last executing test programs:

3.382644777s ago: executing program 2 (id=320):
unshare(0x28040680)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000040)="7963c0236630a4cbded7034fdba2caacdf76172dcdd1b32338b184be501b84bc694681c0f0a266023c02e2c40f92c8c194a533b2e6ccdf4df7dcba3b09564d9cce2421c97080354054e04b3f4a5844fd6890e8bdf1ffdcbc0b5224282500e65afb7405c5c20c35c6278f856419d05c1ca79ce6c1c8c6e45059dc0f64bfe9533f586ee2c7444e9ab06b69bfd9d23e46722d528d76b15d07504a668c74bbff48b09a1d0087d9b0c1f4de628f66fe934ed5804a32192d17e73ea147dd9ce8066d", 0xbf, 0x4000000, &(0x7f0000000100)={0xa, 0x4e24, 0x3df3, @local, 0x6}, 0x1c)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0xc, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}})
r2 = socket$packet(0x11, 0x1, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000140), 0x0, 0x8000, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0x0, 0x6, @local}, 0x14)

2.486505761s ago: executing program 2 (id=337):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0xd, 0xc, 0x5f, 0x7fffffff, 0xb})
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88536, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x120, 0x10000, 0x4, 0x9, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff80}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
mkdir(&(0x7f0000000480)='./bus\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "3f18083bf44bd8fb", "af251d3e1f8a7a45f8e7c98da8fd888a", "33649324", "9b455fd105dc246e"}, 0x28)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8)
r4 = socket$rds(0x15, 0x5, 0x0)
unshare(0x2a020400)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400})
rt_sigprocmask(0x3, &(0x7f0000000000), 0x0, 0xffffffffffffff61)
r5 = getpgrp(0x0)
ptrace$ARCH_GET_FS(0x1e, r5, &(0x7f0000000300), 0x1003)
r6 = gettid()
tkill(r6, 0x12)
tkill(r6, 0x14)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x4000)
setxattr$system_posix_acl(&(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=0xee00, @ANYBLOB="0400000000000000100003000400"/24], 0x2c, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')

1.66401309s ago: executing program 3 (id=362):
r0 = inotify_init()
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r3=>0x0)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
socket$kcm(0x1e, 0x5, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mount$cgroup2(0x0, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000280), 0x801, &(0x7f0000000340)={[{@memory_hugetlb_accounting}]})
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000200000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
r7 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
getsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000600), &(0x7f0000000640)=0x4)
close(r2)
close_range(r0, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e4, &(0x7f0000000280)="$eJzs3E1LG1sYwPHHmMQY0WRxuZd74eLDvZt7N4Om+9JQFEoDFWtKX6B01EkbMk0kEywppbarbks/RBfi0p3Q+gXcdNdVN925KXRRF8UpmZcYNVYbX+LL/wdyjj7nyZwzo/KcgZn1268flwqOUTBrEkmobLrugmyIpCUioZ6gjXj9uLR6If8PfP349807d69nc7mxSdXx7NSljKoODb978qw/GLbSJ2vp++tfMp/Xfl/7c31z6lHR0aKj5UpNTZ2ufKqZ07als0WnZKhO2JbpWFosO1bVj1f8eMGuzM3V1SzPDibnqpbjqFmua8mqa62itWpdzYdmsayGYehgUrCf/OLkpJntMHnmiCeDY1KtZs1eEenfFckvdmVCAACgq4L6v1ntRxolfSf1f7Rt/b/0z2pt4NbyUFD/r8Qb9b9IS/3/YOuzttX/CRE59vp/d0V0vrjuz+OHqv9xRjTq/2Tw9+t5eW9pxOtQ/wMAAAAAAAAAAAAAAAAAAAAAcBZsuG7Kdd1U2IZffSKS8J4g8b/v9jxxPLj+F9vWizuiQyL2q/n8fN5vgwGrImKLJSOSku/e70Og0Y+LeoO0IS3v7YUgf2E+3+tFsgUpevmjkpL0znzXHb+WGxtV3/b8mCRb8zOSkt/a52d25scabVz++7cl35CUfJiRitgyGzwZF+Y/H1W9eiO34/j93jgAAAAAAM4DQ5ua+/e+1rixO+7vj/14c3/d9v6Av78eabu/j8pf0W6tGgAAAACAi8WpPy2Ztm1Vz10nXOFBs8L3Gu8xpkd69godQSc8+Ck4dbEDnbFIR1Mdjv/iRWnbCW8b7TVGJjr5ZDclcthz+Mebt9+O7lpcXk7ss9JOO/H9Vho7uf9AAAAAAE7KVtEf/uRKdycEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAFdBIvluv2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4kcAAAD//5odDAg=")
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000280)=<r10=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x62400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000225bd7000fedbdf2511000000080015000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB='\b\x0097', @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800150003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4818)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="00020000", @ANYRES16=r11, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x4048010}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x101, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x40000000000001d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x4, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x844)
syz_emit_ethernet(0xfef3, &(0x7f00000001c0)=ANY=[], 0x0)

1.65494977s ago: executing program 3 (id=364):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x89204, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x500540, 0x0)
ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000580)=""/133)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @broadcast, 0x2}}}, {{@arp={@private=0xa010101, @broadcast, 0xffffff00, 0xffffff00, 0x8, 0x0, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x0, 0x7ff, 0x7, 0x0, 0xe, 'veth0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x0, 0x44}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @rand_addr=0x64010101, @loopback, 0x2, 0x1}}}, {{@arp={@private=0xa010100, @loopback, 0xff000000, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x8, 0xfffe, 0x53, 0x2, 0x1, 'pim6reg1\x00', 'nicvf0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)

1.614075393s ago: executing program 2 (id=365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000, 0x0, 0x7}, {0x0, 0xb99, 0x6}], 0x2, 0x1, 0x61, 0x0, 0x0, 0x6e})
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @private}, &(0x7f00000000c0)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x20000000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x4414, 0x4)
sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4002000}, 0x0)
recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000141, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x6b, 0x0}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/80, 0x50, 0x0, &(0x7f0000000500)=""/47, 0x2f}}, 0x10)

1.524244648s ago: executing program 3 (id=366):
r0 = inotify_init()
r1 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8)
getdents(r4, &(0x7f0000000040)=""/181, 0xb5)

1.451300983s ago: executing program 3 (id=369):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x50d, &(0x7f00000003c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ftruncate(r0, 0x2ff5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
write$cgroup_int(r1, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x80000002, 0x2, 0x0, 0x6})

1.336096709s ago: executing program 1 (id=371):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x103, 0x2, 0x1, 0x4, 0x3fe, 0x6, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x2, 0x2, 0x1, 0x2}}, 0x26)
ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1.33574384s ago: executing program 1 (id=372):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x7, 0x428}}, './file0\x00'})
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)

1.32860341s ago: executing program 3 (id=373):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) (async)

1.233286766s ago: executing program 1 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe32, 0x8, @remote, 0x6}, 0x1c) (async, rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async, rerun: 32)
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210b00000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c002b01"], 0x28}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async, rerun: 64)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000780)={<r6=>0x0, 0x1, 0x5})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b80)={r6, 0x7f0000000, 0xf}) (async)
write$rfkill(r5, &(0x7f0000000080)={0x5, 0xfe, 0x2, 0x21}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>r3, {0x4}}, './file0\x00'})
bind$inet(r7, &(0x7f0000000600)={0x2, 0x4e22, @broadcast}, 0x10) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x32, 0x43a1bd7a, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) (async, rerun: 32)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', <r10=>0x0, 0x4, 0x1, 0xe3, 0x6, 0x40, @dev={0xfe, 0x80, '\x00', 0x2b}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8000, 0x6, 0xb}})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r10, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8883, 0x0)
ioctl$TIOCGSERIAL(r11, 0x541e, 0x0) (async)
write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) (async, rerun: 64)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000f80)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x100b, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) (async, rerun: 64)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r12, 0x26, &(0x7f0000000000)) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00'/20, @ANYRES32=0x0, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="10000000440001000a000100aaaaaaaaaabb000008000400b80f000004001a"], 0x78}, 0x1, 0x0, 0x0, 0x40045}, 0x20040040)

891.992266ms ago: executing program 4 (id=376):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22ffe2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000040)=0x1)
close(r0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)

