last executing test programs:

6.066725179s ago: executing program 1 (id=42):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffefffffffffff, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x42000)
setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "cb83ba863c96a22f", "1bd0adb57ddf3002bc5375963548e075791298ea8ad20754c25c16fd1d838416", "9854c258", "c1c06d078bb2aeed"}, 0x38)
close(0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0x401, 0x200000d, 0x10, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@user_xattr}, {@grpquota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@oldalloc}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x58c, &(0x7f0000000c40)="$eJzs3V1rHFUfAPD/bJI2fXmeplCKeiGFXlip3TSJLxWE1kvRYkHv47KZhpJNt2Q3pYmFthf2Qm+kCCIWxA/gvZfFL+CnKGihSAl64c3KbGabbZJNNummie7vR6c5Z2Z2z5w5c87+Z88uG0Df+jL7rxDxckR8nUQcads2GPnGE81/sfTkZnnpwM1yEo3GJ38kkeTrWvsn+d9DeealiPjli4jThbXl1hYWZ0qVSjqX50frs9dGawuLZ67MlqbT6fTq+MTEubcmxt995+2e1fX1S3999/GDD859dXLp258eHb2XxIU4nG9rr8dzuN2eOREn8nMyFBdW7TjWg8L2kmS3D4BtGcj7+VBkY8CRGMh7PfDfdysiGkCfSvR/6FOtOKB5b58vuxuRvFiP31++AVpb/8Hmex4Rw817o4NLyTN3RtmZG+lB+VkZP/9+/162xCbvQ9zqQXkALbfvRMTZwcG141+Sj3/bd7b55vHGVpfRb68/sJseZPHPG+vFP4Wn8U+sE/8cWqfvbsfm/b/wqAfFdJTFf++tG/8+HbpGBvLc/7JMDCWXr1TSsxHx/4g4FUP7s/xG8znnlh42Om1rj/+yJSu/FQvmx/FocP+zj5kq1UvPU+d2j+9EvLIS/yaxZvwfbs7trG7/7Hxc6rKM4+n9Vztt27z+7XofATd+jHht3fZfmdFKNp6fHG1eD6Otq2KtP+8e/7VT+Vurf+9l7X9w4/qPJO3ztbWtl/HD8N9pp23bvf73JZ820/ti+f7tRqlenxuL2Jd8tLI+8vXjK49t5Vv7Z/U/dXLj8W+96/9ARHzWZf3vHrvb2nVNPLQX2n9qS+2/9cTDDz//vlP53bX/m83UqXxNN+Nftwf4POcOAAAAAAAA9ppCRByOpFB8mi4UisXlz3cci4OFSrVWP325On91KprflR2JoUJrpvtI2+chxmL587Ct/Piq/EREHI2IbwYONPPFcrUytduVBwAAAAAAAAAAAAAAAAAAgD3iUIfv/2d+G9jtowN2nJ/8hv61af/vxS89AXuS13/oX/o/9C/9H/pXl/1/cninDwR44bz+Q//S/6F/6f/Qv/R/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KlLFy9mS2Ppyc1ylp+6vjA/U71+ZiqtzRRn58vFcnXuWnG6Wp2upMVydXaz56tUq9fGxmP+xmg9rdVHawuLk7PV+av1ySuzpel0Mh16IbUCAAAAAAAAAAAAAAAAAACAf5fawuJMqVJJ5yQ6Js7HnjiMbSeSzVr5fH4xbOWZs/0bjUZjYXD3KyixA4muho/hnRybAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDlnwAAAP//b/o2Tw==")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x40000000, 0x2, 0x3, 0x7fff, 0x1b, "b0bf2ebb48c849ac0000000003000018bfff40"})
dup3(0xffffffffffffffff, r2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)

5.277403296s ago: executing program 2 (id=48):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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")
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000080))

5.201915182s ago: executing program 2 (id=49):
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x3c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x80, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd}]}, @NDA_NH_ID={0x8, 0xd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000)

5.171804177s ago: executing program 1 (id=50):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000006b00), 0x0, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x16)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0x11)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x103}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
lseek(r4, 0x10001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)

5.126510117s ago: executing program 2 (id=52):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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")
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))

4.828834696s ago: executing program 2 (id=55):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
sched_setscheduler(0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
ftruncate(0xffffffffffffffff, 0x7000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000240)=""/195)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x8008)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x4, 0xa6e, 0x9})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008"], 0x50}}, 0x4000850)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
writev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000100)="ed9c39f57bb49c8fc17473ae839f48c68ecb0ea8f671edc2786bbda713479ae0f6df78919b9bbf1726486db1da6009c34332ab8cad5a997542c3453693ed", 0x3e}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="96fe233be8cc6dd8df6276975c511f31c6f88fbb0b5c208fc38f018794add3d5faa880f256e7d4", 0x27}], 0x3)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r6, &(0x7f0000000300), 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff00000001, 0xa840)
ioctl$BLKPG(r7, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x98, &(0x7f0000000340)={0x4, 0x200000000001, 0xf}})
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5420, 0x0)

3.915370678s ago: executing program 2 (id=59):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}])
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r3, &(0x7f0000001600), &(0x7f0000001700)=@udp=r2}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0xfbff)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, &(0x7f0000000340))
socket(0x10, 0x3, 0x0)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'bridge_slave_1\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000040))

3.863902819s ago: executing program 3 (id=60):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
getuid()
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf/file0\x00', 0x1, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
syz_usb_connect$cdc_ncm(0x2, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x2, 0x1, 0x7, 0xe0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a8e8fc0d27e4"}, {0x5, 0x24, 0x0, 0x2dd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x3, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xa, 0x9, [0x8, 0x7]}, @mdlm_detail={0x6f, 0x24, 0x13, 0x7, "9c2b9c3ced8384820bc7421c2c61c07a2ca06af2cabb17b75a84d5aba39788b3e8bb70e2ab241cc2d60e15bac0ac810de95c57f1a5aec317c8d48b2c152fb4ef1842a7c9c573cd13f3dcd9af52766f3253d43cc8b8817d3fac4602de7250f797b9a6df448cbeb877856160"}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8305, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0xfc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x6ff, 0x4, 0x79, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x8a, 0x1, 0x2, 0x20, 0x2c}, 0x63, &(0x7f0000000500)={0x5, 0xf, 0x63, 0x1, [@generic={0x5e, 0x10, 0xb, "a311a2dc93c802fe8d5a1b6d0d952ff5fee3462b7b9ff128e0dfe705370e6b627a6d4d950e6c0b687d21d24ecc2fd5eb3641caa0416526cfd1cc2e63cc9bcebe69343aa48c3ed8abc0936af2041ae1f3395d386da722f1568f6f59"}]}, 0x1, [{0x74, &(0x7f0000000580)=@string={0x74, 0x3, "4c690507f73b8aabb2da4e807738a3a330456652cf57789ca5ab1c412335ca9c0f9508632db478e7bec5c06850e98d7d91d248ce20709df71f20caa1ae9b7805dfe828e991fcb07775934e0cc5cb228266c83e0769a9c2e87f27ac99a575753851e4911c5f5804db7eea24d9be003f33178c"}}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket(0x2, 0x80805, 0x0)
msgsnd(0x0, 0x0, 0x1008, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140))
msgctl$IPC_RMID(0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
write(r0, 0x0, 0x0)

