last executing test programs:

3.028786359s ago: executing program 1 (id=31):
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) (async)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078005001500020000000500010006000000050005000a10000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0xfffffffe, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r7=>0x0}) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8) (async)
ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async)
ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB], 0xb4}}, 0x0)

2.104135269s ago: executing program 1 (id=48):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
dup3(r1, r0, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(0xffffffffffffffff, 0x0, 0x4)
pselect6(0x40, &(0x7f0000000040)={0x9, 0x801, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x5, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073790100000000000900010073797a3000"], 0x2c}}, 0x8004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3], 0xd8}}, 0x20008004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00'})

1.70303157s ago: executing program 0 (id=53):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100706369001100020030082e303a30303a31302e3000000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8008, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x82, 0x53a, &(0x7f0000000a40)="$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")
ptrace$poke(0x1, 0x0, &(0x7f0000000080), 0x4000000000004)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

1.464724061s ago: executing program 0 (id=56):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100bc00000000000000180000001800000004000000020000000000000c020000000000009977ceeecca65466b927080000"], 0x0, 0x34}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x5, 0x3, 0x1, 0x7, 0x0, 0x5, 0x1, 0x4}}) (async, rerun: 32)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32)
write$tun(r5, &(0x7f0000000640)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x4, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0xf, 0x0, 0x0, 0x57, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xfffe, @local, @local, {[@rr={0x7, 0x13, 0x37, [@multicast1, @local, @broadcast, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x34, 0x8f, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@private=0xa010102, 0x9}, {@multicast2, 0x4}, {@multicast1, 0x2}, {@local, 0x8}, {@multicast1, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0x1, [{@rand_addr=0x64010101, 0x8}, {@loopback, 0x2}, {@empty, 0x7}, {@empty, 0x9182}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x137e}]}, @lsrr={0x83, 0x7, 0x9c, [@multicast1]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end]}}, "ff03000000000000"}}}, 0xd2) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5ce, &(0x7f0000000a00)="$eJzs3V2IXGcdB+D/zH7ka2ua2KqtsVkNtYHQnc1mExLxoiV+1JrUiuJFKIQlO90Nmd1ZsxPoTgVbvBEFEbwRQajYCyuigdxUS20vWrxRUOoHFY0BFUQoWimIoI6887GdNifZ4H4cuud54My+5z2z+76zw2/OOXPec04AhTWaHkoRIxFxKSJ2dmbf+ITRzo/moYuzaSpFq/Wpv5Xaz5s+dHG299Te7+1ID4MRWyNi9/FS7Bu6ut3Fpea5qVqter47X2nMLVQWl5p3n52bmqnOVOcPH508NnFk8ujk2r3W8Z9tv/XPdz5w5ckX/vnvb/7myPdTf0e6y/pfx1oZjdHu/2QodvXVD5Yi7l/rxnIy0Hmr486+utJgjh3ihrVau7+X3r+3R8S+dv53xkB03ryXn3noHzvjV/fl3Udg/bR6she/2gI2rXJ7G7hUHouITrlcHhvrbMPfEtvLtfpi48DD9Qvz051t5ZtjqPzw2Vp1vLuvcHMMldL8wXb59fmJN80fimhvA39xYFt7fuxMvTa90R92QNtIxOVLnz0zvONN+f/LQCf/wOaV8v/LF59+LpVfG8i7N8BGSvn/7mtzHw/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h+KSfyiuG8i/TwXYpKz/obh6+X/w5Ml48OTJVrN7/vt8febsudmFYxPjY3MXzoydqZ9fGJup12faZ+zMrfx3a/X6wsGJuPBIpVFdbFQWl5qn5+oX5hun2+f1n65mXAoAyMGpK1vv37X3+ZdLEfHYB7a1p2S4u1xWYXNrtUqR9znIQD7s+kNxuVQbFJd9fKC0wvKt11pQW/u+ABujnHcHgNzcdZvjf1BUvv+H4vL9PxSXbXxgDb//v2ct+gOsP9//Q3GNXOP+Xzf13btrPCLeFhE/HRja0rvXF/CW8oZd/ZGIy5e//ZnK8n24FRQUFJYL+X1QARvj9dDn3RMgL9OHLs72po1q89mZjWoJyPLKvZ1BQCn3ze7UWTK4fGxgaJ3GCe26Iz3+8PdP7J8dSFN0P4fWoSkgw2OPR8S7stb/pdjSPgbQsbvztLglIm6NiHdExDtX2fbXPxkxGi9W++uun//hH62ySaDP9fI/0pf/2yIira5vj4h3R8SeiHjPKtv+xaWU/19v66+z/odi+NwLefcAyMvHns67B0BeThljAIX1nUfz7gGQl2d+kHcPgLx85aW8ewDF9vy9ETGedfyv3D7e3zPUvS7glu61ALZFxPaI2NE9h/Cm7jmCO/uOGa7k9CciRuOOH/fXOf4HG6c3/q951fi/8vL4v4GI2LuKNp794MiXs+qn9qT8P/lob/xfmlL7vbGAwPp65fGI2zPzX1oe81uKlNOI9/6fbYx+/spTWfUvPZD+7tDP5R/y0fpWxPsjO/89qVRpzC1UFpead7fv4z1TnT98dPLYxJHJo5OV9iVCKr0LhWQ48fdXD2TV/24i5f8bh+Uf8pHW/9uvkf/+7f/3raKN41/70qms+pE/pvzvee76+S//dbj06fZ8774Ej0w1GucPRgyXTlxdP7GKjsIm18tIL0Mp//v3Ze//7+7+Tlr/H4+ID6XthYj4T0T8NyI+HBEfiYiPRsR912nzq3fNXMmq/8NTKf9PnLP+h3yk/E+vsP5PP/+1ijYO7P/JF7Lq79mb8j/22z+deGgwTfIPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPYWl5rnpmq16vl1LOT9GgEAAAAAAKAo/hcAAP//Q3g0oA==") (async, rerun: 32)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x100, 0xfffffffa)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
getpgrp(0x0) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000180)={'veth1_to_bridge\x00'}) (async)
lstat(&(0x7f00000001c0)='./file7/file0/file0\x00', &(0x7f0000000440))
write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d)
sendfile(r7, r8, 0x0, 0x8000002b) (async)
r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0)

