b80)='./file1\x00', 0x620343, 0x52)
fcntl$lock(r2, 0x26, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x0}, 0x0, 0x0, r4)
r6 = add_key(&(0x7f0000000c40)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4d359558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc2102030100f9a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r6, 0x91}, 0x0, &(0x7f0000000880)="cb4403fa0c2c2a2b515694b3636cdb40a409af8de9000000c11a536275a1d846d65ea988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff7b4d10b0612763631dd3db62ddf7f7995bac3ad4dea44fc08db9647102254e6e9e7a9c19da1095090000000000000039b2c121f1adff27ca5d6cae3a344c568bce37c7dc0ce3ab132f3b8c6e", 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="10030000c72966ce08d3e264f9cc7b18cfa01b356248135997f276678cc488a173388cbb616da21bf53845a38e24f71667d911a7fae6330db7bea577bbc2dcd6581fbcb1a9d2df218786a0f650bd5ca86c", @ANYRES16=r3, @ANYRESDEC=r3], 0x310}, 0x1, 0x0, 0x0, 0x20001080}, 0x20040040)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0xa1800a, &(0x7f0000000c00)={[{@grpquota}, {@dioread_lock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
rmdir(&(0x7f00000000c0)='./control\x00')

291.414036ms ago: executing program 3 (id=221):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$can_bcm(r0, &(0x7f0000000380), 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r0], 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
connect$can_bcm(r0, &(0x7f0000000380), 0x10) (async)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r0], 0x0) (async)

175.114151ms ago: executing program 3 (id=222):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x1, 0x3, 0x0, 0xc, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x565}}], &(0x7f0000000080)='GPL\x00', 0x6, 0xf9, &(0x7f0000000200)=""/249, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x4, 0x51ce5a8, 0x8}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000380)=[{0x4, 0x4, 0x1, 0x4}, {0x5, 0x2, 0x0, 0x6}, {0x4, 0x4, 0xa, 0x5}, {0x0, 0x3, 0x10, 0x7}, {0x5, 0x3, 0x7}, {0x2, 0x4, 0x5}, {0x3, 0x3, 0xc, 0xb}], 0x10, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff)
fcntl$setlease(r7, 0x400, 0x1)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
unlink(&(0x7f00000001c0)='./file0\x00')
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="eb"], 0xa)
ioctl$BTRFS_IOC_ENCODED_WRITE(r4, 0x40809440, &(0x7f0000000580)={&(0x7f0000000540)=[{&(0x7f00000004c0)="2470dc0061d44d4bace266599b6ccaa74eae5400464054d96decc80a49f824a064f0eaecb03762a79c9fda6a4f1426d078e5653765d0ee9f6287aca648c9ae7eb17f90445657e381d4d1e7355c1e9cdf60597267a8edecca16157ae8fd7740e738b5", 0x62}], 0x1, 0x8001, 0x0, 0xf, 0x5, 0x5, 0x5, 0x8})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffe, 0x0, 0x2, 0x1, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x3507, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xe], 0x0, 0x0, 0x1, 0x1}}, 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x5304, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r2, 0x0)

105.377857ms ago: executing program 3 (id=223):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x802, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000009c80), 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000009d00)=ANY=[@ANYBLOB='system_u:objectib_t:s0 /sbin/dhclient 0'], 0x48)
write(r0, &(0x7f0000000000)='\nau', 0x3)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01225e80030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x20000010)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x32, 0x1, {0x6, @struct={0x80000001, 0x7f}, <r3=>0x0, 0x1, 0x1, 0x81, 0x6577, 0x4, 0xf, @struct={0x52be, 0x2}, 0x8, 0x7, [0x2, 0x230, 0x3ff, 0x71c, 0x8000000000000000, 0x7]}, {0x5, @struct={0x0, 0x1}, 0x0, 0xd4, 0xffffffff7fffffff, 0xfa00, 0x2be, 0x0, 0x408, @struct={0x400, 0x1}, 0xff, 0x9, [0x3, 0xffffffffffffffff, 0xffffffff, 0x1, 0x5, 0x1]}, {0x80000001, @usage=0x942, 0x0, 0x4, 0x10001, 0x8, 0x400, 0xfff, 0x29, @struct={0xfffffffb, 0x3}, 0x4, 0x8000, [0x3, 0xffffffffffffff80, 0x3, 0x9, 0x7, 0x1]}, {0xd, 0x10, 0x5}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000ac0)={r3, "b1a3823550810b53d2a097334a173b28"})
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc640df5b43295982, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x3, 0x7fffffff}, 0x10e4c8, 0x1224, 0xfffeffff, 0x0, 0x6, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfff)
syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})

101.831187ms ago: executing program 2 (id=224):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000004c0))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={'\x00', 0xd8, 0x9, 0xfff, 0x8, 0x94})
lstat(0x0, &(0x7f0000000680))
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r2=>0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{0x2, 0x6}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x0, r2}], {0x10, 0x2}}, 0x3c, 0x1)
accept(r0, 0x0, &(0x7f0000000940))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980))
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0xf0ff, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x0, 0xe4ffffff}}]}, {0xfffffffffffffe91}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)
sendmsg$AUDIT_TTY_SET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfc, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c051)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)

0s ago: executing program 4 (id=225):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01225e80030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x20000010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts.