3.594892423s ago: executing program 2 (id=61):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

3.267402648s ago: executing program 3 (id=62):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x1, 0x3}, 0x3003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet(0x2, 0x2, 0x2)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'pimreg\x00', @ifru_addrs=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet(0x2, 0xa, 0xf)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
recvfrom$inet6(r3, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bind$inet(r2, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x42, @empty, 0x40102}}}, 0xfffffffffffffec1)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)

3.15428102s ago: executing program 4 (id=63):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000880)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000740))
setgroups(0x0, &(0x7f00000009c0))
chmod(&(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)='gfs2meta\x00', 0xc00008, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x2, 0xf1, 0x2, 0xfff})
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/1000, 0x3e8)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000600)=""/255, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="940100006d00010029bd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="020802005048000008000d"], 0x194}}, 0x0)
writev(r3, &(0x7f00000000c0), 0x0)
read(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})

2.927177956s ago: executing program 3 (id=64):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x1, 0x3}, 0x3003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet(0x2, 0x2, 0x2)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'pimreg\x00', @ifru_addrs=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbfffff, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffe, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x4, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40088}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x14, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

2.819839017s ago: executing program 4 (id=65):
r0 = socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$addseals(r0, 0x409, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@local}, &(0x7f0000000380)=0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x1140}, 0x40800)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000009, 0x4082172, 0xffffffffffffffff, 0x97c3e000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x242002, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004500)=ANY=[@ANYBLOB="140000001000010000005000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b00001400000011f7000000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x0)

2.665165408s ago: executing program 4 (id=67):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

2.645477842s ago: executing program 1 (id=68):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffefffffffffff, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x42000)
setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "cb83ba863c96a22f", "1bd0adb57ddf3002bc5375963548e075791298ea8ad20754c25c16fd1d838416", "9854c258", "c1c06d078bb2aeed"}, 0x38)
close(0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0x401, 0x200000d, 0x10, r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e)
r3 = syz_open_pts(r2, 0x200)
dup3(r3, r2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$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")
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)

2.595771372s ago: executing program 3 (id=69):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0100001000010000000000ffdbdf25fe880000000000000000000000000001000000000000000000000000000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
open(0x0, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
renameat2(r4, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2)
setsockopt(r2, 0x4765, 0x80, &(0x7f00000000c0)="91c884ced32c6470b017b3d4bb8adaf15eda87f4c137646db402f0773b329642741bd1ebaffa937c1bd8950b883adbf4c64895dcba86c78712f64c5a00c8c76d691af70693dd880f6fc8277a7c8d6facc5c85188be35eff542d8a9724e917f0006c925c5e69744d80f87c0a0805f886c61936b87", 0x74)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.944299102s ago: executing program 3 (id=70):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

1.899708521s ago: executing program 0 (id=71):
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x3c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x80, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd}]}, @NDA_NH_ID={0x8, 0xd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000)

1.836482003s ago: executing program 0 (id=72):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x200, 0xaa}, 0x4, 0xffffffff, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x4, 0x80000000, 0x104, 0x0, 0xeff9ba6eacd967e0})
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55000000000040ddeff900", [0x80000000006, 0x6]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000340), 0x4, 0x64440)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000280)='qfq\x00', 0x0, r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
pwritev(r9, &(0x7f0000002bc0)=[{&(0x7f0000000240)="154328cddad2", 0x6}], 0x1, 0x8, 0x5)
setsockopt(r9, 0x4d2, 0x721, &(0x7f0000000200)="b82bd48caa1be3b0fc64428abc71c1d86099d2c7834e7800311b6134e272cf542997d6e221262cd2c1dc1f8d2304b81687aaedd5d7a114f32255c7749ea21fcbe560e2ad87", 0x45)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
io_setup(0x20fe, &(0x7f0000000540)=<r11=>0x0)
io_submit(r11, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000000200)='p', 0x8200, 0x600}])
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r12, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

1.825536176s ago: executing program 4 (id=73):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="6a2922a012b22740596d7299efcf7a639bc8eadff85c1eb8ed3faaaa7d8e8d6fa79c370ce9eded3cbda6135a7a2b0f2f6dbbc6c1f6a97764658c65bdf9895deb6f11cb90e0e5530730bb3ee27ce3b6a39cd29b5f8716752462e62124cafa3189f4b607217a7dd28850508d66e2cdd7c9e80c988462980d4d512908e05068cc5c1d3daff2f9", 0x85, 0x4000001, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/79, 0x4f}, 0x40}], 0x1, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0x11)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
lseek(r4, 0x10001, 0x0)

1.662816918s ago: executing program 1 (id=74):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000880)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000740))
setgroups(0x0, &(0x7f00000009c0))
chmod(&(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)='gfs2meta\x00', 0xc00008, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x2, 0xf1, 0x2, 0xfff})
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/1000, 0x3e8)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000600)=""/255, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="020802005048000008000d0000ff"], 0x194}}, 0x0)
writev(r3, &(0x7f00000000c0), 0x0)
read(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})

1.372116236s ago: executing program 4 (id=75):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="6a2922a012b22740596d7299efcf7a639bc8eadff85c1eb8ed3faaaa7d8e8d6fa79c370ce9eded3cbda6135a7a2b0f2f6dbbc6c1f6a97764658c65bdf9895deb6f11cb90e0e5530730bb3ee27ce3b6a39cd29b5f8716752462e62124cafa3189f4b607217a7dd28850508d66e2cdd7c9e80c988462980d4d512908e05068cc5c1d3daff2f9", 0x85, 0x4000001, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/79, 0x4f}, 0x40}], 0x1, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0x11)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
lseek(r4, 0x10001, 0x0)