1.382665712s ago: executing program 2 (id=60):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61)
fallocate(r2, 0x3, 0x5000000, 0x400) (async)
fallocate(r2, 0x3, 0x5000000, 0x400)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0)

1.31905792s ago: executing program 2 (id=61):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r6)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf2509000000640003800800010001000000080003000400000014000200", @ANYRESHEX=r4, @ANYRES8=r3, @ANYRES64=r3], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x6c}}, 0x1)
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xd, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0x3}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28cb7f229db"}}}}, 0xfce)

1.200926515s ago: executing program 0 (id=62):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x9, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0xd, 0x6}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]})

1.200606685s ago: executing program 1 (id=63):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0xf)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0x3, 0x6})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x9d485e2f3fd74887}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfe, 0x0, 0xffe, 0x9, 0x40, 0x37a912aa}, {0x3, 0x0, 0x80, 0x4}, 0x8, 0x3, 0xcf7}}]}}]}, 0x64}}, 0x8010)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={<r3=>0x0, @in6={{0xa, 0x4e23, 0xe, @remote, 0x6}}, 0x40, 0xc9, 0x8, 0x4, 0x1ff}, &(0x7f00000000c0)=0x98)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r3, 0x1b73, 0x8, [0x8, 0x622, 0x2, 0x6, 0x7, 0x3, 0xf6c9, 0x8000]}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.15793777s ago: executing program 0 (id=64):
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x71, 0xfb, &(0x7f0000000080)="45fb2a27bc20cdf0c1e8d3ae0fcdbfc443603ce33f3b8fcc17e425f641c85e70120a71abbc0c6126c47862eea090201dcf373ad444e3e6dd9cd328bf399c455d6706348a93997f9a34ebb10f92227861bc9ce11ce9aa7b802d9868a7c852ee218eaa3c70e05e4eb9ce3ba504b51e529a58", &(0x7f0000000100)=""/251, 0x3, 0x0, 0x30, 0x35, &(0x7f0000000200)="9523f8b028513e54df7d3ee7d66736ac6a90f68b07087a2def0e7a274c6bbc1ef66582650d3ca2a76a73832cb1797d59", &(0x7f0000000240)="19006c4723904dc985703a7f5859940dc4885abc86d297343d77356348c2ed9982b273266d4f8ab171a16ab60683460fdb9180ee78", 0x5, 0x0, 0x4}, 0x50)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x7fffffff)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x4e)
mount$nfs(&(0x7f0000000380)='/dev/ptmx\x00', &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400), 0x2000, &(0x7f0000000440)={[{'/dev/ptmx\x00'}, {'$/}'}, {'[:]-'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '+'}}, {@permit_directio}]})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000480))
r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder-control\x00', 0x802, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000004c0)="8a1d8b129a8c19752788e6e3e511a71c913ad16c0e6ad2886ebc92efdd58d29f75ab3a8d3a78673ac2b98c6ca64fd14c1aa5c9dc9db1f89399cb2170d7bfcbefc2eefa9f9089", 0x46, r4}, 0x68)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000600)={<r5=>r3, 0x3, 0x7, 0x2})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000700)={'gre0\x00', <r6=>0x0, 0x7, 0x40, 0x8, 0x8, {{0x29, 0x4, 0x0, 0x5, 0xa4, 0x65, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0x72, 0x0, 0x3, [0x1000, 0x401, 0x8001, 0x2, 0x54a]}, @generic={0x44, 0x12, "106629e0b71bc286a2bf503e943d3616"}, @ssrr={0x89, 0x7, 0x31, [@multicast2]}, @end, @rr={0x7, 0x17, 0xab, [@local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @ssrr={0x89, 0xb, 0xd7, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x12, "fb5864e91c5ec14729ba9358a99e148e"}, @lsrr={0x83, 0x27, 0x74, [@private=0xa010100, @private=0x5, @loopback, @local, @broadcast, @multicast1, @local, @private=0xa010101, @rand_addr=0x64010102]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1c, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x78}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x54, '\x00', r6, @fallback=0x26, r2, 0x8, &(0x7f0000000840)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x5, 0xa0e6}, 0x10, 0x0, r2, 0x6, 0x0, &(0x7f00000008c0)=[{0x4, 0x3, 0xc, 0x6}, {0x3, 0x1, 0x4, 0x2}, {0x3, 0x4, 0xf, 0x5}, {0x0, 0x3, 0x5, 0x2}, {0x3, 0x4, 0x3, 0xc}, {0x3, 0x2, 0x2, 0x6}], 0x10, 0x8}, 0x94)
syz_clone3(&(0x7f0000000c80)={0x4002000, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)=<r7=>0x0, {0x7}, &(0x7f0000000ac0)=""/102, 0x66, &(0x7f0000000b40)=""/218, &(0x7f0000000c40)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58)
timer_create(0x0, &(0x7f0000000d00)={0x0, 0x6, 0x0, @tid=r7}, &(0x7f0000000d40))
write$P9_RLERROR(r5, &(0x7f0000000d80)={0xa, 0x7, 0x1, {0x1, '\\'}}, 0xa)
r8 = timerfd_create(0x1, 0x0)
ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f0000000dc0)=0x100000001)
ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, &(0x7f0000000e80)={&(0x7f0000000e00)=""/91, 0x5b})
r9 = shmget(0x2, 0xf000, 0x20, &(0x7f0000ff1000/0xf000)=nil)
shmat(r9, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
shmctl$IPC_STAT(r9, 0x2, &(0x7f0000000ec0)=""/68)
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000f80)={0x84401, 0x1, 0xc}, 0x18)
r11 = openat(r10, &(0x7f0000000fc0)='./file0/file0\x00', 0x0, 0x100)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@map=r5, r11, 0xf, 0x2000, 0x0, @value=r5}, 0x20)
r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
connect$inet(r12, &(0x7f0000001080)={0x2, 0x4e21, @multicast1}, 0x10)
openat$cgroup_ro(r2, &(0x7f00000010c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)