868.329147ms ago: executing program 4 (id=377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271b7ed2608004c6588a8ceccfc9270df", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@setlink={0x40, 0x13, 0x331, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_TXQLEN={0x8, 0xd, 0xe}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

820.61804ms ago: executing program 4 (id=378):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000835000/0x3000)=nil)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x2, 0x0, 0xffffffffffffff7f})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, @empty, @remote, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xaa, 0xf1, &(0x7f00000005c0)="17f60f90490c55bbc4536ec73c2b9ae02ca2457e1ce7d27002234d589985f5a64d7013e9e44c23fe9097d32dad11a5f54a7286d63ab68516b01d975474509de32cce106cfb06f33df365e36050b0733f511d860b63bd12ab7b988fbeab862108ade95d6143eea59cf9251d8b3d14f6abd387483c2475f25d9150a0dcf5de75289a685f2165df4786bcfc7a1283226db72a499548f5583064ef07a41b1a8417a3cceab52ea9f43dc2d6a5", &(0x7f0000000680)=""/241, 0xfd1, 0x0, 0x46, 0xaf, &(0x7f0000000100)="c65977aa807945b74d1df6eeb8a318ed181e4c12b1c28f67b3b9fbc96d4f8bc5dcb2a131f0d6ba4c0e14f5787d906c2c9de3b00c12d372dfc805224b79e47a78f66360a8beb8", &(0x7f0000000780)="48ba0bceaa8cef85d51b23ffd25e91b9570c2d87d0636427b78f698d1a7eb70c2fbb0dae2861f102075181b73dc230911b0c58a5c1d25745df6b832e9a14cdb4e332901214f5282d5e0e5030e125ab3b783adb89994d40890f92d8723b4770d2ae665ed51d5172f0b8894332a934f9ec8419437212ce54b3400d2ab675a853714d43869260cc07bf9f4630232bc093569007c5101f0f4f7c4b9e138059f3d730dc17387fe82b9ef0f39f210ad0ca20", 0x3, 0x0, 0xd}, 0x50)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480), &(0x7f00000004c0)='./bus\x00', 0x6, 0x0)

723.450806ms ago: executing program 2 (id=380):
r0 = inotify_init()
r1 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8)
getdents(r4, &(0x7f0000000040)=""/181, 0xb5)

709.825017ms ago: executing program 0 (id=381):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r1, r0, 0x80000)
socket$inet6(0xa, 0x800000000000002, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)

700.055008ms ago: executing program 4 (id=382):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff000010001800000000000000ffb0000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

640.193101ms ago: executing program 1 (id=383):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x11, 0xa, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) (async)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000240)='devpts\x00', 0x999, 0x0) (async, rerun: 64)
writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async)
writev(r2, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffff) (async, rerun: 64)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000300)) (async)
r4 = syz_clone3(0x0, 0xffffff76)
capset(0x0, 0x0) (async)
gettid() (async)
syz_open_procfs$namespace(r4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = memfd_create(0x0, 0x0)
write(r5, 0x0, 0x0) (async)
sendfile(r5, r5, 0x0, 0xffff) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, @perf_bp={&(0x7f00000002c0), 0x2}, 0x2004, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x1000, 0x0, 0x20000005}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
fcntl$lock(r7, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200}) (async, rerun: 64)
accept4(r6, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000040)=0x80, 0x0) (async, rerun: 64)
r8 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00')
fchdir(r8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

639.722821ms ago: executing program 4 (id=384):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000280)=0xc)
r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchownat(r4, &(0x7f0000000080)='.\x00', 0x0, r2, 0x1000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0xfffffff9, 0x5}})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x44}}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91107e000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

639.370471ms ago: executing program 0 (id=385):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