1.243517232s ago: executing program 0 (id=76):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
getuid()
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf/file0\x00', 0x1, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
syz_usb_connect$cdc_ncm(0x2, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x2, 0x1, 0x7, 0xe0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a8e8fc0d27e4"}, {0x5, 0x24, 0x0, 0x2dd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x3, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xa, 0x9, [0x8, 0x7]}, @mdlm_detail={0x6f, 0x24, 0x13, 0x7, "9c2b9c3ced8384820bc7421c2c61c07a2ca06af2cabb17b75a84d5aba39788b3e8bb70e2ab241cc2d60e15bac0ac810de95c57f1a5aec317c8d48b2c152fb4ef1842a7c9c573cd13f3dcd9af52766f3253d43cc8b8817d3fac4602de7250f797b9a6df448cbeb877856160"}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8305, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0xfc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x6ff, 0x4, 0x79, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x8a, 0x1, 0x2, 0x20, 0x2c}, 0x63, &(0x7f0000000500)={0x5, 0xf, 0x63, 0x1, [@generic={0x5e, 0x10, 0xb, "a311a2dc93c802fe8d5a1b6d0d952ff5fee3462b7b9ff128e0dfe705370e6b627a6d4d950e6c0b687d21d24ecc2fd5eb3641caa0416526cfd1cc2e63cc9bcebe69343aa48c3ed8abc0936af2041ae1f3395d386da722f1568f6f59"}]}, 0x1, [{0x74, &(0x7f0000000580)=@string={0x74, 0x3, "4c690507f73b8aabb2da4e807738a3a330456652cf57789ca5ab1c412335ca9c0f9508632db478e7bec5c06850e98d7d91d248ce20709df71f20caa1ae9b7805dfe828e991fcb07775934e0cc5cb228266c83e0769a9c2e87f27ac99a575753851e4911c5f5804db7eea24d9be003f33178c"}}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket(0x2, 0x80805, 0x0)
msgsnd(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="0100"], 0x1008, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
write(r0, 0x0, 0x0)

1.065591527s ago: executing program 1 (id=77):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x5}, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

613.000578ms ago: executing program 4 (id=78):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="6a2922a012b22740596d7299efcf7a639bc8eadff85c1eb8ed3faaaa7d8e8d6fa79c370ce9eded3cbda6135a7a2b0f2f6dbbc6c1f6a97764658c65bdf9895deb6f11cb90e0e5530730bb3ee27ce3b6a39cd29b5f8716752462e62124cafa3189f4b607217a7dd28850508d66e2cdd7c9e80c988462980d4d512908e05068cc5c1d3daff2f9", 0x85, 0x4000001, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r1, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c00)=0x11)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x103}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)

542.017912ms ago: executing program 3 (id=79):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000006b00), 0x0, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x16)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0x11)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x103}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
lseek(r4, 0x10001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)

391.225602ms ago: executing program 0 (id=80):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000880)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000740))
setgroups(0x0, &(0x7f00000009c0))
chmod(&(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)='gfs2meta\x00', 0xc00008, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x2, 0xf1, 0x2, 0xfff})
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/1000, 0x3e8)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000600)=""/255, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="940100006d00010029bd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="020802005048000008000d0000ff"], 0x194}}, 0x0)
writev(r3, &(0x7f00000000c0), 0x0)
read(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)

99.76515ms ago: executing program 0 (id=81):
r0 = socket(0xa, 0x3, 0xff)
recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

618.93µs ago: executing program 1 (id=82):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
syz_io_uring_complete(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
close(0xffffffffffffffff)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

0s ago: executing program 0 (id=92):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffefffffffffff, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x42000)
setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "cb83ba863c96a22f", "1bd0adb57ddf3002bc5375963548e075791298ea8ad20754c25c16fd1d838416", "9854c258", "c1c06d078bb2aeed"}, 0x38)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0x401, 0x200000d, 0x10, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@user_xattr}, {@grpquota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@oldalloc}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x58c, &(0x7f0000000c40)="$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")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e)
r2 = syz_open_pts(r1, 0x200)
dup3(r2, r1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$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")
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)

kernel console output (not intermixed with test programs):