[   28.666313][   T29] kauditd_printk_skb: 16 callbacks suppressed
[   28.666329][   T29] audit: type=1400 audit(1790561143.649:126): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.666527][   T29] audit: type=1400 audit(1790561143.649:127): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.666969][ T3288] cgroup: Unknown subsys name 'net'
[   28.667167][   T29] audit: type=1400 audit(1790561143.649:128): avc:  denied  { unmount } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.781857][ T3288] cgroup: Unknown subsys name 'cpuset'
[   28.782472][ T3288] cgroup: Unknown subsys name 'rlimit'
[   28.916626][   T29] audit: type=1400 audit(1790561143.899:129): avc:  denied  { setattr } for  pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.917639][   T29] audit: type=1400 audit(1790561143.899:130): avc:  denied  { create } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.917715][   T29] audit: type=1400 audit(1790561143.899:131): avc:  denied  { write } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.917944][   T29] audit: type=1400 audit(1790561143.899:132): avc:  denied  { read } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.932263][   T29] audit: type=1400 audit(1790561143.919:133): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.932373][   T29] audit: type=1400 audit(1790561143.919:134): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.944944][   T29] audit: type=1400 audit(1790561143.929:135): avc:  denied  { read } for  pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   29.012495][ T3293] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.050952][ T3288] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.399201][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.399267][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.399320][ T3307] bridge_slave_0: entered allmulticast mode
[   30.399742][ T3307] bridge_slave_0: entered promiscuous mode
[   30.403458][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.403489][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.403540][ T3299] bridge_slave_0: entered allmulticast mode
[   30.404167][ T3299] bridge_slave_0: entered promiscuous mode
[   30.418172][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.418204][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.418254][ T3307] bridge_slave_1: entered allmulticast mode
[   30.418913][ T3307] bridge_slave_1: entered promiscuous mode
[   30.431587][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.431619][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.431682][ T3299] bridge_slave_1: entered allmulticast mode
[   30.432080][ T3299] bridge_slave_1: entered promiscuous mode
[   30.485898][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.485938][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.485989][ T3308] bridge_slave_0: entered allmulticast mode
[   30.486455][ T3308] bridge_slave_0: entered promiscuous mode
[   30.488333][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.489459][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.490562][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.491686][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.492065][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.492161][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.492214][ T3304] bridge_slave_0: entered allmulticast mode
[   30.492713][ T3304] bridge_slave_0: entered promiscuous mode
[   30.493354][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.493381][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.494068][ T3304] bridge_slave_1: entered allmulticast mode
[   30.494470][ T3304] bridge_slave_1: entered promiscuous mode
[   30.514799][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.514832][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.514881][ T3300] bridge_slave_0: entered allmulticast mode
[   30.515409][ T3300] bridge_slave_0: entered promiscuous mode
[   30.525709][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.525741][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.525932][ T3308] bridge_slave_1: entered allmulticast mode
[   30.526992][ T3308] bridge_slave_1: entered promiscuous mode
[   30.528706][ T3299] team0: Port device team_slave_0 added
[   30.529630][ T3299] team0: Port device team_slave_1 added
[   30.535605][ T3307] team0: Port device team_slave_0 added
[   30.535709][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.535736][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.535788][ T3300] bridge_slave_1: entered allmulticast mode
[   30.536288][ T3300] bridge_slave_1: entered promiscuous mode
[   30.538266][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.540133][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.550780][ T3307] team0: Port device team_slave_1 added
[   30.571173][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.585597][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.585611][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.585721][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.586734][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.592689][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.592701][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.592728][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.593517][ T3304] team0: Port device team_slave_0 added
[   30.594695][ T3304] team0: Port device team_slave_1 added
[   30.594924][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.594934][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.594961][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.596201][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.597331][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.597662][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.597688][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.597736][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.625012][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.625025][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.625158][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.640394][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.640407][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.640434][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.650070][ T3308] team0: Port device team_slave_0 added
[   30.651316][ T3308] team0: Port device team_slave_1 added
[   30.653901][ T3307] hsr_slave_0: entered promiscuous mode
[   30.654551][ T3307] hsr_slave_1: entered promiscuous mode
[   30.667039][ T3300] team0: Port device team_slave_0 added
[   30.667934][ T3300] team0: Port device team_slave_1 added
[   30.684223][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.684237][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.684342][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.687193][ T3299] hsr_slave_0: entered promiscuous mode
[   30.687652][ T3299] hsr_slave_1: entered promiscuous mode
[   30.687866][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   30.687878][ T3299] Cannot create hsr debugfs directory
[   30.693107][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.693119][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.693172][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.693654][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.693664][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.693692][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.712603][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.712618][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.712645][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.731679][ T3304] hsr_slave_0: entered promiscuous mode
[   30.732323][ T3304] hsr_slave_1: entered promiscuous mode
[   30.732759][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   30.732774][ T3304] Cannot create hsr debugfs directory
[   30.788140][ T3308] hsr_slave_0: entered promiscuous mode
[   30.788552][ T3308] hsr_slave_1: entered promiscuous mode
[   30.788909][ T3308] debugfs: 'hsr0' already exists in 'hsr'
[   30.788921][ T3308] Cannot create hsr debugfs directory
[   30.804878][ T3300] hsr_slave_0: entered promiscuous mode
[   30.805326][ T3300] hsr_slave_1: entered promiscuous mode
[   30.805558][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   30.805570][ T3300] Cannot create hsr debugfs directory
[   30.935475][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.953145][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.974712][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.996721][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.016616][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.040646][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.051745][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.056557][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.104222][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.117542][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.118828][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.118858][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.118969][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.119068][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.144752][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.150613][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.152644][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.158089][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.164591][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.183858][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.184432][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.194303][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.194878][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.201765][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.210577][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.227300][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.227758][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.237995][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.269482][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.281939][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.292921][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.298290][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.307662][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.315030][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.330037][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.335493][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.506661][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.515079][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.524457][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.529092][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.535419][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.536325][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.543572][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.549552][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.556346][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.556886][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.563113][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.657985][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   31.666136][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.666168][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.676735][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.676769][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.755015][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.758722][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.764875][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.770878][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   31.779845][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.788180][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.788214][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.789924][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.789952][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.792323][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.795564][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   31.817062][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.817097][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.818129][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.818157][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.820004][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.820091][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.830843][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   31.846515][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.846537][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.877956][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.878043][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.880907][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.881015][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.908086][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.908120][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.064800][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.095106][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.154489][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.195526][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.223913][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.259696][ T3300] veth0_vlan: entered promiscuous mode
[   32.266078][ T3300] veth1_vlan: entered promiscuous mode
[   32.289490][ T3300] veth0_macvtap: entered promiscuous mode
[   32.293164][ T3300] veth1_macvtap: entered promiscuous mode
[   32.301805][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.320165][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.343399][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.343584][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.343711][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.343799][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.368477][ T3308] veth0_vlan: entered promiscuous mode
[   32.406165][ T3299] veth0_vlan: entered promiscuous mode
[   32.407465][ T3308] veth1_vlan: entered promiscuous mode
[   32.422333][ T3304] veth0_vlan: entered promiscuous mode
[   32.427213][ T3304] veth1_vlan: entered promiscuous mode
[   32.439334][ T3300] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.447666][ T3307] veth0_vlan: entered promiscuous mode
[   32.449896][ T3307] veth1_vlan: entered promiscuous mode
[   32.458593][ T3307] veth0_macvtap: entered promiscuous mode
[   32.460185][ T3307] veth1_macvtap: entered promiscuous mode
[   32.461372][ T3299] veth1_vlan: entered promiscuous mode
[   32.474813][ T3299] veth0_macvtap: entered promiscuous mode
[   32.476213][ T3299] veth1_macvtap: entered promiscuous mode
[   32.480506][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.484106][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.487047][   T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.487095][   T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.487151][   T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.487184][   T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.537104][ T3308] veth0_macvtap: entered promiscuous mode
[   32.547773][ T3304] veth0_macvtap: entered promiscuous mode
[   32.558929][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.564048][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.564285][ T3304] veth1_macvtap: entered promiscuous mode
[   32.582916][ T3308] veth1_macvtap: entered promiscuous mode
[   32.603347][ T3505] Zero length message leads to an empty skb
[   32.603867][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.619842][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.626351][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.627671][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.631320][   T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.631425][   T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.631458][   T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.631549][   T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.661961][   T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.662070][   T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.662102][   T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.662202][   T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.712521][   T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.712662][   T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.712910][   T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.713199][   T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.818751][ T3510] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   32.819445][ T3513] netlink: 'syz.4.5': attribute type 2 has an invalid length.
