last executing test programs:

6m57.310706708s ago: executing program 4 (id=594):
open(0x0, 0x200, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x8, 0x10, 0x129}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xb}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x110}}, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24008000)

6m57.006130005s ago: executing program 4 (id=597):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
poll(0x0, 0x0, 0xb)
r5 = syz_pidfd_open(0x0, 0x0)
setns(r5, 0x24020000)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0)
fcntl$setstatus(r6, 0x403, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r6, &(0x7f0000000340)="cccdd26fd6ed38fa3e41954595c5092dc3d9475e35e5f4237f242c76143df0ef9a74651c0ca346e5464ad3bb46b2a3809d67d7ffe2571b498ff32006972e1b812f3cd2258adc360a546d6b0e3f1fb5bcaf4a6190886e75ff1826dffc0892bedec47393f52996728d61170c102e573b8644f18cf741855dda27107edb360010ef3bb7d04518ee84850f0601f92b180340a981725f3ecaf27e85e9ffa6cb9a3184f3c9", &(0x7f0000000680)=""/135}, 0x20)
r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x274)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)

6m54.977595489s ago: executing program 4 (id=614):
pipe(&(0x7f0000000440))
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r0, 0x6200}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket(0x1e, 0x2, 0x2)
r1 = socket(0x840000000002, 0x801, 0x100)
connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000f80))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x1, 0x0, 0x8, 0x0, 0x20000, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}}, 0x20000000)
syz_emit_ethernet(0xae, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000a00000000002ac1414aa0500907801000000410000007f000001ffffffff443403010a0101014e210000ac1414aa00000080ac1e000152b383976401010100000007ac14143c0000000e0800000100000002443cbc01e0000001000000000000000000000000ac1414000000010000000000000000080000000000000000ac1e00010000000000000000fffffffc00"/174], 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r2], 0x138}}, 0x8044)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8004)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00')
getdents(r4, &(0x7f0000000ec0)=""/4114, 0x1012)
getdents64(r4, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"})
syz_open_pts(r0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000008094000100f3ffffff"], &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$kcm(0xa, 0x922000000003, 0x11)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x51bb226dd950ff1c, 0xffffffffffffffff, 0x0)

6m54.118376399s ago: executing program 4 (id=611):
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0")
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x4, &(0x7f0000000000)=[{0x5, 0xf4, 0x0, 0x5}, {0x0, 0x1, 0x0, 0xa}, {0x5, 0xf6, 0x2, 0x80}, {0x0, 0x8, 0x1}]})
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x8000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xb1, 0x9, 0x3, 0x36061, r1, 0x80000000, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0xd, @void, @value, @value=r1}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x9, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r5, 0x1)
recvmmsg(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {0x0}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0)

6m48.666141839s ago: executing program 4 (id=617):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0xffffffff, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(0x0, 0x0)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000000)={@mcast1}, 0x14)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0000710000950000000000000000000000000049aca711faab12b177675e9b2661b87923b3fb64907926fffee5153ad97d198b30038bafd7c9b7affcca32"], 0x0}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x10, "5c76276f6c86622447099377e66e2ebe"}})

6m47.380729527s ago: executing program 4 (id=622):
open(0x0, 0x200, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x8, 0x10, 0x129}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xb}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x110}}, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24008000)

6m47.380354657s ago: executing program 32 (id=622):
open(0x0, 0x200, 0x41)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x8, 0x10, 0x129}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xb}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x110}}, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24008000)

10.620748492s ago: executing program 1 (id=1655):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0)
getpid()
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ptrace(0x10, r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x509a0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xa, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
wait4(r0, &(0x7f0000000180), 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)={0xa8, 0x58, 0x601, 0x0, 0x0, "", [@generic="8b251a8e1c6dc28f32b765603d04e646f1b34c80e66ef508512bdd90a23df75803f2a9f6bae800ea4bd62b678ab4568477094ba7c3cc8178b495edce84418f5317b959956909db58ff87f3fa83cbc73c33e9bd4a8d4aa8f7219dbf3a90760886736bf17b394dc12450a1fd09faa07d9b012069ed2345b10463bca0e4b3f56e009d686709ccc224cd26f244c59dea57848b400495f7203d06"]}, 0xa8}], 0x1}, 0x804)

10.610236752s ago: executing program 1 (id=1657):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000640)={[{@delalloc}, {@grpid}, {@bh}, {@nouid32}, {@noauto_da_alloc}, {@journal_async_commit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@noacl}, {@norecovery}, {@nodelalloc}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), 0x0}, 0x20)
sendto$inet6(r2, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
close_range(r1, r3, 0x2)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r7, 0x133, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x4080000)
r9 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100)
r10 = syz_open_dev$loop(&(0x7f0000000140), 0xb, 0x80000)
r11 = syz_open_dev$hidraw(0x0, 0x8001, 0x101242)
write$hidraw(r11, &(0x7f0000000240)="61dacc9cd5363fa7780a1f929ad913e0f301be0aafe850e2af7cc05f52f8c85ed4d5d500148187c2783a798086c50c1a64fb51e4cb893e070b9a6693de7d7f0bd09f60a726ac14af7cb2adc470ec4095bb3e59c50c7c17", 0x57)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000000)={r10, 0x611, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "2809532cf626a66022488056c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f0000000000000000da00", "90be8b1c5512406c7f00", [0x4, 0x2]}})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)={0x408000, 0x41, 0x12}, 0x18)

10.561700743s ago: executing program 1 (id=1659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r4, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x2}, 0x1c)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r3, 0x204)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r6, 0x0, 0xffffffff000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = syz_open_dev$usbfs(0x0, 0x205, 0x8401)
r8 = fcntl$dupfd(r7, 0x406, r7)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f00000000c0), &(0x7f0000000340)=0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x18ec, 0x37}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x30, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x15}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x801)

7.859066884s ago: executing program 1 (id=1662):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
syz_clone3(&(0x7f0000000d40)={0x202004100, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x3a}, &(0x7f0000000240)=""/240, 0xf0, &(0x7f0000000340)=""/113, &(0x7f00000003c0)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000)
r3 = memfd_create(0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0)
pwrite64(r3, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
sendfile(r3, r3, &(0x7f00000001c0), 0x7fa)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r6 = dup(r5)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback, 0x18000000}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8)
write$P9_RGETATTR(r6, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x1040, {0x1, 0x3, 0x4}, 0x80, 0x0, 0x0, 0xb, 0x8, 0x6, 0x2, 0x8000000000000001, 0x7, 0x8, 0x9, 0x7, 0x1, 0x1ff, 0x4, 0x98, 0x9f1, 0x7fffffffffffffff}}, 0xfdef)

7.855046114s ago: executing program 3 (id=1664):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = getpid()
r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x432e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r6, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffff90)
socket(0x2a, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0)

6.832995357s ago: executing program 5 (id=1668):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x1}, @timestamp={0xd, 0x0, 0x0, 0x7, 0x6, 0x7, 0x8, 0xfffb}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}})
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x4})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
socket$inet6_icmp(0xa, 0x2, 0x3a)

6.744379429s ago: executing program 0 (id=1670):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00'})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01072abd7000fcdbdf2534000000080003000300fa"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x1}, 0x10c86a, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xa, 0xffffffffffffffff, 0x1)
eventfd2(0x0, 0x0)
io_pgetevents(0x0, 0x10000000000002, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8)
connect$inet(r7, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)

5.601751684s ago: executing program 3 (id=1671):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(0x0, 0x0, 0xff6fbffffffffffe, 0xffffffffffffffff, 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
clock_adjtime(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x102000, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x6}, 0xa, 0x7, 0x4, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x30)
syz_emit_ethernet(0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000383a01fe8000000000000000000000000000bbff0200000000000000000000004700000104009078000000066cf6cd53ffff2ffffe800000000000000000000000000035fe8000000000000000000000000000aa13d86558da0a7f1848c95d1ba625bd4d749fd11e401af28f50c946c4775b793b4b7906f49492bb835d200d7ee44ba5eb04f981f2013518fc6f5d15"], 0x0)
r3 = io_uring_setup(0x4806, &(0x7f0000000000)={0x0, 0xbc55, 0x800, 0x2, 0x255})
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000080)={0x253, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/215, 0xd4}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000100)=""/24, 0x18}], &(0x7f0000000280)=[0x0, 0x200000000, 0x9], 0x3}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="010000004b1c691498745cec24673be6e08d2e9715e31e1df9a6aa83687639259ad849b11be57748056627839294f46bb88bcdd0aa578fde3ef641631c2bb6809e2ec4e7e09428b1417cab35f4c839a682c19c5f6316343ebdba5871aa4df14b00225106c8101152f6b5777612ed1afa6a1c91f013fc4b1d14a9dbb39dc060dfea442641d3b3f02d4f35cf45da4817", @ANYRESHEX=r1], 0x0)
getsockopt(0xffffffffffffffff, 0x29, 0x35, 0x0, &(0x7f0000001ffc))
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)=0x58)
socket(0x27, 0x80805, 0x0)

5.008714968s ago: executing program 5 (id=1672):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0xffffffff, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x3000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(0x0, 0x0)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000000)={@mcast1}, 0x14)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0000710000950000000000000000000000000049aca711faab12b177675e9b2661b87923b3fb64907926fffee5153ad97d198b30038bafd7c9b7affcca32"], 0x0}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040)

4.893891931s ago: executing program 0 (id=1674):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x1f90, 0xc000, 0xfffffffc, 0xfe})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003000000000000000000000018490000fdffffff000000000000000018010000786c6c2500000000002020207b1a050000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000800)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x1, @mcast2}, {0xa, 0x4e24, 0x100, @remote, 0x8}, 0x1, {[0xa1ad, 0x7d98, 0x5, 0x85f0, 0xfffffffe, 0x200000, 0x8, 0x3]}}, 0x5c)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000011c0)={0x0, 0x1b, 0x62}, 0x0, &(0x7f0000001280)="ee9437523f5de6384fb64f4e1214c8fed30a50b247c5a28e4dd6fe", &(0x7f0000001340)=""/98)
msgget$private(0x0, 0x3ac)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@orlov}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0xa2a41b4}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000004c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193)
fallocate(r2, 0x10, 0x3ffd, 0xe68d)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4)
getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={r6, 0x5}, 0x8)

4.718780594s ago: executing program 5 (id=1675):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0)
fcntl$setstatus(r3, 0x403, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0xfffffffc, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x304)
r5 = socket$netlink(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
dup3(r7, r6, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
unshare(0x0)

3.892768673s ago: executing program 1 (id=1676):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x100000000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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")
syz_emit_ethernet(0x5e, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1}}, {@canfd={0xd, {{0x3}, 0x35, 0x0, 0x0, 0x0, "c0da9d736296e1d9315af6e922f2b91982bb762acb2740a51a4eacb3f62575f3341ad77c0b1eb29c58b0fc082fa0815c1a52669da62f065a7c11293f780ef621"}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'})
r4 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil)
r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(r5)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x13, 0x7f, 0x4, 0x9}})
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000340)=""/148, &(0x7f0000000400)=0x94)
fcntl$notify(r0, 0x402, 0x0)

3.5496151s ago: executing program 2 (id=1677):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)={<r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x10}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mlock2(&(0x7f0000751000/0x3000)=nil, 0x3000, 0x0)
munlockall()
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6, 0x1000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe02a}]}, 0x0, 0x2}, 0x94)
r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000080)='objref\x00', 0x0, r4)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f0000000480)={r7, 0x2}, 0x8)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x0, 0x53f, &(0x7f0000000a80)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf4198, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x7}, 0x6b04, 0x0, 0x3, 0x8, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x8001, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='cpu!=-||!')
sendmsg(r3, &(0x7f0000002240)={&(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000002100), 0x0, &(0x7f0000002140)=[{0x58, 0x88, 0x7fffffff, "f4b41587b23bf40b1f993a7fe8b0e332f5cb5d0f662e5c5c623b99af8d47f9577dd2b0012ea2362d78c720d2efed2b1d652e8ba9b07d6a5b091d957ef13124b6a7d83bfe79"}, {0xa8, 0x117, 0x5494, "818e7acd54c9bad728b94fafe07c7aaad17dc2ffd3c0c7642d82c0eba698eea201bcadd3d6999387f26cc853fd081a2141f88bb3146edc3525919f8869a5a99789e7371edcc49f0b3770af695a0770fccd8cc781bda9dbab8a37fe88c7708c0cf136adccd6a824586fd256dcb9a62e95e327e480f4ed1984b17b53c18ba6a569f5a73e9c4025c052ea47c54e56051369fc0455c667280f"}], 0x100}, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r2, 0x3, 0xffffffffffffffff, 0x5})

3.372712304s ago: executing program 2 (id=1678):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004)
r0 = semget(0x1, 0x4, 0x69c)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
r1 = socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xb}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x20}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a30000000001400038008000140000000"], 0x68}}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000000d000a48000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000001c0003800000000000000000140000001100010000000000000000000000000a"], 0x70}}, 0x24040884)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x7, 0x3, 0x1, {0x3, 0x0, 0x8, 0x6, 0xfffc, 0x401}, {0x7, 0x0, 0xba, 0x8, 0x200, 0x200}, 0x1, 0xffffff80}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}]}, 0x7c}, 0x1, 0x4000000, 0x0, 0x50}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030f000000000000000034000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)

3.319128906s ago: executing program 0 (id=1679):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
write$P9_RLERROR(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpriority(0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x20, 0x0, 0x1, 0x1}, 0x28)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f00000010c0)={&(0x7f0000000200)=0xc9, 0x511f, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001080)})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
socket$netlink(0x10, 0x3, 0xc)
r3 = semget$private(0x0, 0x4000, 0x0)
semctl$GETALL(r3, 0x0, 0xd, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0)
pread64(r0, &(0x7f0000001240)=""/102393, 0x18ff9, 0x1000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)

3.10766838s ago: executing program 0 (id=1680):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30)
setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000), &(0x7f00000003c0)=ANY=[], 0xd, 0x0)
listxattr(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=""/101, 0x11)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0xf0, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x0, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x18b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x74f}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
unshare(0x2040600)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x7, 0x0, &(0x7f0000000380)="a162cef0563a20", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000e58be1990e92818b1c061b00000c"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)
munlock(&(0x7f0000002000/0x3000)=nil, 0x3000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a310000000008000340000000010900010073"], 0x34}}, 0x4000040)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r5, &(0x7f0000005900)=[{{&(0x7f00000019c0)={0xa, 0x4e20, 0x6, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000003e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x30}}], 0x1, 0x404c050)

3.10713367s ago: executing program 2 (id=1681):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0x2, 0x2, 0x0, 0x403c, 0xc002, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0xa, 0x3, 0x54, 0x0, 0x7fffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$lock(r5, 0x7, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x5386, 0x0)
capset(0x0, 0x0)
syz_open_dev$sg(0x0, 0x63d, 0x2100)
socket(0x1, 0x6, 0x22e)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route(r6, 0x0, 0x24040040)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r8 = socket(0x2b, 0x80801, 0x1)
mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x10c02, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])