t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.094436][   T29] audit: type=1400 audit(1790809868.878:99): avc:  denied  { noatsecure } for  pid=3169 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.094900][   T29] audit: type=1400 audit(1790809868.878:100): avc:  denied  { write } for  pid=3169 comm="sh" path="pipe:[1292]" dev="pipefs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   21.094931][   T29] audit: type=1400 audit(1790809868.878:101): avc:  denied  { rlimitinh } for  pid=3169 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.094978][   T29] audit: type=1400 audit(1790809868.878:102): avc:  denied  { siginh } for  pid=3169 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   24.756597][   T29] audit: type=1400 audit(1790809872.538:103): avc:  denied  { search } for  pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.756633][   T29] audit: type=1400 audit(1790809872.538:104): avc:  denied  { search } for  pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.756662][   T29] audit: type=1400 audit(1790809872.538:105): avc:  denied  { search } for  pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.756705][   T29] audit: type=1400 audit(1790809872.538:106): avc:  denied  { search } for  pid=3180 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.779136][   T29] audit: type=1400 audit(1790809872.548:107): avc:  denied  { read } for  pid=3181 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.779170][   T29] audit: type=1400 audit(1790809872.548:108): avc:  denied  { read open } for  pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.779202][   T29] audit: type=1400 audit(1790809872.548:109): avc:  denied  { getattr } for  pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.870891][   T29] audit: type=1400 audit(1790809872.648:110): avc:  denied  { write } for  pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.870931][   T29] audit: type=1400 audit(1790809872.648:111): avc:  denied  { add_name } for  pid=3180 comm="dhcpcd-run-hook" name="resolv.conf.lapb3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.921626][   T29] audit: type=1400 audit(1790809872.688:112): avc:  denied  { write } for  pid=3191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts.
[   29.388937][ T3284] cgroup: Unknown subsys name 'net'
[   29.507453][ T3284] cgroup: Unknown subsys name 'cpuset'
[   29.508069][ T3284] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.660944][ T3289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.683099][ T3284] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.333662][   T29] kauditd_printk_skb: 27 callbacks suppressed
[   30.333680][   T29] audit: type=1400 audit(1790809878.118:140): avc:  denied  { execmem } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   30.527314][   T29] audit: type=1400 audit(1790809878.308:141): avc:  denied  { read } for  pid=3295 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   30.527356][   T29] audit: type=1400 audit(1790809878.308:142): avc:  denied  { open } for  pid=3295 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   30.527546][   T29] audit: type=1400 audit(1790809878.308:143): avc:  denied  { mounton } for  pid=3295 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   30.531399][   T29] audit: type=1400 audit(1790809878.328:144): avc:  denied  { module_request } for  pid=3295 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   30.634619][   T29] audit: type=1400 audit(1790809878.418:145): avc:  denied  { sys_module } for  pid=3295 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   31.095531][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.095615][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.095687][ T3301] bridge_slave_0: entered allmulticast mode
[   31.096209][ T3301] bridge_slave_0: entered promiscuous mode
[   31.098176][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.098289][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.098565][ T3301] bridge_slave_1: entered allmulticast mode
[   31.099527][ T3301] bridge_slave_1: entered promiscuous mode
[   31.120220][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.122549][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.199784][ T3301] team0: Port device team_slave_0 added
[   31.199915][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.199946][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.200017][ T3295] bridge_slave_0: entered allmulticast mode
[   31.200563][ T3295] bridge_slave_0: entered promiscuous mode
[   31.201333][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.201427][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.201478][ T3295] bridge_slave_1: entered allmulticast mode
[   31.201993][ T3295] bridge_slave_1: entered promiscuous mode
[   31.220829][ T3301] team0: Port device team_slave_1 added
[   31.285715][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.305498][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.305510][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.305544][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.305883][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.305918][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.306029][ T3300] bridge_slave_0: entered allmulticast mode
[   31.306429][ T3300] bridge_slave_0: entered promiscuous mode
[   31.309823][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.351072][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.351111][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.351190][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.356638][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.356717][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.356836][ T3300] bridge_slave_1: entered allmulticast mode
[   31.359122][ T3300] bridge_slave_1: entered promiscuous mode
[   31.386499][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.386584][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.386768][ T3298] bridge_slave_0: entered allmulticast mode
[   31.388546][ T3298] bridge_slave_0: entered promiscuous mode
[   31.416234][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.416321][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.416599][ T3298] bridge_slave_1: entered allmulticast mode
[   31.418497][ T3298] bridge_slave_1: entered promiscuous mode
[   31.421349][ T3295] team0: Port device team_slave_0 added
[   31.423213][ T3295] team0: Port device team_slave_1 added
[   31.463994][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.466331][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.495021][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.495038][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.495194][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.495599][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.495696][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.495896][ T3299] bridge_slave_0: entered allmulticast mode
[   31.497190][ T3299] bridge_slave_0: entered promiscuous mode
[   31.498817][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.498904][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.499122][ T3299] bridge_slave_1: entered allmulticast mode
[   31.500346][ T3299] bridge_slave_1: entered promiscuous mode
[   31.523291][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.534219][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.534266][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.534411][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.539886][ T3301] hsr_slave_0: entered promiscuous mode
[   31.540692][ T3301] hsr_slave_1: entered promiscuous mode
[   31.551725][ T3300] team0: Port device team_slave_0 added
[   31.554048][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.579043][ T3300] team0: Port device team_slave_1 added
[   31.610796][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.627609][ T3298] team0: Port device team_slave_0 added
[   31.629762][ T3298] team0: Port device team_slave_1 added
[   31.649463][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.665295][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.665336][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.665433][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.706079][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.706119][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.706199][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.717067][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.717123][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.717239][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.725166][ T3299] team0: Port device team_slave_0 added
[   31.734586][ T3299] team0: Port device team_slave_1 added
[   31.739848][ T3295] hsr_slave_0: entered promiscuous mode
[   31.740808][ T3295] hsr_slave_1: entered promiscuous mode
[   31.741262][ T3295] debugfs: 'hsr0' already exists in 'hsr'
[   31.741309][ T3295] Cannot create hsr debugfs directory
[   31.741900][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.741928][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.741975][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.824615][ T3300] hsr_slave_0: entered promiscuous mode
[   31.825703][ T3300] hsr_slave_1: entered promiscuous mode
[   31.826316][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   31.826361][ T3300] Cannot create hsr debugfs directory
[   31.827054][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.827074][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.827234][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.839138][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.839168][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.839272][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.900729][ T3298] hsr_slave_0: entered promiscuous mode
[   31.901774][ T3298] hsr_slave_1: entered promiscuous mode