629.604402ms ago: executing program 1 (id=386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400767863616e0000000400028008000a00000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0)
readv(r6, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newtfilter={0x1050, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x1020, 0x2, [@TCA_BASIC_POLICE={0x101c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8edc, 0x8, 0x6, 0xfffffff0, 0x8020, 0xffffff8d, 0x3, 0x4, 0xc0000000, 0x7, 0x5, 0x2, 0x627, 0xfffffffe, 0x7, 0x8, 0xd, 0x9, 0x8, 0x19, 0x9, 0xfffffffb, 0xfffffff2, 0xd, 0x5, 0x1, 0x2, 0xe114, 0x70, 0xffffffff, 0x1, 0x9, 0x1, 0xe31, 0x0, 0x1, 0xd, 0x6, 0x2, 0xed99, 0x23, 0x30, 0x6, 0x80000000, 0x6, 0x80000000, 0x7, 0x10000, 0x9, 0x200, 0x71e, 0x2109, 0xbe1, 0x6, 0x9, 0x4, 0x9, 0xfffffffe, 0xbd2, 0x8, 0xc9, 0x5, 0x6, 0x0, 0x1800000, 0x1, 0xffffffff, 0x0, 0x9, 0x8, 0x0, 0x4, 0x77, 0x2, 0x1, 0x3, 0xfffffffc, 0xb5a6, 0x1, 0x80000000, 0x5, 0xc39, 0x8, 0xc, 0x5, 0x0, 0x3, 0x958, 0xe, 0x9, 0x10000, 0x83c7, 0xf0c, 0x2, 0x7ff, 0x5f, 0x800000, 0x6, 0x7, 0x3, 0x5, 0x4, 0xffffffff, 0x5000000, 0x528, 0xfff, 0xfff, 0x6, 0x100, 0x1, 0x7fffffff, 0x6, 0x2, 0xb4, 0x3, 0x0, 0xfff, 0xffff, 0x101, 0x0, 0x5608, 0x6, 0x3, 0x1, 0x3f8e, 0x4, 0x2, 0x4, 0x8000, 0x7796, 0x1d2b813a, 0x1, 0x3, 0xb, 0x101, 0x8fee, 0x100, 0x3065, 0x1000, 0x2, 0x5d5c, 0x1ff, 0x7, 0x9, 0x3626, 0x6, 0x1, 0x4800000, 0xff, 0x9, 0x2, 0x1, 0x1, 0x2, 0x3, 0x7ffffffe, 0x7fffffff, 0x9, 0xfffeffff, 0xff, 0x9, 0x2, 0x3a4, 0x67, 0x5, 0xfffffffb, 0x8000, 0x9, 0x6, 0x8, 0xc6, 0xfffffff7, 0x4, 0x0, 0x7ff, 0x7, 0x101, 0x555a, 0xd, 0x9, 0x6, 0x1, 0x0, 0x1, 0x1, 0x6, 0x1, 0xfffff001, 0x1, 0x95cd, 0x2, 0x0, 0x1, 0x4, 0x9, 0x80000001, 0x8, 0x74, 0x71, 0x6, 0x6, 0x5, 0x0, 0x5, 0xb4d, 0x8, 0x7, 0x9, 0xb, 0xdcb0, 0x2, 0x3f29, 0x6, 0x7, 0x4, 0x1, 0x0, 0x7, 0xfffffffe, 0x7, 0x5, 0x4977212f, 0x4, 0x6, 0xf16, 0x3, 0x8, 0x8000, 0x210fa7e, 0x200, 0x0, 0x0, 0x0, 0x7f31, 0x4, 0xb6f9, 0x5, 0x8001, 0x8, 0xbf07, 0x9, 0x0, 0xf7d, 0x8, 0xf5, 0x10001, 0xfffffff8, 0x2, 0xd, 0x9, 0x9, 0xd6, 0x6, 0x200, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x600000, 0x7, 0x7, 0xfff, 0x4716, 0xf95f, 0x1, 0x9, 0x6, 0x9840, 0x0, 0x10001, 0xffffffff, 0xfffffffc, 0x8000, 0xce, 0x0, 0x7, 0x200, 0x7, 0x5, 0x7, 0x80000000, 0x20110c4, 0x101, 0x100, 0x4, 0x4, 0x98d, 0x7fffffff, 0x5, 0x80000000, 0x7e, 0x192, 0xd5, 0x200, 0xcaf, 0x7fffffff, 0x100, 0x77, 0x1, 0x8, 0x2, 0x8, 0x9, 0x5, 0xc1, 0x0, 0x4, 0x4, 0x0, 0x2, 0x5, 0x4, 0x0, 0x10001, 0x7, 0x82de, 0x2, 0x6, 0x0, 0x0, 0x1, 0x100, 0x0, 0x5, 0x8, 0x7, 0x3, 0x3ff, 0x9, 0x9, 0x0, 0x80000000, 0x8, 0x2, 0xfff, 0xd17, 0x4, 0x8, 0x0, 0x3, 0x343b, 0x4, 0xbeb, 0x10000, 0x40000, 0x7, 0x0, 0x2bc, 0xff, 0x8, 0x6, 0xffffffff, 0x5, 0x579b, 0xf, 0x9e5, 0x10001, 0xfffffeff, 0xff, 0x5, 0x3, 0x6, 0x3, 0x3, 0x3, 0x7, 0x4, 0x0, 0x9, 0x9, 0x7ff, 0x6, 0x3, 0x3, 0x292f, 0xe, 0xe, 0x1, 0x6, 0x1, 0x8, 0x5, 0x8, 0x6c, 0x9, 0x0, 0xffffffff, 0x1, 0xd4d9, 0x8b, 0xffff, 0x4, 0xa, 0x8, 0x4, 0x4, 0x6, 0x6, 0x4, 0x3ff, 0x2, 0x1, 0x2, 0x1, 0x1, 0xf60, 0x4, 0x200007, 0x82, 0x49, 0x6, 0x8, 0xfffff001, 0x1, 0x5, 0x4f1, 0x4, 0x59a, 0x7, 0x5, 0x5, 0x9, 0xe, 0xa, 0x0, 0x90000000, 0x0, 0x101, 0x6, 0x686, 0x7, 0x2, 0x9, 0x8, 0x0, 0x7, 0xfffffc01, 0x2, 0x8, 0x7, 0x1, 0x6, 0xe, 0x5, 0x19, 0x4, 0x5, 0xd49, 0xc38, 0x6, 0x1000, 0x52f, 0x5, 0x5, 0x10001, 0x7, 0x9, 0x6, 0xffff6642, 0x4bb, 0x9, 0x9, 0xfffffff7, 0x4, 0x2, 0x0, 0x60a8, 0x1, 0x9, 0x6, 0x35, 0x256, 0x5, 0x66d, 0x3, 0xe00000, 0x200, 0x6, 0x7f, 0x7, 0x10000000, 0xfadb, 0x10001, 0xffff, 0x1, 0x5, 0x9, 0xc, 0x4, 0x1b5, 0x0, 0x5, 0x6025, 0x24000, 0x3ff, 0x401, 0x8000, 0x7, 0x9, 0x8, 0x200, 0xffff48ba, 0x2d, 0x3, 0x1, 0x8, 0x7, 0xc1dd, 0x9496, 0x4, 0x70, 0x8, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x40, 0x7, 0x2db, 0x5, 0x26, 0x2, 0x7, 0x800, 0x0, 0x8, 0x1, 0x6, 0x8, 0x7fffffff, 0x80, 0x9a, 0x547, 0x5, 0x4, 0x1, 0x9, 0x6, 0x5, 0xfffffffb, 0x9, 0x0, 0x3, 0x2, 0x0, 0xd, 0x4, 0x7ff, 0xc8b0, 0x9, 0x7, 0x2, 0x8001, 0x9, 0xffffffff, 0x7fff, 0x5, 0x9, 0x3, 0x0, 0xbed0, 0x401, 0x3, 0x8, 0x3, 0x0, 0x9, 0x7, 0x5, 0x4, 0x80000000, 0x8, 0x7, 0x596, 0xf, 0x7, 0x6fe3b0a1, 0x9, 0x5, 0x4, 0x200, 0xff, 0x6, 0x3, 0x9879, 0x2, 0x9b, 0x8, 0x7f, 0xfb, 0xff, 0x1, 0x1, 0x1, 0x2, 0x8, 0x3ff, 0x5, 0x0, 0x7f, 0x1, 0x1ff, 0x5, 0xa, 0x295, 0x100, 0xff, 0x101, 0x6, 0x4, 0x5, 0x9, 0x7d44, 0x8, 0xfffffff8, 0x7f, 0x3, 0x7a0, 0x0, 0x8, 0x5, 0x8, 0xfffffffc, 0x7, 0x9a8, 0x1200000, 0x80000000, 0xd, 0x2, 0x3fa4, 0x2, 0x6, 0x10, 0xc1a, 0x7fff, 0x7, 0x7, 0x288, 0x80000000, 0xa, 0x9, 0xfeb, 0xcb8, 0x0, 0x5, 0x5, 0x6, 0x7, 0x80000001, 0x9, 0x800, 0x5, 0xfffffffe, 0x459, 0x4, 0x2, 0x5, 0x9, 0x1, 0x10001, 0x2, 0x7, 0x2, 0xfe, 0x800, 0xc66, 0x1000, 0x6, 0x5, 0x4, 0x200, 0x5, 0xaa2, 0x6, 0x5, 0x6, 0x9, 0x39b7, 0xad9, 0xffffff81, 0x8001, 0x3, 0x4, 0xe9, 0x2, 0x0, 0x100, 0x100, 0x8, 0x5, 0x0, 0x239, 0xb4, 0x1, 0x1, 0x8, 0x80000000, 0xee9, 0xfff, 0x3, 0x8, 0x8, 0xe, 0x6, 0x6, 0x7, 0x7fffffff, 0x3, 0x7ff, 0x6, 0x0, 0x0, 0x60, 0xeff, 0x3, 0xffffff21, 0x710, 0x8, 0x3, 0x200, 0x5, 0x6, 0xefdd, 0x9, 0x2, 0x3, 0x8, 0xff, 0x5, 0x7, 0x3, 0x100, 0x0, 0x5, 0x584f, 0x54, 0xffff, 0x8, 0x3, 0x9, 0x2, 0x3, 0x3, 0xfffffffb, 0x6, 0xfffffffa, 0x8, 0x2, 0x1, 0x8001, 0x1, 0x1000000, 0x5, 0x164, 0xf, 0x56ad, 0x856e, 0x3, 0x1000, 0x7, 0x40, 0x2, 0x3ff, 0xc, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x5, 0x4, 0x781e, 0x6, 0x9, 0xff7, 0x7, 0x6, 0xffffffff, 0x3, 0xfffffff1, 0x6, 0x1, 0x6, 0x80000000, 0x10001, 0x800, 0x0, 0x19, 0x4, 0x1, 0x6, 0x6a1, 0xffffffff, 0xd2, 0x80000001, 0x0, 0x1, 0x8001, 0x80000001, 0x2, 0x1ad641d4, 0x100, 0x7, 0xe445, 0x1, 0x3, 0x17, 0x7, 0x6, 0x1ff, 0x321, 0x4, 0x2, 0x6, 0x4, 0x1ff, 0x9, 0x7, 0x6, 0x80b, 0x8, 0xd, 0xd, 0x0, 0x5ad2, 0x4, 0x8, 0x7d7, 0x7fff, 0x7, 0xfff, 0x0, 0x1, 0x573, 0x8, 0xd75, 0x3, 0x9, 0x10001, 0x6d, 0x4, 0x0, 0xc528, 0x0, 0x2, 0x5, 0x9db, 0x4, 0x1000, 0x8, 0x80000001, 0x5, 0x5, 0x1, 0x8, 0x6, 0x7, 0x100, 0x2, 0x0, 0x6, 0x7, 0x19, 0x69, 0x0, 0x2, 0x0, 0x1, 0x709d, 0x3, 0x9, 0x8, 0x4, 0x0, 0x9, 0x6, 0x6, 0x3ae1, 0x4, 0x46426710, 0x1, 0x6f15, 0x2, 0x5, 0xc0, 0x1d, 0x1ee7, 0x1, 0x3, 0xe467, 0xe5, 0x4, 0x7, 0xffffffff, 0x4, 0x6, 0x7, 0x800, 0xe7e, 0x2, 0x7, 0x2, 0x80000000, 0xfff, 0x7ff, 0xfffffff9, 0x9, 0xfff, 0x5, 0xe9fc, 0x9, 0x9, 0x3, 0x4, 0xffffff15, 0x9, 0xe000, 0x4, 0x7, 0x0, 0x7fff, 0x2, 0x92a, 0x7, 0x40, 0x50a0, 0x2, 0x5, 0xfffffffc, 0x3, 0x2, 0x8, 0x5, 0x100, 0x7f, 0x11, 0x1, 0x4, 0x3, 0x1, 0xa, 0x1, 0x3, 0x8, 0x800, 0x10000, 0xff, 0xfff, 0xf, 0x5, 0xf296c81d, 0x1, 0x9, 0x40, 0x4, 0xfffffff9, 0x6, 0xac, 0xd, 0xa, 0x8, 0x8, 0xfffffffc, 0xd4, 0x1000, 0x5, 0x80, 0x1, 0xfffff369, 0x8, 0x4, 0x800, 0x401, 0x4, 0x0, 0x7, 0x8, 0x8, 0x1, 0x4, 0xdd, 0x3, 0x3, 0x7f, 0x10001, 0x6, 0x3, 0xe, 0x8c, 0x0, 0x2, 0x6, 0x4, 0x9, 0xb43, 0x80000000, 0x6, 0x7, 0x9, 0x4, 0x8, 0x60, 0x1ff, 0xf, 0x2, 0x9, 0x9, 0x1ff, 0x6, 0x1, 0x2, 0x81d, 0x9, 0x9, 0x5fb1, 0x5, 0x178, 0x81, 0x1, 0x1, 0xffffffff, 0x3, 0xffffffff, 0x6]}]}]}}]}, 0x1050}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r7 = socket(0x200000000000011, 0x2, 0x0)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000e00), 0x140, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00057bd200000000180012807a5fd5b46772657461700000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)
r12 = socket(0x23, 0x800, 0x7)
setsockopt$RXRPC_SECURITY_KEYRING(r12, 0x113, 0x2, 0x0, 0x300)
getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