2.366702237s ago: executing program 5 (id=1682):
r0 = inotify_init1(0x800)
quotactl_fd$Q_SYNC(r0, 0x80000304, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000180)={[{@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x4000001}}, {@nouid32}], [{@permit_directio}]}, 0x0, 0x7bd, &(0x7f0000001600)="$eJzs3c9rG1ceAPDvyL+d7NoLC7vZk2Fh1xAix1lvsgsLm2UPy0IDgfacxMiKSS1bwZJDbAxJKIVeemjpodBccm7a9JZrf1zbS/+GHkpC2jqhKT0Ul5FGifxDjpNYUlp/PjCa92ZGeu87b348aQZNAPvWWPqSizgU0ZcmR7LpSWQTojfiZH25h2urhXRIYn395W+T2jIP1lYL0fSe1IEs88eI+PT1iMO5reVWllfmpkul4mKWn6jOX5yoLK8cuTA/PVucLS4cn5yaOnbi7yeO712s33+xcvDuW//764cnf3ztD7fe/CyJk3Ewm9ccx14Zi7FsnfSlq3CD/+51YV0zVHtNul0Nnkm6a/bU9/I4FCPRs0NL/rujNQMA2uVKRKwDAPtM4vwPAPtM43eAB2urhcYQ9es5V7v6w0SH3PtPRAzW429c36zP6a1fs/tysHYddPhBUrtG0pBExOgelD8WEddvn7mZDtGm65AA27l6LSLOjY5tPv6nR7jN9yw8raO7WGYsG/82Gzv+Qed8nPZ//rG1/xeRy/b/wdrr5v7PQNO++zw2f8bW/T93Z0O2bw8KbZL2//7VdG/bw6b4M6M9We43tT5fX3L+Qql4NDtmjUffQJqf3KGM8fs/3W81r7n/993br76flp+OHy+Ru9M7sPE9M9PV6eeJudm9axF/6t0u/uRR+yct+r+nd1nG///5xnut5qXxp/E2hq3xt9f6jYi/bNv+j++DSna8P3GitjlMNDaKbXz01bvDrcpvbv/rt9OSVguN7wKdkLb/8M7xjybN92tWnr6Mz2+MfNJq3sb4z9xMy98Y//bbf3/ySi3dn027PF2tLk5G9CcvbZ1+7PF7G/nG8mn843/efv/faftPD0PnsvT6E25+7L37zQfPHn97pfHPpO2fZEE8sf2fPnHr4VxPq/J31/5TtdR4NmXr8a93y+futoLPtfIAAAAAAAAAAAAAAAAAAAAAAAAAYJdyEXEwklz+UTqXy+frz/D+fQznSuVK9fD58tLCTNSelT0afbnGX12ONP0f6mT2f/iN/LFN+b9FxO8i4p2BoVo+XyiXZrodPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkDmTP/x/Y9Pz/1NcD3a4dANA2g92uAADQcc7/ALD/tDj/928/eaitdQEAOqN2/k96u10NAKCD/P4PAPuP8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtdvrUqXRY/2FttZDmZy4tL82VLx2ZKVbm8vNLhXyhvHgxP1suz5aK+UJ5vuUHXa2PSuXyxalYWLo8US1WqhOV5ZWz8+WlherZC/PTs8Wzxb6ORQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu1dZXpmbLpWKixI7J668ENW4ljVbt9fGrzLR2CdelPo8OTEQEe1eG6mhjh+XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH4pfg4AAP//ZEQcUw==")
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240))
r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x796f, 0x1000, 0x4, 0x235})
socket(0x15, 0x803, 0xd7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x10000001ff, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x5000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x368}, 0x1, 0x0, 0x0, 0x577731872b93fdce}, 0x20048080)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
syz_usbip_server_init(0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)
close_range(r2, 0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

2.337196837s ago: executing program 3 (id=1683):
mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_MCE_KILL(0x21, 0x1, 0x3)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
prctl$PR_MCE_KILL(0x21, 0x0, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0xb, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(r1, 0x0, r2, 0x0, 0x3000, 0x100000000000000d)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_clone3(0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@dots}, {@fat=@nfs_stale_rw}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@fat=@showexec}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@dots}, {@fat=@nfs_nostale_ro}, {@fat=@flush}, {@fat=@dmask={'dmask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@dots}]}, 0x1, 0x20e, &(0x7f0000000400)="$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")
setreuid(0x0, 0xee00)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, r3)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)

2.035879544s ago: executing program 2 (id=1684):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040890)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r6 = fcntl$dupfd(r4, 0x406, r4)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r5, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2)
r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000559000/0x3000)=nil)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x8001, 0x2, 0x9, 0x1, 0x1}, 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0)
ioctl$XFS_IOC_FSGROWFSLOG(r7, 0x4008586f, &(0x7f0000000040)={0x3, 0xfffffffa})

2.029797224s ago: executing program 0 (id=1685):
socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8841}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r3=>0x0})
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6(0xa, 0x2, 0x3a)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="a60b8045e742caf860e57a2980d1b42cc923fffa1349caa63d2b56ac8fda329954a5ce1b806790da8d7d6768ff15815833b35a285eeaeb96a29b3fd4b93e8e89adc0ad4b47af8e6151e1ff07d80e4be13ba86a5f292074028025d52df058e1c8b390d242f431f6afeddfeed7d2f00fc63b5b17d978d191503ddd267ad3d93fe1db5fb0f11c005f67413da0bc74c4478b2909c02fc1355700"/166]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x405}}, {0x0, 0x0}, {0x0, 0x0}]})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4004b901bfae19e432bb0000000000006000000000000009500000c00000000e082818e1b5745a9dfd9084b51cc707c9da7c32a93345de85e666a4b8851af12a2de9221d0e9531b77e7de8d9a278a5ce83983baa63064d969f90c7e4b2adccfcb539c9fb391fc35b2d7da66aca9c1406a4d062ff831f61ddd0ba3a2c8dace4a0d3a8c0eb799823c7d4f0d15ce1615fda8d51e57239bf2b187a9e605f75df0db1bfccf0f7fea49cc9896ec8174682ad37802b4f07e5e9e330277c956b3543346ee0a28cc633347067ad5802c405c7f9264989c6f38e88acd22e150932976b42d6b3ad5465690fccd000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r6, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000042)

1.977766956s ago: executing program 3 (id=1686):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1e10000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78)
close(0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x4, 0xa8d, 0x5})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x6, 0x2, 0x4, 0x2, "0749db3a00"}, 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x3000c080)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040), 0x4)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3c9c9b, 0x0, 0x20, 0x0, &(0x7f0000000140))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3a01, 0x17e)
open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108843, 0x190)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)="d8000082db46b904021d00002500000004000008000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf02000000d67f6f94005134cf6ee08000a0e408ecd8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd625ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491000000000000000000000000000000b6e2978d06281de40000000000000000", 0xd3}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100840, 0x0, 0x0, 0x5, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='cpu!=S\xea|!')
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.895277418s ago: executing program 3 (id=1687):
set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7)
r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x83d, 0x0, 0x0, &(0x7f0000000140), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xf, 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000002900)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x9, {"135edd7486601a91d38376ef86e1b811"}, 0x98b, 0x7ff, 0x6}}}, 0xa0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/187, 0xbb}], 0x5}, 0x40010002)
setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x20000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20002, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4011)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f00000020c0)={&(0x7f0000000000)={0x2, 0x4ea1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x335, 0x2}, &(0x7f0000000400)=0x9, 0x0, 0xc, 0x0, 0x3, 0x6, 0x20, 0xc66a}}], 0x58}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xc044)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0)

1.824800179s ago: executing program 3 (id=1688):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000100"/16], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
alarm(0xfd48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, r0, 0x0, 0x41000004, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x6c190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x6, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6})
sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

1.078646926s ago: executing program 1 (id=1689):
socket$inet6_icmp(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17b2b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = creat(0x0, 0x12e)
close(r3)
listen(0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSW2(r6, 0x402c542c, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000008500000069000000958d7a854655842b1c726352618c3d7038b92567f93355cc311878007fd0b5b9a476fb6a3a5efc456b9d935b1c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={0x0}}, 0x20)

941.790189ms ago: executing program 5 (id=1690):
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c051}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000a0900020073797a310000000011000300686173683a6e65742c6e6574000000001400078008000840000000d805001400040000000500010007000000050005000a0000000500040002000000d7ffdf8d0b754563481b7de7912a317c3a2103c623da50d8b1a867585500114716a17f98a3fed50cbb6dbc9fc49ac655f3466d55756790e1e8d5404e2282996c5a2287b6214b26fab32cf3ed0c0b8d21f0b964bb65a1128b7bdbe23c30a05354a95d2237e1b2c01f0d4b50d9606e2f9667ef810ce22116ad1b625787afdb583516f31f68400b332363fa6b20db7843ee5e247fa46dd16bd7e7b230e0f9d8670ac1ffd477419d0efb60b8ea566406343d7c6b51241ee26c819cfb3b905237d48e2b41f55e"], 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20025094)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = getpid()
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4})
r7 = getpgrp(0x0)
r8 = gettid()
r9 = getpgid(r8)
rt_tgsigqueueinfo(r9, r8, 0x5, &(0x7f0000000200)={0x5, 0x8})
rt_tgsigqueueinfo(r7, r8, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4})
ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

749.435463ms ago: executing program 0 (id=1691):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
write$P9_RLERROR(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpriority(0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x20, 0x0, 0x1, 0x1}, 0x28)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f00000010c0)={&(0x7f0000000200)=0xc9, 0x511f, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001080)})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
socket$netlink(0x10, 0x3, 0xc)
r2 = semget$private(0x0, 0x4000, 0x0)
semctl$GETALL(r2, 0x0, 0xd, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
pread64(r0, &(0x7f0000001240)=""/102393, 0x18ff9, 0x1000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)

748.556593ms ago: executing program 2 (id=1692):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000340))
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000880), 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000})
getpid()
syz_open_procfs(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000005c0)={<r4=>0x0, 0xee, "732ac5f7a2a2959829a45f7ecbe3b29e32f6247a1de394fcba0a20aa8a34b6f174eb60a61026e4be3cc2d787150a0c21cfb6c81262aa887c80a3b46a02e21ee6b3ecb0f2612b618895464df80c01cc5117fabf21403c031449843e9724ec6f0a8c86a8492bad608514a699f1e7b8e2d30aa642cf8c62697e9f1861cd13e930c69b48b53a8521858bbb8e837d490867c48f1ff83670e1e222483cc90b3e3ba676e0e960d35ab14653b540971b9625676b8295028c2e7315790879fb01943594437acd9f84dab18ade0fc4593adbb25d82c83c6468e810965289e261d2ee3cfc7f9728d96393c301aecc82db45270d"}, &(0x7f00000006c0)=0xf6)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000700)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}, &(0x7f00000007c0)=0x84)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8, 0xfffa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x1, 0x3ff, 0x7f, {0x3, 0x2, 0x400, 0xb2a, 0x1}, {0x9, 0x0, 0x3, 0x34e5, 0xc, 0x5}, 0x9, 0xfffffffd, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x100, 0x2, 0x28}, 0x18)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r9, 0x6, 0x4, 0x0, &(0x7f0000000480))

392.807581ms ago: executing program 2 (id=1693):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400000a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002004e247f0000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0)
get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611150000000000085000000a00000009500000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2c, 0x5, 0x1, 0x0, 0x0, 0x9, 0x46864, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x3, 0x9, 0x5, 0x3, 0x0, 0x200000, 0x0, 0x200c}, r1, 0x0, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x40000000000000}}]}, 0x45, 0x76a, &(0x7f0000000fc0)="$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")
r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r6, 0x0, 0x0, 0x8080c61)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})
r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
setresgid(0x0, 0x0, 0x0)
sync()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sync()
sync()
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000001c0)={[], [{@subj_type={'subj_type', 0x3d, ']&&].'}}, {@dont_measure}]}, 0x1, 0x5a8, &(0x7f0000000680)="$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")

0s ago: executing program 5 (id=1694):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110003000040004"], 0x28}, 0x4004004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x4292, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$netlink(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
write(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x60b5, 0x4)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000853000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x800448f0, 0x0)

kernel console output (not intermixed with test programs):