[   31.905101][ T3298] debugfs: 'hsr0' already exists in 'hsr'
[   31.905147][ T3298] Cannot create hsr debugfs directory
[   32.065559][ T3299] hsr_slave_0: entered promiscuous mode
[   32.066325][ T3299] hsr_slave_1: entered promiscuous mode
[   32.068902][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   32.068943][ T3299] Cannot create hsr debugfs directory
[   32.246513][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.255272][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.256110][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.259931][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.279876][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.281965][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.284876][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.286586][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.330051][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.331793][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.335930][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.337907][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.350469][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.356171][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.365588][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.375875][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.403511][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.405589][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.425218][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.427932][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.429288][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.438271][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.440222][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.443985][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.470550][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.494779][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   32.499058][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.507705][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.509338][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.513573][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.533203][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.541630][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.542491][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.544124][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.545722][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.545750][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.590532][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.590558][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.596394][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.599083][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.615437][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.622062][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.633780][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.643678][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.659826][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.661565][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.677899][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.699863][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.713917][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.727494][ T3295] 8021q: adding VLAN 0 to HW filter on device team0
[   32.745339][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   32.756390][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.756421][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.770045][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.770142][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.772710][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.772789][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.791334][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.791367][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.836811][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.858179][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.879496][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   32.883841][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.883872][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.886470][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.918193][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.918280][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.952838][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   32.966906][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.966942][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.971744][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.971777][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.042238][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.060423][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.219620][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.243898][ T3301] veth0_vlan: entered promiscuous mode
[   33.252959][ T3301] veth1_vlan: entered promiscuous mode
[   33.266364][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.280352][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.302469][ T3301] veth0_macvtap: entered promiscuous mode
[   33.308105][ T3301] veth1_macvtap: entered promiscuous mode
[   33.331206][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.335829][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.346024][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.367449][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.368480][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.368661][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.368703][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.417396][   T29] audit: type=1400 audit(1790809881.208:146): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.zNdbAR/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   33.417430][   T29] audit: type=1400 audit(1790809881.208:147): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.417458][   T29] audit: type=1400 audit(1790809881.208:148): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.zNdbAR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   33.422677][   T29] audit: type=1400 audit(1790809881.208:149): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.551032][ T3301] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.557551][ T3300] veth0_vlan: entered promiscuous mode
[   33.582462][ T3300] veth1_vlan: entered promiscuous mode
[   33.602537][ T3298] veth0_vlan: entered promiscuous mode
[   33.606248][ T3298] veth1_vlan: entered promiscuous mode
[   33.648118][ T3300] veth0_macvtap: entered promiscuous mode
[   33.657839][ T3298] veth0_macvtap: entered promiscuous mode
[   33.662492][ T3300] veth1_macvtap: entered promiscuous mode
[   33.668727][ T3298] veth1_macvtap: entered promiscuous mode
[   33.673300][ T3295] veth0_vlan: entered promiscuous mode
[   33.690740][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.696043][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.698805][ T3295] veth1_vlan: entered promiscuous mode
[   33.706854][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.724592][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.765646][ T3295] veth0_macvtap: entered promiscuous mode
[   33.783156][ T3295] veth1_macvtap: entered promiscuous mode
[   33.788771][  T329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.790179][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.790515][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.790848][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.819065][  T329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.819500][  T329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.819813][  T329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.872170][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.881105][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.905143][ T3299] veth0_vlan: entered promiscuous mode
[   33.918806][ T3299] veth1_vlan: entered promiscuous mode
[   33.940403][ T3494] loop1: detected capacity change from 0 to 512
[   33.985332][ T3494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.985372][ T3494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   33.992592][ T3299] veth0_macvtap: entered promiscuous mode
[   34.004682][ T3299] veth1_macvtap: entered promiscuous mode
[   34.008464][   T94] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.009859][   T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.009966][   T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.010055][   T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.010204][   T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.033685][ T3509] loop3: detected capacity change from 0 to 256
[   34.046290][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.082999][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.124475][ T3494] EXT4-fs (loop1): 1 truncate cleaned up
[   34.149695][   T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.149951][   T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.150138][   T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.150187][   T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.197703][ T3494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.400302][   T51] Bluetooth: hci0: Frame reassembly failed (-84)
[   34.421835][ T3512] loop0: detected capacity change from 0 to 512
[   34.455161][ T3517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'.
[   34.493018][ T3512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   34.520992][ T3512] EXT4-fs (loop0): 1 truncate cleaned up
[   34.527869][ T3506] loop2: detected capacity change from 0 to 512