[   32.819458][ T3513] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   32.819468][ T3513] netlink: 192152 bytes leftover after parsing attributes in process `syz.4.5'.
[   32.894313][ T3520] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   32.911602][ T3520] 8021q: adding VLAN 0 to HW filter on device team0
[   32.917479][ T3520] bond0: (slave team0): Enslaving as an active interface with an up link
[   32.926315][ T3516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3516 comm=syz.3.4
[   32.958558][ T3520] syz.0.1 (3520) used greatest stack depth: 10312 bytes left
[   33.074193][ T3540] =======================================================
[   33.074193][ T3540] WARNING: The mand mount option has been deprecated and
[   33.074193][ T3540]          and is ignored by this kernel. Remove the mand
[   33.074193][ T3540]          option from the mount to silence this warning.
[   33.074193][ T3540] =======================================================
[   33.138139][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   33.283144][ T3545] loop4: detected capacity change from 0 to 512
[   33.283560][ T3545] EXT4-fs: Ignoring removed oldalloc option
[   33.284886][ T3545] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   33.286987][ T3545] EXT4-fs (loop4): orphan cleanup on readonly fs
[   33.287877][ T3545] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.12: bg 0: block 16: invalid block bitmap
[   33.287901][ T3545] loop4: lost filesystem error report for type 5 error -117
[   33.288204][ T3545] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   33.288222][ T3545] loop4: lost filesystem error report for type 5 error -117
[   33.289448][ T3545] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.12: attempt to clear invalid blocks 1669132790 len 1
[   33.289477][ T3545] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   33.291073][ T3545] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.12: invalid indirect mapped block 4294967295 (level 1)
[   33.291125][ T3545] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   33.291290][    C1] EXT4-fs (loop4): error count since last fsck: 4
[   33.291306][    C1] EXT4-fs (loop4): initial error at time 1790561148: ext4_validate_block_bitmap:436
[   33.291324][    C1] EXT4-fs (loop4): last error at time 1790561148: ext4_free_branches:1023: inode 13
[   33.294123][ T3545] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.12: invalid indirect mapped block 4294967295 (level 2)
[   33.294167][ T3545] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   33.299506][ T3545] EXT4-fs (loop4): 1 truncate cleaned up
[   33.299931][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   33.597580][ T3560] loop3: detected capacity change from 0 to 128
[   33.609805][ T3560] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   33.610112][ T3560] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   33.619939][ T3560] SELinux: syz.3.15 (3560) wrote to user. This is no longer supported.
[   33.642800][ T3560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'.
[   33.717966][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   33.741887][   T29] kauditd_printk_skb: 60 callbacks suppressed
[   33.741903][   T29] audit: type=1400 audit(1790561148.729:196): avc:  denied  { bind } for  pid=3563 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.744783][   T29] audit: type=1400 audit(1790561148.729:197): avc:  denied  { setopt } for  pid=3563 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.758643][   T29] audit: type=1400 audit(1790561148.739:198): avc:  denied  { accept } for  pid=3563 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.765002][   T29] audit: type=1400 audit(1790561148.749:199): avc:  denied  { ioctl } for  pid=3563 comm="syz.3.16" path="socket:[5761]" dev="sockfs" ino=5761 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.768771][ T3564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'.
[   33.768851][ T3564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'.
[   33.780245][   T29] audit: type=1400 audit(1790561148.759:200): avc:  denied  { create } for  pid=3563 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   33.786059][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.787309][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.805761][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.806083][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.806953][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.807263][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.844994][ T3564] team0: Failed to send options change via netlink (err -105)
[   33.845051][ T3564] team0: Port device bridge0 added
[   33.900880][ T3564] syz.3.16 (3564) used greatest stack depth: 9928 bytes left
[   33.918463][   T29] audit: type=1400 audit(1790561148.899:201): avc:  denied  { create } for  pid=3566 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.920653][   T29] audit: type=1400 audit(1790561148.899:202): avc:  denied  { create } for  pid=3566 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.922595][   T29] audit: type=1400 audit(1790561148.909:203): avc:  denied  { write } for  pid=3566 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.922678][   T29] audit: type=1400 audit(1790561148.909:204): avc:  denied  { nlmsg_write } for  pid=3566 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.923119][   T29] audit: type=1400 audit(1790561148.909:205): avc:  denied  { ioctl } for  pid=3566 comm="syz.3.17" path="socket:[5772]" dev="sockfs" ino=5772 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.928417][ T3567] netlink: 'syz.3.17': attribute type 9 has an invalid length.
[   34.020306][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.074097][ T3569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'.
[   34.284147][ T3573] loop4: detected capacity change from 0 to 256
[   34.305978][ T3573] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   34.306062][ T3573] FAT-fs (loop4): Filesystem has been set read-only
[   34.306179][ T3573] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   34.307198][ T3573] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   34.384109][ T3579] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   34.384201][ T3579] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   34.807316][ T3591] loop3: detected capacity change from 0 to 512
[   34.821010][ T3591] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.26: Unrecognised inode hash code 255
[   34.821038][ T3591] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.26: Corrupt directory, running e2fsck is recommended
[   34.856108][ T3591] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   34.856228][ T3591] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.26: corrupted in-inode xattr: invalid ea_ino
[   34.856256][ T3591] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   34.856707][ T3591] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.26: couldn't read orphan inode 15 (err -117)
[   34.856736][ T3591] loop3: lost filesystem error report for type 5 error -117
[   34.857554][ T3589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   34.857775][ T3589] IPv6: NLM_F_CREATE should be set when creating new route
[   34.858643][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.904455][ T3593] loop2: detected capacity change from 0 to 128
[   34.930063][ T3593] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.930314][ T3593] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.974359][ T3596] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   34.974516][ T3596] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   35.120792][ T3591] SELinux: failed to load policy
[   35.148794][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.182579][ T3603] loop2: detected capacity change from 0 to 128
[   35.197856][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.200278][ T3603] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.210120][ T3603] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   35.250432][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   35.311630][ T3601] FAULT_INJECTION: forcing a failure.