uhid_device_t tclass=chr_file permissive=1
[  464.772073][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  464.774319][   T28] audit: type=1400 audit(1783108331.704:1169): avc:  denied  { open } for  pid=8888 comm="syz.0.1163" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  464.838085][ T3387] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  464.886743][ T8896] loop2: detected capacity change from 0 to 256
[  464.969950][   T28] audit: type=1400 audit(1783108331.934:1170): avc:  denied  { mount } for  pid=8891 comm="syz.5.1161" name="/" dev="hugetlbfs" ino=23407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  465.056905][   T28] audit: type=1326 audit(1783108332.014:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.1.1158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa128fdde59 code=0x0
[  465.169695][ T8903] siw: device registration error -23
[  465.383675][ T8903] xt_ecn: cannot match TCP bits for non-tcp packets
[  465.449025][ T8906] lo speed is unknown, defaulting to 1000
[  465.494895][ T8908] ALSA: seq fatal error: cannot create timer (-22)
[  465.953983][ T8906] gre0 speed is unknown, defaulting to 1000
[  466.063457][ T8914] loop3: detected capacity change from 0 to 8192
[  466.917397][ T4353] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  467.052434][ T8906] lo speed is unknown, defaulting to 1000
[  467.086461][ T8920] 
˙: renamed from dummy0
[  467.799148][   T28] audit: type=1400 audit(1783108334.715:1172): avc:  denied  { getopt } for  pid=8923 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  468.948748][   T28] audit: type=1400 audit(1783108335.895:1173): avc:  denied  { write } for  pid=8936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  469.003502][   T28] audit: type=1400 audit(1783108335.945:1174): avc:  denied  { write } for  pid=8949 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  469.040804][ T8929] sg_write: data in/out 17936861/432 bytes for SCSI command 0x0-- guessing data in;
[  469.040804][ T8929]    program syz.1.1180 not setting count and/or reply_len properly
[  469.069290][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'.
[  469.231477][   T28] audit: type=1400 audit(1783108336.185:1175): avc:  denied  { unmount } for  pid=8952 comm="syz.0.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  469.295299][   T28] audit: type=1400 audit(1783108336.235:1176): avc:  denied  { read } for  pid=8952 comm="syz.0.1173" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  469.357238][   T28] audit: type=1400 audit(1783108336.235:1177): avc:  denied  { read open } for  pid=8952 comm="syz.0.1173" path="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  469.442398][   T28] audit: type=1400 audit(1783108336.235:1178): avc:  denied  { read } for  pid=8952 comm="syz.0.1173" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  469.519314][   T28] audit: type=1400 audit(1783108336.365:1179): avc:  denied  { read } for  pid=8954 comm="syz.5.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  469.601389][ T8963] loop2: detected capacity change from 0 to 1024
[  469.635784][ T8959] loop5: detected capacity change from 0 to 1024
[  469.642757][ T8963] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  469.692890][ T8959] EXT4-fs: Ignoring removed nomblk_io_submit option
[  469.704510][ T8963] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1172: Invalid block bitmap block 0 in block_group 0
[  469.722961][ T8959] EXT4-fs: inline encryption not supported
[  469.734503][ T8963] loop2: lost filesystem error report for type 5 error -117
[  469.734633][ T8963] Quota error (device loop2): write_blk: dquota write failed
[  469.741965][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  469.741981][    C1] EXT4-fs (loop2): initial error at time 1783108336: ext4_read_block_bitmap_nowait:483
[  469.742007][    C1] EXT4-fs (loop2): last error at time 1783108336: ext4_read_block_bitmap_nowait:483
[  469.778668][ T8959] EXT4-fs: Ignoring removed nomblk_io_submit option
[  469.830336][ T8959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.854560][ T8963] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  469.884622][ T8959] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.904468][ T8963] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1172: Failed to acquire dquot type 0
[  470.009405][ T8963] loop2: lost filesystem error report for type 5 error -117
[  470.045855][ T8963] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1172: Freeing blocks not in datazone - block = 0, count = 4096
[  470.066696][ T8975] loop3: detected capacity change from 0 to 256
[  470.083378][ T8975] vfat: Unknown parameter './file2'
[  470.086548][ T8963] loop2: lost filesystem error report for type 5 error -117
[  470.093779][ T8963] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1172: Invalid inode bitmap blk 0 in block_group 0
[  470.608147][ T8963] loop2: lost filesystem error report for type 5 error -117
[  470.608311][ T8963] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  470.668738][ T8963] loop2: lost filesystem error report for type 5 error -117
[  470.669017][ T8963] EXT4-fs (loop2): 1 orphan inode deleted
[  471.039490][ T5459] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0
[  471.054509][ T8963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.415826][ T8983] random: crng reseeded on system resumption
[  471.733304][ T5459] loop2: lost filesystem error report for type 5 error -117
[  471.771797][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  472.399054][ T8997] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  472.559995][ T9007] loop5: detected capacity change from 0 to 512
[  472.622874][ T9007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.636890][ T9007] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.808576][ T9016] loop1: detected capacity change from 0 to 764
[  473.005801][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'.
[  473.311072][ T9016] lo speed is unknown, defaulting to 1000
[  473.695372][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.712769][ T9016] gre0 speed is unknown, defaulting to 1000
[  473.778115][ T9016] lo speed is unknown, defaulting to 1000
[  474.078693][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.741372][ T9038] netlink: 'syz.1.1187': attribute type 4 has an invalid length.
[  479.999486][ T9043] loop3: detected capacity change from 0 to 1024
[  480.275985][ T9052] loop2: detected capacity change from 0 to 764
[  480.286004][ T9052] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  480.291020][ T9056] loop1: detected capacity change from 0 to 256
[  481.275054][ T9056] vfat: Unknown parameter './file2'
[  482.026947][ T9063] netlink: 'syz.5.1194': attribute type 21 has an invalid length.
[  483.408421][ T9058] program syz.3.1190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  483.988274][ T9073] random: crng reseeded on system resumption
[  487.842692][ T9097] loop5: detected capacity change from 0 to 1024
[  489.567068][ T9126] loop2: detected capacity change from 0 to 512
[  489.615547][ T9126] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  489.763618][ T9126] EXT4-fs (loop2): 1 truncate cleaned up
[  489.774686][ T9126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.806119][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  489.806134][   T28] audit: type=1400 audit(1783108356.747:1185): avc:  denied  { write } for  pid=9122 comm="syz.2.1210" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  490.317006][   T28] audit: type=1400 audit(1783108356.867:1186): avc:  denied  { relabelfrom } for  pid=9122 comm="syz.2.1210" name="NETLINK" dev="sockfs" ino=25688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  490.342082][   T28] audit: type=1400 audit(1783108356.867:1187): avc:  denied  { relabelto } for  pid=9122 comm="syz.2.1210" name="NETLINK" dev="sockfs" ino=25688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  490.773000][ T9145] program syz.5.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  491.152776][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.904279][ T9168] loop5: detected capacity change from 0 to 1756
[  493.007402][ T9168] iso9660: Unknown parameter 'ĆrÄâ82ů
PŤ…hĐĂQq<Ľô§aK˺ȣ/Ž„•€ŢĂŽłE'
[  493.961762][ T9173] loop5: detected capacity change from 0 to 512
[  494.920606][ T9173] ext2: Unknown parameter 'obj_role'
[  495.687984][ T9181] loop3: detected capacity change from 0 to 1024
[  495.702711][ T9181] EXT4-fs: Ignoring removed nomblk_io_submit option
[  496.030509][ T9201] loop2: detected capacity change from 0 to 256
[  496.042951][ T9181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.147543][   T28] audit: type=1400 audit(1783108363.098:1188): avc:  denied  { write } for  pid=9180 comm="syz.3.1221" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  496.281181][   T28] audit: type=1400 audit(1783108363.108:1189): avc:  denied  { mount } for  pid=9200 comm="syz.2.1224" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  496.770717][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.922621][ T9208] lo speed is unknown, defaulting to 1000
[  496.974332][ T9208] gre0 speed is unknown, defaulting to 1000
[  497.087333][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'.
[  497.108742][ T9208] lo speed is unknown, defaulting to 1000
[  497.123745][ T9212] siw: device registration error -23
[  497.146604][ T9213] macvtap1: entered promiscuous mode
[  497.152250][ T9213] syz_tun: entered promiscuous mode
[  497.158081][ T9213] macvtap1: entered allmulticast mode
[  497.196556][ T9212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9212 comm=syz.0.1225
[  497.230670][ T9205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.271788][ T9216] __vm_enough_memory: pid: 9216, comm: syz.3.1228, bytes: 11727368077312 not enough memory for the allocation
[  497.319316][ T9205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.336969][   T28] audit: type=1400 audit(1783108364.298:1190): avc:  denied  { connect } for  pid=9215 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  497.397081][ T9221] lo speed is unknown, defaulting to 1000
[  497.404204][ T9205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.425339][ T9219] 
˙: renamed from dummy0
[  497.447207][ T9221] gre0 speed is unknown, defaulting to 1000
[  497.631793][ T9205] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  497.641468][ T9205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.676760][ T9221] lo speed is unknown, defaulting to 1000
[  497.738594][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'.
[  497.863942][ T9231] loop2: detected capacity change from 0 to 764
[  498.106819][   T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  498.731011][  T310] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  498.787173][   T68] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  498.798740][ T9222] loop5: detected capacity change from 0 to 1024
[  498.811468][   T68] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  499.504276][ T9248] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1235'.
[  499.930632][   T28] audit: type=1400 audit(1783108366.888:1191): avc:  denied  { connect } for  pid=9220 comm="syz.5.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  500.366990][ T9233] hub 5-0:1.0: USB hub found
[  500.460005][ T9233] hub 5-0:1.0: 8 ports detected
[  500.864388][ T9266] loop2: detected capacity change from 0 to 512
[  501.613475][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'.
[  502.624941][ T9277] 
˙: renamed from dummy0 (while UP)
[  502.952629][ T9266] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.1238: corrupted xattr block 95: invalid header
[  502.967672][ T9266] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  502.974189][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  502.989755][    C0] EXT4-fs (loop2): initial error at time 1783108369: ext4_expand_extra_isize_ea:2810: inode 11
[  503.000104][    C0] EXT4-fs (loop2): last error at time 1783108369: ext4_expand_extra_isize_ea:2810: inode 11
[  503.626844][ T9266] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1238: bg 0: block 7: invalid block bitmap
[  503.640105][ T9266] loop2: lost filesystem error report for type 5 error -117
[  504.519497][ T9266] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  504.537939][ T9266] loop2: lost filesystem error report for type 5 error -117
[  504.548232][ T9266] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.1238: corrupted xattr block 95: invalid header
[  504.570792][ T9266] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  504.631921][ T9266] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117)
[  504.652013][ T9266] EXT4-fs (loop2): 1 orphan inode deleted
[  504.824092][ T9266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.920737][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.029509][ T9285] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1245'.
[  505.052348][ T9285] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1245'.
[  505.284060][ T9291] loop2: detected capacity change from 0 to 1764
[  505.327552][   T28] audit: type=1400 audit(1783108372.289:1192): avc:  denied  { create } for  pid=9290 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  505.452333][ T9294] loop1: detected capacity change from 0 to 1024
[  505.462478][ T9294] ext4: Bad value for 'debug_want_extra_isize'
[  505.516931][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'.
[  505.551207][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'.
[  505.558894][ T3407] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  505.579323][ T9310] loop3: detected capacity change from 0 to 128
[  505.602053][ T9310] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  505.617669][ T9310] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.716040][   T28] audit: type=1400 audit(1783108372.599:1193): avc:  denied  { write } for  pid=9309 comm="syz.3.1254" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  505.757200][ T9316] lo speed is unknown, defaulting to 1000
[  505.823773][ T9316] gre0 speed is unknown, defaulting to 1000
[  505.947599][ T9316] lo speed is unknown, defaulting to 1000
[  506.521916][ T3407] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  506.548094][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  507.247896][ T9329] program syz.5.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  509.636647][ T9342] loop1: detected capacity change from 0 to 8192
[  510.679561][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.686907][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.030213][ T9344] loop3: detected capacity change from 0 to 512
[  511.738559][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.748742][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.366914][ T9344] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.1257: corrupted xattr block 95: invalid header
[  512.382054][ T9344] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  512.393045][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  512.408604][    C1] EXT4-fs (loop3): initial error at time 1783108379: ext4_expand_extra_isize_ea:2810: inode 11
[  512.418972][    C1] EXT4-fs (loop3): last error at time 1783108379: ext4_expand_extra_isize_ea:2810: inode 11
[  512.456164][ T9344] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1257: bg 0: block 7: invalid block bitmap
[  512.469787][ T9344] loop3: lost filesystem error report for type 5 error -117
[  512.471472][ T9344] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  512.490733][ T9344] loop3: lost filesystem error report for type 5 error -117
[  512.493700][ T9344] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.1257: corrupted xattr block 95: invalid header
[  512.516947][ T9344] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  512.518428][ T9344] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117)
[  512.583291][ T9344] EXT4-fs (loop3): 1 orphan inode deleted
[  512.595245][ T9344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.762673][ T5459] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  512.777905][ T5459] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  512.964515][ T5459] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  513.226473][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.256672][ T5459] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.274185][ T9361] loop2: detected capacity change from 0 to 1024
[  513.286647][ T9361] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  513.305619][ T5459] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  513.374868][ T9361] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1262: Invalid block bitmap block 0 in block_group 0
[  513.388759][ T5459] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.413878][ T5459] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  513.424406][ T9361] loop2: lost filesystem error report for type 5 error -117
[  513.424721][ T9361] Quota error (device loop2): write_blk: dquota write failed
[  513.439469][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  513.439490][    C0] EXT4-fs (loop2): initial error at time 1783108380: ext4_read_block_bitmap_nowait:483
[  513.439525][    C0] EXT4-fs (loop2): last error at time 1783108380: ext4_read_block_bitmap_nowait:483
[  513.466022][ T5459] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.475662][ T9361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  513.485961][ T9361] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1262: Failed to acquire dquot type 0
[  513.497407][ T9361] loop2: lost filesystem error report for type 5 error -117
[  513.497617][ T9361] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1262: Freeing blocks not in datazone - block = 0, count = 4096
[  513.518665][ T9361] loop2: lost filesystem error report for type 5 error -117