[   34.540914][ T3506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   34.577118][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.585231][ T3506] EXT4-fs (loop2): 1 truncate cleaned up
[   34.594832][ T3506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.718871][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.778752][   T12] Bluetooth: hci1: Frame reassembly failed (-84)
[   34.994562][ T3530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.995316][ T3530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.086267][ T3533] loop0: detected capacity change from 0 to 512
[   35.093811][ T3533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.111528][ T3533] EXT4-fs (loop0): 1 truncate cleaned up
[   35.112908][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.161351][ T3536] loop4: detected capacity change from 0 to 512
[   35.175704][ T3536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.175784][ T3536] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.213764][ T3536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9'.
[   35.232854][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.341632][ T3540] loop0: detected capacity change from 0 to 1024
[   35.346213][ T3540] EXT4-fs: Ignoring removed oldalloc option
[   35.360052][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   35.360091][   T29] audit: type=1400 audit(1790809883.128:200): avc:  denied  { ioctl } for  pid=3535 comm="syz.4.9" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   35.364868][ T3540] EXT4-fs: Invalid want_extra_isize 132
[   35.395619][ T3541] netlink: 372 bytes leftover after parsing attributes in process `syz.4.9'.
[   35.399557][ T3541] sg_read: process 5 (syz.4.9) changed security contexts after opening file descriptor, this is not allowed.
[   35.503850][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.522884][ T3540] loop0: detected capacity change from 0 to 512
[   35.524953][ T3540] EXT4-fs: Ignoring removed bh option
[   35.525502][ T3540] EXT4-fs: quotafile must be on filesystem root
[   35.554687][ T3543] loop4: detected capacity change from 0 to 256
[   35.576871][   T29] audit: type=1400 audit(1790809883.358:201): avc:  denied  { create } for  pid=3542 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.580327][ T3540] syz.0.10 (3540) used greatest stack depth: 10784 bytes left
[   35.583552][   T29] audit: type=1400 audit(1790809883.368:202): avc:  denied  { unmount } for  pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   35.595047][   T29] audit: type=1400 audit(1790809883.378:203): avc:  denied  { connect } for  pid=3542 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.670809][   T29] audit: type=1400 audit(1790809883.458:204): avc:  denied  { read write } for  pid=3542 comm="syz.4.11" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   35.670847][   T29] audit: type=1400 audit(1790809883.458:205): avc:  denied  { open } for  pid=3542 comm="syz.4.11" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   35.790095][ T3546] loop0: detected capacity change from 0 to 512
[   35.803983][ T3546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.850872][ T3548] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   35.866254][ T3546] EXT4-fs (loop0): 1 truncate cleaned up
[   35.881120][   T29] audit: type=1400 audit(1790809883.668:206): avc:  denied  { create } for  pid=3542 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   35.887967][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.903033][ T3548] EXT4-fs (loop3): 1 truncate cleaned up
[   35.914501][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.017382][   T94] Bluetooth: hci2: Frame reassembly failed (-84)
[   36.091986][   T51] Bluetooth: hci3: Frame reassembly failed (-84)
[   36.427023][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   36.443295][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.625032][ T3554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.636099][ T3554] EXT4-fs (loop4): 1 truncate cleaned up
[   36.639467][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.654544][ T3556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.684104][ T3556] EXT4-fs (loop1): 1 truncate cleaned up
[   36.694138][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.760613][  T364] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.804546][   T51] Bluetooth: hci4: Frame reassembly failed (-84)
[   36.827033][ T3519] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   36.844046][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.867883][   T29] audit: type=1400 audit(1790809884.658:207): avc:  denied  { create } for  pid=3560 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   36.868740][   T29] audit: type=1400 audit(1790809884.658:208): avc:  denied  { connect } for  pid=3560 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   36.869915][ T3561] Zero length message leads to an empty skb
[   36.922039][   T29] audit: type=1400 audit(1790809884.708:209): avc:  denied  { write } for  pid=3562 comm="syz.2.17" name="tcp" dev="proc" ino=4026532608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   36.987943][ T3563] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   36.988055][ T3563] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.17: corrupted inode contents
[   36.988076][ T3563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.988372][ T3563] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #11: comm syz.2.17: mark_inode_dirty error
[   36.988474][ T3563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.988598][ T3563] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.17: invalid indirect mapped block 1 (level 1)
[   36.988680][ T3563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.988797][ T3563] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.17: corrupted inode contents
[   36.988823][ T3563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.988997][ T3563] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   36.989047][ T3563] loop2: lost filesystem error report for type 5 error -117
[   36.989262][ T3563] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.17: corrupted inode contents
[   36.989291][ T3563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.989486][ T3563] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.17: mark_inode_dirty error
[   36.989516][ T3563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.989706][ T3563] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   36.989721][ T3563] loop2: lost filesystem error report for type 5 error -117
[   36.989935][ T3563] EXT4-fs (loop2): 1 truncate cleaned up
[   36.991374][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.994479][ T3563] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.17: iget: bogus i_mode (3355)
[   37.055357][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.216451][ T3567] EXT4-fs: Ignoring removed oldalloc option
[   37.224903][ T3567] EXT4-fs: Invalid want_extra_isize 132
[   37.261476][ T3567] EXT4-fs: Ignoring removed bh option
[   37.261937][ T3567] EXT4-fs: quotafile must be on filesystem root
[   37.300342][ T3569] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19'.
[   38.026959][ T3526] Bluetooth: hci2: Opcode 0x1003 failed: -110
[   38.037714][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.106957][ T3551] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   38.129106][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.333689][ T3576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   38.380145][ T3576] EXT4-fs (loop3): 1 truncate cleaned up
[   38.400098][ T3576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.484871][ T3578] EXT4-fs: Ignoring removed oldalloc option
[   38.496458][ T3578] EXT4-fs: Invalid want_extra_isize 132
[   38.646996][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.764248][ T3578] EXT4-fs: Ignoring removed bh option
[   38.764748][ T3578] EXT4-fs: quotafile must be on filesystem root
[   38.800773][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.800843][ T3583] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.836381][ T3551] Bluetooth: hci0: command 0x1003 tx timeout
[   38.836458][   T44] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   38.838401][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.877302][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.879394][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.928177][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.935870][ T3587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.942657][ T3587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.985630][ T3591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.985693][ T3591] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.023001][ T3595] set_capacity_and_notify: 12 callbacks suppressed
[   39.023019][ T3595] loop4: detected capacity change from 0 to 128
[   39.048210][ T3595] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.048462][ T3595] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   39.098959][ T3591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'.
[   39.103693][ T3595] SELinux: syz.4.28 (3595) wrote to user. This is no longer supported.
[   39.143905][ T3574] syz.0.21 (3574) used greatest stack depth: 10696 bytes left
[   39.166546][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'.
[   39.240449][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.267965][ T3591] blktrace: Concurrent blktraces are not allowed on sg0
[   39.273920][ T3591] netlink: 364 bytes leftover after parsing attributes in process `syz.1.26'.
[   39.291434][ T3601] netlink: 'syz.0.31': attribute type 3 has an invalid length.
[   39.291489][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[   39.295695][ T3603] loop4: detected capacity change from 0 to 128
[   39.331731][ T3603] msdos: Bad value for 'gid'
[   39.331781][ T3603] msdos: Bad value for 'gid'