[   35.311630][ T3601] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   35.311679][ T3601] CPU: 0 UID: 0 PID: 3601 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(lazy) 
[   35.311707][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   35.311728][ T3601] Call Trace:
[   35.311734][ T3601]  <TASK>
[   35.311742][ T3601]  __dump_stack+0x1d/0x30
[   35.311770][ T3601]  dump_stack_lvl+0x95/0xd0
[   35.311845][ T3601]  dump_stack+0x15/0x1b
[   35.311915][ T3601]  should_fail_ex+0x262/0x280
[   35.312023][ T3601]  should_fail_alloc_page+0xf2/0x100
[   35.312060][ T3601]  __alloc_frozen_pages_noprof+0x157/0x400
[   35.312111][ T3601]  alloc_pages_mpol+0xaf/0x1d0
[   35.312195][ T3601]  alloc_pages_noprof+0x94/0x140
[   35.312293][ T3601]  kimage_alloc_control_pages+0x2a8/0x7b0
[   35.312323][ T3601]  do_kexec_load+0x30d/0x510
[   35.312352][ T3601]  __se_sys_kexec_load+0x134/0x160
[   35.312381][ T3601]  __x64_sys_kexec_load+0x55/0x70
[   35.312446][ T3601]  x64_sys_call+0x1f30/0x2550
[   35.312541][ T3601]  do_syscall_64+0x112/0x360
[   35.312583][ T3601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.312608][ T3601] RIP: 0033:0x7ff2aee4e159
[   35.312635][ T3601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.312716][ T3601] RSP: 002b:00007ff2ad886028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[   35.312739][ T3601] RAX: ffffffffffffffda RBX: 00007ff2af0d6090 RCX: 00007ff2aee4e159
[   35.312782][ T3601] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[   35.312794][ T3601] RBP: 00007ff2aeee506b R08: 0000000000000000 R09: 0000000000000000
[   35.312882][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.312921][ T3601] R13: 00007ff2af0d6128 R14: 00007ff2af0d6090 R15: 00007ffc3f3ba688
[   35.312940][ T3601]  </TASK>
[   35.315965][ T3601] kexec: Could not allocate swap buffer
[   35.336386][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.616451][ T3621] loop4: detected capacity change from 0 to 512
[   35.627535][ T3621] journal_path: Non-blockdev passed as './file2'
[   35.627557][ T3621] EXT4-fs: error: could not find journal device path
[   35.694660][ T3615] infiniband syz0: set active
[   35.694679][ T3615] infiniband syz0: added bond0
[   35.702951][ T3615] RDS/IB: syz0: added
[   35.702974][ T3615] smc: adding ib device syz0 with port count 1
[   35.702987][ T3615] smc:    ib device syz0 port 1 has no pnetid
[   36.148782][  T325] IPVS: starting estimator thread 0...
[   36.232695][ T3628] IPVS: using max 2400 ests per chain, 120000 per kthread
[   36.483611][ T3636] loop3: detected capacity change from 0 to 512
[   36.503293][ T3631] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   36.503471][ T3631] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   36.565934][ T3636] Unknown metaid 43947 dlen 48532
[   36.583535][ T3616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'.
[   36.699608][ T3646] FAULT_INJECTION: forcing a failure.
[   36.699608][ T3646] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   36.699641][ T3646] CPU: 0 UID: 0 PID: 3646 Comm: syz.4.36 Not tainted syzkaller #0 PREEMPT(lazy) 
[   36.699669][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   36.699692][ T3646] Call Trace:
[   36.699706][ T3646]  <TASK>
[   36.699714][ T3646]  __dump_stack+0x1d/0x30
[   36.699743][ T3646]  dump_stack_lvl+0x95/0xd0
[   36.699766][ T3646]  dump_stack+0x15/0x1b
[   36.699795][ T3646]  should_fail_ex+0x262/0x280
[   36.699826][ T3646]  should_fail_alloc_page+0xf2/0x100
[   36.699883][ T3646]  __alloc_frozen_pages_noprof+0x157/0x400
[   36.699913][ T3646]  alloc_pages_mpol+0xaf/0x1d0
[   36.699941][ T3646]  alloc_pages_noprof+0x94/0x140
[   36.699968][ T3646]  __change_page_attr_set_clr+0xb5c/0x1fb0
[   36.700044][ T3646]  ? __SCT__tp_func_ma_write+0x7/0x8
[   36.700131][ T3646]  change_page_attr_set_clr+0x2a8/0xd60
[   36.700229][ T3646]  ? alloc_pages_mpol+0xdf/0x1d0
[   36.700253][ T3646]  set_memory_rox+0x6b/0xa0
[   36.700285][ T3646]  machine_kexec_prepare+0x68d/0x730
[   36.700321][ T3646]  ? __pfx_alloc_pgt_page+0x10/0x10
[   36.700434][ T3646]  do_kexec_load+0x3e4/0x510
[   36.700465][ T3646]  __se_sys_kexec_load+0x134/0x160
[   36.700566][ T3646]  __x64_sys_kexec_load+0x55/0x70
[   36.700667][ T3646]  x64_sys_call+0x1f30/0x2550
[   36.700702][ T3646]  do_syscall_64+0x112/0x360
[   36.700729][ T3646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.700753][ T3646] RIP: 0033:0x7f445262e159
[   36.700769][ T3646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.700826][ T3646] RSP: 002b:00007f4451045028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[   36.700848][ T3646] RAX: ffffffffffffffda RBX: 00007f44528b6180 RCX: 00007f445262e159
[   36.700864][ T3646] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[   36.700878][ T3646] RBP: 00007f44526c506b R08: 0000000000000000 R09: 0000000000000000
[   36.700893][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.700976][ T3646] R13: 00007f44528b6218 R14: 00007f44528b6180 R15: 00007fff62e8cb48
[   36.700997][ T3646]  </TASK>
[   36.717720][   T42] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.845920][ T3638] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   36.972733][ T3656] loop0: detected capacity change from 0 to 128
[   36.987005][   T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   36.987232][   T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   36.987502][   T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   36.987836][   T11] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   36.987854][   T11] rtc rtc0: __rtc_set_alarm: err=-22
[   37.000152][ T3656] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.000360][ T3656] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   37.087083][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.221111][ T3650] loop2: detected capacity change from 0 to 256
[   37.240456][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'.