[  513.518875][ T9361] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1262: Invalid inode bitmap blk 0 in block_group 0
[  513.551404][ T5459] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  513.588205][ T9371] loop1: detected capacity change from 0 to 256
[  513.601398][ T9361] loop2: lost filesystem error report for type 5 error -117
[  513.601452][ T5459] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0
[  513.620255][ T5459] loop2: lost filesystem error report for type 5 error -117
[  513.624094][ T9361] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  513.640396][ T9361] loop2: lost filesystem error report for type 5 error -117
[  513.665356][ T9376] loop3: detected capacity change from 0 to 256
[  513.684382][ T9361] EXT4-fs (loop2): 1 orphan inode deleted
[  513.702424][ T9361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.041035][ T9379] siw: device registration error -23
[  514.107992][ T9361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1262'.
[  514.118950][ T9361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1262'.
[  514.261167][ T9379] xt_ecn: cannot match TCP bits for non-tcp packets
[  514.371440][ T9382] lo speed is unknown, defaulting to 1000
[  514.823468][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.894689][ T9383] ALSA: seq fatal error: cannot create timer (-22)
[  514.916088][ T9382] gre0 speed is unknown, defaulting to 1000
[  515.080985][ T9382] lo speed is unknown, defaulting to 1000
[  515.381758][ T9391] loop1: detected capacity change from 0 to 512
[  516.620231][ T9391] EXT4-fs (loop1): 1 truncate cleaned up
[  516.830495][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'.
[  517.675168][ T9391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.123341][ T9400] lo speed is unknown, defaulting to 1000
[  518.600849][   T28] audit: type=1400 audit(1783108384.661:1194): avc:  denied  { write } for  pid=9390 comm="syz.1.1268" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  519.002877][ T3290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.883232][   T28] audit: type=1400 audit(1783108386.841:1195): avc:  denied  { mount } for  pid=9418 comm="syz.0.1276" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  520.044158][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'.
[  520.124957][ T9400] gre0 speed is unknown, defaulting to 1000
[  521.330892][ T9400] lo speed is unknown, defaulting to 1000
[  522.025998][ T9428] loop1: detected capacity change from 0 to 2048
[  522.423685][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'.
[  522.443537][ T9428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.457279][ T9428] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.093928][ T9428] EXT4-fs (loop1): shut down requested (1)
[  523.212226][   T28] audit: type=1400 audit(1783108390.141:1196): avc:  denied  { read } for  pid=2960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  523.278450][   T28] audit: type=1400 audit(1783108390.141:1197): avc:  denied  { search } for  pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.314280][   T28] audit: type=1400 audit(1783108390.141:1198): avc:  denied  { write search } for  pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.398953][ T9445] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1281'.
[  523.408418][   T28] audit: type=1400 audit(1783108390.141:1199): avc:  denied  { add_name } for  pid=2960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.482759][ T3290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.491993][   T28] audit: type=1400 audit(1783108390.141:1200): avc:  denied  { create } for  pid=2960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  523.515975][ T9445] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1281'.
[  523.525316][   T28] audit: type=1400 audit(1783108390.141:1201): avc:  denied  { append open } for  pid=2960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  523.573635][ T9456] loop5: detected capacity change from 0 to 256
[  523.581295][   T28] audit: type=1400 audit(1783108390.141:1202): avc:  denied  { getattr } for  pid=2960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  523.604786][ T9456] vfat: Unknown parameter './file2'
[  524.675420][   T28] audit: type=1326 audit(1783108390.431:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.1.1277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa128fdde59 code=0x0
[  524.807904][ T9468] random: crng reseeded on system resumption
[  525.174056][ T9473] loop5: detected capacity change from 0 to 256
[  526.332721][ T9476] siw: device registration error -23
[  526.551530][ T9480] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  526.673224][ T9476] xt_ecn: cannot match TCP bits for non-tcp packets
[  527.659556][ T9494] loop3: detected capacity change from 0 to 512
[  527.666755][ T9494] EXT4-fs: Ignoring removed mblk_io_submit option
[  527.812400][ T9494] EXT4-fs (loop3): orphan cleanup on readonly fs
[  527.818789][ T9494] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  527.971487][ T9494] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1291: attempt to clear invalid blocks 2 len 1
[  527.984414][ T9494] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  527.991226][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  528.006776][    C1] EXT4-fs (loop3): initial error at time 1783108394: ext4_clear_blocks:876: inode 13
[  528.016275][    C1] EXT4-fs (loop3): last error at time 1783108394: ext4_clear_blocks:876: inode 13
[  528.093918][ T9494] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  528.108312][ T9494] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1291: invalid indirect mapped block 1819239214 (level 0)
[  528.122267][ T9494] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  528.127399][ T9494] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1291: invalid indirect mapped block 1819239214 (level 1)
[  528.150498][ T9494] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  528.152639][ T9494] EXT4-fs (loop3): 1 truncate cleaned up
[  528.168379][ T9494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  528.181846][ T9494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.235066][ T9510] loop5: detected capacity change from 0 to 512
[  530.488944][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'.
[  530.640772][ T9515] loop3: detected capacity change from 0 to 1024
[  530.713186][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.752253][ T9502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  530.763169][ T9502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  530.778192][ T9502] veth1_vlan: left promiscuous mode
[  530.785695][ T9502] veth0_vlan: left promiscuous mode
[  530.794629][ T9502] veth0_vlan: entered promiscuous mode
[  530.803159][ T9502] veth1_vlan: entered promiscuous mode
[  530.813466][ T9502] veth1_macvtap: left promiscuous mode
[  530.820446][ T9502] veth0_macvtap: left promiscuous mode
[  530.827270][ T9502] tipc: Resetting bearer <eth:veth0_macvtap>
[  530.834438][ T9502] veth0_macvtap: entered promiscuous mode
[  530.841499][ T9502] veth1_macvtap: entered promiscuous mode
[  530.851368][ T9515] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  530.877471][ T9510] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1296: corrupted xattr block 95: invalid header
[  530.892011][ T9510] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  530.895027][ T9515] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1297: Invalid block bitmap block 0 in block_group 0
[  530.896357][ T9510] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1296: bg 0: block 7: invalid block bitmap
[  530.904288][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  530.904308][    C1] EXT4-fs (loop5): initial error at time 1783108397: ext4_expand_extra_isize_ea:2810: inode 11
[  530.904342][    C1] EXT4-fs (loop5): last error at time 1783108397: ext4_expand_extra_isize_ea:2810: inode 11
[  530.904688][ T9515] loop3: lost filesystem error report for type 5 error -117
[  530.904884][ T9515] Quota error (device loop3): write_blk: dquota write failed
[  530.904902][ T9515] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  530.904980][ T9515] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1297: Failed to acquire dquot type 0
[  530.905002][ T9515] loop3: lost filesystem error report for type 5 error -117
[  530.905145][ T9515] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1297: Freeing blocks not in datazone - block = 0, count = 4096
[  530.905174][ T9515] loop3: lost filesystem error report for type 5 error -117
[  530.905321][ T9515] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1297: Invalid inode bitmap blk 0 in block_group 0
[  530.905348][ T9515] loop3: lost filesystem error report for type 5 error -117
[  530.918770][    C0] EXT4-fs (loop3): error count since last fsck: 3
[  530.918792][    C0] EXT4-fs (loop3): initial error at time 1783108397: ext4_read_block_bitmap_nowait:483
[  530.918822][    C0] EXT4-fs (loop3): last error at time 1783108397: ext4_free_blocks:6718
[  530.919030][ T9510] loop5: lost filesystem error report for type 5 error -117
[  530.931709][ T5459] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7
[  530.931737][ T5459] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0
[  530.931761][ T5459] loop3: lost filesystem error report for type 5 error -117
[  530.961021][ T9502] 8021q: adding VLAN 0 to HW filter on device eth0
[  530.974154][ T9510] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  530.976074][ T9515] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  530.976096][ T9515] loop3: lost filesystem error report for type 5 error -117
[  530.976210][ T9515] EXT4-fs (loop3): 1 orphan inode deleted
[  530.976635][ T9515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.986588][ T9510] loop5: lost filesystem error report for type 5 error -117
[  531.000269][ T9502] 8021q: adding VLAN 0 to HW filter on device eth1
[  531.008956][ T9510] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1296: corrupted xattr block 95: invalid header
[  531.098026][ T9502] 8021q: adding VLAN 0 to HW filter on device eth2
[  531.104043][ T9510] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  531.153278][ T9502] 8021q: adding VLAN 0 to HW filter on device eth3
[  531.171279][ T9510] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117)
[  531.224670][   T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.224718][   T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.224824][   T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.224856][   T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.225407][  T310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  531.232093][ T9510] EXT4-fs (loop5): 1 orphan inode deleted
[  531.334367][ T9510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.503655][ T9522] xt_recent: Unsupported userspace flags (000000b1)
[  531.691777][ T9534] loop1: detected capacity change from 0 to 164
[  531.706199][ T9534] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  531.728510][ T9515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1297'.
[  531.738519][ T9515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1297'.
[  531.742186][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.759038][ T9536] futex_wake_op: syz.2.1303 tries to shift op by 144; fix this program
[  531.785304][ T9539] netlink: 'syz.5.1304': attribute type 3 has an invalid length.
[  532.244187][ T9539] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  532.268050][ T9539] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  533.091188][   T28] audit: type=1400 audit(1783108400.052:1204): avc:  denied  { execstack } for  pid=9558 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  533.441486][ T9565] 
˙: renamed from dummy0 (while UP)
[  533.458813][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.692137][ T9569] gretap1: entered promiscuous mode
[  533.752107][ T9567] loop1: detected capacity change from 0 to 1764
[  534.511421][ T9605] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1324'.
[  534.735175][ T9607] netlink: 'syz.3.1325': attribute type 1 has an invalid length.
[  534.735217][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'.
[  535.070741][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.164162][   T28] audit: type=1400 audit(1783108402.133:1205): avc:  denied  { ioctl } for  pid=9611 comm="syz.2.1326" path="socket:[26879]" dev="sockfs" ino=26879 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  535.353720][ T9614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1327'.
[  535.353742][ T9614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1327'.
[  535.697221][ T9622] loop3: detected capacity change from 0 to 256
[  535.721267][   T28] audit: type=1400 audit(1783108402.693:1206): avc:  denied  { ioctl } for  pid=9621 comm="syz.3.1329" path="socket:[26539]" dev="sockfs" ino=26539 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  535.936238][ T9628] loop3: detected capacity change from 0 to 1764
[  536.140110][   T28] audit: type=1400 audit(1783108403.083:1207): avc:  denied  { append } for  pid=9636 comm="syz.1.1332" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  536.185630][ T9647] loop2: detected capacity change from 0 to 512
[  536.378239][ T9647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1338: bg 0: block 169: padding at end of block bitmap is not set
[  537.201420][ T9647] loop2: lost filesystem error report for type 5 error -117
[  537.202093][ T9647] Quota error (device loop2): write_blk: dquota write failed
[  537.217152][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  537.217203][    C0] EXT4-fs (loop2): initial error at time 1783108404: ext4_validate_block_bitmap:441
[  537.217272][    C0] EXT4-fs (loop2): last error at time 1783108404: ext4_validate_block_bitmap:441
[  537.366277][ T9647] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  537.376967][ T9647] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1338: Failed to acquire dquot type 0
[  538.320746][ T9647] loop2: lost filesystem error report for type 5 error -117
[  538.323137][ T9647] EXT4-fs (loop2): 1 truncate cleaned up
[  538.339544][ T9647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.353102][ T9647] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  538.632619][   T28] audit: type=1400 audit(1783108405.603:1208): avc:  denied  { bind } for  pid=9642 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  539.330686][ T9647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9647 comm=syz.2.1338
[  539.355303][ T9663] loop5: detected capacity change from 0 to 1764
[  540.402271][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.431082][ T9667] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  540.576345][ T9677] loop2: detected capacity change from 0 to 1024
[  540.600239][ T9677] EXT4-fs (loop2): orphan cleanup on readonly fs
[  540.633294][ T9677] EXT4-fs error (device loop2): ext4_quota_enable:7232: inode #4: comm syz.2.1343: iget: bad extended attribute block 196608
[  540.674605][ T9677] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  540.674895][ T9677] EXT4-fs error (device loop2): ext4_quota_enable:7235: comm syz.2.1343: Bad quota inode: 4, type: 1
[  540.684030][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  540.684058][    C0] EXT4-fs (loop2): initial error at time 1783108407: ext4_quota_enable:7232: inode 4
[  540.684101][    C0] EXT4-fs (loop2): last error at time 1783108407: ext4_quota_enable:7232: inode 4
[  540.834546][ T9677] loop2: lost filesystem error report for type 5 error -117
[  540.836117][ T9677] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  540.890334][ T9677] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  540.904467][ T9677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  541.264712][ T9687] loop5: detected capacity change from 0 to 1764
[  541.317700][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.449512][ T9691] loop2: detected capacity change from 0 to 512
[  541.524073][ T9691] EXT4-fs (loop2): 1 truncate cleaned up
[  541.537315][ T9691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.609794][   T28] audit: type=1400 audit(1783108408.573:1209): avc:  denied  { write } for  pid=9690 comm="syz.2.1349" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  541.638706][ T9701] loop3: detected capacity change from 0 to 256
[  541.669256][ T9701] FAT-fs (loop3): data area starts beyond volume (32 > 0)
[  541.688330][ T9689] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1348'.
[  541.695745][ T9701] FAT-fs (loop3): Can't find a valid FAT filesystem
[  541.698546][ T9691] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1349: bg 0: block 465: padding at end of block bitmap is not set
[  541.722647][ T9689] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1348'.
[  541.761191][ T9691] EXT4-fs (loop2): Remounting filesystem read-only
[  542.006479][   T28] audit: type=1400 audit(1783108408.973:1210): avc:  denied  { bind } for  pid=9706 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  542.197296][   T28] audit: type=1400 audit(1783108409.163:1211): avc:  denied  { bind } for  pid=9706 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  542.309444][ T9691] syz.2.1349 (9691) used greatest stack depth: 8384 bytes left
[  542.329614][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.989654][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  543.323369][ T9717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1367'.
[  546.073092][ T9734] loop2: detected capacity change from 0 to 512
[  546.131226][ T9734] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.1359: corrupted xattr block 95: invalid header
[  546.146109][ T9734] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  546.148746][ T9734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1359: bg 0: block 7: invalid block bitmap