[   39.519964][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.569935][ T3605] batman_adv: batadv0: Adding interface: syzkaller0
[   39.569950][ T3605] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.569979][ T3605] batman_adv: batadv0: Interface activated: syzkaller0
[   39.899849][ T3602] batman_adv: batadv0: Interface deactivated: syzkaller0
[   39.922198][ T3602] batman_adv: batadv0: Removing interface: syzkaller0
[   39.922663][ T3612] syz.1.32 (3612) used greatest stack depth: 10440 bytes left
[   39.945311][ T3615] loop2: detected capacity change from 0 to 1024
[   39.946704][ T3618] loop3: detected capacity change from 0 to 512
[   39.967536][ T3615] EXT4-fs: Ignoring removed oldalloc option
[   39.976782][ T3615] EXT4-fs: Invalid want_extra_isize 132
[   40.003080][ T3618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.003180][ T3620] loop1: detected capacity change from 0 to 1024
[   40.003242][ T3618] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.007360][ T3620] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   40.007426][ T3620] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   40.007556][ T3620] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   40.010703][ T3620] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #5: comm syz.1.36: unexpected bad inode w/o EXT4_IGET_BAD
[   40.010779][ T3620] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[   40.011474][ T3620] EXT4-fs (loop1): no journal found
[   40.011509][ T3620] EXT4-fs (loop1): can't get journal size
[   40.027066][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   40.027178][    C1] EXT4-fs (loop1): initial error at time 1790809887: ext4_get_journal_inode:5927: inode 5
[   40.027207][    C1] EXT4-fs (loop1): last error at time 1790809887: ext4_get_journal_inode:5927: inode 5
[   40.052552][ T3620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.073161][ T3618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35'.
[   40.165596][ T3626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.176022][ T3626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.201543][ T3627] blktrace: Concurrent blktraces are not allowed on sg0
[   40.207997][ T3627] netlink: 372 bytes leftover after parsing attributes in process `syz.3.35'.
[   40.272766][ T3628] loop2: detected capacity change from 0 to 512
[   40.280533][ T3628] EXT4-fs: Ignoring removed bh option
[   40.280781][ T3628] EXT4-fs: quotafile must be on filesystem root
[   40.392449][   T29] kauditd_printk_skb: 44 callbacks suppressed
[   40.392551][   T29] audit: type=1400 audit(1790809888.178:254): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.400812][   T29] audit: type=1400 audit(1790809888.188:255): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.405347][   T29] audit: type=1400 audit(1790809888.188:256): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.406702][   T29] audit: type=1400 audit(1790809888.188:257): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.412024][   T29] audit: type=1400 audit(1790809888.188:258): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.417775][   T29] audit: type=1400 audit(1790809888.188:259): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.417895][   T29] audit: type=1400 audit(1790809888.188:260): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.419490][   T29] audit: type=1400 audit(1790809888.188:261): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.569950][   T29] audit: type=1400 audit(1790809888.358:262): avc:  denied  { write } for  pid=3300 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   40.608483][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.657373][   T29] audit: type=1400 audit(1790809888.448:263): avc:  denied  { create } for  pid=3619 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.935231][ T3643] xt_NFQUEUE: number of total queues is 0
[   40.975565][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.975602][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.000254][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.004935][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.004967][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.246676][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.270748][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.473926][ T3648] loop1: detected capacity change from 0 to 1024
[   41.501062][ T3651] netlink: 'syz.0.44': attribute type 3 has an invalid length.
[   41.501179][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'.
[   41.505003][ T3648] EXT4-fs: Ignoring removed oldalloc option
[   41.514843][ T3648] EXT4-fs: Invalid want_extra_isize 132
[   41.554311][ T3633] syz.2.39 (3633) used greatest stack depth: 10176 bytes left
[   41.638378][ T3656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   41.638418][ T3656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   41.638564][ T3656] vhci_hcd vhci_hcd.0: Device attached
[   41.644271][ T3656] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9)
[   41.644296][ T3656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   41.644318][ T3656] vhci_hcd vhci_hcd.0: Device attached
[   41.646233][ T3659] loop1: detected capacity change from 0 to 512
[   41.649729][ T3659] EXT4-fs: Ignoring removed bh option
[   41.649886][ T3659] EXT4-fs: quotafile must be on filesystem root
[   41.705263][ T3663] netlink: 'syz.2.46': attribute type 3 has an invalid length.
[   41.705284][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   41.802422][ T3671] loop2: detected capacity change from 0 to 512
[   41.832625][ T3671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.832853][ T3671] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.861402][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.877921][   T11] usb 1-1: new high-speed USB device number 2 using vhci_hcd
[   41.884868][ T3676] netlink: 'syz.2.49': attribute type 3 has an invalid length.
[   41.885009][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   42.038247][ T3679] loop1: detected capacity change from 0 to 512
[   42.067989][ T3679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   42.093867][ T3679] EXT4-fs (loop1): 1 truncate cleaned up
[   42.132985][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.189151][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.190514][ T3683] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.235245][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.306010][ T3692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.55'.
[   42.339391][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   42.402362][ T3657] vhci_hcd: connection reset by peer
[   42.402599][   T12] vhci_hcd vhci_hcd.0: stop threads
[   42.402617][   T12] vhci_hcd vhci_hcd.0: release socket
[   42.402676][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   42.403088][ T3660] vhci_hcd: connection closed
[   42.403277][   T12] vhci_hcd vhci_hcd.0: stop threads
[   42.403295][   T12] vhci_hcd vhci_hcd.0: release socket
[   42.403352][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   42.923474][ T3699] FAULT_INJECTION: forcing a failure.
[   42.923474][ T3699] name failslab, interval 1, probability 0, space 0, times 1
[   42.923526][ T3699] CPU: 0 UID: 0 PID: 3699 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(lazy) 
[   42.923556][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   42.923585][ T3699] Call Trace:
[   42.923594][ T3699]  <TASK>
[   42.923602][ T3699]  __dump_stack+0x1d/0x30
[   42.923631][ T3699]  dump_stack_lvl+0x95/0xd0
[   42.923695][ T3699]  dump_stack+0x15/0x1b
[   42.923720][ T3699]  should_fail_ex+0x262/0x280
[   42.923749][ T3699]  ? copy_pid_ns+0x1b8/0x640
[   42.923806][ T3699]  should_failslab+0x8c/0xb0
[   42.923836][ T3699]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   42.923902][ T3699]  ? copy_pid_ns+0x1b8/0x640
[   42.924023][ T3699]  copy_pid_ns+0x1b8/0x640
[   42.924122][ T3699]  ? copy_mnt_ns+0xee/0x720
[   42.924146][ T3699]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[   42.924230][ T3699]  ? create_new_namespaces+0x38/0x420
[   42.924342][ T3699]  create_new_namespaces+0x168/0x420
[   42.924381][ T3699]  unshare_nsproxy_namespaces+0x115/0x150
[   42.924460][ T3699]  ksys_unshare+0x42b/0x710
[   42.924494][ T3699]  __x64_sys_unshare+0x1f/0x30
[   42.924595][ T3699]  x64_sys_call+0x1e33/0x2550
[   42.924657][ T3699]  do_syscall_64+0x112/0x360
[   42.924688][ T3699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.924750][ T3699] RIP: 0033:0x7f192f2ce159
[   42.924776][ T3699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.924874][ T3699] RSP: 002b:00007f192dd27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   42.924927][ T3699] RAX: ffffffffffffffda RBX: 00007f192f555fa0 RCX: 00007f192f2ce159
[   42.924945][ T3699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[   42.924961][ T3699] RBP: 00007f192f36506b R08: 0000000000000000 R09: 0000000000000000
[   42.924977][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.924992][ T3699] R13: 00007f192f556038 R14: 00007f192f555fa0 R15: 00007ffc5cbe1be8
[   42.925017][ T3699]  </TASK>
[   43.235719][ T3705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.247733][ T3705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.326210][ T3703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.326562][ T3703] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.467683][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.893909][ T3712] syz.3.62 uses obsolete (PF_INET,SOCK_PACKET)
[   43.945895][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.945953][ T3716] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.954236][ T3712] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.62'.
[   43.989808][ T3716] netlink: 132 bytes leftover after parsing attributes in process `syz.4.63'.
[   44.183841][ T3716] blktrace: Concurrent blktraces are not allowed on sg0