1.08460138s ago: executing program 4 (id=65):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async)
r0 = socket(0xa, 0x801, 0x0)
getsockopt(r0, 0x0, 0x20, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/211)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

976.868924ms ago: executing program 2 (id=66):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000001480)=';', 0x1, 0x20000080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x8}, @window={0x3, 0x6, 0x7}, @timestamp, @window={0x3, 0xfffb, 0xff}, @timestamp, @sack_perm, @window={0x3, 0x7}, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f00000004c0)='<', 0xfffffffffffffe9e, 0x805, 0x0, 0x0)
syz_open_dev$loop(0x0, 0xffff, 0x14f600)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/128, &(0x7f0000000140)=0x80)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffff1}]}}}]}, 0x3c}}, 0x4)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x0, 0xfffffff8}, 0x8)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

976.590084ms ago: executing program 0 (id=67):
r0 = socket(0x10, 0x80003, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a"], 0x38}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="478644cb4f0b84540180c2000000aaaaaaaaaa000840450000380000000000019078ac1e0001ac1414bb0300907800000000450000000000004000060000ff010000001e0001"], 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x3)
r3 = dup(r0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, r3, 0x1)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
close_range(r4, r5, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc)
splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0)
r9 = socket$pptp(0x18, 0x1, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
accept(r9, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
getgroups(0x1, &(0x7f0000001080)=[0xee01])
keyctl$setperm(0x5, r11, 0x30925)
keyctl$negate(0xd, r11, 0x51e6f28, r11)
statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000080)=""/214)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

945.485998ms ago: executing program 1 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
setreuid(0x0, 0xee00)
lstat(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
socket(0x1018e51ffa34cedf, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4ed6f, 0x43426}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044801}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getlink={0x48, 0x12, 0xa01, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2420, 0x25480}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID, @IFLA_VLAN_PROTOCOL={0x0, 0x5, 0x8100}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040894}, 0x4000000)

891.710575ms ago: executing program 1 (id=69):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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")
r0 = socket$kcm(0x10, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000ad00000000000000bf91200000000000b7020000020000008500000008000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[], 0xfe33)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r3, 0x16, 0x100000001, 0x1000f4)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

696.56027ms ago: executing program 0 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000440)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd28, 0x8001, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x0, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044814}, 0x4028000)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x800)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000002c0)=0x80, 0x4)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
unshare(0x8000000)
semget$private(0x0, 0x1, 0xb4)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
io_setup(0x5, &(0x7f0000000240)=<r7=>0x0)
r8 = inotify_init()
io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0xa50003d1)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r4, 0x0, r9, 0x0, 0xaf4, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001480)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000500)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x8040)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
vmsplice(r10, 0x0, 0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)

631.443629ms ago: executing program 4 (id=75):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x5f4d, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x108}, &(0x7f0000000040), &(0x7f00000000c0))
tee(r1, r1, 0x100, 0x8) (async)
write(r1, &(0x7f0000000300)="efa4b420fb3a5d0168f723ed2cb26b11354ca2e94ec9cb5be91c391aa5a6bbb8a9a6c34ee4693fe07fee8aae4d8236f3798e8406015a598d2566b83a9c466f90c9e1bce2b3979b8a2848596b7a97c1f36c2de5d23d32d254343688f17d8e5700bc3fbf1f341de216af378ea65c91bf940b344d8e456b3bcc015f4261698a61ba02b9f588b02d18aba414ef678566e8", 0x8f)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x10000, 0x0, 0x82b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
r3 = dup(r2)
connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
syz_usb_disconnect(r0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/186, 0xba, 0x0, &(0x7f0000000240)=""/73, 0x49}, &(0x7f00000002c0)=0x40) (async)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000002c0), 0x3, 0x591, &(0x7f0000001140)="$eJzs3V9rU+cfAPDvSVtt1d/PCiLbLkbBizmcqW33x8FAdzk2meDuXUhjkaZGmlRsJ6gX82Y3QwZjTBh7AbvfpewN7FUImyBDynYxGB0nPbGxSZq2xrYunw9N+zw5J/0+zznnefI9OQkJoG+Npb9yEa9GxNdJxOGmZYORLRyr/wzEk5vF5Sc3i0msrFz8I4kkItJ6Y/0k+3swq7wSEb98GXEy1xq3urg0WyiXS/OrEWK8NndtvLq4dOrKXGGmNFO6Ojk1deadqcn333u3Z31988Jf33364KMzXx1f/vanR0fuJXEuDmXLmvvxHG43V8ZiLNsmQ3Fu3YoTPQi2lyS73QC2ZSAb50ORzgGHYyAb9cB/362IWAH6VGL8Q59q5AHL2bl9j86DXxqPP1w9AWrt/+DqayMxXD83OrCcPHNmlJ7vjvYgfhrj59/v30tv0eV1iFs9iAfQcPtORJweHGyd/5Js/tu+06sv7W5ofYx+e/6B3fQgzX/eas1/RiL3NP+JNvnPwTZjdzu6j//cox6E6SjN/z5om/8+nbpGB7La/+o531By+Uq5dDoi/h8RJ2Jof1pvfz2nscUernSK35z/pbc0fiMXzNrxaHD/s4+ZLtQKz9frNY/vRLy2lv8m0TL/D9dz3fX7P90eFzYZ41jp/uudlnXvf7PeZ8ArP0a80Xb/r13RSja+PjlePx7GG0dFqz/vHvu1U/yt9b/30v1/YOP+jybN12urW4/xw/DfpU7L2vX/4j/dj/99yWf18r7svhuFWm1+ImJf8knr/ZNrj23UG+un/T9xvP34bz7+76xr90hEfL7J/t89erd11aaTxy77f7NhtiXt//SW9v/WCw8//uL7TvE3N/+9XS+dyO7ZzPy32QY+z7YDAAAAAACAvSYXEYciyeWflnO5fH71/R1H40CuXKnWTl6uLFydjvpnZUdjKNe40n246f0QE9klzUZ9cl19KiKORMQ3AyP1er5YKU/vducBAAAAAAAAAAAAAAAAAABgjzjY4fP/qd8Gdrt1wAvnK7+hf3Ud/734pidgT9rq8//IC2oHsPPk/9C/jH/oX8Y/9C/jH/qX8Q/9a6PxP7yD7QB2nud/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KkL58+nt5XlJzeLaX36+uLCbOX6qelSdTY/t1DMFyvz1/IzlcpMuZQvVua6/b9ypXJtYjIWbozXStXaeHVx6dJcZeFq7dKVucJM6VJpaEd6BQAAAAAAAAAAAAAAAAAAAC+X6uLSbKFcLs0rdCycjT3RjG0Xkm57+Wx2MGwrxODud1DhBRR2eWICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCb/BgAA//8rRTFK") (async)
r5 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r5, &(0x7f0000001780)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/219, 0xdb}, {&(0x7f0000001580)=""/203, 0xcb}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000001680)=""/104, 0x68}], 0x5, 0x0, 0x0, 0x8000}, 0x1)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r6 = memfd_secret(0x0)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000180)={0x8001, 0x3, 0x6, 0x8, 0xfe00, 0x8}) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000001800)={0x86, 0x28, '\x00', 0x0, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) (async)
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000001ac0)={0x3, 0x1, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/61, 0x3d}, {&(0x7f0000001880)=""/206, 0xce}, {&(0x7f0000001980)=""/166, 0xa6}], &(0x7f0000001a80)=[0x5, 0xffffffffffff6b4b, 0x82f, 0xa82, 0x8000, 0x0, 0x80000000, 0x7]}, 0x20)