629.238192ms ago: executing program 2 (id=387):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000ffffff800000ffffffffffffffff00000000001c000000000000000000000000000000000005000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac"], 0xfc}}, 0x0)

628.010332ms ago: executing program 3 (id=388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x28)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000000200)="000bda8b37dd", 0x6)
sendfile(r4, r2, 0x0, 0x40001)
sendfile(r4, r3, 0x0, 0x7ffff000)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0)

602.641003ms ago: executing program 2 (id=389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r3 = socket(0x1e, 0x80004, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r4, r3, 0x0)
recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f0000000280)={{0x3, 0xffffffff, 0xfffffffb, 0x2, 0x6}, 0x23b, [0x1, 0x696, 0x1, 0x3, 0x7f, 0xa, 0x5, 0x40, 0x3, 0x18, 0x3, 0x5, 0x9, 0x1, 0x2, 0x4, 0xb, 0x2, 0x1d9, 0xc, 0x7740, 0x100, 0xfffffeff, 0x1000, 0x0, 0x3ff, 0x6, 0x0, 0xb, 0x9fd, 0x1df0, 0x200, 0x0, 0x1, 0xc, 0x8, 0x7fff, 0xfffffff8, 0x3f8000, 0xb12, 0x1ff, 0x3ff, 0x88, 0x1000, 0x2, 0x1, 0x8, 0x6, 0xbd, 0x0, 0x10, 0xd74, 0x1, 0x8138, 0x7fff, 0x5, 0x8e6d, 0x2e16, 0x7, 0x3, 0x7, 0x9, 0x8a, 0xfff, 0x0, 0x3, 0xe, 0xe1, 0x81, 0xa9d4, 0x5e, 0x8, 0x3, 0xfffffffa, 0x6, 0x1, 0x40, 0x7, 0x3, 0x7f1, 0xe8, 0x0, 0x9ca2, 0x8, 0x200, 0x88, 0x3, 0xb, 0x7fffffff, 0x29dc0fca, 0x6, 0x22342de2, 0x8, 0x4, 0x5, 0x3ff, 0xa, 0xdaa, 0x1, 0x5, 0x35b5, 0x6, 0x6, 0x1, 0xffffffff, 0x6, 0x1b10, 0x8, 0x6, 0x100, 0xcae3, 0xf, 0x100, 0xde7, 0xcda, 0x3, 0x6, 0xf, 0x9ce, 0x71f10b54, 0x4, 0x8, 0x3, 0x0, 0x8, 0xd, 0x3, 0x7, 0x0, 0x7, 0x5, 0x9, 0xb5, 0xff0000, 0x80000001, 0xd1c9, 0x9, 0x1, 0x3, 0x5, 0xdf8a, 0x6, 0x81, 0x647, 0x1, 0x4, 0x2, 0x4, 0x3, 0x4c8b13e9, 0x3, 0x2, 0x9, 0xd3c, 0xdd, 0xffff, 0x95e, 0x5, 0x0, 0x0, 0x5, 0x4, 0xa, 0x0, 0x7, 0x5, 0x51e9, 0x3847, 0x3, 0xfffffff9, 0x3c, 0xdb3, 0x9, 0x1000, 0x1, 0x7, 0x9, 0x167, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7, 0x3, 0x7, 0x5, 0x0, 0xfd6e, 0xb, 0x3, 0x1, 0x7fffffff, 0xb, 0x1ff, 0xfffffff8, 0xfffffffd, 0x3, 0x2, 0x200, 0x53df75ee, 0x9, 0xb, 0x5, 0x6, 0x200, 0x0, 0xf, 0xc3, 0x1, 0xcd, 0xa, 0x0, 0x0, 0x6, 0x7ec, 0x80, 0x0, 0x3, 0x9, 0xfffffffa, 0x9, 0x1, 0xb51, 0x2, 0x5, 0x9, 0x7, 0x34, 0xe, 0x6, 0x1, 0x78d, 0x7, 0x6, 0xc5a, 0x7fff, 0x1, 0x2, 0xf, 0x4, 0xb, 0x52, 0x5, 0x7, 0x8, 0x5, 0xbc33, 0xffffffff, 0xa, 0x4, 0x5, 0x10001, 0x6, 0xfffffff8, 0xe24, 0x6, 0x0, 0x1, 0x1000, 0xfffffffc, 0x8001, 0x6, 0xffff97f5, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x9, 0x0, 0x6, 0x1, 0x8, 0x7ad, 0x9, 0x7, 0x80000000, 0x3, 0x1, 0x7, 0x6, 0x1, 0x7, 0x8000, 0x9, 0xffffffff, 0xffff, 0x2, 0x481, 0x7, 0x6, 0xff, 0x13b7, 0x6, 0x9fa7, 0x4, 0x0, 0x3, 0x3e10, 0x3, 0x0, 0xc2c, 0x0, 0x37a, 0x81, 0x53, 0x3, 0x98, 0x80, 0x1, 0x2, 0x2, 0x5, 0x7, 0xdac2, 0xfff, 0xe335, 0x5, 0xf, 0x2, 0x7f, 0x0, 0x400, 0x2, 0x44, 0x8, 0x8, 0x7fffffff, 0x0, 0x4, 0x101, 0x2a1b, 0x7, 0x7, 0x2, 0xfff, 0x5, 0xd64, 0x8, 0xb4f1, 0xfffffff8, 0x40000000, 0x7fffffff, 0x8, 0xe, 0x7ff, 0x10000, 0x1, 0xbc3b, 0x7, 0xfffffffe, 0xd2, 0xffff, 0x4, 0x7ff, 0x0, 0x10, 0x2, 0x3, 0x69, 0x3, 0xfffffffd, 0x7, 0x1, 0xe, 0x81, 0x5, 0x9f1, 0x9, 0x1f, 0x2, 0x3, 0x1, 0x8, 0x4, 0xe56, 0x9, 0x1c, 0x2, 0x401, 0x4, 0x5, 0x7fffffff, 0x5, 0x9, 0xfa, 0x7e67, 0xffffffa2, 0xbbb6, 0x0, 0x1000, 0x8, 0x3, 0x4, 0x9, 0xa82d, 0x3, 0x1, 0x5, 0x3, 0x0, 0x8001, 0x3, 0x4, 0xfffffffb, 0x9c9, 0x1, 0x5, 0x4, 0x2, 0x999, 0xff, 0x3, 0x5, 0x3ace, 0x9, 0x1, 0xffffffff, 0x9, 0x2, 0x4, 0x3, 0x9, 0x5, 0x9, 0x5, 0x5, 0x6a, 0x4, 0x3, 0x4, 0x7ff7217f, 0x7ff, 0x1000, 0xfffffd87, 0x8, 0x1, 0x2, 0x5, 0x7, 0x7, 0x383, 