[  546.149252][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  546.149429][    C0] EXT4-fs (loop2): initial error at time 1783108413: ext4_expand_extra_isize_ea:2810: inode 11
[  546.149642][    C0] EXT4-fs (loop2): last error at time 1783108413: ext4_expand_extra_isize_ea:2810: inode 11
[  546.222713][ T9734] loop2: lost filesystem error report for type 5 error -117
[  546.224465][ T9734] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  546.242567][ T9734] loop2: lost filesystem error report for type 5 error -117
[  546.244839][ T9734] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.1359: corrupted xattr block 95: invalid header
[  546.271155][ T9734] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  546.273747][ T9734] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117)
[  546.293619][ T9734] EXT4-fs (loop2): 1 orphan inode deleted
[  546.308101][ T9734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.151695][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.223493][ T9740] lo speed is unknown, defaulting to 1000
[  547.252058][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1361'.
[  547.289668][ T9740] gre0 speed is unknown, defaulting to 1000
[  547.506986][ T9740] lo speed is unknown, defaulting to 1000
[  548.444422][ T9758] loop3: detected capacity change from 0 to 764
[  548.453819][ T9758] rock: directory entry would overflow storage
[  548.460010][ T9758] rock: sig=0x5245, size=8, remaining=5
[  548.476465][ T9758] lo speed is unknown, defaulting to 1000
[  548.512228][ T9758] gre0 speed is unknown, defaulting to 1000
[  548.583594][ T9758] lo speed is unknown, defaulting to 1000
[  549.134241][ T9767] loop2: detected capacity change from 0 to 256
[  549.149921][ T9767] vfat: Unknown parameter './file2'
[  550.414320][ T9771] random: crng reseeded on system resumption
[  550.562053][ T9770] xt_ecn: cannot match TCP bits for non-tcp packets
[  550.996948][ T9764] loop5: detected capacity change from 0 to 512
[  552.240041][ T9764] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1366: bg 0: block 169: padding at end of block bitmap is not set
[  552.561736][ T9764] loop5: lost filesystem error report for type 5 error -117
[  552.563722][ T9764] Quota error (device loop5): write_blk: dquota write failed
[  552.571273][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  552.571331][    C0] EXT4-fs (loop5): initial error at time 1783108419: ext4_validate_block_bitmap:441
[  552.571410][    C0] EXT4-fs (loop5): last error at time 1783108419: ext4_validate_block_bitmap:441
[  553.289470][ T9764] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  553.300772][ T9764] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1366: Failed to acquire dquot type 0
[  553.312296][ T9764] loop5: lost filesystem error report for type 5 error -117
[  553.324544][ T9764] EXT4-fs (loop5): 1 truncate cleaned up
[  553.343418][ T9764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  553.356571][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1376'.
[  553.368197][ T9764] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  553.498649][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.536872][ T9800] all: renamed from lo
[  553.565311][ T9802] random: crng reseeded on system resumption
[  553.583707][ T9800] loop1: detected capacity change from 0 to 4096
[  553.623786][ T9800] EXT4-fs: test_dummy_encryption option not supported
[  553.636590][ T9805] lo speed is unknown, defaulting to 1000
[  553.851297][ T9802] loop5: detected capacity change from 0 to 512
[  553.953265][ T9802] EXT4-fs: Ignoring removed mblk_io_submit option
[  553.969554][ T9805] gre0 speed is unknown, defaulting to 1000
[  554.013728][ T9802] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  554.099592][ T9802] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  554.139140][ T9802] EXT4-fs (loop5): orphan cleanup on readonly fs
[  554.177209][ T9802] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1380: Invalid block bitmap block 0 in block_group 0
[  554.241035][ T9802] loop5: lost filesystem error report for type 5 error -117
[  554.241776][ T9802] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1380: Invalid block bitmap block 0 in block_group 0
[  554.249230][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  554.249251][    C0] EXT4-fs (loop5): last error at time 1783108421: ext4_read_block_bitmap_nowait:483
[  554.353336][ T9805] lo speed is unknown, defaulting to 1000
[  554.440337][ T9802] loop5: lost filesystem error report for type 5 error -117
[  554.441267][ T9802] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1380: Invalid block bitmap block 0 in block_group 0
[  554.705861][ T9802] loop5: lost filesystem error report for type 5 error -117
[  554.706509][ T9802] Quota error (device loop5): write_blk: dquota write failed
[  554.755334][ T9802] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  554.786447][ T9802] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1380: Failed to acquire dquot type 1
[  554.815144][ T9802] loop5: lost filesystem error report for type 5 error -28
[  554.815512][ T9802] EXT4-fs (loop5): 1 orphan inode deleted
[  554.828677][   T49] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[  554.837961][   T49] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1
[  554.851194][   T49] loop5: lost filesystem error report for type 5 error -117
[  554.862400][ T9802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  554.931951][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.297994][ T9805] loop3: detected capacity change from 0 to 1024
[  555.513129][ T9800] loop1: detected capacity change from 0 to 2048
[  556.882314][ T9829] loop2: detected capacity change from 0 to 1024
[  556.890031][ T9829] EXT4-fs: Ignoring removed bh option
[  557.839106][ T9800] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1.
[  558.347794][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  558.797685][ T9829] EXT4-fs warning (device loop2): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop2.
[  559.403129][ T9853] loop3: detected capacity change from 0 to 164
[  559.404095][ T9850] loop2: detected capacity change from 0 to 128
[  559.444674][ T9853] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  559.784866][ T9850] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  559.899467][ T9850] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  559.954969][ T9850] netlink: 'syz.2.1390': attribute type 1 has an invalid length.
[  560.300467][ T9850] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  560.300817][ T9866] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  560.517737][ T5878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  560.734388][ T9876] loop3: detected capacity change from 0 to 512
[  561.911461][ T9876] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.1392: corrupted xattr block 95: invalid header
[  561.925975][ T9876] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  561.927303][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  561.942833][    C1] EXT4-fs (loop3): initial error at time 1783108428: ext4_expand_extra_isize_ea:2810: inode 11
[  561.953188][    C1] EXT4-fs (loop3): last error at time 1783108428: ext4_expand_extra_isize_ea:2810: inode 11
[  561.971245][ T9876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1392: bg 0: block 7: invalid block bitmap
[  562.011065][ T9886] loop5: detected capacity change from 0 to 1024
[  562.018112][ T9886] EXT4-fs: inline encryption not supported
[  562.034886][ T9876] loop3: lost filesystem error report for type 5 error -117
[  562.117811][ T9876] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  562.135393][ T9876] loop3: lost filesystem error report for type 5 error -117
[  562.137473][ T9876] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.1392: corrupted xattr block 95: invalid header
[  562.160063][ T9876] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  562.165686][ T9876] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117)
[  562.186423][ T9876] EXT4-fs (loop3): 1 orphan inode deleted
[  562.205693][ T9876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.247866][ T9887] SELinux: syz.2.1393 (9887) wrote to user. This is no longer supported.
[  562.261612][ T9886] EXT4-fs: Ignoring removed bh option
[  562.317615][ T9886] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  562.538655][ T9886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.600183][ T9846] syz.0.1388 (9846) used greatest stack depth: 8376 bytes left
[  562.631173][   T28] audit: type=1400 audit(1783108429.596:1212): avc:  denied  { write } for  pid=9885 comm="syz.5.1395" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  562.676864][ T9886] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  562.743291][   T28] audit: type=1400 audit(1783108429.656:1213): avc:  denied  { write } for  pid=9892 comm="syz.5.1395" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  562.859277][ T9895] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  562.899713][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.912238][ T9898] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  564.071101][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.226568][ T9913] loop1: detected capacity change from 0 to 128
[  564.989529][ T9913] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  565.002587][ T9913] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  565.711281][ T9925] loop2: detected capacity change from 0 to 512
[  565.720694][ T9925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  565.738755][ T9925] EXT4-fs (loop2): 1 truncate cleaned up
[  565.745037][ T9925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.979614][   T28] audit: type=1400 audit(1783108432.946:1214): avc:  denied  { write } for  pid=9908 comm="syz.2.1398" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.008363][   T28] audit: type=1400 audit(1783108432.976:1215): avc:  denied  { write } for  pid=9911 comm="syz.1.1409" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.306391][ T9925] EXT4-fs (loop2): Online defrag not supported for non-extent files
[  566.352102][   T28] audit: type=1400 audit(1783108433.176:1216): avc:  denied  { write } for  pid=9908 comm="syz.2.1398" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  567.324667][   T28] audit: type=1400 audit(1783108433.636:1217): avc:  denied  { write } for  pid=9908 comm="syz.2.1398" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  567.346473][   T28] audit: type=1326 audit(1783108434.236:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  567.372000][   T28] audit: type=1326 audit(1783108434.236:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  567.845310][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.869670][ T9924] loop5: detected capacity change from 0 to 1024
[  567.964402][ T9924] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  568.204912][ T9940] syz.3.1404 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  568.219074][ T9940] CPU: 1 UID: 0 PID: 9940 Comm: syz.3.1404 Not tainted syzkaller #0 PREEMPT(lazy) 
[  568.219244][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  568.219271][ T9940] Call Trace:
[  568.219277][ T9940]  <TASK>
[  568.219340][ T9940]  __dump_stack+0x1d/0x30
[  568.219365][ T9940]  dump_stack_lvl+0x95/0xd0
[  568.219400][ T9940]  dump_stack+0x15/0x1b
[  568.219425][ T9940]  dump_header+0x80/0x240
[  568.219452][ T9940]  oom_kill_process+0x295/0x350
[  568.219491][ T9940]  out_of_memory+0x981/0xbc0
[  568.219554][ T9940]  try_charge_memcg+0x621/0xa00
[  568.219595][ T9940]  __memcg_kmem_charge_page+0x199/0x3a0
[  568.219678][ T9940]  __alloc_frozen_pages_noprof+0x18a/0x350
[  568.219711][ T9940]  alloc_pages_bulk_noprof+0x4c3/0x550
[  568.219744][ T9940]  ? policy_nodemask+0x417/0x5e0
[  568.219779][ T9940]  alloc_pages_bulk_mempolicy_noprof+0x358/0xe90
[  568.219834][ T9940]  ? alloc_pages_mpol+0xd9/0x1d0
[  568.219871][ T9940]  __vmalloc_node_range_noprof+0x88e/0x11e0
[  568.219940][ T9940]  __kvmalloc_node_noprof+0x3a0/0x590
[  568.219973][ T9940]  ? futex_hash_allocate+0x192/0x920
[  568.220013][ T9940]  ? futex_hash_allocate+0x192/0x920
[  568.220033][ T9940]  ? futex_hash_allocate+0x192/0x920
[  568.220059][ T9940]  futex_hash_allocate+0x192/0x920
[  568.220086][ T9940]  ? cap_task_prctl+0x13f/0x6b0
[  568.220167][ T9940]  futex_hash_prctl+0xd8/0xf0
[  568.220191][ T9940]  __se_sys_prctl+0x4f4/0x13b0
[  568.220225][ T9940]  __x64_sys_prctl+0x67/0x80
[  568.220251][ T9940]  x64_sys_call+0x2533/0x3020
[  568.220350][ T9940]  do_syscall_64+0x136/0x3c0
[  568.220403][ T9940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.220430][ T9940] RIP: 0033:0x7fd3c5a8de59
[  568.220455][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.220475][ T9940] RSP: 002b:00007fd3c4082028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  568.220585][ T9940] RAX: ffffffffffffffda RBX: 00007fd3c5d16270 RCX: 00007fd3c5a8de59
[  568.220599][ T9940] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  568.220665][ T9940] RBP: 00007fd3c5b23e6f R08: 0000000000000000 R09: 0000000000000000
[  568.220679][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  568.220693][ T9940] R13: 00007fd3c5d16308 R14: 00007fd3c5d16270 R15: 00007ffef8d2ae98
[  568.220717][ T9940]  </TASK>
[  568.220832][ T9940] memory: usage 307200kB, limit 307200kB, failcnt 159
[  568.242317][   T28] audit: type=1326 audit(1783108434.236:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  568.243650][ T9940] memory+swap: usage 308224kB, limit 9007199254740988kB, failcnt 0
[  568.262258][ T9924] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  568.263928][ T9940] kmem: usage 293288kB, limit 9007199254740988kB, failcnt 0
[  568.263945][ T9940] Memory cgroup stats for /syz3:
[  568.264334][ T9940] cache 13852672
[  568.295129][   T28] audit: type=1326 audit(1783108434.236:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  568.300080][ T9940] rss 389120
[  568.300089][ T9940] shmem 13602816
[  568.300096][ T9940] mapped_file 11763712
[  568.300105][ T9940] dirty 4096
[  568.300125][ T9940] writeback 0
[  568.300133][ T9940] workingset_refault_anon 83
[  568.332754][   T28] audit: type=1326 audit(1783108434.236:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  568.333448][ T9940] workingset_refault_file 465
[  568.361265][ T9924] JBD2: no valid journal superblock found
[  568.362612][ T9940] swap 1282048
[  568.362623][ T9940] swapcached 1650688
[  568.362632][ T9940] pgpgin 416635
[  568.372895][   T28] audit: type=1326 audit(1783108434.236:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fef0528dbc2 code=0x7ffc0000
[  568.377906][ T9940] pgpgout 413157
[  568.377915][ T9940] pgfault 500070
[  568.377924][ T9940] pgmajfault 27
[  568.387218][ T9924] EXT4-fs (loop5): Could not load journal inode
[  568.401955][ T9940] inactive_anon 45056
[  568.401969][ T9940] active_anon 13950976
[  568.401978][ T9940] inactive_file 114688
[  568.401986][ T9940] active_file 0
[  568.401995][ T9940] unevictable 8192
[  568.402025][ T9940] hierarchical_memory_limit 314572800
[  568.402078][ T9940] hierarchical_memsw_limit 9223372036854771712
[  568.402088][ T9940] total_cache 13852672
[  568.402097][ T9940] total_rss 389120
[  568.402155][ T9940] total_shmem 13602816
[  568.402162][ T9940] total_mapped_file 11763712
[  568.402171][ T9940] total_dirty 4096
[  568.434420][   T28] audit: type=1326 audit(1783108434.246:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef0524e68e code=0x7ffc0000
[  568.434569][ T9940] total_writeback 0
[  568.465831][   T28] audit: type=1326 audit(1783108434.246:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fef0528dc87 code=0x7ffc0000
[  568.485776][ T9940] total_workingset_refault_anon 83
[  568.485788][ T9940] total_workingset_refault_file 465
[  568.485798][ T9940] total_swap 1282048
[  568.640253][   T28] audit: type=1326 audit(1783108434.246:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef0524e68e code=0x7ffc0000
[  568.641509][ T9940] total_swapcached 1650688
[  568.641520][ T9940] total_pgpgin 416635
[  568.665122][   T28] audit: type=1326 audit(1783108434.246:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef0524e68e code=0x7ffc0000
[  568.666896][ T9940] total_pgpgout 413157
[  568.666913][ T9940] total_pgfault 500070
[  568.666923][ T9940] total_pgmajfault 27
[  568.692903][   T28] audit: type=1326 audit(1783108434.246:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  568.693397][ T9940] total_inactive_anon 45056
[  568.711541][   T28] audit: type=1326 audit(1783108434.246:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9921 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0528de59 code=0x7ffc0000
[  568.730968][ T9940] total_active_anon 13950976
[  568.730980][ T9940] total_inactive_file 114688
[  568.934224][ T9940] total_active_file 0
[  568.938320][ T9940] total_unevictable 8192
[  568.942578][ T9940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1404,pid=9936,uid=0
[  569.022726][ T9940] Memory cgroup out of memory: Killed process 9936 (syz.3.1404) total-vm:100596kB, anon-rss:1436kB, file-rss:26312kB, shmem-rss:11480kB, UID:0 pgtables:152kB oom_score_adj:1000
[  569.487563][ T3290] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  569.624179][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'.
[  569.633636][ T9957] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1412'.
[  569.690654][ T9961] loop5: detected capacity change from 0 to 164
[  569.711509][ T9961] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  570.758075][ T9976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9976 comm=syz.1.1412
[  570.929278][ T9957] 9p: Bad value for 'rfdno'
[  571.519493][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'.