460.695311ms ago: executing program 3 (id=78):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x3000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xa}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

445.841393ms ago: executing program 4 (id=79):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6=r3}, 0x20)
recvmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/37, 0x25}], 0x1}}], 0x1, 0x40002060, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
close(r0)

444.321303ms ago: executing program 1 (id=80):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
io_setup(0x81, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1018658, &(0x7f0000000640)={[{@nodioread_nolock}, {@noblock_validity}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@debug}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x328, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe502}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70ca}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x119b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x800, @private1, 0xdfdb}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1b5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3ff, @mcast1, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private1, 0x2400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)

373.389162ms ago: executing program 3 (id=81):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={0x0}) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xdff, 0xf8a, 0x81}, &(0x7f00000002c0)=0x10)
socket$nl_audit(0x10, 0x3, 0x9)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x38c40, 0x150) (async)
socket$inet6(0xa, 0x5, 0x6) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))

324.118798ms ago: executing program 3 (id=82):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1000000, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf250800", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000800)
socket$nl_rdma(0x10, 0x3, 0x14)

323.631488ms ago: executing program 4 (id=83):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200002963bbbbbbbbbb0800451400300000000000019078ac1e0001640101010304907812fe183f2500000000680000000100027f0000017f000001"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

322.636219ms ago: executing program 3 (id=84):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1218658, &(0x7f0000000080)={[{@dioread_lock}, {@grpjquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@dioread_nolock}, {@sysvgroups}, {@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x24c}}, {@grpid}, {@nodiscard}, {@dioread_nolock}]}, 0x6, 0x615, &(0x7f0000000c00)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000101030000000000000000000a00dc070000124000020000"], 0x1c}}, 0x4000)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdbb8, 0x0, 0x1, 0x12d}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000640)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0)

138.962122ms ago: executing program 4 (id=85):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x3}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x4000040, 0x200000, 0x3}, 0x10) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x6}]}, 0x10) (async)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r2, 0x8) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x418, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0xb7, 0xe, 0x8, 0x7, @local, @private2, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x604, 0x208}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "cf3523f6abea0ac59f38e4cee2d4e02b4433ada4369fbb16cedc9b2a2cbc46c2804dc8c41ce7aba48504d24e8bc4e7d304000000db2882bc827158e95f1a87e8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x2000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0) (async)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x250800, 0x0) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="360000003820000000000000800403f0753f47bb260f683a5f20440aa2b46df730a3dc9d4a3af7308e5a87f5267c4b1f9c93e043eff87ca2660fb85cac336c4c89fafe5c029978655921ae2607cdc3d2ad72123f2b44be10dd409431c6ec43c17ee5215880e17879a6a51174a9afbe244406a7f01d02981f78ed6a1fe6cdcafbd558c3fa66cd57b3570c9a657e6692c1e7c89d3dea96fa83e6c25f830345fa1169c47d63d427c3b24abcedd6d38d3d01c3b75261711cab", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x89, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000400), 0x8}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) (async)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async)
close(r0)

132.328043ms ago: executing program 2 (id=86):
r0 = getpid() (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14}) (async, rerun: 64)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x183, 0x80000000006}, 0x110cc0, 0x920, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async, rerun: 64)
socket(0x2, 0x2, 0x0) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000680)) (async)
ioperm(0x0, 0x7, 0x80006) (async)
socket(0x2a, 0x2, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac, 0xfcb0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/100, 0x64) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="643c0000b7b138068f990e2c1644ac578c6d3717148b87f3d1d6738c51a2f36c5e479ecb31c8333352c670b5d2e113a0a0e15ef4c0b48b5d233ede5322ac949562919d19942f44feabf3c906c231abe0dd04ff3076", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