0x1, 0x931, 0x5, 0x3, 0x220a, 0x5, 0x2, 0x5, 0x7, 0x4, 0x7, 0x7, 0x6, 0x3, 0x10001, 0x2, 0x25, 0xd2c, 0x8000, 0x1, 0xfffffffb, 0x7, 0x59, 0xfffffff2, 0xfffffffd, 0x7, 0x0, 0x1, 0x7, 0x3, 0x0, 0x7fffffff, 0x3, 0x14e75c05, 0xffffffff, 0x3, 0x0, 0x8, 0x63, 0x5962, 0x4, 0xe, 0x80, 0x6, 0x40, 0xff, 0x3, 0x2, 0x3, 0x2, 0x0, 0x2, 0x8, 0x6, 0x81, 0x3, 0x5, 0x6c, 0x800, 0x28d8, 0xe810, 0x0, 0x4, 0x6, 0x3, 0x7, 0x65, 0x239, 0x279, 0x9, 0x1ff, 0x9, 0xffff, 0x859, 0xf3, 0x7ff, 0x5, 0xfd5, 0x8, 0xb91, 0x71e, 0x6, 0x4, 0x6, 0x1, 0x3, 0xbc, 0x6, 0x4, 0x3, 0x2, 0xffff7fff, 0x2, 0x7fff, 0x2, 0xff, 0xff, 0xdbf, 0x3, 0x2, 0x6, 0x237, 0x1, 0x8, 0x4, 0x7, 0x8, 0x80000001, 0x1, 0x9, 0x6f, 0x5, 0x3, 0x6, 0x100, 0x8, 0x2, 0x7, 0x4, 0x9, 0x1, 0x0, 0x8b6, 0x8, 0x65, 0x80000001, 0x4, 0x3, 0x3, 0xffffffff, 0xfffffff5, 0xb9e, 0x6, 0x4, 0x1, 0x7, 0x1, 0x7, 0x0, 0x5, 0x1, 0x6, 0x28e, 0xffffffff, 0xa, 0x4, 0x2, 0x5, 0x0, 0x83, 0x6, 0x0, 0x402df957, 0x7fff, 0xc67c, 0x0, 0x5, 0xe, 0x7f, 0x7fffffff, 0xff, 0x6, 0x9, 0x7, 0x5, 0x2, 0x6, 0xffffffff, 0x9, 0x7, 0xf, 0x5, 0x12000, 0x5, 0x3, 0x10000, 0x7, 0xb8a, 0x5, 0x3, 0x5, 0xffffffff, 0x9, 0x2, 0x6, 0x6, 0x1, 0x8001, 0x7, 0x1eab361, 0x9, 0x4, 0x10001, 0x8, 0x4, 0x4, 0x7, 0x7, 0x8946, 0x3, 0x1, 0x6, 0x5, 0x0, 0x4, 0x8a, 0x0, 0x8c74, 0x242f, 0x3e9, 0x3, 0x2, 0x0, 0x0, 0xff, 0x10, 0x7fff, 0x2, 0xffffffff, 0x6, 0x800, 0x800, 0x2, 0x7, 0x6, 0x9, 0x1, 0xf, 0x3af, 0x8, 0x8, 0x4, 0x7, 0x1, 0x5, 0x5718, 0x6, 0x4, 0xc, 0x9, 0x2d2, 0x101, 0xfffffff5, 0x71, 0x1, 0x1, 0xffffffff, 0x10000, 0x9, 0x8, 0x4994, 0x3ff, 0x6, 0xc1, 0x2, 0x7, 0x80, 0x7, 0x1, 0x1, 0x315, 0x9, 0x7, 0x8, 0x200000, 0x5, 0x9, 0x5c, 0x7, 0x1, 0x5, 0xd57000, 0x2, 0x3de6, 0x8, 0x6, 0x5, 0xfffffffa, 0x6466, 0x6, 0x6e61, 0x81, 0xfc9, 0x7, 0x6433b47d, 0x9, 0xe59, 0x7e2ff937, 0x6, 0x6, 0x5, 0x4, 0xcea4, 0x0, 0x80, 0x27, 0x1, 0x8001, 0x0, 0x7fff, 0x5, 0x6, 0xfb2, 0x2, 0x1, 0xb, 0x2, 0x5, 0x8, 0x2, 0x0, 0x5, 0x5, 0x4, 0xeed, 0x0, 0x7, 0x3, 0x400, 0xfffffffb, 0x7, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0xb, 0xffffff13, 0x8, 0xfffffff9, 0x1ff, 0x6a64, 0xffff, 0x9, 0xb1c, 0x8, 0x3ff, 0x7ff, 0x39e, 0x3ad0, 0xffffffff, 0x8, 0x5, 0x9, 0x5, 0x5, 0xe, 0x800100, 0x80, 0x9, 0x4, 0x4, 0x9, 0x1, 0x1, 0x2, 0x1, 0x200, 0xfffffeff, 0x1000, 0xc8d5, 0x7, 0x5431, 0x8, 0x2, 0x5, 0x8, 0xadbf, 0x7, 0x6, 0x353, 0x3, 0x2, 0x8001, 0x2, 0x3, 0x9, 0x6, 0x5, 0x10000000, 0xd, 0x6, 0x7, 0x7fff, 0x0, 0x1000, 0x0, 0x6, 0x76a70e65, 0x6, 0xf, 0x6, 0xffffffff, 0x2, 0x800, 0x52a, 0x8, 0x1, 0x2c09, 0xffff7fff, 0x9, 0x80000001, 0x9, 0x3, 0x4, 0x2, 0x81, 0x81, 0x6, 0x2, 0x59, 0x1ff, 0x8, 0x3, 0xe0000000, 0x6, 0x0, 0x9, 0x3, 0x59, 0x401, 0xc71, 0xc4, 0x2, 0xd4, 0x4, 0x7, 0x909, 0x2, 0x1c08, 0x3ff, 0x1, 0x9, 0x1, 0x3, 0x0, 0x2, 0x69b5, 0x2, 0x2, 0x8, 0x0, 0x4, 0x6, 0x6, 0x2, 0x100, 0xb, 0x9f32, 0xfffffff9, 0x7, 0x1, 0x6, 0xfffffff9, 0x1ff, 0x1, 0x3, 0x8, 0x6, 0x5, 0x10001, 0x9, 0x8000, 0x1, 0x1, 0x4abd, 0x9, 0xb, 0x2, 0x9, 0x6, 0xfa4c, 0xb876, 0x59, 0x4, 0x6, 0x6, 0x80000000, 0x101, 0x3, 0x2, 0xff, 0x7, 0x800, 0x0, 0x535, 0x200, 0x0, 0x5, 0xffffff00, 0x2, 0x7, 0x8001, 0x7, 0x3, 0x9, 0x6, 0x5, 0x3, 0x4, 0x5, 0x6, 0x0, 0x4, 0x929, 0x4, 0x6, 0x7ac, 0x12, 0x6, 0xfffffff9, 0x5, 0x2, 0x400, 0x80000000, 0x4, 0x3ff, 0x978, 0x9, 0x0, 0x1ff, 0x2, 0x8, 0x100, 0x5, 0x9, 0xac9f, 0x1000, 0x5, 0xc, 0xffff7552, 0x800, 0x401, 0x7fffffff, 0x0, 0xfffffffa, 0x9, 0x1ff, 0x16e, 0x3, 0x3478, 0xfffffffb, 0x3, 0x6, 0x6, 0x10001, 0x5, 0x6, 0x6, 0xfffffffd, 0x3, 0x996e, 0x23c, 0x8, 0x3, 0x7, 0x81c5, 0x100, 0x6, 0x2, 0x6, 0x6, 0x7, 0x7fffffff, 0x0, 0x4, 0x0, 0x9, 0x9, 0x966, 0x4160, 0x89, 0x2, 0xfffffffd, 0x1, 0xfffffffe, 0x7fff, 0x2, 0x7]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