[  571.865260][ T9988] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1419'.
[  571.885627][ T9966] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  571.987275][ T9966] bond3 (unregistering): Released all slaves
[  572.244743][ T9989] netlink: 'syz.5.1417': attribute type 12 has an invalid length.
[  572.253041][ T9980] syz_tun: entered allmulticast mode
[  572.770060][T10002] loop2: detected capacity change from 0 to 512
[  572.791040][ T9934] syz.3.1403 (9934) used greatest stack depth: 8152 bytes left
[  572.854919][T10002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  572.980930][T10002] EXT4-fs (loop2): 1 truncate cleaned up
[  572.994239][T10002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  573.898111][   T28] kauditd_printk_skb: 60 callbacks suppressed
[  573.898127][   T28] audit: type=1400 audit(1783108440.867:1290): avc:  denied  { write } for  pid=10000 comm="syz.2.1433" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  573.964914][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.129567][T10011] loop1: detected capacity change from 0 to 1024
[  574.225093][T10011] EXT4-fs: Ignoring removed mblk_io_submit option
[  575.078738][T10011] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  575.088968][T10011] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  575.129701][T10011] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  575.163574][T10011] EXT4-fs (loop1): journal inode is deleted
[  578.222214][T10042] loop1: detected capacity change from 0 to 2048
[  578.231680][T10042] ext4: Bad value for 'init_itable'
[  578.987178][T10052] loop5: detected capacity change from 0 to 1024
[  579.009049][T10052] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  579.053844][T10052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.085568][   T28] audit: type=1400 audit(1783108446.048:1291): avc:  denied  { connect } for  pid=10051 comm="syz.5.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  579.108925][   T28] audit: type=1400 audit(1783108446.048:1292): avc:  denied  { read } for  pid=10051 comm="syz.5.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  579.306061][T10055] syz_tun: left allmulticast mode
[  579.318220][   T11] syz2: Port: 1 Link DOWN
[  579.322691][  T310] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.332612][  T310] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.350187][  T310] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.360778][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.371091][  T310] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.440315][T10071] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1441'.
[  579.609053][T10075] ipip0: entered promiscuous mode
[  579.724960][   T28] audit: type=1400 audit(1783108446.678:1293): avc:  denied  { name_connect } for  pid=10074 comm="syz.5.1440" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  582.191031][  T310] Bluetooth: hci0: Frame reassembly failed (-84)
[  582.427850][T10094] loop5: detected capacity change from 0 to 1024
[  582.453271][T10094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  582.471178][T10094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  582.491044][T10094] tipc: Started in network mode
[  582.496579][T10094] tipc: Node identity 022c17f5102b, cluster identity 4711
[  582.504078][T10094] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  582.529562][   T28] audit: type=1400 audit(1783108449.478:1294): avc:  denied  { write } for  pid=10093 comm="syz.5.1445" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  582.553821][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.757166][T10114] loop5: detected capacity change from 0 to 512
[  582.774348][T10114] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  582.842823][T10114] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  583.146440][T10115] tipc: Resetting bearer <eth:veth0_macvtap>
[  583.278704][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'.
[  583.296768][   T30] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.309475][   T30] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.333301][   T30] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.351933][   T30] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.376441][   T30] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.390696][   T30] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.410027][   T30] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  583.419233][   T30] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.427904][T10126] lo speed is unknown, defaulting to 1000
[  583.469158][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'.
[  583.480800][T10126] gre0 speed is unknown, defaulting to 1000
[  583.495726][T10136] tipc: Node number set to 302454773
[  583.560756][T10126] lo speed is unknown, defaulting to 1000
[  583.589592][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  583.620241][T10157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10157 comm=syz.1.1458
[  583.662761][T10162] bridge_slave_0: left allmulticast mode
[  583.669199][T10162] bridge_slave_0: left promiscuous mode
[  583.677290][T10162] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.699334][T10162] bridge_slave_1: left allmulticast mode
[  583.713026][T10162] bridge_slave_1: left promiscuous mode
[  583.720691][T10162] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.744935][T10162] bond0: (slave 
1
@˙): Releasing backup interface
[  583.771392][T10162] bond0: (slave bond_slave_1): Releasing backup interface
[  583.796234][T10162] team0: Port device team_slave_0 removed
[  583.810944][T10162] team0: Port device team_slave_1 removed
[  583.819388][T10162] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.831864][T10162] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.842824][T10162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  583.876645][T10166] xt_hashlimit: size too large, truncated to 1048576
[  583.893526][T10171] netlink: 'syz.0.1461': attribute type 10 has an invalid length.
[  583.990904][T10173] loop2: detected capacity change from 0 to 8192
[  584.264993][ T6457] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  584.271133][T10100] Bluetooth: hci0: command 0x1003 tx timeout
[  584.563262][T10181] sit0: entered allmulticast mode
[  584.577017][T10181] sit0: entered promiscuous mode
[  584.957943][T10183] loop5: detected capacity change from 0 to 512
[  584.974414][T10183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  584.991237][T10183] EXT4-fs (loop5): 1 truncate cleaned up
[  584.999122][T10183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.017556][   T28] audit: type=1400 audit(1783108451.988:1295): avc:  denied  { write } for  pid=10182 comm="syz.5.1464" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  585.059144][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.618912][T10193] loop3: detected capacity change from 0 to 1024
[  585.646414][T10193] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  585.646414][T10193] 
[  585.711517][T10200] loop2: detected capacity change from 0 to 164
[  586.705035][T10200] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  586.830716][T10205] loop3: detected capacity change from 0 to 512
[  588.993530][T10205] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3.
[  589.012303][T10216] loop2: detected capacity change from 0 to 1024
[  589.020859][T10216] ext4: Unknown parameter 'nouser_xattr'
[  589.142922][T10219] loop5: detected capacity change from 0 to 512
[  589.160473][T10219] EXT4-fs: Ignoring removed i_version option
[  589.168741][T10219] EXT4-fs: Ignoring removed bh option
[  589.226534][T10219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.243296][T10219] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  589.273263][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1470'.
[  589.313470][T10216] loop2: detected capacity change from 0 to 1024
[  589.346761][T10216] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  589.853483][T10225] netlink: 'syz.3.1474': attribute type 1 has an invalid length.
[  589.861334][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'.
[  589.880527][T10224] netlink: 'syz.3.1474': attribute type 10 has an invalid length.
[  589.895007][T10224] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.906224][T10224] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.040518][T10216] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1473'.
[  590.049793][T10216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  590.454392][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.444845][T10245] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98
[  592.904354][   T28] audit: type=1400 audit(1783108459.868:1296): avc:  denied  { connect } for  pid=10255 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  592.972703][T10264] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1483'.
[  592.972806][T10257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1482'.
[  593.253374][   T28] audit: type=1400 audit(1783108460.218:1297): avc:  denied  { unmount } for  pid=6276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  593.358910][   T28] audit: type=1400 audit(1783108460.318:1298): avc:  denied  { getopt } for  pid=10276 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  593.659595][T10285] loop3: detected capacity change from 0 to 2048
[  593.718781][T10285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.741219][T10290] loop5: detected capacity change from 0 to 1024
[  593.748502][T10290] EXT4-fs: Ignoring removed bh option
[  593.779869][T10290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  593.792108][T10290] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  593.979447][T10285] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  594.166523][T10283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.858003][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  596.880501][T10321] loop2: detected capacity change from 0 to 512
[  597.203424][T10321] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  597.232033][T10321] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1496: inode #15: comm syz.2.1496: iget: illegal inode #
[  597.244774][T10321] loop2: lost filesystem error report for type 5 error -117
[  597.254919][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  597.268668][    C1] EXT4-fs (loop2): initial error at time 1783108464: ext4_orphan_get:1399
[  597.277204][    C1] EXT4-fs (loop2): last error at time 1783108464: ext4_orphan_get:1399
[  597.293449][T10321] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1496: couldn't read orphan inode 15 (err -117)
[  597.305454][T10321] loop2: lost filesystem error report for type 5 error -117
[  597.312121][T10321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.795672][T10329] 9p: Bad value for 'source'
[  598.026180][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.492101][T10334] loop2: detected capacity change from 0 to 512
[  598.527397][T10334] EXT4-fs: Ignoring removed i_version option
[  598.581408][T10334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.693495][T10334] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.733824][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.742488][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.751923][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1502'.
[  598.761542][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'.
[  598.900789][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'.
[  598.912043][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1503'.
[  599.038148][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'.
[  599.048728][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1503'.
[  599.145323][ T3427] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  599.155471][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  599.165512][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  599.193132][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  599.790516][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'.
[  599.801226][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'.
[  600.536422][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.934092][   T28] audit: type=1400 audit(1783108469.138:1299): avc:  denied  { connect } for  pid=10363 comm="syz.2.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  602.954572][   T28] audit: type=1400 audit(1783108469.918:1300): avc:  denied  { compute_member } for  pid=10364 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  603.143366][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'.
[  603.155107][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1508'.
[  603.727403][T10383] loop2: detected capacity change from 0 to 1024
[  603.819028][T10384] __nla_validate_parse: 1 callbacks suppressed
[  603.819045][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'.
[  603.842548][T10385] loop5: detected capacity change from 0 to 2048
[  603.863372][T10384] syz_tun (unregistering): left allmulticast mode
[  603.870085][T10384] syz_tun (unregistering): left promiscuous mode
[  603.890657][T10385]  loop5: p1 p4
[  603.894770][T10385] loop5: p4 size 589824 extends beyond EOD, truncated
[  603.907865][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1512'.
[  603.917037][T10385] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1512'.
[  603.968977][T10389] loop2: detected capacity change from 0 to 1024
[  603.986478][T10389] EXT4-fs: inline encryption not supported
[  603.995181][T10388] xfrm1: entered allmulticast mode
[  604.013727][T10389] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  604.029262][T10389] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1515: Freeing blocks not in datazone - block = 0, count = 4096
[  604.042798][T10389] loop2: lost filesystem error report for type 5 error -117
[  604.044176][T10389] EXT4-fs (loop2): Remounting filesystem read-only
[  604.051518][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  604.051538][    C0] EXT4-fs (loop2): initial error at time 1783108471: ext4_free_blocks:6718
[  604.051592][    C0] EXT4-fs (loop2): last error at time 1783108471: ext4_free_blocks:6718
[  604.082031][T10389] EXT4-fs (loop2): 1 orphan inode deleted
[  604.089416][T10389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.094500][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'.
[  604.112463][   T68] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  604.123376][   T68] Quota error (device loop2): write_blk: dquota write failed
[  604.131778][T10394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10394 comm=syz.0.1516
[  604.145071][   T68] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries
[  604.155370][   T68] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  604.165574][T10394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10394 comm=syz.0.1516
[  604.166109][   T68] Quota error (device loop2): write_blk: dquota write failed
[  604.186127][   T28] audit: type=1400 audit(1783108471.158:1301): avc:  denied  { accept } for  pid=10387 comm="syz.2.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  604.207003][   T68] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list
[  604.210696][T10394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10394 comm=syz.0.1516
[  604.217088][   T68] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  604.240181][   T68] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  604.256932][   T28] audit: type=1400 audit(1783108471.228:1302): avc:  denied  { cmd } for  pid=10393 comm="syz.1.1517" path="socket:[29294]" dev="sockfs" ino=29294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  604.287477][   T28] audit: type=1400 audit(1783108471.228:1303): avc:  denied  { ioctl } for  pid=10392 comm="syz.0.1516" path="socket:[29304]" dev="sockfs" ino=29304 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  604.467001][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.539659][T10406] loop2: detected capacity change from 0 to 512
[  604.546463][T10406] EXT4-fs: Ignoring removed nobh option
[  604.580421][T10406] ------------[ cut here ]------------
[  604.585981][T10406] EA inode 11 i_nlink=1026
[  604.586013][T10406] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.2.1520/10406
[  604.601365][T10406] Modules linked in:
[  604.605375][T10406] CPU: 0 UID: 0 PID: 10406 Comm: syz.2.1520 Not tainted syzkaller #0 PREEMPT(lazy) 
[  604.614833][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  604.624947][T10406] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330
[  604.631599][T10406] Code: 26 c8 96 ff 49 8d 7e 40 4c 8d 2d fb 85 5a 05 e8 26 a8 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a a3 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 40 d9 03 90 90 90 90 90 90 90
[  604.651275][T10406] RSP: 0018:ffffc9000a40b7f8 EFLAGS: 00010246
[  604.657454][T10406] RAX: ffff888103853ef0 RBX: ffff88811b5262c0 RCX: ffffffff81c2af36
[  604.665500][T10406] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3520
[  604.673477][T10406] RBP: 000000000000000b R08: 000188811b526273 R09: 0000000000000000
[  604.681505][T10406] R10: ffffc9000a40b728 R11: 0001c9000a40b728 R12: ffff88811b526270
[  604.689517][T10406] R13: ffffffff871d3520 R14: ffff88811b526228 R15: 0000000000000001
[  604.697526][T10406] FS:  00007f1f80e676c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000
[  604.706490][T10406] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  604.713093][T10406] CR2: 00007f07a7b18000 CR3: 0000000128dcc000 CR4: 00000000003506f0
[  604.721164][T10406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  604.729170][T10406] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  604.737193][T10406] Call Trace:
[  604.740482][T10406]  <TASK>
[  604.743431][T10406]  ext4_xattr_inode_dec_ref_all+0x579/0x8d0