72.760061ms ago: executing program 3 (id=87):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000330001072501000000ae3ec10453c20bf65b404f76df9791b1171cc093af35aa3ae1c9838b815bb89be4b1ef28e42630cad45ab94313d1dc5fc1096e8e1db5fa26227744ace1b00b6f4e5b3a4d35437d723f9363d00543346ff7ac48901d8c76046f8b435dd05186ebef67dde13e13d469aa2d7df9e100236411994220963147ab42b79d85a278361efe49021df4fa122a0dced01e14de44b34448da22a8bb712c5cde10745e7713e967baec68f2eef8eae70fed5b8ec2f44d1c719f88ab8d564a1c4b70a36e904385f485747c9047587a8e8968526951ef72f78383fb80e57ffb2b9a091be370363a72020000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044094)

66.214292ms ago: executing program 2 (id=88):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe4d24}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040d0}, 0x1090)

51.054924ms ago: executing program 3 (id=89):
unshare(0x28000600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x80, 0x0, 0x4000, 0x20000000}})
modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x100000, 0x2000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(r2, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x32}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

763.3µs ago: executing program 2 (id=90):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x81, 0x0, 0x5, 0xffffffef, 0x0, 'M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40))
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1)

0s ago: executing program 4 (id=91):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64018101}, 0x10, &(0x7f0000000880)}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff})
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x160}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)

kernel console output (not intermixed with test programs):