344.203769ms ago: executing program 4 (id=390):
r0 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x93, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x2ca}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x8, 0xa0}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x9, 0x7, 0x10, 0x7}, 0x63, &(0x7f0000000100)={0x5, 0xf, 0x63, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xb, 0x5, 0x9}, @generic={0x4a, 0x10, 0x4, "74dd95dea19b654790d84fc19e1af8932d64d580106d8e2aafbe77d2a1100d5994cb41673b39edfdccf1e94309c067d3af91970c4cf9befe3e344ad7d9e6b3b507df2e8bffd871"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x18, 0x3, 0x8, 0x135}]}, 0x7, [{0x9, &(0x7f0000000180)=@string={0x9, 0x3, "dd86182bc21aae"}}, {0xb, &(0x7f00000001c0)=@string={0xb, 0x3, "1becb8b021d0b979f5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x439}}, {0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "aea52047506a353d23a95292f70ac402f8ddc681b3329b403d86be"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44e}}, {0xf8, &(0x7f0000000340)=@string={0xf8, 0x3, "032943da87da3db4ec75a6f0b97502eb3ae865342b8af9bd1f82c6150af794e53ccc603548cc5b3b8612140581395f962dded742048a43f45bd4cb62a610d79ebfa1d3e8264a006331552493c9b2c95025417b5b28b7e44e0d4c017dd2303270a6cdf070f1f37604c28dfe2173687538646c31a8309658696a081686320195324f9c7f9a6c36e3d266984172b793acd5e6281484eb52e75a0456f819bb39cb30423462f5d80db54df9b5e0409fc377b6b56e3ebd41438175a64360adc398516b3aed7621ab38fc8f26a605e1123c99fc72d7f06c3cc6e6fe5331f80ae10cc3481f5289e3c4beeea6ce453c6036503c12d5e11543433f"}}]}) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
unshare(0x40040200) (rerun: 32)

185.153248ms ago: executing program 0 (id=391):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) (async)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1fd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}, @in={0x2, 0x4e24, @multicast1}], 0x2c) (async)
sendmmsg$inet6(r1, &(0x7f0000005640)=[{{&(0x7f0000000dc0)={0xa, 0x4e21, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000000e00)="a63c", 0x2}], 0x1}}], 0x1, 0x8000) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')

100.317814ms ago: executing program 0 (id=392):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x4e, &(0x7f0000003080)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1c, '\x00', @remote}}}}}}, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'batadv_slave_1\x00', 0x3}, 0x18)

85.522545ms ago: executing program 0 (id=393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a81010000000000000000020000000800034000000001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000066010000000000000000420000000800032e000000018e00010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004014)

65.781445ms ago: executing program 1 (id=394):
r0 = getpid()
syz_pidfd_open(r0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x1) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

0s ago: executing program 0 (id=395):
ioctl$TCSETA(0xffffffffffffffff, 0x560a, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188008000140a0000000080002400000000208000340000000022400018014000180080000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x20, r1, 0x80000001, 0x3f6beaeb)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8080}, 0x8c, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000192c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000190c0)={&(0x7f0000019300)=ANY=[@ANYBLOB="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"/384], 0x180}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x15, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$rfkill(r4, 0x0, 0x72)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x2, 0x5002)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
set_mempolicy(0x8003, &(0x7f0000000040)=0x1, 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000400300000095000000000000008381e934704c728c0e0e27c4c8aa2e2ad1c840f6a221ffcdc86b175a2dd43f0baa7990801372b2c4a5996695e457b5248520eaa6663b23e0f5afa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0)
ftruncate(r7, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0xfffffffd, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x50)

kernel console output (not intermixed with test programs):