[   37.278170][ T3650] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   37.278210][ T3650] FAT-fs (loop2): Filesystem has been set read-only
[   37.367589][ T3667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.448866][ T3673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   37.448936][ T3673] IPv6: NLM_F_CREATE should be set when creating new route
[   37.500498][ T3675] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.501603][ T3675] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   37.509158][ T3665] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   37.509232][ T3665] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 450 with error 28
[   37.509255][ T3665] EXT4-fs (loop0): This should not happen!! Data will be lost
[   37.509255][ T3665] 
[   37.509277][ T3665] EXT4-fs (loop0): Total free blocks count 0
[   37.509289][ T3665] EXT4-fs (loop0): Free/Dirty block details
[   37.509300][ T3665] EXT4-fs (loop0): free_blocks=4096
[   37.509313][ T3665] EXT4-fs (loop0): dirty_blocks=512
[   37.509325][ T3665] EXT4-fs (loop0): Block reservation details
[   37.509336][ T3665] EXT4-fs (loop0): i_reserved_data_blocks=32
[   37.556594][ T3675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   37.557172][  T142] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28
[   37.650927][ T3679] EXT4-fs: Ignoring removed i_version option
[   37.657415][ T3679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   37.657957][ T3679] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   37.660596][ T3679] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   37.660657][ T3679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e028, mo2=0000]
[   37.660766][ T3679] System zones: 0-1, 3-12
[   37.661960][ T3679] EXT4-fs (loop0): orphan cleanup on readonly fs
[   37.663172][ T3679] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.47: Freeing blocks not in datazone - block = 0, count = 4096
[   37.663245][ T3679] loop0: lost filesystem error report for type 5 error -117
[   37.663690][ T3679] EXT4-fs (loop0): Remounting filesystem read-only
[   37.663902][ T3679] EXT4-fs (loop0): 1 orphan inode deleted
[   37.668048][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   37.693636][ T3679] __vm_enough_memory: pid: 3679, comm: syz.0.47, bytes: 4503599627366400 not enough memory for the allocation
[   37.724961][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.831625][ T3688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   37.831663][ T3688] IPv6: NLM_F_CREATE should be set when creating new route
[   38.295447][ T3702] Unknown metaid 43947 dlen 48532
[   38.337877][ T3704] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   38.376459][ T3704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3704 comm=syz.1.53
[   38.466765][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.503507][ T3709] set_capacity_and_notify: 4 callbacks suppressed
[   38.503521][ T3709] loop0: detected capacity change from 0 to 164
[   38.519652][ T3709] rock: directory entry would overflow storage
[   38.519663][ T3709] rock: sig=0x4f50, size=4, remaining=3
[   38.519675][ T3709] iso9660: Corrupted directory entry in block 5 of inode 1792
[   38.609832][ T3714] usb usb8: usbfs: process 3714 (syz.4.56) did not claim interface 0 before use
[   38.664518][ T3721] loop2: detected capacity change from 0 to 512
[   38.668498][ T3714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'.
[   38.751363][ T3648] Bluetooth: hci0: command 0x1003 tx timeout
[   38.751666][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.753268][ T3726] syz.4.60 uses obsolete (PF_INET,SOCK_PACKET)
[   38.823728][   T29] kauditd_printk_skb: 195 callbacks suppressed
[   38.823744][   T29] audit: type=1400 audit(1790561153.809:401): avc:  denied  { read } for  pid=3729 comm="syz.0.61" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   38.823767][   T29] audit: type=1400 audit(1790561153.809:402): avc:  denied  { open } for  pid=3729 comm="syz.0.61" path="net:[4026532647]" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   38.860048][   T29] audit: type=1400 audit(1790561153.839:403): avc:  denied  { read write } for  pid=3725 comm="syz.4.60" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.860077][   T29] audit: type=1400 audit(1790561153.839:404): avc:  denied  { open } for  pid=3725 comm="syz.4.60" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.944744][   T29] audit: type=1400 audit(1790561153.929:405): avc:  denied  { allowed } for  pid=3736 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   38.955231][   T29] audit: type=1400 audit(1790561153.939:406): avc:  denied  { write } for  pid=3736 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.959698][   T29] audit: type=1400 audit(1790561153.939:407): avc:  denied  { read } for  pid=3729 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.972759][ T3730] netlink: 7 bytes leftover after parsing attributes in process `syz.0.61'.
[   38.987978][ T3739] netlink: 7888 bytes leftover after parsing attributes in process `syz.3.62'.
[   38.989499][   T29] audit: type=1400 audit(1790561153.969:408): avc:  denied  { mount } for  pid=3736 comm="syz.3.62" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   38.990205][   T29] audit: type=1400 audit(1790561153.969:409): avc:  denied  { read write } for  pid=3736 comm="syz.3.62" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   38.990230][   T29] audit: type=1400 audit(1790561153.969:410): avc:  denied  { open } for  pid=3736 comm="syz.3.62" path="/8/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   39.111020][ T3739] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2037591854.1869545587.9072), cmd(6)
[   39.139775][ T3746] loop2: detected capacity change from 0 to 128
[   39.149323][ T3746] FAT-fs (loop2): Directory bread(block 1048) failed
[   39.149349][ T3746] FAT-fs (loop2): Directory bread(block 1049) failed
[   39.149506][ T3746] FAT-fs (loop2): Directory bread(block 1050) failed
[   39.149549][ T3746] FAT-fs (loop2): Directory bread(block 1051) failed
[   39.149568][ T3746] FAT-fs (loop2): Directory bread(block 1052) failed
[   39.149587][ T3746] FAT-fs (loop2): Directory bread(block 1053) failed
[   39.149607][ T3746] FAT-fs (loop2): Directory bread(block 1054) failed
[   39.149632][ T3746] FAT-fs (loop2): Directory bread(block 1055) failed
[   39.274468][ T3748] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   39.274905][ T3748] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   39.313590][ T3750] ip_tables: iptables: counters copy to user failed while replacing table
[   39.419024][ T3746] FAT-fs (loop2): Directory bread(block 1048) failed
[   39.419164][ T3746] FAT-fs (loop2): Directory bread(block 1049) failed
[   39.821775][ T3759] loop4: detected capacity change from 0 to 512
[   39.849005][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.849210][ T3759] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.929451][ T3763] ./dev/sda1: Can't lookup blockdev
[   39.986118][ T3766] FAULT_INJECTION: forcing a failure.