[   22.909035][   T29] audit: type=1400 audit(1768776770.981:62): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.931119][   T29] audit: type=1400 audit(1768776770.981:63): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.953779][   T29] audit: type=1400 audit(1768776770.981:64): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.976762][   T29] audit: type=1400 audit(1768776770.981:65): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.999741][   T29] audit: type=1400 audit(1768776770.991:66): avc:  denied  { read open } for  pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts.
[   28.012374][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   28.012391][   T29] audit: type=1400 audit(1768776776.091:70): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.041440][   T29] audit: type=1400 audit(1768776776.121:71): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.043857][ T3306] cgroup: Unknown subsys name 'net'
[   28.069168][   T29] audit: type=1400 audit(1768776776.141:72): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.210145][ T3306] cgroup: Unknown subsys name 'cpuset'
[   28.216401][ T3306] cgroup: Unknown subsys name 'rlimit'
[   28.387644][   T29] audit: type=1400 audit(1768776776.461:73): avc:  denied  { setattr } for  pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.423323][   T29] audit: type=1400 audit(1768776776.471:74): avc:  denied  { create } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.443834][   T29] audit: type=1400 audit(1768776776.471:75): avc:  denied  { write } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.461099][ T3310] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   28.464275][   T29] audit: type=1400 audit(1768776776.471:76): avc:  denied  { read } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.493184][   T29] audit: type=1400 audit(1768776776.481:77): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.495816][ T3306] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.518033][   T29] audit: type=1400 audit(1768776776.481:78): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.550092][   T29] audit: type=1400 audit(1768776776.491:79): avc:  denied  { read } for  pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   29.722159][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   29.750691][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   29.769000][ T3323] chnl_net:caif_netlink_parms(): no params data found
[   29.815689][ T3329] chnl_net:caif_netlink_parms(): no params data found
[   29.851640][ T3326] chnl_net:caif_netlink_parms(): no params data found
[   29.868471][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.875702][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.882971][ T3319] bridge_slave_0: entered allmulticast mode
[   29.889579][ T3319] bridge_slave_0: entered promiscuous mode
[   29.920475][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.927569][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.934851][ T3319] bridge_slave_1: entered allmulticast mode
[   29.941304][ T3319] bridge_slave_1: entered promiscuous mode
[   29.974540][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.981713][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.988876][ T3320] bridge_slave_0: entered allmulticast mode
[   29.995460][ T3320] bridge_slave_0: entered promiscuous mode
[   30.014092][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.021265][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.028376][ T3323] bridge_slave_0: entered allmulticast mode
[   30.034757][ T3323] bridge_slave_0: entered promiscuous mode
[   30.041289][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.048360][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.055558][ T3320] bridge_slave_1: entered allmulticast mode
[   30.061874][ T3320] bridge_slave_1: entered promiscuous mode
[   30.070677][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.077739][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.084908][ T3329] bridge_slave_0: entered allmulticast mode
[   30.091328][ T3329] bridge_slave_0: entered promiscuous mode
[   30.098953][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.108312][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.115414][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.122690][ T3323] bridge_slave_1: entered allmulticast mode
[   30.129098][ T3323] bridge_slave_1: entered promiscuous mode
[   30.143025][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.150288][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.157408][ T3329] bridge_slave_1: entered allmulticast mode
[   30.163812][ T3329] bridge_slave_1: entered promiscuous mode
[   30.171028][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.209081][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.233122][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.243327][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.252590][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.259780][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.266934][ T3326] bridge_slave_0: entered allmulticast mode
[   30.273383][ T3326] bridge_slave_0: entered promiscuous mode
[   30.280888][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.290692][ T3319] team0: Port device team_slave_0 added
[   30.297384][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.311249][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.318369][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.325868][ T3326] bridge_slave_1: entered allmulticast mode
[   30.332363][ T3326] bridge_slave_1: entered promiscuous mode
[   30.339671][ T3319] team0: Port device team_slave_1 added
[   30.346092][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.383169][ T3320] team0: Port device team_slave_0 added
[   30.402599][ T3323] team0: Port device team_slave_0 added
[   30.409008][ T3320] team0: Port device team_slave_1 added
[   30.415967][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.425360][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.432390][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.458465][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.470380][ T3329] team0: Port device team_slave_0 added
[   30.476890][ T3323] team0: Port device team_slave_1 added
[   30.487933][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.497395][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.504353][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.530275][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.542011][ T3329] team0: Port device team_slave_1 added
[   30.573395][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.580370][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.606373][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.622342][ T3326] team0: Port device team_slave_0 added
[   30.629581][ T3326] team0: Port device team_slave_1 added
[   30.640472][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.647432][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.673464][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.684687][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.691694][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.717648][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.734363][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.741364][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.767475][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.778668][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.785674][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.811647][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.841614][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.848657][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.874691][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.893642][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.900702][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.926648][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.938496][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.945543][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.971454][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.990682][ T3319] hsr_slave_0: entered promiscuous mode
[   30.996715][ T3319] hsr_slave_1: entered promiscuous mode
[   31.018280][ T3320] hsr_slave_0: entered promiscuous mode
[   31.024515][ T3320] hsr_slave_1: entered promiscuous mode
[   31.030532][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   31.036258][ T3320] Cannot create hsr debugfs directory
[   31.079144][ T3323] hsr_slave_0: entered promiscuous mode
[   31.085162][ T3323] hsr_slave_1: entered promiscuous mode
[   31.091206][ T3323] debugfs: 'hsr0' already exists in 'hsr'
[   31.096943][ T3323] Cannot create hsr debugfs directory
[   31.104942][ T3329] hsr_slave_0: entered promiscuous mode
[   31.111063][ T3329] hsr_slave_1: entered promiscuous mode
[   31.117029][ T3329] debugfs: 'hsr0' already exists in 'hsr'
[   31.122786][ T3329] Cannot create hsr debugfs directory
[   31.130837][ T3326] hsr_slave_0: entered promiscuous mode
[   31.137153][ T3326] hsr_slave_1: entered promiscuous mode
[   31.143084][ T3326] debugfs: 'hsr0' already exists in 'hsr'
[   31.148804][ T3326] Cannot create hsr debugfs directory
[   31.365109][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.373793][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.382676][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.394262][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.422552][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.432285][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.441797][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.454131][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.488833][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.498102][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.510573][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.523648][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.557398][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.565605][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.574673][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.586283][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.600355][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.625871][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   31.641323][  T386] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.648414][  T386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.665000][  T386] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.672254][  T386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.680644][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.691555][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.704661][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.713947][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.753922][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.776016][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.787059][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.808716][ T3326] 8021q: adding VLAN 0 to HW filter on device team0