[   18.782284][   T29] audit: type=1400 audit(1768999709.338:62): avc:  denied  { search } for  pid=3199 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   18.804330][   T29] audit: type=1400 audit(1768999709.338:63): avc:  denied  { search } for  pid=3199 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   18.827053][   T29] audit: type=1400 audit(1768999709.338:64): avc:  denied  { search } for  pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   18.849954][   T29] audit: type=1400 audit(1768999709.338:65): avc:  denied  { search } for  pid=3199 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   18.873072][   T29] audit: type=1400 audit(1768999709.338:66): avc:  denied  { read open } for  pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
[   22.218879][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   22.218893][   T29] audit: type=1400 audit(1768999712.768:70): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.248119][   T29] audit: type=1400 audit(1768999712.798:71): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.248901][ T3301] cgroup: Unknown subsys name 'net'
[   22.275825][   T29] audit: type=1400 audit(1768999712.828:72): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.392347][ T3301] cgroup: Unknown subsys name 'cpuset'
[   22.398428][ T3301] cgroup: Unknown subsys name 'rlimit'
[   22.567303][   T29] audit: type=1400 audit(1768999713.118:73): avc:  denied  { setattr } for  pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.591014][   T29] audit: type=1400 audit(1768999713.118:74): avc:  denied  { create } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.611475][   T29] audit: type=1400 audit(1768999713.118:75): avc:  denied  { write } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.619470][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.632247][   T29] audit: type=1400 audit(1768999713.118:76): avc:  denied  { read } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.661279][   T29] audit: type=1400 audit(1768999713.128:77): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.686163][   T29] audit: type=1400 audit(1768999713.128:78): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   22.709456][   T29] audit: type=1400 audit(1768999713.138:79): avc:  denied  { read } for  pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   22.734002][ T3301] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.911585][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   23.932614][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   23.941808][ T3327] chnl_net:caif_netlink_parms(): no params data found
[   24.014802][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   24.030264][ T3323] chnl_net:caif_netlink_parms(): no params data found
[   24.070957][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.078143][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.085602][ T3314] bridge_slave_0: entered allmulticast mode
[   24.092033][ T3314] bridge_slave_0: entered promiscuous mode
[   24.098575][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.105639][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.112921][ T3316] bridge_slave_0: entered allmulticast mode
[   24.119237][ T3316] bridge_slave_0: entered promiscuous mode
[   24.129835][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.136921][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.144123][ T3316] bridge_slave_1: entered allmulticast mode
[   24.150585][ T3316] bridge_slave_1: entered promiscuous mode
[   24.160912][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.168085][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.175414][ T3327] bridge_slave_0: entered allmulticast mode
[   24.182225][ T3327] bridge_slave_0: entered promiscuous mode
[   24.188810][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.195971][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.203319][ T3314] bridge_slave_1: entered allmulticast mode
[   24.209670][ T3314] bridge_slave_1: entered promiscuous mode
[   24.225834][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.232939][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.240120][ T3327] bridge_slave_1: entered allmulticast mode
[   24.246626][ T3327] bridge_slave_1: entered promiscuous mode
[   24.276109][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.292320][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.302717][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.314572][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.328746][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.338827][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.377759][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.384881][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.392044][ T3320] bridge_slave_0: entered allmulticast mode
[   24.398326][ T3320] bridge_slave_0: entered promiscuous mode
[   24.409709][ T3327] team0: Port device team_slave_0 added
[   24.416256][ T3316] team0: Port device team_slave_0 added
[   24.421880][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.428975][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.436290][ T3323] bridge_slave_0: entered allmulticast mode
[   24.442649][ T3323] bridge_slave_0: entered promiscuous mode
[   24.448953][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.456055][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.463219][ T3320] bridge_slave_1: entered allmulticast mode
[   24.469563][ T3320] bridge_slave_1: entered promiscuous mode
[   24.476596][ T3314] team0: Port device team_slave_0 added
[   24.482911][ T3327] team0: Port device team_slave_1 added
[   24.489192][ T3316] team0: Port device team_slave_1 added
[   24.498694][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.505835][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.512959][ T3323] bridge_slave_1: entered allmulticast mode
[   24.519419][ T3323] bridge_slave_1: entered promiscuous mode
[   24.534385][ T3314] team0: Port device team_slave_1 added
[   24.564723][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.571722][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.597867][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.609340][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.616315][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.642260][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.653986][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.664337][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.677607][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.684618][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.710833][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.724967][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.735168][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.744876][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.751926][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.777884][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.788862][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.795871][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.821811][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.844479][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.851455][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.877410][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.910031][ T3320] team0: Port device team_slave_0 added
[   24.916411][ T3323] team0: Port device team_slave_0 added
[   24.931120][ T3320] team0: Port device team_slave_1 added
[   24.941231][ T3323] team0: Port device team_slave_1 added
[   24.956911][ T3316] hsr_slave_0: entered promiscuous mode
[   24.962881][ T3316] hsr_slave_1: entered promiscuous mode
[   24.978871][ T3327] hsr_slave_0: entered promiscuous mode
[   24.985080][ T3327] hsr_slave_1: entered promiscuous mode
[   24.990967][ T3327] debugfs: 'hsr0' already exists in 'hsr'
[   24.996722][ T3327] Cannot create hsr debugfs directory
[   25.009153][ T3314] hsr_slave_0: entered promiscuous mode
[   25.015471][ T3314] hsr_slave_1: entered promiscuous mode
[   25.021365][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   25.027138][ T3314] Cannot create hsr debugfs directory
[   25.032823][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.039799][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.065786][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.080741][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.087807][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.113979][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.129492][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.136510][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.162457][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.173897][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.180904][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   25.206992][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.293449][ T3320] hsr_slave_0: entered promiscuous mode
[   25.299445][ T3320] hsr_slave_1: entered promiscuous mode
[   25.305375][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   25.311111][ T3320] Cannot create hsr debugfs directory
[   25.320767][ T3323] hsr_slave_0: entered promiscuous mode
[   25.326837][ T3323] hsr_slave_1: entered promiscuous mode
[   25.332768][ T3323] debugfs: 'hsr0' already exists in 'hsr'
[   25.338473][ T3323] Cannot create hsr debugfs directory
[   25.457215][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   25.470520][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   25.485965][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   25.500492][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   25.532471][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   25.541523][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   25.553485][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   25.562288][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   25.592513][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   25.603296][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   25.612898][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   25.625904][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   25.659187][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   25.668244][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   25.677692][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   25.690049][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   25.705957][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.729060][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   25.738560][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   25.747287][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   25.759426][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   25.773337][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   25.792001][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.799050][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.815416][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.823800][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.830983][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.865403][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   25.884468][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.891588][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.904005][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.917882][ T3327] 8021q: adding VLAN 0 to HW filter on device team0
[   25.933050][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.940219][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.948707][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.955809][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.984344][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.991449][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.005208][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.035462][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   26.048257][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.056296][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.069458][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.076680][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.085618][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.092921][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.125147][ T3323] 8021q: adding VLAN 0 to HW filter on device team0
[   26.162023][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.169227][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.178194][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.185560][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.248647][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.271665][ T3316] veth0_vlan: entered promiscuous mode
[   26.282017][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.299059][ T3316] veth1_vlan: entered promiscuous mode
[   26.329577][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.347155][ T3316] veth0_macvtap: entered promiscuous mode
[   26.370015][ T3316] veth1_macvtap: entered promiscuous mode
[   26.397569][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.432342][ T3314] veth0_vlan: entered promiscuous mode
[   26.454809][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.465459][ T3314] veth1_vlan: entered promiscuous mode
[   26.478358][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.491222][ T3327] veth0_vlan: entered promiscuous mode
[   26.507257][ T3320] veth0_vlan: entered promiscuous mode
[   26.519812][ T2937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.529113][ T3327] veth1_vlan: entered promiscuous mode
[   26.539082][ T2937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.552027][ T2937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.562617][ T2937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.583718][ T3320] veth1_vlan: entered promiscuous mode
[   26.597196][ T3314] veth0_macvtap: entered promiscuous mode
[   26.612069][ T3314] veth1_macvtap: entered promiscuous mode
[   26.631333][ T3327] veth0_macvtap: entered promiscuous mode
[   26.631372][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   26.647652][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.664491][ T3320] veth0_macvtap: entered promiscuous mode
[   26.690505][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.698598][ T3327] veth1_macvtap: entered promiscuous mode
[   26.709539][ T3320] veth1_macvtap: entered promiscuous mode
[   26.721371][ T1852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.730217][ T1852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.745371][ T1852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.757318][ T1852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.814457][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.877045][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.907642][ T3492] bond1: entered promiscuous mode
[   26.913665][ T3492] 8021q: adding VLAN 0 to HW filter on device bond1
[   26.922609][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.931765][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.939473][ T3492] IPVS: Error connecting to the multicast addr
[   26.948871][ T3323] veth0_vlan: entered promiscuous mode
[   26.957600][ T3323] veth1_vlan: entered promiscuous mode
[   26.964673][ T3492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3492 comm=syz.3.6
[   26.980659][   T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.999386][   T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.011605][ T2937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.035357][ T2937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.052672][ T2937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.066470][ T3504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'.
[   27.075613][ T3504] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9'.
[   27.084770][ T3504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3504 comm=syz.3.9
[   27.097279][ T3323] veth0_macvtap: entered promiscuous mode