[  604.749444][T10406]  ext4_xattr_delete_inode+0x6b5/0x790
[  604.754937][T10406]  ext4_evict_inode+0xb18/0xdf0
[  604.759803][T10406]  ? __pfx_ext4_evict_inode+0x10/0x10
[  604.765206][T10406]  evict+0x2a5/0x510
[  604.769234][T10406]  iput+0x430/0x5a0
[  604.773060][T10406]  ext4_process_orphan+0x1a4/0x1c0
[  604.778220][T10406]  ext4_orphan_cleanup+0x6a6/0xa10
[  604.783374][T10406]  ? ext4_register_li_request+0x14c/0x440
[  604.789148][T10406]  ext4_fill_super+0x33ab/0x3760
[  604.794156][T10406]  ? set_blocksize+0x14c/0x270
[  604.798964][T10406]  ? __pfx_ext4_fill_super+0x10/0x10
[  604.804287][T10406]  get_tree_bdev_flags+0x291/0x300
[  604.809703][T10406]  ? __pfx_ext4_fill_super+0x10/0x10
[  604.815058][T10406]  get_tree_bdev+0x1f/0x30
[  604.819496][T10406]  ext4_get_tree+0x1c/0x30
[  604.823988][T10406]  vfs_get_tree+0x57/0x1d0
[  604.828456][T10406]  do_new_mount+0x288/0x8d0
[  604.833054][T10406]  path_mount+0x4ad/0xb90
[  604.837450][T10406]  __se_sys_mount+0x28c/0x2e0
[  604.840658][T10408] loop5: detected capacity change from 0 to 128
[  604.842141][T10406]  __x64_sys_mount+0x67/0x80
[  604.842170][T10406]  x64_sys_call+0x2d61/0x3020
[  604.842201][T10406]  do_syscall_64+0x136/0x3c0
[  604.842243][T10406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.842285][T10406] RIP: 0033:0x7f1f8240f0ca
[  604.842304][T10406] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.842325][T10406] RSP: 002b:00007f1f80e66e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  604.900900][T10406] RAX: ffffffffffffffda RBX: 00007f1f80e66ee0 RCX: 00007f1f8240f0ca
[  604.908913][T10406] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f1f80e66ea0
[  604.916957][T10406] RBP: 0000200000000180 R08: 00007f1f80e66ee0 R09: 0000000000800718
[  604.924975][T10406] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  604.932957][T10406] R13: 00007f1f80e66ea0 R14: 00000000000004a3 R15: 00002000000003c0
[  604.940976][T10406]  </TASK>
[  604.943990][T10406] ---[ end trace 0000000000000000 ]---
[  604.951561][T10406] EXT4-fs (loop2): 1 orphan inode deleted
[  604.958105][T10406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.962390][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'.
[  604.989152][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1521'.
[  604.991275][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'.
[  605.038977][T10406] xt_policy: neither incoming nor outgoing policy selected
[  605.079728][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1520'.
[  605.109980][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.199293][T10419] loop2: detected capacity change from 0 to 512
[  605.208490][T10419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  605.259092][T10421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10421 comm=syz.1.1525
[  605.480099][T10419] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1524: invalid indirect mapped block 83886080 (level 1)
[  605.494299][T10419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  605.494579][T10419] EXT4-fs (loop2): Remounting filesystem read-only
[  605.503736][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  605.503750][    C0] EXT4-fs (loop2): initial error at time 1783108472: ext4_free_branches:1023: inode 16
[  605.503775][    C0] EXT4-fs (loop2): last error at time 1783108472: ext4_free_branches:1023: inode 16
[  605.605635][T10419] EXT4-fs (loop2): 1 orphan inode deleted
[  605.611799][T10419] EXT4-fs (loop2): 1 truncate cleaned up
[  605.618943][T10419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.859450][T10439] loop5: detected capacity change from 0 to 512
[  606.875415][T10439] ext4: Unknown parameter 'smackfstransmute'
[  607.072776][T10439] loop5: detected capacity change from 0 to 256
[  607.405015][T10439] lo speed is unknown, defaulting to 1000
[  607.769056][T10439] gre0 speed is unknown, defaulting to 1000
[  607.885342][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.000566][T10448] loop2: detected capacity change from 0 to 512
[  608.011016][T10448] EXT4-fs: Ignoring removed bh option
[  608.069420][T10439] lo speed is unknown, defaulting to 1000
[  608.082040][T10448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  608.095281][T10448] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  608.620888][T10454] netlink: 'syz.1.1532': attribute type 10 has an invalid length.
[  609.075174][T10458] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1533'.
[  609.643690][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  609.643704][   T28] audit: type=1400 audit(1783108476.608:1305): avc:  denied  { setopt } for  pid=10451 comm="syz.1.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  611.527725][T10467] syz.3.1534 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  611.541782][T10467] CPU: 1 UID: 0 PID: 10467 Comm: syz.3.1534 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  611.541842][T10467] Tainted: [W]=WARN
[  611.541849][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  611.541932][T10467] Call Trace:
[  611.541940][T10467]  <TASK>
[  611.541951][T10467]  __dump_stack+0x1d/0x30
[  611.542011][T10467]  dump_stack_lvl+0x95/0xd0
[  611.542036][T10467]  dump_stack+0x15/0x1b
[  611.542056][T10467]  dump_header+0x80/0x240
[  611.542080][T10467]  oom_kill_process+0x295/0x350
[  611.542119][T10467]  out_of_memory+0x981/0xbc0
[  611.542212][T10467]  try_charge_memcg+0x621/0xa00
[  611.542297][T10467]  ? __rcu_read_unlock+0x4e/0x70
[  611.542337][T10467]  __memcg_kmem_charge_page+0x199/0x3a0
[  611.542372][T10467]  __alloc_frozen_pages_noprof+0x18a/0x350
[  611.542486][T10467]  alloc_pages_mpol+0xa9/0x1d0
[  611.542521][T10467]  alloc_pages_noprof+0x8f/0x140
[  611.542550][T10467]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  611.542591][T10467]  __kvmalloc_node_noprof+0x3a0/0x590
[  611.542663][T10467]  ? futex_hash_allocate+0x192/0x920
[  611.542745][T10467]  ? futex_hash_allocate+0x192/0x920
[  611.542768][T10467]  ? futex_hash_allocate+0x192/0x920
[  611.542793][T10467]  futex_hash_allocate+0x192/0x920
[  611.542815][T10467]  ? cap_task_prctl+0x13f/0x6b0
[  611.542921][T10467]  futex_hash_prctl+0xd8/0xf0
[  611.542946][T10467]  __se_sys_prctl+0x4f4/0x13b0
[  611.543047][T10467]  __x64_sys_prctl+0x67/0x80
[  611.543073][T10467]  x64_sys_call+0x2533/0x3020
[  611.543101][T10467]  do_syscall_64+0x136/0x3c0
[  611.543172][T10467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.543199][T10467] RIP: 0033:0x7fd3c5a8de59
[  611.543218][T10467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.543274][T10467] RSP: 002b:00007fd3c4082028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  611.543294][T10467] RAX: ffffffffffffffda RBX: 00007fd3c5d16270 RCX: 00007fd3c5a8de59
[  611.543308][T10467] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  611.543322][T10467] RBP: 00007fd3c5b23e6f R08: 0000000000000000 R09: 0000000000000000
[  611.543339][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  611.543355][T10467] R13: 00007fd3c5d16308 R14: 00007fd3c5d16270 R15: 00007ffef8d2ae98
[  611.543443][T10467]  </TASK>
[  611.543462][T10467] memory: usage 307200kB, limit 307200kB, failcnt 799
[  611.820859][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.830980][T10467] memory+swap: usage 308452kB, limit 9007199254740988kB, failcnt 0
[  611.838909][T10467] kmem: usage 271132kB, limit 9007199254740988kB, failcnt 0
[  611.846237][T10467] Memory cgroup stats for /syz3:
[  611.846764][T10467] cache 36315136
[  611.855234][T10467] rss 614400
[  611.858495][T10467] shmem 36315136
[  611.862053][T10467] mapped_file 4198400
[  611.866073][T10467] dirty 0
[  611.869107][T10467] writeback 0
[  611.872396][T10467] workingset_refault_anon 83
[  611.877023][T10467] workingset_refault_file 1570
[  611.881876][T10467] swap 1282048
[  611.885261][T10467] swapcached 1650688
[  611.889159][T10467] pgpgin 499190
[  611.892631][T10467] pgpgout 490173
[  611.896202][T10467] pgfault 552258
[  611.899757][T10467] pgmajfault 50
[  611.903211][T10467] inactive_anon 49152
[  611.907296][T10467] active_anon 36884480
[  611.911372][T10467] inactive_file 0
[  611.915076][T10467] active_file 0
[  611.918576][T10467] unevictable 0
[  611.922028][T10467] hierarchical_memory_limit 314572800
[  611.927418][T10467] hierarchical_memsw_limit 9223372036854771712
[  611.933573][T10467] total_cache 36315136
[  611.937758][T10467] total_rss 614400
[  611.941512][T10467] total_shmem 36315136
[  611.945662][T10467] total_mapped_file 4198400
[  611.950220][T10467] total_dirty 0
[  611.953687][T10467] total_writeback 0
[  611.957538][T10467] total_workingset_refault_anon 83
[  611.962719][T10467] total_workingset_refault_file 1570
[  611.968030][T10467] total_swap 1282048
[  611.971941][T10467] total_swapcached 1650688
[  611.976465][T10467] total_pgpgin 499190
[  611.980451][T10467] total_pgpgout 490173
[  611.984542][T10467] total_pgfault 552258
[  611.988630][T10467] total_pgmajfault 50
[  611.992611][T10467] total_inactive_anon 49152
[  611.997183][T10467] total_active_anon 36884480
[  612.001823][T10467] total_inactive_file 0
[  612.006044][T10467] total_active_file 0
[  612.010038][T10467] total_unevictable 0
[  612.014103][T10467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.410,pid=5158,uid=0
[  612.028711][T10467] Memory cgroup out of memory: Killed process 5158 (syz.3.410) total-vm:96360kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000
[  612.068103][T10467] syz.3.1534 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  612.081998][T10467] CPU: 1 UID: 0 PID: 10467 Comm: syz.3.1534 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  612.082113][T10467] Tainted: [W]=WARN
[  612.082121][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  612.082136][T10467] Call Trace:
[  612.082142][T10467]  <TASK>
[  612.082151][T10467]  __dump_stack+0x1d/0x30
[  612.082220][T10467]  dump_stack_lvl+0x95/0xd0
[  612.082241][T10467]  dump_stack+0x15/0x1b
[  612.082303][T10467]  dump_header+0x80/0x240
[  612.082326][T10467]  oom_kill_process+0x295/0x350
[  612.082361][T10467]  out_of_memory+0x981/0xbc0
[  612.082434][T10467]  try_charge_memcg+0x621/0xa00
[  612.082472][T10467]  ? __rcu_read_unlock+0x4e/0x70
[  612.082504][T10467]  __memcg_kmem_charge_page+0x199/0x3a0
[  612.082584][T10467]  __alloc_frozen_pages_noprof+0x18a/0x350
[  612.082615][T10467]  alloc_pages_mpol+0xa9/0x1d0
[  612.082714][T10467]  alloc_pages_noprof+0x8f/0x140
[  612.082743][T10467]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  612.082787][T10467]  __kvmalloc_node_noprof+0x3a0/0x590
[  612.082886][T10467]  ? futex_hash_allocate+0x192/0x920
[  612.082910][T10467]  ? futex_hash_allocate+0x192/0x920
[  612.082930][T10467]  ? futex_hash_allocate+0x192/0x920
[  612.082957][T10467]  futex_hash_allocate+0x192/0x920
[  612.083015][T10467]  ? cap_task_prctl+0x13f/0x6b0
[  612.083050][T10467]  futex_hash_prctl+0xd8/0xf0
[  612.083073][T10467]  __se_sys_prctl+0x4f4/0x13b0
[  612.083100][T10467]  __x64_sys_prctl+0x67/0x80
[  612.083190][T10467]  x64_sys_call+0x2533/0x3020
[  612.083221][T10467]  do_syscall_64+0x136/0x3c0
[  612.083334][T10467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.083359][T10467] RIP: 0033:0x7fd3c5a8de59
[  612.083375][T10467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.083393][T10467] RSP: 002b:00007fd3c4082028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  612.083443][T10467] RAX: ffffffffffffffda RBX: 00007fd3c5d16270 RCX: 00007fd3c5a8de59
[  612.083461][T10467] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  612.083475][T10467] RBP: 00007fd3c5b23e6f R08: 0000000000000000 R09: 0000000000000000
[  612.083488][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.083509][T10467] R13: 00007fd3c5d16308 R14: 00007fd3c5d16270 R15: 00007ffef8d2ae98
[  612.083528][T10467]  </TASK>
[  612.083545][T10467] memory: usage 307200kB, limit 307200kB, failcnt 840
[  612.320243][T10467] memory+swap: usage 308240kB, limit 9007199254740988kB, failcnt 0
[  612.328166][T10467] kmem: usage 271132kB, limit 9007199254740988kB, failcnt 0
[  612.335492][T10467] Memory cgroup stats for /syz3:
[  612.335984][T10467] cache 36315136
[  612.344440][T10467] rss 614400
[  612.347645][T10467] shmem 36315136
[  612.351260][T10467] mapped_file 4198400
[  612.355318][T10467] dirty 0
[  612.358240][T10467] writeback 0
[  612.361564][T10467] workingset_refault_anon 83
[  612.366175][T10467] workingset_refault_file 1570
[  612.370987][T10467] swap 1282048
[  612.374344][T10467] swapcached 1650688
[  612.378471][T10467] pgpgin 499190
[  612.381922][T10467] pgpgout 490173
[  612.385499][T10467] pgfault 552258
[  612.389048][T10467] pgmajfault 50
[  612.392498][T10467] inactive_anon 49152
[  612.396496][T10467] active_anon 36884480
[  612.400567][T10467] inactive_file 0
[  612.404255][T10467] active_file 0
[  612.407825][T10467] unevictable 0
[  612.411278][T10467] hierarchical_memory_limit 314572800
[  612.416771][T10467] hierarchical_memsw_limit 9223372036854771712
[  612.422965][T10467] total_cache 36315136
[  612.427181][T10467] total_rss 614400
[  612.430967][T10467] total_shmem 36315136
[  612.435110][T10467] total_mapped_file 4198400
[  612.439611][T10467] total_dirty 0
[  612.443068][T10467] total_writeback 0
[  612.446927][T10467] total_workingset_refault_anon 83
[  612.452087][T10467] total_workingset_refault_file 1570
[  612.457430][T10467] total_swap 1282048
[  612.461312][T10467] total_swapcached 1650688
[  612.465795][T10467] total_pgpgin 499190
[  612.469779][T10467] total_pgpgout 490173
[  612.473819][T10467] total_pgfault 552258
[  612.477920][T10467] total_pgmajfault 50
[  612.481965][T10467] total_inactive_anon 49152
[  612.486571][T10467] total_active_anon 36884480
[  612.491156][T10467] total_inactive_file 0
[  612.495400][T10467] total_active_file 0
[  612.499369][T10467] total_unevictable 0
[  612.503340][T10467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.410,pid=5157,uid=0
[  612.518019][T10467] Memory cgroup out of memory: Killed process 5157 (syz.3.410) total-vm:96360kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000
[  612.634818][   T28] audit: type=1400 audit(1783108479.598:1306): avc:  denied  { mount } for  pid=10479 comm="syz.1.1539" name="/" dev="autofs" ino=29469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  614.743765][   T28] audit: type=1326 audit(1783108481.708:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.1.1544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa128fdde59 code=0x0
[  616.138369][T10511] netlink: 'syz.3.1546': attribute type 4 has an invalid length.
[  617.324547][T10524] tipc: Started in network mode
[  617.329745][T10524] tipc: Node identity 84e, cluster identity 4711
[  618.306139][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'.
[  618.323308][T10524] tipc: Node number set to 2126
[  618.351096][T10515] loop2: detected capacity change from 0 to 1024
[  619.995004][T10533] netlink: 'syz.3.1550': attribute type 1 has an invalid length.
[  620.274498][T10541] netlink: 'syz.3.1550': attribute type 10 has an invalid length.
[  620.282449][T10541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'.
[  621.541906][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  621.551060][T10541] 
˙: entered promiscuous mode
[  622.411653][T10561] loop5: detected capacity change from 0 to 512
[  622.481522][T10561] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  622.496312][T10561] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.1559: invalid block
[  622.509136][T10561] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  622.514545][T10561] EXT4-fs (loop5): 1 truncate cleaned up
[  622.515214][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  622.515295][    C1] EXT4-fs (loop5): initial error at time 1783108489: ext4_get_branch:178: inode 13: block 1024
[  622.516225][    C1] EXT4-fs (loop5): last error at time 1783108489: ext4_get_branch:178: inode 13: block 1024
[  622.578993][T10561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.620909][T10569] loop2: detected capacity change from 0 to 512
[  622.673567][T10569] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  622.689480][T10569] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  622.699957][T10569] EXT4-fs (loop2): 1 truncate cleaned up
[  622.973461][T10569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.041064][T10569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1562'.
[  623.130345][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.420328][   T28] audit: type=1400 audit(1783108489.568:1308): avc:  denied  { execheap } for  pid=10564 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  623.592492][T10581] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1563'.
[  623.809134][   T28] audit: type=1400 audit(1783108490.388:1309): avc:  denied  { create } for  pid=10574 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  623.905704][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.947813][T10575] infiniband uyz0: set down
[  623.952547][T10575] infiniband uyz0: added bridge_slave_1
[  624.082389][T10575] RDS/IB: uyz0: added
[  624.278946][T10575] smc: adding ib device uyz0 with port count 1
[  624.300761][T10575] smc:    ib device uyz0 port 1 has no pnetid
[  625.628171][T10594] pim6reg: left allmulticast mode
[  625.801723][   T28] audit: type=1400 audit(1783108492.768:1310): avc:  denied  { setopt } for  pid=10596 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  625.827278][T10604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1571'.
[  626.261822][T10604] netlink: 642 bytes leftover after parsing attributes in process `syz.2.1571'.
[  626.322958][T10611] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1573'.
[  626.332285][T10611] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1573'.