[   31.817285][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   31.833008][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.840172][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.853382][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.860465][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.869490][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.876560][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.896298][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.903535][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.947282][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.964761][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.982267][ T3329] 8021q: adding VLAN 0 to HW filter on device team0
[   32.011489][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.018660][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.041497][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.061215][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.068308][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.090104][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.116122][ T3323] 8021q: adding VLAN 0 to HW filter on device team0
[   32.128746][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.153028][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.160199][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.171406][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.178594][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.208276][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.233439][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.243871][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.266947][ T3319] veth0_vlan: entered promiscuous mode
[   32.294483][ T3319] veth1_vlan: entered promiscuous mode
[   32.348432][ T3319] veth0_macvtap: entered promiscuous mode
[   32.377776][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.386559][ T3319] veth1_macvtap: entered promiscuous mode
[   32.407131][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.427428][ T3326] veth0_vlan: entered promiscuous mode
[   32.453136][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.473412][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.485446][ T3326] veth1_vlan: entered promiscuous mode
[   32.494412][ T3320] veth0_vlan: entered promiscuous mode
[   32.502944][ T2163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.520826][ T2163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.549941][ T2163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.559108][ T2163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.575426][ T3320] veth1_vlan: entered promiscuous mode
[   32.597336][ T3326] veth0_macvtap: entered promiscuous mode
[   32.604977][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.629099][ T3326] veth1_macvtap: entered promiscuous mode
[   32.651486][ T3320] veth0_macvtap: entered promiscuous mode
[   32.676792][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.691389][ T3320] veth1_macvtap: entered promiscuous mode
[   32.700639][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.710712][ T3323] veth0_vlan: entered promiscuous mode
[   32.721925][ T2163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.735499][ T2163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.745818][ T3487] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=3487 comm=syz.1.2
[   32.759738][ T3487] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'.
[   32.772007][ T3323] veth1_vlan: entered promiscuous mode
[   32.780504][ T2163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.789491][ T2163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.804090][ T3329] veth0_vlan: entered promiscuous mode
[   32.820125][ T3329] veth1_vlan: entered promiscuous mode
[   32.827113][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.850806][ T3323] veth0_macvtap: entered promiscuous mode
[   32.857124][ T3490] IPv6: Can't replace route, no match found
[   32.878448][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.895041][ T3329] veth0_macvtap: entered promiscuous mode
[   32.906117][ T3323] veth1_macvtap: entered promiscuous mode
[   32.915719][   T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.931493][   T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.940769][ T3329] veth1_macvtap: entered promiscuous mode
[   32.974216][   T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.985029][   T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.026307][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.033895][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   33.033909][   T29] audit: type=1400 audit(1768776781.101:113): avc:  denied  { read write } for  pid=3326 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.064372][   T29] audit: type=1400 audit(1768776781.101:114): avc:  denied  { open } for  pid=3326 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.074339][ T3503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'.
[   33.088619][   T29] audit: type=1400 audit(1768776781.101:115): avc:  denied  { ioctl } for  pid=3326 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.131950][   T29] audit: type=1400 audit(1768776781.141:116): avc:  denied  { create } for  pid=3502 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   33.148937][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.152281][   T29] audit: type=1400 audit(1768776781.141:117): avc:  denied  { write } for  pid=3502 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   33.178095][ T3503] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'.
[   33.179796][   T29] audit: type=1400 audit(1768776781.201:118): avc:  denied  { create } for  pid=3502 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   33.192845][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.215958][   T29] audit: type=1400 audit(1768776781.291:119): avc:  denied  { mounton } for  pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.252509][   T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.263917][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.273102][   T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.302264][   T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.325928][   T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.366289][   T29] audit: type=1400 audit(1768776781.431:120): avc:  denied  { map } for  pid=3506 comm="syz.1.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   33.390212][   T29] audit: type=1400 audit(1768776781.431:121): avc:  denied  { read write } for  pid=3506 comm="syz.1.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   33.408540][   T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.432673][   T29] audit: type=1326 audit(1768776781.441:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a4dacb9 code=0x7ffc0000
[   33.491137][ T3528] loop0: detected capacity change from 0 to 1024
[   33.500588][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'.
[   33.509982][   T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.519448][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   33.526931][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0
[   33.540686][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   33.548105][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1
[   33.567621][ T3528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.586895][ T3537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'.
[   33.596064][ T3531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=3531 comm=syz.4.5
[   33.622423][ T3527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.631194][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.637469][ T3540] loop2: detected capacity change from 0 to 512
[   33.646655][   T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.656509][ T3540] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.669826][ T3540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.682574][ T3540] EXT4-fs (loop2): 1 truncate cleaned up
[   33.691404][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.708872][   T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.743414][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.758125][ T3546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15'.
[   33.804554][ T3551] loop2: detected capacity change from 0 to 1024
[   33.820805][ T3551] EXT4-fs: inline encryption not supported
[   33.826748][ T3551] EXT4-fs: Ignoring removed orlov option
[   33.834054][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.845539][ T3551] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   33.873961][ T3555] mmap: syz.0.17 (3555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   33.902117][ T3551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.056396][ T3565] loop1: detected capacity change from 0 to 2048
[   34.073024][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.131007][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.194124][ T3575] loop0: detected capacity change from 0 to 512
[   34.250817][ T3577] loop1: detected capacity change from 0 to 128
[   34.280445][ T3575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.315387][ T3575] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.338426][ T3577] syz.1.23: attempt to access beyond end of device
[   34.338426][ T3577] loop1: rw=8390659, sector=104, nr_sectors = 937 limit=128
[   34.359172][ T3583] loop3: detected capacity change from 0 to 512
[   34.399686][ T3575] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.424084][ T3583] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   34.450258][ T3575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3575 comm=syz.0.24
[   34.464511][ T3583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002]
[   34.479459][ T3583] System zones: 1-12
[   34.490528][ T3583] EXT4-fs (loop3): 1 truncate cleaned up
[   34.510023][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.524771][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.559576][ T3587] loop0: detected capacity change from 0 to 512
[   34.569293][ T3587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   34.596768][ T3587] EXT4-fs (loop0): orphan cleanup on readonly fs
[   34.620922][ T3587] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.27: bg 0: block 248: padding at end of block bitmap is not set
[   34.635454][ T3587] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.27: Failed to acquire dquot type 1
[   34.645914][ T3581] loop4: detected capacity change from 0 to 128
[   34.647982][ T3587] EXT4-fs (loop0): 1 truncate cleaned up
[   34.672026][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   34.690996][ T3587] EXT4-fs (loop0): shut down requested (0)