[   39.986118][ T3766] name failslab, interval 1, probability 0, space 0, times 0
[   39.986146][ T3766] CPU: 1 UID: 0 PID: 3766 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(lazy) 
[   39.986170][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   39.986221][ T3766] Call Trace:
[   39.986229][ T3766]  <TASK>
[   39.986238][ T3766]  __dump_stack+0x1d/0x30
[   39.986262][ T3766]  dump_stack_lvl+0x95/0xd0
[   39.986284][ T3766]  dump_stack+0x15/0x1b
[   39.986304][ T3766]  should_fail_ex+0x262/0x280
[   39.986405][ T3766]  should_failslab+0x8c/0xb0
[   39.986487][ T3766]  __kvmalloc_node_noprof+0x168/0x5c0
[   39.986509][ T3766]  ? alloc_fdtable+0x115/0x1d0
[   39.986531][ T3766]  ? alloc_fdtable+0x115/0x1d0
[   39.986553][ T3766]  alloc_fdtable+0x115/0x1d0
[   39.986592][ T3766]  dup_fd+0x4ae/0x530
[   39.986613][ T3766]  __se_sys_close_range+0x10e/0x4e0
[   39.986634][ T3766]  ? xfd_validate_state+0x45/0xf0
[   39.986663][ T3766]  ? restore_fpregs_from_fpstate+0x61/0x110
[   39.986686][ T3766]  __x64_sys_close_range+0x43/0x50
[   39.986739][ T3766]  x64_sys_call+0x2198/0x2550
[   39.986762][ T3766]  do_syscall_64+0x112/0x360
[   39.986783][ T3766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.986805][ T3766] RIP: 0033:0x7fe8759ee159
[   39.986903][ T3766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.986921][ T3766] RSP: 002b:00007fe874447028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   39.986969][ T3766] RAX: ffffffffffffffda RBX: 00007fe875c75fa0 RCX: 00007fe8759ee159
[   39.986992][ T3766] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff
[   39.987006][ T3766] RBP: 00007fe875a8506b R08: 0000000000000000 R09: 0000000000000000
[   39.987021][ T3766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.987032][ T3766] R13: 00007fe875c76038 R14: 00007fe875c75fa0 R15: 00007ffc3602f5f8
[   39.987052][ T3766]  </TASK>
[   39.987800][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.451981][ T3787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3787 comm=syz.2.74
[   40.500992][ T3778] loop4: detected capacity change from 0 to 1024
[   40.518355][ T3778] EXT4-fs: Ignoring removed i_version option
[   40.535459][ T3778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   40.536079][ T3778] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   40.539967][ T3778] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   40.539997][ T3778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e028, mo2=0000]
[   40.540116][ T3778] System zones: 0-1, 3-12
[   40.540626][ T3778] EXT4-fs (loop4): orphan cleanup on readonly fs
[   40.558844][ T3778] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.70: Freeing blocks not in datazone - block = 0, count = 4096
[   40.558924][ T3778] loop4: lost filesystem error report for type 5 error -117
[   40.560737][ T3778] EXT4-fs (loop4): Remounting filesystem read-only
[   40.560917][ T3778] EXT4-fs (loop4): 1 orphan inode deleted
[   40.567786][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.611765][ T3778] __vm_enough_memory: pid: 3778, comm: syz.4.70, bytes: 4503599627366400 not enough memory for the allocation
[   41.058796][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.104896][ T3796] loop4: detected capacity change from 0 to 512
[   41.285215][ T3805] loop4: detected capacity change from 0 to 164
[   41.288928][ T3805] rock: directory entry would overflow storage
[   41.288937][ T3805] rock: sig=0x4f50, size=4, remaining=3
[   41.288951][ T3805] iso9660: Corrupted directory entry in block 5 of inode 1792
[   41.430354][ T3706] syz.1.54 (3706) used greatest stack depth: 9712 bytes left
[   41.600200][ T3811] loop4: detected capacity change from 0 to 128
[   41.609991][ T3812] netlink: 52 bytes leftover after parsing attributes in process `syz.1.78'.
[   41.622809][ T3809] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   41.650896][ T3811] FAT-fs (loop4): Directory bread(block 1048) failed
[   41.650919][ T3811] FAT-fs (loop4): Directory bread(block 1049) failed
[   41.650937][ T3811] FAT-fs (loop4): Directory bread(block 1050) failed
[   41.650955][ T3811] FAT-fs (loop4): Directory bread(block 1051) failed
[   41.650982][ T3811] FAT-fs (loop4): Directory bread(block 1052) failed
[   41.651000][ T3811] FAT-fs (loop4): Directory bread(block 1053) failed
[   41.651018][ T3811] FAT-fs (loop4): Directory bread(block 1054) failed
[   41.651036][ T3811] FAT-fs (loop4): Directory bread(block 1055) failed
[   41.770410][ T3815] FAT-fs (loop4): Directory bread(block 1048) failed
[   41.770441][ T3815] FAT-fs (loop4): Directory bread(block 1049) failed
[   42.023294][ T3818] ip_tables: iptables: counters copy to user failed while replacing table
[   42.093726][ T3822] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   42.093872][ T3822] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   42.348421][ T3825] FAULT_INJECTION: forcing a failure.
[   42.348421][ T3825] name failslab, interval 1, probability 0, space 0, times 0
[   42.348469][ T3825] CPU: 1 UID: 0 PID: 3825 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(lazy) 
[   42.348496][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.348510][ T3825] Call Trace:
[   42.348518][ T3825]  <TASK>
[   42.348526][ T3825]  __dump_stack+0x1d/0x30
[   42.348554][ T3825]  dump_stack_lvl+0x95/0xd0
[   42.348579][ T3825]  dump_stack+0x15/0x1b
[   42.348640][ T3825]  should_fail_ex+0x262/0x280
[   42.348671][ T3825]  should_failslab+0x8c/0xb0
[   42.348782][ T3825]  __kvmalloc_node_noprof+0x168/0x5c0
[   42.348805][ T3825]  ? alloc_fdtable+0x115/0x1d0
[   42.348829][ T3825]  ? alloc_fdtable+0x115/0x1d0
[   42.348888][ T3825]  alloc_fdtable+0x115/0x1d0
[   42.348910][ T3825]  dup_fd+0x4ae/0x530
[   42.348933][ T3825]  __se_sys_close_range+0x10e/0x4e0
[   42.348957][ T3825]  ? xfd_validate_state+0x45/0xf0
[   42.349052][ T3825]  ? restore_fpregs_from_fpstate+0x61/0x110
[   42.349079][ T3825]  __x64_sys_close_range+0x43/0x50
[   42.349152][ T3825]  x64_sys_call+0x2198/0x2550
[   42.349180][ T3825]  do_syscall_64+0x112/0x360
[   42.349206][ T3825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.349284][ T3825] RIP: 0033:0x7f33dc7ae159
[   42.349301][ T3825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.349321][ T3825] RSP: 002b:00007f33db207028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   42.349354][ T3825] RAX: ffffffffffffffda RBX: 00007f33dca35fa0 RCX: 00007f33dc7ae159
[   42.349369][ T3825] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff
[   42.349418][ T3825] RBP: 00007f33dc84506b R08: 0000000000000000 R09: 0000000000000000
[   42.349488][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.349502][ T3825] R13: 00007f33dca36038 R14: 00007f33dca35fa0 R15: 00007fff45007a98
[   42.349523][ T3825]  </TASK>
[   42.458194][ T3829] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   42.458322][ T3829] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   42.492067][ T3822] ./dev/sda1: Can't lookup blockdev
[   42.686190][ T3839] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   42.686489][ T3839] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   42.727348][ T3840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   43.361817][ T3861] loop3: detected capacity change from 0 to 512
[   43.498236][ T3872] netlink: 'syz.1.100': attribute type 1 has an invalid length.
[   43.516884][ T3862] FAULT_INJECTION: forcing a failure.