[  626.342140][   T28] audit: type=1400 audit(1783108493.288:1311): avc:  denied  { lock } for  pid=10609 comm="syz.5.1573" path="socket:[30762]" dev="sockfs" ino=30762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  626.707066][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'.
[  626.717007][T10614] netlink: 'syz.2.1574': attribute type 5 has an invalid length.
[  626.727116][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'.
[  626.743426][T10616] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1575'.
[  626.756433][T10614] loop2: detected capacity change from 0 to 512
[  626.770324][T10614] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  626.810106][T10614] EXT4-fs (loop2): 1 truncate cleaned up
[  626.823925][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.859789][T10614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1574'.
[  626.879079][T10614] xt_TCPMSS: Only works on TCP SYN packets
[  627.134092][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'.
[  627.326666][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.672394][   T28] audit: type=1400 audit(1783108494.618:1312): avc:  denied  { accept } for  pid=10626 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  627.677879][T10632] loop2: detected capacity change from 0 to 128
[  627.855305][   T28] audit: type=1400 audit(1783108494.818:1313): avc:  denied  { create } for  pid=10631 comm="syz.2.1581" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  627.863899][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.866235][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.612618][T10639] loop5: detected capacity change from 0 to 4096
[  628.634201][T10639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.655437][   T28] audit: type=1400 audit(1783108495.618:1314): avc:  denied  { write } for  pid=10637 comm="syz.5.1582" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  628.706081][T10650] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  628.722204][T10652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1584'.
[  628.736823][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'.
[  628.851905][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'.
[  628.924016][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.951956][T10663] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1585'.
[  629.000155][T10669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1588'.
[  629.008823][T10659] IPVS: stopping backup sync thread 10671 ...
[  629.015492][T10665] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  629.016077][T10671] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0
[  629.045606][T10665] batman_adv: batadv0: Adding interface: gretap1
[  629.052210][T10665] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.077923][T10665] batman_adv: batadv0: Interface activated: gretap1
[  629.137566][T10676] netlink: 600 bytes leftover after parsing attributes in process `syz.0.1590'.
[  629.245991][T10685] ./file0: Can't lookup blockdev
[  630.388575][T10711] netlink: 'syz.0.1599': attribute type 4 has an invalid length.
[  630.407887][T10711] nfs4: Unknown parameter '
/file0'
[  630.429670][   T28] audit: type=1400 audit(1783108497.398:1315): avc:  denied  { create } for  pid=10703 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  632.401508][T10720] lo speed is unknown, defaulting to 1000
[  633.564602][T10720] gre0 speed is unknown, defaulting to 1000
[  633.699168][T10720] lo speed is unknown, defaulting to 1000
[  633.825038][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.834677][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.065975][T10721] loop2: detected capacity change from 0 to 512
[  634.172351][T10721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.390057][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.445472][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.457755][T10752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.467032][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.476239][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.485754][T10752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.495086][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.504738][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.518006][   T28] audit: type=1400 audit(1783108501.488:1316): avc:  denied  { read } for  pid=10747 comm="syz.1.1609" lport=12208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  634.539435][T10752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.549867][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.559033][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'.
[  634.729848][   T28] audit: type=1400 audit(1783108501.698:1317): avc:  denied  { create } for  pid=10750 comm="syz.5.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  635.539864][T10767] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  635.556648][T10755] netlink: 'syz.2.1610': attribute type 3 has an invalid length.
[  636.828454][T10755] loop2: detected capacity change from 0 to 512
[  637.825612][T10755] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  637.836335][T10755] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  637.836387][T10755] EXT4-fs: failed to create workqueue
[  637.851527][T10755] EXT4-fs (loop2): mount failed
[  639.023599][T10780] netlink: 'syz.5.1617': attribute type 4 has an invalid length.
[  640.678068][T10805] loop2: detected capacity change from 0 to 512
[  640.742035][T10805] autofs4:pid:10805:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1984.8192), cmd(0xc0189371)
[  640.756354][T10805] autofs4:pid:10805:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371)
[  640.825184][   T28] audit: type=1400 audit(1783108507.698:1318): avc:  denied  { write } for  pid=10804 comm="syz.2.1624" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  640.868625][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.880594][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.999362][T10806] __nla_validate_parse: 20 callbacks suppressed
[  640.999380][T10806] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1619'.
[  641.515329][T10823] loop2: detected capacity change from 0 to 4096
[  641.522726][T10823] EXT4-fs: Ignoring removed nomblk_io_submit option
[  641.565495][T10814] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  641.655660][T10827] tmpfs: Bad value for 'mpol'
[  641.788836][T10823] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  641.791526][T10814] bond2: (slave lo): Enslaving as an active interface with an up link
[  641.972039][T10814] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  642.010584][T10806] netlink: 'syz.1.1619': attribute type 3 has an invalid length.
[  642.032037][   T28] audit: type=1400 audit(1783108508.998:1319): avc:  denied  { name_bind } for  pid=10802 comm="syz.1.1619" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  642.078486][T10826] lo speed is unknown, defaulting to 1000
[  642.234332][T10826] gre0 speed is unknown, defaulting to 1000
[  642.541913][T10826] lo speed is unknown, defaulting to 1000
[  642.650558][T10823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  642.826383][   T28] audit: type=1400 audit(1783108509.788:1320): avc:  denied  { write } for  pid=10812 comm="syz.2.1627" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  642.848610][   T28] audit: type=1400 audit(1783108509.788:1321): avc:  denied  { write } for  pid=10812 comm="syz.2.1627" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.086105][   T28] audit: type=1400 audit(1783108509.788:1322): avc:  denied  { write } for  pid=10812 comm="syz.2.1627" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.933390][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.004680][   T28] audit: type=1400 audit(1783108510.968:1323): avc:  denied  { map } for  pid=10835 comm="syz.1.1631" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  644.030364][   T28] audit: type=1400 audit(1783108510.968:1324): avc:  denied  { read write } for  pid=10835 comm="syz.1.1631" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  644.177324][T10851] loop5: detected capacity change from 0 to 1024
[  644.206412][T10851] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  644.262701][T10868] loop2: detected capacity change from 0 to 512
[  644.272256][T10868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  644.289900][T10868] EXT4-fs (loop2): 1 orphan inode deleted
[  644.296689][T10868] EXT4-fs (loop2): 1 truncate cleaned up
[  644.309953][T10851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.323471][T10868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.347686][   T28] audit: type=1400 audit(1783108511.318:1325): avc:  denied  { write } for  pid=10867 comm="syz.2.1638" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.426559][   T28] audit: type=1400 audit(1783108511.328:1326): avc:  denied  { write } for  pid=10842 comm="syz.5.1634" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.449555][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.451787][   T28] audit: type=1400 audit(1783108511.328:1327): avc:  denied  { write } for  pid=10842 comm="syz.5.1634" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.567448][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.602410][T10887] loop2: detected capacity change from 0 to 512
[  644.621095][T10887] vfat: Unknown parameter 'shortjame'
[  645.836311][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'.
[  646.717461][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1641'.
[  646.802425][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1641'.
[  646.854489][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  646.854503][   T28] audit: type=1400 audit(1783108513.758:1331): avc:  denied  { remount } for  pid=10895 comm="syz.3.1646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  647.186862][T10908] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  647.194420][T10908] vhci_hcd vhci_hcd.0: invalid port number 255
[  647.202888][T10908] netlink: 'syz.2.1648': attribute type 10 has an invalid length.
[  647.268905][T10924] loop5: detected capacity change from 0 to 512
[  647.348172][T10924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.360854][T10924] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  647.419210][T10931] loop2: detected capacity change from 0 to 512
[  647.465138][   T28] audit: type=1400 audit(1783108514.428:1332): avc:  denied  { mounton } for  pid=10907 comm="syz.2.1648" path="/201/file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  647.488354][T10931] EXT4-fs: old and new quota format mixing
[  647.584882][T10941] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1655'.
[  647.621390][T10947] smc: net device lo applied user defined pnetid SYZ2
[  647.629146][T10947] smc: net device lo erased user defined pnetid SYZ2
[  647.724534][   T28] audit: type=1400 audit(1783108514.688:1333): avc:  denied  { write } for  pid=10951 comm="syz.1.1659" path="socket:[30677]" dev="sockfs" ino=30677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  647.774053][   T28] audit: type=1400 audit(1783108514.738:1334): avc:  denied  { getopt } for  pid=10951 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  647.940099][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.198400][T10963] xt_CONNSECMARK: invalid mode: 0
[  649.184923][T10963] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  649.191466][T10963] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  649.199033][T10963] vhci_hcd vhci_hcd.0: Device attached
[  649.355169][T10964] vhci_hcd: connection closed
[  649.356038][  T310] vhci_hcd vhci_hcd.5: stop threads
[  649.366346][  T310] vhci_hcd vhci_hcd.5: release socket
[  649.373511][  T310] vhci_hcd vhci_hcd.5: disconnect device
[  651.059694][   T28] audit: type=1326 audit(1783108518.028:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  651.087283][   T28] audit: type=1326 audit(1783108518.028:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  651.297045][T10986] netlink: 'syz.0.1666': attribute type 29 has an invalid length.
[  651.388627][T10986] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  652.055092][T10997] x_tables: ip_tables: osf match: only valid for protocol 6
[  652.066929][T10998] netlink: 996 bytes leftover after parsing attributes in process `syz.0.1670'.
[  652.077173][   T28] audit: type=1326 audit(1783108518.028:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  652.105260][   T28] audit: type=1326 audit(1783108518.028:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  652.502422][   T28] audit: type=1326 audit(1783108518.028:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  652.588001][   T28] audit: type=1326 audit(1783108518.058:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  652.993653][   T28] audit: type=1326 audit(1783108518.058:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  653.021154][   T28] audit: type=1326 audit(1783108518.058:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  653.048254][   T28] audit: type=1326 audit(1783108518.058:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  653.215133][   T28] audit: type=1326 audit(1783108518.058:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  653.344921][   T28] audit: type=1326 audit(1783108518.058:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  653.370533][   T28] audit: type=1326 audit(1783108518.058:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.1663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8240de59 code=0x7ffc0000
[  654.762769][T11029] loop2: detected capacity change from 0 to 164
[  654.773629][T11029] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[  656.107567][T11048] loop5: detected capacity change from 0 to 2048
[  656.133423][T11048] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  656.283849][T11048] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  656.290522][T11048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  656.303652][T11048] vhci_hcd vhci_hcd.0: Device attached
[  656.309526][T11061] vhci_hcd: connection closed
[  656.324761][   T12] vhci_hcd vhci_hcd.5: stop threads
[  656.349334][   T12] vhci_hcd vhci_hcd.5: release socket
[  656.363880][T11070] atomic_op ffff888105777d28 conn xmit_atomic 0000000000000000
[  656.372479][   T12] vhci_hcd vhci_hcd.5: disconnect device
[  657.486832][T11085] sctp: [Deprecated]: syz.2.1692 (pid 11085) Use of int in maxseg socket option.
[  657.486832][T11085] Use struct sctp_assoc_value instead
[  658.155097][T11093] loop2: detected capacity change from 0 to 2048
[  658.171027][T11093] ext4: Bad value for 'init_itable'
[  658.334843][T11097] ==================================================================
[  658.342968][T11097] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked
[  658.350355][T11097] 
[  658.352679][T11097] read-write to 0xffff88811b404fe0 of 8 bytes by interrupt on cpu 1:
[  658.360736][T11097]  __xa_clear_mark+0xf5/0x1e0
[  658.365422][T11097]  __folio_end_writeback+0xf4/0x360
[  658.370623][T11097]  folio_end_writeback_no_dropbehind+0x6d/0x1d0
[  658.376881][T11097]  folio_end_writeback+0x1c/0x70
[  658.381827][T11097]  ext4_finish_bio+0x454/0x770
[  658.386590][T11097]  ext4_end_bio+0x281/0x3a0
[  658.391084][T11097]  bio_endio+0x35b/0x3f0
[  658.395319][T11097]  blk_update_request+0x338/0x710
[  658.400358][T11097]  scsi_end_request+0x4b/0x4c0
[  658.405134][T11097]  scsi_io_completion+0x7f/0x1d0
[  658.410084][T11097]  scsi_finish_command+0x1c7/0x1e0
[  658.415213][T11097]  scsi_complete+0x155/0x4d0
[  658.419813][T11097]  blk_done_softirq+0x77/0xb0
[  658.424498][T11097]  handle_softirqs+0xb9/0x280
[  658.429170][T11097]  __irq_exit_rcu+0x42/0xd0
[  658.433665][T11097]  common_interrupt+0x83/0x90
[  658.438361][T11097]  asm_common_interrupt+0x26/0x40
[  658.443395][T11097]  __tsan_read4+0x121/0x190
[  658.447900][T11097]  ____sys_recvmsg+0xc2/0x280
[  658.452593][T11097]  ___sys_recvmsg+0x11f/0x3a0
[  658.457283][T11097]  do_recvmmsg+0x1e5/0x560
[  658.461715][T11097]  __x64_sys_recvmmsg+0xe5/0x170
[  658.466662][T11097]  x64_sys_call+0x80f/0x3020
[  658.471263][T11097]  do_syscall_64+0x136/0x3c0
[  658.475859][T11097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.481755][T11097] 
[  658.484073][T11097] read to 0xffff88811b404fe0 of 8 bytes by task 11097 on cpu 0:
[  658.491697][T11097]  xas_find_marked+0x211/0x650
[  658.496471][T11097]  filemap_get_folios_tag+0xf7/0x400
[  658.501777][T11097]  filemap_fdatawait_keep_errors+0x6c/0x190
[  658.507676][T11097]  sync_inodes_sb+0x41e/0x4d0
[  658.512362][T11097]  sync_inodes_one_sb+0x3d/0x50
[  658.517213][T11097]  __iterate_supers+0x110/0x1f0
[  658.522072][T11097]  iterate_supers+0x1f/0x30
[  658.526579][T11097]  __ia32_sys_sync+0x5c/0xb0
[  658.531174][T11097]  x64_sys_call+0x2f3a/0x3020
[  658.535856][T11097]  do_syscall_64+0x136/0x3c0
[  658.540457][T11097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.546355][T11097] 
[  658.548673][T11097] value changed: 0xffffc00000000000 -> 0x0000000000000000
[  658.555775][T11097] 
[  658.558086][T11097] Reported by Kernel Concurrency Sanitizer on:
[  658.564233][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.2.1693 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  658.575165][T11097] Tainted: [W]=WARN
[  658.578953][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  658.589008][T11097] ==================================================================
[  658.608228][   T28] kauditd_printk_skb: 54 callbacks suppressed
[  658.608243][   T28] audit: type=1400 audit(1783108525.578:1401): avc:  denied  { setopt } for  pid=11095 comm="syz.5.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  658.641697][   T28] audit: type=1400 audit(1783108525.608:1402): avc:  denied  { ioctl } for  pid=11095 comm="syz.5.1694" path="socket:[32866]" dev="sockfs" ino=32866 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1