[   34.713871][ T3581] syz.4.25: attempt to access beyond end of device
[   34.713871][ T3581] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[   34.746447][ T3587] syz.0.27 (3587) used greatest stack depth: 9184 bytes left
[   34.806219][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.085191][ T3599] loop4: detected capacity change from 0 to 128
[   35.188212][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.308795][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.362154][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'.
[   35.511050][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.557311][ T3627] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.631795][ T3627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3627 comm=syz.3.37
[   35.700798][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.964233][ T3658] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   36.004968][ T3658] EXT4-fs (loop3): orphan cleanup on readonly fs
[   36.162344][ T3658] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   36.177325][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   36.208775][ T3658] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   36.232109][ T3658] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.47: invalid fast symlink length 9000
[   36.270571][ T3658] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.47: couldn't read orphan inode 16 (err -117)
[   36.315807][ T3658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.348457][ T3669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.366518][ T3658] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.433205][ T3669] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.470042][ T3676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.523457][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.535801][ T3676] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.564219][ T3676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3676 comm=syz.0.53
[   36.582021][ T3684] ext4: Unknown parameter 'euid<00000000000000000000'
[   36.608638][ T3313] udevd[3313]: incorrect jbd checksum on /dev/loop4
[   36.632086][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.675621][ T3689] EXT4-fs: Ignoring removed nobh option
[   36.729824][ T3689] EXT4-fs (loop4): orphan cleanup on readonly fs
[   36.730232][ T3689] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.58: ea_inode file size=4 entry size=6
[   36.730272][ T3689] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   36.730477][ T3689] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.58: corrupted inode contents
[   36.730615][ T3689] EXT4-fs (loop4): Remounting filesystem read-only
[   36.730632][ T3689] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30)
[   36.730694][ T3689] EXT4-fs (loop4): 1 orphan inode deleted
[   36.731019][ T3689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   36.743393][ T3699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   36.747616][ T3699] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   36.747792][ T3699] EXT4-fs (loop2): 1 truncate cleaned up
[   36.748243][ T3699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.776115][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.777660][ T3696] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET)
[   36.843389][ T3706] syzkaller1: entered promiscuous mode
[   36.843439][ T3706] syzkaller1: entered allmulticast mode
[   36.911105][ T3713] capability: warning: `syz.1.63' uses 32-bit capabilities (legacy support in use)
[   37.030329][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.032768][ T3713] Zero length message leads to an empty skb
[   37.106192][ T3720] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.143708][ T3720] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (511 blocks)
[   37.221605][ T3728] bond1: option min_links: invalid value (18446744073709551601)
[   37.229307][ T3728] bond1: option min_links: allowed values 0 - 2147483647
[   37.283900][ T3737] ext3: Unknown parameter 'À'
[   37.319797][ T3728] bond1 (unregistering): Released all slaves
[   37.344890][ T3735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.432766][ T3735] capability: warning: `syz.1.69' uses deprecated v2 capabilities in a way that may be insecure
[   37.452669][ T3751] process 'syz.3.74' launched '/dev/fd/4' with NULL argv: empty string added
[   37.574563][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.601263][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.632998][ T3764] bond1: down delay (10) is not a multiple of miimon (100), value rounded to 0 ms
[   37.658889][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.785048][ T3787] =======================================================
[   37.785048][ T3787] WARNING: The mand mount option has been deprecated and
[   37.785048][ T3787]          and is ignored by this kernel. Remove the mand
[   37.785048][ T3787]          option from the mount to silence this warning.
[   37.785048][ T3787] =======================================================
[   37.829213][ T3787] journal_path: Non-blockdev passed as './file0'
[   37.835668][ T3787] EXT4-fs: error: could not find journal device path
[   37.860209][ T3787] __nla_validate_parse: 2 callbacks suppressed
[   37.860221][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'.
[   37.882288][ T3788] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   37.893309][ T3788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000]
[   37.904289][ T3788] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.80: lblock 2 mapped to illegal pblock 2 (length 1)
[   37.919452][ T3788] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.80: lblock 0 mapped to illegal pblock 48 (length 1)
[   37.941643][ T3788] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.80: Failed to acquire dquot type 0
[   37.970892][ T3788] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[   37.993525][ T3788] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.80: mark_inode_dirty error
[   38.000427][ T3793] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[   38.017288][ T3788] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[   38.078435][   T29] kauditd_printk_skb: 411 callbacks suppressed
[   38.078450][   T29] audit: type=1400 audit(1768776786.151:530): avc:  denied  { write } for  pid=3804 comm="syz.3.89" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   38.109544][ T3805] netlink: 'syz.3.89': attribute type 30 has an invalid length.
[   38.117814][ T3788] EXT4-fs (loop1): 1 orphan inode deleted
[   38.124492][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.139406][    C0] ==================================================================
[   38.147547][    C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[   38.154809][    C0] 
[   38.155066][   T29] audit: type=1400 audit(1768776786.181:531): avc:  denied  { ioctl } for  pid=3804 comm="syz.3.89" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   38.157158][    C0] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 1:
[   38.190337][    C0]  wq_worker_tick+0x60/0x230
[   38.194983][    C0]  sched_tick+0xd7/0x210
[   38.199276][    C0]  update_process_times+0x15e/0x190
[   38.204544][    C0]  tick_nohz_handler+0x275/0x3d0
[   38.209585][    C0]  __hrtimer_run_queues+0x20f/0x590
[   38.214820][    C0]  hrtimer_interrupt+0x21a/0x460
[   38.219810][    C0]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[   38.225754][    C0]  sysvec_apic_timer_interrupt+0x6f/0x80
[   38.231444][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   38.237472][    C0]  __tsan_unaligned_write4+0x134/0x180
[   38.242972][    C0]  kmalloc_reserve+0xc0/0x190
[   38.247724][    C0]  __alloc_skb+0x328/0x4b0
[   38.252192][    C0]  nsim_dev_trap_report_work+0x18a/0x630
[   38.257883][    C0]  process_scheduled_works+0x4cd/0x9d0
[   38.263367][    C0]  worker_thread+0x581/0x770
[   38.267994][    C0]  kthread+0x488/0x510
[   38.272095][    C0]  ret_from_fork+0x148/0x280
[   38.276713][    C0]  ret_from_fork_asm+0x1a/0x30
[   38.281503][    C0] 
[   38.283874][    C0] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 0:
[   38.292306][    C0]  wq_worker_tick+0x60/0x230
[   38.296922][    C0]  sched_tick+0xd7/0x210
[   38.301191][    C0]  update_process_times+0x15e/0x190
[   38.306423][    C0]  tick_nohz_handler+0x275/0x3d0
[   38.311384][    C0]  __hrtimer_run_queues+0x20f/0x590
[   38.316602][    C0]  hrtimer_interrupt+0x21a/0x460
[   38.321556][    C0]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[   38.327471][    C0]  sysvec_apic_timer_interrupt+0x6f/0x80
[   38.333133][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   38.339134][    C0]  __tsan_unaligned_write4+0x1d/0x180
[   38.344518][    C0]  skb_put+0x67/0xf0
[   38.348437][    C0]  nsim_dev_trap_report_work+0x2f0/0x630
[   38.354103][    C0]  process_scheduled_works+0x4cd/0x9d0
[   38.359587][    C0]  worker_thread+0x581/0x770
[   38.364717][    C0]  kthread+0x488/0x510
[   38.368807][    C0]  ret_from_fork+0x148/0x280
[   38.373430][    C0]  ret_from_fork_asm+0x1a/0x30
[   38.378219][    C0] 
[   38.380561][    C0] value changed: 0x0000000000050910 -> 0x0000000000053020
[   38.387678][    C0] 
[   38.390009][    C0] Reported by Kernel Concurrency Sanitizer on:
[   38.396272][    C0] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.406004][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   38.416072][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[   38.423229][    C0] ==================================================================
[   38.434296][ T2163] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.451259][ T3812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[   38.460563][ T3812] netlink: 80 bytes leftover after parsing attributes in process `syz.2.92'.
[   38.463622][   T29] audit: type=1400 audit(1768776786.531:532): avc:  denied  { mount } for  pid=3810 comm="syz.2.92" name="/" dev="ramfs" ino=6398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   38.469717][ T3812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'.
[   38.500516][ T2163] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   38.509065][ T2163] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[   38.522517][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'.
[   38.540839][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.559304][ T1875] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.568641][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'.
[   38.574188][ T1875] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   38.591029][ T1875] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[   38.602949][ T3319] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[   38.616001][ T3319] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[   38.626409][ T3319] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error