[   44.204386][ T3716] netlink: 364 bytes leftover after parsing attributes in process `syz.4.63'.
[   44.251882][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.314218][ T3720] syzkaller0: entered promiscuous mode
[   44.314258][ T3720] syzkaller0: entered allmulticast mode
[   44.346989][ T3552] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   44.417198][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.476172][ T3734] sctp: [Deprecated]: syz.3.69 (pid 3734) Use of int in max_burst socket option.
[   44.476172][ T3734] Use struct sctp_assoc_value instead
[   44.477478][ T3734] netlink: 80 bytes leftover after parsing attributes in process `syz.3.69'.
[   44.583929][ T3735] set_capacity_and_notify: 5 callbacks suppressed
[   44.583944][ T3735] loop1: detected capacity change from 0 to 512
[   44.588259][ T3735] EXT4-fs: Ignoring removed bh option
[   44.588381][ T3735] EXT4-fs: quotafile must be on filesystem root
[   45.180939][ T3742] netlink: 'syz.0.71': attribute type 3 has an invalid length.
[   45.180999][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   45.290795][ T3735] FAULT_INJECTION: forcing a failure.
[   45.290795][ T3735] name fail_futex, interval 1, probability 0, space 0, times 1
[   45.290881][ T3735] CPU: 0 UID: 0 PID: 3735 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.291035][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.291052][ T3735] Call Trace:
[   45.291093][ T3735]  <TASK>
[   45.291102][ T3735]  __dump_stack+0x1d/0x30
[   45.291131][ T3735]  dump_stack_lvl+0x95/0xd0
[   45.291157][ T3735]  dump_stack+0x15/0x1b
[   45.291246][ T3735]  should_fail_ex+0x262/0x280
[   45.291354][ T3735]  should_fail+0xb/0x20
[   45.291382][ T3735]  get_futex_key+0x12d/0xb10
[   45.291417][ T3735]  ? rcu_segcblist_enqueue+0x9b/0xb0
[   45.291451][ T3735]  futex_wake+0x89/0x400
[   45.291550][ T3735]  ? perf_lock_task_context+0x24b/0x2c0
[   45.291588][ T3735]  do_futex+0x3f8/0x460
[   45.291625][ T3735]  mm_exit_exec_release+0xab/0x190
[   45.291680][ T3735]  exit_mm+0x37/0x1b0
[   45.291709][ T3735]  do_exit+0x438/0x1510
[   45.291735][ T3735]  do_group_exit+0xfe/0x140
[   45.291760][ T3735]  ? get_signal+0xe00/0xf10
[   45.291861][ T3735]  get_signal+0xe07/0xf10
[   45.291921][ T3735]  arch_do_signal_or_restart+0x96/0x480
[   45.291995][ T3735]  exit_to_user_mode_loop+0x15d/0x8c0
[   45.292038][ T3735]  do_syscall_64+0x212/0x360
[   45.292128][ T3735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.292256][ T3735] RIP: 0033:0x7f2a1bf6e159
[   45.292274][ T3735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.292296][ T3735] RSP: 002b:00007f2a1a9a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   45.292375][ T3735] RAX: fffffffffffffe00 RBX: 00007f2a1c1f6098 RCX: 00007f2a1bf6e159
[   45.292391][ T3735] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2a1c1f6098
[   45.292429][ T3735] RBP: 00007f2a1c1f6090 R08: 0000000000000000 R09: 0000000000000000
[   45.292444][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.292459][ T3735] R13: 00007f2a1c1f6128 R14: 00007ffd41ebc010 R15: 00007ffd41ebc0f8
[   45.292482][ T3735]  </TASK>
[   45.293317][ T3747] loop4: detected capacity change from 0 to 512
[   45.423915][ T3745] loop0: detected capacity change from 0 to 4096
[   45.428760][ T3747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.436427][ T3745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.465362][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   45.465399][   T29] audit: type=1400 audit(1790809893.248:297): avc:  denied  { write } for  pid=3744 comm="syz.0.72" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.465447][   T29] audit: type=1400 audit(1790809893.248:298): avc:  denied  { read } for  pid=3744 comm="syz.0.72" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.478368][ T3747] EXT4-fs (loop4): 1 truncate cleaned up
[   45.501666][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.615080][ T3752] loop1: detected capacity change from 0 to 512
[   45.639813][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.639911][ T3752] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.689932][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.732234][ T3752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.74'.
[   45.791266][   T29] audit: type=1400 audit(1790809893.578:299): avc:  denied  { write } for  pid=3751 comm="syz.1.74" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.819497][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.913167][ T3752] blktrace: Concurrent blktraces are not allowed on sg0
[   45.945825][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.946564][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.997737][   T29] audit: type=1400 audit(1790809893.788:300): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.999720][   T29] audit: type=1400 audit(1790809893.788:301): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.000561][   T29] audit: type=1400 audit(1790809893.788:302): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.000980][   T29] audit: type=1400 audit(1790809893.788:303): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.001976][   T29] audit: type=1400 audit(1790809893.788:304): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.002650][   T29] audit: type=1400 audit(1790809893.788:305): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.002971][   T29] audit: type=1400 audit(1790809893.788:306): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.019134][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.194678][ T3759] loop4: detected capacity change from 0 to 512
[   46.212355][ T3759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   46.238886][ T3759] EXT4-fs (loop4): 1 truncate cleaned up
[   46.257323][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.398439][ T3764] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.453714][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.541287][ T3764] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.683911][ T3771] loop0: detected capacity change from 0 to 512
[   46.684451][ T3768] loop3: detected capacity change from 0 to 512
[   46.715125][ T3771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.715253][ T3771] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.728110][ T3769] loop4: detected capacity change from 0 to 512
[   46.751389][ T3769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   46.755601][ T3771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.80'.
[   46.775633][ T3764] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.782948][ T3769] EXT4-fs (loop4): 1 truncate cleaned up
[   46.797699][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.800380][ T3768] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   46.845467][ T3768] EXT4-fs (loop3): 1 truncate cleaned up
[   46.865108][ T3768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.885230][ T3764] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.933754][ T3771] blktrace: Concurrent blktraces are not allowed on sg0
[   46.966495][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.977842][   T11] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   46.996962][   T51] Bluetooth: hci1: Frame reassembly failed (-84)
[   47.032484][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.058531][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.058588][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.067003][  T364] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.084512][ T3781] loop1: detected capacity change from 0 to 256
[   47.214720][ T3782] loop0: detected capacity change from 0 to 1024
[   47.221017][ T3782] EXT4-fs: Ignoring removed oldalloc option
[   47.227520][ T3782] EXT4-fs: Invalid want_extra_isize 132
[   47.315615][ T3784] EXT4-fs: Ignoring removed bh option
[   47.315670][ T3784] EXT4-fs: quotafile must be on filesystem root
[   47.517437][ T3781] ==================================================================
[   47.517477][ T3781] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read
[   47.517519][ T3781] 
[   47.517524][ T3781] write to 0xffff888104442ca0 of 8 bytes by task 3783 on cpu 1:
[   47.517536][ T3781]  filemap_splice_read+0x52a/0x790
[   47.517557][ T3781]  splice_direct_to_actor+0x261/0x680
[   47.517574][ T3781]  do_splice_direct+0x119/0x1a0
[   47.517589][ T3781]  do_sendfile+0x37d/0x640
[   47.517605][ T3781]  __x64_sys_sendfile64+0x105/0x150
[   47.517621][ T3781]  x64_sys_call+0x1015/0x2550
[   47.517641][ T3781]  do_syscall_64+0x112/0x360
[   47.517657][ T3781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.517674][ T3781] 
[   47.517678][ T3781] write to 0xffff888104442ca0 of 8 bytes by task 3781 on cpu 0:
[   47.517705][ T3781]  filemap_splice_read+0x52a/0x790
[   47.517744][ T3781]  splice_direct_to_actor+0x261/0x680
[   47.517767][ T3781]  do_splice_direct+0x119/0x1a0
[   47.517788][ T3781]  do_sendfile+0x37d/0x640
[   47.517817][ T3781]  __x64_sys_sendfile64+0x105/0x150
[   47.517833][ T3781]  x64_sys_call+0x1015/0x2550
[   47.517854][ T3781]  do_syscall_64+0x112/0x360
[   47.517869][ T3781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.517886][ T3781] 
[   47.517889][ T3781] value changed: 0x00000000000005db -> 0x00000000000005dc
[   47.517898][ T3781] 
[   47.517901][ T3781] Reported by Kernel Concurrency Sanitizer on:
[   47.517909][ T3781] CPU: 0 UID: 0 PID: 3781 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(lazy) 
[   47.517928][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.517938][ T3781] ==================================================================
[   48.986960][ T3551] Bluetooth: hci0: command 0x1003 tx timeout
[   48.986991][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   48.999097][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.066983][ T3552] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   49.096706][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.