[   43.516884][ T3862] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   43.516910][ T3862] CPU: 0 UID: 0 PID: 3862 Comm: syz.4.97 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.516943][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   43.517010][ T3862] Call Trace:
[   43.517017][ T3862]  <TASK>
[   43.517024][ T3862]  __dump_stack+0x1d/0x30
[   43.517048][ T3862]  dump_stack_lvl+0x95/0xd0
[   43.517081][ T3862]  dump_stack+0x15/0x1b
[   43.517111][ T3862]  should_fail_ex+0x262/0x280
[   43.517139][ T3862]  should_fail_alloc_page+0xf2/0x100
[   43.517176][ T3862]  __alloc_frozen_pages_noprof+0x157/0x400
[   43.517265][ T3862]  alloc_pages_mpol+0xaf/0x1d0
[   43.517289][ T3862]  alloc_pages_noprof+0x94/0x140
[   43.517350][ T3862]  kimage_alloc_control_pages+0x2a8/0x7b0
[   43.517380][ T3862]  machine_kexec_prepare+0x9f/0x730
[   43.517411][ T3862]  ? kimage_alloc_control_pages+0x759/0x7b0
[   43.517436][ T3862]  ? __pfx_alloc_pgt_page+0x10/0x10
[   43.517498][ T3862]  do_kexec_load+0x3e4/0x510
[   43.517524][ T3862]  __se_sys_kexec_load+0x134/0x160
[   43.517550][ T3862]  __x64_sys_kexec_load+0x55/0x70
[   43.517608][ T3862]  x64_sys_call+0x1f30/0x2550
[   43.517636][ T3862]  do_syscall_64+0x112/0x360
[   43.517661][ T3862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.517709][ T3862] RIP: 0033:0x7f445262e159
[   43.517723][ T3862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.517740][ T3862] RSP: 002b:00007f4451066028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[   43.517759][ T3862] RAX: ffffffffffffffda RBX: 00007f44528b6090 RCX: 00007f445262e159
[   43.517790][ T3862] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[   43.517804][ T3862] RBP: 00007f44526c506b R08: 0000000000000000 R09: 0000000000000000
[   43.517818][ T3862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   43.517830][ T3862] R13: 00007f44528b6128 R14: 00007f44528b6090 R15: 00007fff62e8cb48
[   43.517847][ T3862]  </TASK>
[   43.674492][ T3875] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   43.674609][ T3875] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   43.913275][   T29] kauditd_printk_skb: 64 callbacks suppressed
[   43.913290][   T29] audit: type=1400 audit(1790561158.899:473): avc:  denied  { create } for  pid=3886 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.916227][   T29] audit: type=1400 audit(1790561158.899:474): avc:  denied  { bind } for  pid=3886 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.917455][   T29] audit: type=1400 audit(1790561158.899:475): avc:  denied  { write } for  pid=3886 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.917953][   T29] audit: type=1400 audit(1790561158.899:476): avc:  denied  { read } for  pid=3886 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.069947][ T3889] loop1: detected capacity change from 0 to 1024
[   44.073893][ T3889] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   44.074582][ T3889] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   44.075187][ T3889] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[   44.075581][ T3889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.079027][   T29] audit: type=1400 audit(1790561159.059:477): avc:  denied  { write } for  pid=3888 comm="syz.1.107" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   44.079097][   T29] audit: type=1400 audit(1790561159.059:478): avc:  denied  { add_name } for  pid=3888 comm="syz.1.107" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   44.079122][   T29] audit: type=1400 audit(1790561159.059:479): avc:  denied  { create } for  pid=3888 comm="syz.1.107" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.080745][   T29] audit: type=1400 audit(1790561159.059:480): avc:  denied  { read append open } for  pid=3888 comm="syz.1.107" path="/28/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.081187][ T3889] EXT4-fs (loop1): shut down requested (1)
[   44.081261][   T29] audit: type=1400 audit(1790561159.059:481): avc:  denied  { ioctl } for  pid=3888 comm="syz.1.107" path="/28/file0/cpuset.effective_mems" dev="loop1" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.082899][   T29] audit: type=1400 audit(1790561159.069:482): avc:  denied  { read } for  pid=2966 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   44.125034][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.295954][ T3897] loop3: detected capacity change from 0 to 512
[   44.410943][ T3907] netlink: 'syz.3.112': attribute type 1 has an invalid length.
[   44.606273][ T3918] netlink: 72 bytes leftover after parsing attributes in process `syz.3.114'.
[   44.802610][ T3929] loop3: detected capacity change from 0 to 256
[   44.980658][ T3931] loop3: detected capacity change from 0 to 512
[   45.010251][ T3931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.010391][ T3931] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.045901][ T3931] netlink: 'syz.3.119': attribute type 1 has an invalid length.
[   45.098677][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.144695][ T3942] loop3: detected capacity change from 0 to 512
[   45.527210][ T3949] loop1: detected capacity change from 0 to 2048
[   45.692938][ T3949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.694592][ T3949] EXT4-fs error (device loop1): ext4_lookup:1779: inode #2: comm syz.1.125: bad inode number: 15
[   45.694771][ T3949] EXT4-fs (loop1): Remounting filesystem read-only
[   45.813180][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.936936][ T3969] loop4: detected capacity change from 0 to 512
[   45.953146][ T3969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.111187][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'.
[   46.111207][ T3976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'.
[   46.111413][ T3976] netlink: 'syz.3.134': attribute type 11 has an invalid length.
[   46.152513][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'.
[   46.152532][ T3976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'.
[   46.152554][ T3976] netlink: 'syz.3.134': attribute type 11 has an invalid length.
[   46.187888][  T325] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   46.196800][  T325] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   46.197776][  T325] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   46.197812][  T325] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   46.240589][ T3981] netlink: 'syz.3.136': attribute type 15 has an invalid length.
[   46.266527][ T3983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.266737][ T3983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.342937][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.351420][ T3961] loop0: detected capacity change from 0 to 512
[   46.435943][ T3961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.436421][ T3961] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.474012][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[   46.474082][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[   46.474101][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[   46.535369][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.697449][ T4005] loop1: detected capacity change from 0 to 512
[   46.900065][ T4022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'.
[   46.931732][ T4024] loop0: detected capacity change from 0 to 512
[   46.932112][ T4024] journal_path: Non-blockdev passed as './file2'
[   46.932128][ T4024] EXT4-fs: error: could not find journal device path
[   47.686809][ T4051] iso9660: Unknown parameter 'ÿÿÿÿÿ.ÃNÛBþO'
[   47.698988][ T4051] capability: warning: `syz.1.157' uses deprecated v2 capabilities in a way that may be insecure
[   47.763434][ T4060] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   47.763570][ T4060] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0
[   47.818371][ T4062] netlink: 'syz.3.161': attribute type 1 has an invalid length.
[   48.204325][ T4077] capability: warning: `syz.0.168' uses 32-bit capabilities (legacy support in use)
[   48.360860][ T4077] program syz.0.168 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.510603][ T4098] journal_path: Non-blockdev passed as './file2'
[   48.510623][ T4098] EXT4-fs: error: could not find journal device path
[   48.549072][ T4101] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   48.582034][ T4102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   48.753509][ T4114] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[   48.915578][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[   49.071639][ T4124] set_capacity_and_notify: 3 callbacks suppressed
[   49.071655][ T4124] loop0: detected capacity change from 0 to 512
[   49.098737][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.098971][ T4124] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.099444][   T29] kauditd_printk_skb: 218 callbacks suppressed
[   49.099457][   T29] audit: type=1400 audit(1790561164.079:700): avc:  denied  { mount } for  pid=4122 comm="syz.0.183" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   49.125580][   T29] audit: type=1400 audit(1790561164.099:701): avc:  denied  { create } for  pid=4122 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   49.136150][   T29] audit: type=1400 audit(1790561164.119:702): avc:  denied  { create } for  pid=4122 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   49.157460][   T29] audit: type=1400 audit(1790561164.139:703): avc:  denied  { write } for  pid=4122 comm="syz.0.183" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.160408][   T29] audit: type=1400 audit(1790561164.139:704): avc:  denied  { add_name } for  pid=4122 comm="syz.0.183" name="tracing" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.166383][   T29] audit: type=1400 audit(1790561164.139:705): avc:  denied  { create } for  pid=4122 comm="syz.0.183" name="tracing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   49.228993][ T4124] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.183: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0
[   49.249390][   T29] audit: type=1400 audit(1790561164.219:706): avc:  denied  { mounton } for  pid=4122 comm="syz.0.183" path="/44/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.270287][   T29] audit: type=1400 audit(1790561164.219:707): avc:  denied  { mount } for  pid=4122 comm="syz.0.183" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   49.329073][ T3304] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 3: comm syz-executor: path /44/bus: bad entry in directory: inode out of bounds - offset=108, inode=17959, rec_len=1940, size=2048 fake=0
[   49.329210][   T29] audit: type=1400 audit(1790561164.309:708): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   49.330465][   T29] audit: type=1400 audit(1790561164.309:709): avc:  denied  { write } for  pid=3304 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.380493][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.443201][ T4143] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   49.471284][ T4146] ip_tables: iptables: counters copy to user failed while replacing table
[   49.619303][ T4159] loop2: detected capacity change from 0 to 8192
[   49.716101][ T4170] loop1: detected capacity change from 0 to 512
[   49.716460][ T4170] journal_path: Non-blockdev passed as './file2'
[   49.716477][ T4170] EXT4-fs: error: could not find journal device path
[   49.754860][ T4163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'.
[   49.754950][ T4163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'.
[   50.269642][ T4193] netlink: 'syz.2.205': attribute type 1 has an invalid length.
[   50.295314][ T4193] bond1: entered promiscuous mode
[   50.295540][ T4193] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.413727][ T4188] loop0: detected capacity change from 0 to 8192
[   50.572227][ T4202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   50.650335][ T4177] kexec: Could not allocate swap buffer
[   50.709565][ T4206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'.
[   50.709646][ T4206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'.
[   50.753782][ T3304] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   50.753802][ T3304] FAT-fs (loop0): Filesystem has been set read-only
[   50.858164][ T4210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.212'.
[   50.958271][ T4225] netlink: 'syz.1.217': attribute type 1 has an invalid length.
[   50.977081][ T4225] bond1: entered promiscuous mode
[   50.977188][ T4225] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.146312][ T4230] loop1: detected capacity change from 0 to 512
[   51.173400][ T4230] journal_path: Non-blockdev passed as './file2'
[   51.173443][ T4230] EXT4-fs: error: could not find journal device path
[   51.249472][ T4237] loop4: detected capacity change from 0 to 512
[   51.274087][ T4237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.274386][ T4237] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.274995][ T4237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.473026][ T4246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'.
[   51.473086][ T4246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'.
[   51.474387][ T4247] ==================================================================
[   51.474415][ T4247] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[   51.474445][ T4247] 
[   51.474452][ T4247] write to 0xffffea00042f2798 of 8 bytes by task 4189 on cpu 0:
[   51.474469][ T4247]  __filemap_remove_folio+0x201/0x2e0
[   51.474490][ T4247]  filemap_remove_folio+0x6d/0x1d0
[   51.474506][ T4247]  truncate_inode_folio+0x42/0x50
[   51.474532][ T4247]  shmem_undo_range+0x27f/0xb60
[   51.474558][ T4247]  shmem_evict_inode+0x12d/0x580
[   51.474576][ T4247]  evict+0x2a5/0x510
[   51.474606][ T4247]  iput+0x430/0x5a0
[   51.474624][ T4247]  dentry_unlink_inode+0x24a/0x260
[   51.474652][ T4247]  dentry_kill+0x184/0x500
[   51.474685][ T4247]  finish_dput+0x16/0x1d0
[   51.474709][ T4247]  dput+0x48/0x50
[   51.474729][ T4247]  __fput+0x43e/0x630
[   51.474748][ T4247]  ____fput+0x1c/0x30
[   51.474769][ T4247]  task_work_run+0x130/0x1a0
[   51.474788][ T4247]  do_exit+0x4a4/0x1510
[   51.474812][ T4247]  do_group_exit+0xfe/0x140
[   51.474837][ T4247]  get_signal+0xe07/0xf10
[   51.474872][ T4247]  arch_do_signal_or_restart+0x96/0x480
[   51.474901][ T4247]  irqentry_exit+0x14d/0x610
[   51.474933][ T4247]  asm_exc_page_fault+0x26/0x30
[   51.474950][ T4247] 
[   51.474955][ T4247] read to 0xffffea00042f2798 of 8 bytes by task 4247 on cpu 1:
[   51.474969][ T4247]  folio_mapping+0xa1/0xe0
[   51.474991][ T4247]  evict_folios+0x1e66/0x2830
[   51.475014][ T4247]  try_to_shrink_lruvec+0x8fd/0xb30
[   51.475037][ T4247]  shrink_lruvec+0x252/0x1d40
[   51.475076][ T4247]  shrink_node+0x67c/0x2000
[   51.475097][ T4247]  do_try_to_free_pages+0x408/0xca0
[   51.475127][ T4247]  try_to_free_mem_cgroup_pages+0x201/0x420
[   51.475163][ T4247]  mem_cgroup_force_empty_write+0x77/0x100
[   51.475194][ T4247]  cgroup_file_write+0x197/0x350
[   51.475223][ T4247]  kernfs_fop_write_iter+0x1d2/0x2e0
[   51.475247][ T4247]  vfs_write+0x57f/0x9a0
[   51.475275][ T4247]  ksys_write+0xdc/0x1a0
[   51.475303][ T4247]  __x64_sys_write+0x40/0x50
[   51.475333][ T4247]  x64_sys_call+0x154e/0x2550
[   51.475357][ T4247]  do_syscall_64+0x112/0x360
[   51.475377][ T4247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.475399][ T4247] 
[   51.475403][ T4247] value changed: 0xffff88810359aab0 -> 0x0000000000000000
[   51.475415][ T4247] 
[   51.475419][ T4247] Reported by Kernel Concurrency Sanitizer on:
[   51.475430][ T4247] CPU: 1 UID: 0 PID: 4247 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.475456][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   51.475469][ T4247] ==================================================================