[   27.104893][ T2937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.130329][ T2937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.141957][ T3323] veth1_macvtap: entered promiscuous mode
[   27.154802][ T2937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.172955][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.185195][ T3510] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   27.211913][ T3510] netlink: 'syz.3.11': attribute type 10 has an invalid length.
[   27.219591][ T3510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11'.
[   27.230229][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.247128][ T3510] : entered promiscuous mode
[   27.253221][ T3510] bridge0: port 3() entered blocking state
[   27.259261][ T3510] bridge0: port 3() entered disabled state
[   27.265350][   T29] kauditd_printk_skb: 38 callbacks suppressed
[   27.265365][   T29] audit: type=1400 audit(1768999717.818:118): avc:  denied  { create } for  pid=3513 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   27.267448][ T3514] loop2: detected capacity change from 0 to 1024
[   27.271603][   T29] audit: type=1400 audit(1768999717.818:119): avc:  denied  { ioctl } for  pid=3513 comm="syz.1.2" path="socket:[4059]" dev="sockfs" ino=4059 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   27.292968][ T3510] : entered allmulticast mode
[   27.326191][ T3510] bridge0: entered allmulticast mode
[   27.333342][ T3510] : left allmulticast mode
[   27.337858][ T3510] bridge0: left allmulticast mode
[   27.348243][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.360944][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.378520][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.399063][ T3514] EXT4-fs: Ignoring removed mblk_io_submit option
[   27.414123][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.453660][   T29] audit: type=1400 audit(1768999717.998:120): avc:  denied  { open } for  pid=3522 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   27.472675][   T29] audit: type=1400 audit(1768999718.008:121): avc:  denied  { perfmon } for  pid=3522 comm="syz.3.12" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   27.493594][   T29] audit: type=1400 audit(1768999718.008:122): avc:  denied  { kernel } for  pid=3522 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   27.522092][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   27.522143][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   27.534326][ T3514] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.621468][   T29] audit: type=1400 audit(1768999718.088:123): avc:  denied  { mount } for  pid=3511 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   27.642926][   T29] audit: type=1400 audit(1768999718.108:124): avc:  denied  { mounton } for  pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   27.665722][   T29] audit: type=1400 audit(1768999718.128:125): avc:  denied  { firmware_load } for  pid=3522 comm="syz.3.12" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   27.720047][   T29] audit: type=1400 audit(1768999718.198:126): avc:  denied  { prog_run } for  pid=3527 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   27.720099][   T29] audit: type=1400 audit(1768999718.198:127): avc:  denied  { write } for  pid=3527 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   27.764829][ T3539] loop1: detected capacity change from 0 to 1024
[   27.851960][ T3523] syz.3.12 (3523) used greatest stack depth: 10176 bytes left
[   27.884640][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   27.983237][ T3554] veth0: entered promiscuous mode
[   28.019674][ T3554] loop1: detected capacity change from 0 to 512
[   28.039290][ T3554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   28.052443][ T3554] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   28.070915][ T3563] netlink: 'syz.0.22': attribute type 4 has an invalid length.
[   28.092348][ T3554] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.20: bg 0: block 104: invalid block bitmap
[   28.122005][ T3554] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   28.145302][ T3554] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.20: invalid indirect mapped block 1 (level 1)
[   28.155108][ T3567] loop0: detected capacity change from 0 to 2048
[   28.163894][ T3554] EXT4-fs (loop1): 1 truncate cleaned up
[   28.172198][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.186607][ T3554] veth0: left promiscuous mode
[   28.203520][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.234012][ T3567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.267958][ T3574] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.25'.
[   28.281128][ T3567] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   28.317965][ T3567] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   28.324541][ T3567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   28.332128][ T3567] vhci_hcd vhci_hcd.0: Device attached
[   28.388636][ T3576] vhci_hcd: cannot find the pending unlink 12
[   28.410098][ T3576] vhci_hcd: connection closed
[   28.410236][   T53] vhci_hcd vhci_hcd.0: stop threads
[   28.420154][   T53] vhci_hcd vhci_hcd.0: release socket
[   28.425651][   T53] vhci_hcd vhci_hcd.0: disconnect device
[   28.610993][ T3594] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29'.
[   28.620221][ T3594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'.
[   28.635723][ T3594] capability: warning: `syz.4.29' uses 32-bit capabilities (legacy support in use)
[   28.780231][ T3608] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.814172][ T3610] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET)
[   28.829675][ T3613] netlink: 'syz.4.34': attribute type 32 has an invalid length.
[   28.837837][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[   28.855822][ T3613] bond1: option coupled_control: invalid value (17)
[   28.870975][ T3618] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   28.879586][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   28.882416][ T3613] bond1 (unregistering): Released all slaves
[   28.916298][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.936206][ T3620] loop2: detected capacity change from 0 to 512
[   28.948675][ T3620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   28.974879][ T3620] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.38: bad orphan inode 16
[   29.004086][ T3620] ext4_test_bit(bit=15, block=4) = 0
[   29.009507][ T3620] EXT4-fs (loop2): 1 orphan inode deleted
[   29.016308][ T3620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.046589][ T3620] EXT4-fs (loop2): shut down requested (1)
[   29.058889][    C0] hrtimer: interrupt took 37114 ns
[   29.182438][ T3642] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.270326][ T3649] loop1: detected capacity change from 0 to 1764
[   29.277732][ T3649] iso9660: Unknown parameter 'de'
[   29.335652][ T3620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.340604][ T3659] ip6t_srh: unknown srh invflags 4000
[   29.353913][ T3620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.354658][ T3642] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.403333][ T3659] netlink: 'syz.4.48': attribute type 2 has an invalid length.
[   29.411015][ T3659] netlink: 'syz.4.48': attribute type 3 has an invalid length.
[   29.418683][ T3659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.48'.
[   29.422187][ T3663] netlink: 'syz.1.50': attribute type 5 has an invalid length.
[   29.438052][ T3642] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.485102][ T3642] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.515058][ T3666] loop4: detected capacity change from 0 to 2048
[   29.554488][ T1852] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.568073][   T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.579443][   T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.590123][   T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.600811][ T3643] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.652913][ T3643] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.702809][ T3643] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.753718][ T3643] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.925165][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.955136][ T3696] loop2: detected capacity change from 0 to 1024
[   29.971804][ T3696] =======================================================
[   29.971804][ T3696] WARNING: The mand mount option has been deprecated and
[   29.971804][ T3696]          and is ignored by this kernel. Remove the mand
[   29.971804][ T3696]          option from the mount to silence this warning.
[   29.971804][ T3696] =======================================================
[   30.014416][ T3696] ext3: Unknown parameter 'euid>00000000000000000000'
[   30.318686][ T3715] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   30.330172][ T3715] bond1 (unregistering): Released all slaves
[   30.381943][ T3715] Zero length message leads to an empty skb
[   30.487938][ T3724] sctp: [Deprecated]: syz.4.67 (pid 3724) Use of int in max_burst socket option.
[   30.487938][ T3724] Use struct sctp_assoc_value instead
[   30.523616][ T3724] sctp: [Deprecated]: syz.4.67 (pid 3724) Use of struct sctp_assoc_value in delayed_ack socket option.
[   30.523616][ T3724] Use struct sctp_sack_info instead
[   30.846637][ T3740] mmap: syz.4.73 (3740) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   31.047118][ T3768] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[   31.054849][ T3768] netlink: 'syz.2.79': attribute type 2 has an invalid length.
[   31.084233][ T3770] loop4: detected capacity change from 0 to 128
[   31.132092][ T3768] loop2: detected capacity change from 0 to 1024
[   31.141903][ T3768] EXT4-fs: Ignoring removed oldalloc option
[   31.142234][ T3790] netlink: 'syz.1.80': attribute type 1 has an invalid length.
[   31.161668][ T3790] 8021q: adding VLAN 0 to HW filter on device bond1
[   31.193128][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.210622][ T3768] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.224019][ T3768] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.79: lblock 0 mapped to illegal pblock 0 (length 1)
[   31.246529][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.246529][ T3778] loop4: rw=1, sector=145, nr_sectors = 16 limit=128
[   31.267104][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.267104][ T3778] loop4: rw=1, sector=169, nr_sectors = 8 limit=128
[   31.273288][ T3768] EXT4-fs (loop2): Remounting filesystem read-only
[   31.289103][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.289103][ T3778] loop4: rw=1, sector=185, nr_sectors = 8 limit=128
[   31.301777][ T3801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.304318][ T3798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.315755][ T3801] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.330385][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.330385][ T3778] loop4: rw=1, sector=201, nr_sectors = 8 limit=128
[   31.353269][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.353269][ T3778] loop4: rw=1, sector=217, nr_sectors = 8 limit=128
[   31.371879][ T3801] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.82: corrupted inode contents
[   31.376115][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.376115][ T3778] loop4: rw=1, sector=233, nr_sectors = 8 limit=128
[   31.384262][ T3801] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.82: mark_inode_dirty error
[   31.397677][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.397677][ T3778] loop4: rw=1, sector=249, nr_sectors = 8 limit=128
[   31.410009][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.422100][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.422100][ T3778] loop4: rw=1, sector=265, nr_sectors = 8 limit=128
[   31.431342][ T3801] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.82: corrupted inode contents
[   31.451549][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.451549][ T3778] loop4: rw=1, sector=281, nr_sectors = 8 limit=128
[   31.470584][ T3801] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.82: mark_inode_dirty error
[   31.470908][ T3778] kworker/u8:29: attempt to access beyond end of device
[   31.470908][ T3778] loop4: rw=1, sector=297, nr_sectors = 8 limit=128
[   31.496615][ T3768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   31.522226][ T3801] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.82: Failed to acquire dquot type 1
[   31.536691][ T3814] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #12: comm syz.1.82: Directory hole found for htree leaf block 0
[   31.598483][ T3801] syz.1.82 (3801) used greatest stack depth: 9552 bytes left
[   31.617173][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.702490][ T3827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3827 comm=syz.4.89
[   31.775759][ T3842] sctp: [Deprecated]: syz.0.93 (pid 3842) Use of struct sctp_assoc_value in delayed_ack socket option.
[   31.775759][ T3842] Use struct sctp_sack_info instead
[   31.934862][ T3856] EXT4-fs: Ignoring removed orlov option
[   31.956013][ T3856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   31.965245][ T3856] EXT4-fs (loop1): orphan cleanup on readonly fs
[   31.972724][ T3856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.98: bg 0: block 248: padding at end of block bitmap is not set
[   31.987931][ T3856] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.98: Failed to acquire dquot type 1
[   32.002645][ T3856] EXT4-fs (loop1): 1 truncate cleaned up
[   32.008883][ T3856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   32.041913][ T3856] syz.1.98 (3856) used greatest stack depth: 9424 bytes left
[   32.061059][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.092478][ T3863] __nla_validate_parse: 10 callbacks suppressed
[   32.092497][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[   32.109374][ T3863] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[   32.150057][ T3867] netlink: 232 bytes leftover after parsing attributes in process `syz.0.101'.
[   32.292760][   T29] kauditd_printk_skb: 253 callbacks suppressed
[   32.292813][   T29] audit: type=1400 audit(1768999722.848:376): avc:  denied  { create } for  pid=3869 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   32.323560][   T29] audit: type=1400 audit(1768999722.848:377): avc:  denied  { create } for  pid=3872 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   32.349115][   T29] audit: type=1400 audit(1768999722.878:378): avc:  denied  { module_request } for  pid=3869 comm="syz.1.103" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   32.383031][   T29] audit: type=1400 audit(1768999722.938:379): avc:  denied  { setopt } for  pid=3876 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   32.786674][   T29] audit: type=1400 audit(1768999723.338:380): avc:  denied  { execute } for  pid=3892 comm="syz.2.111" path="/17/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.862847][   T29] audit: type=1400 audit(1768999723.418:381): avc:  denied  { mounton } for  pid=3892 comm="syz.2.111" path="/17/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.903695][ T3909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'.
[   32.918967][ T3909] 8021q: adding VLAN 0 to HW filter on device bond1
[   32.932638][ T3909] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.941592][ T3909] bond1: (slave bond0): Enslaving as an active interface with an up link
[   32.974629][ T3909] bond1 (unregistering): (slave bond0): Releasing backup interface
[   32.984273][ T3909] bond1 (unregistering): Released all slaves
[   32.993759][ T3917] netlink: 'syz.4.116': attribute type 6 has an invalid length.
[   33.019699][   T29] audit: type=1400 audit(1768999723.568:382): avc:  denied  { watch watch_reads } for  pid=3908 comm="syz.0.114" path="/proc/96/task" dev="proc" ino=6534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   33.031476][ T3917] set_capacity_and_notify: 3 callbacks suppressed
[   33.031563][ T3917] loop4: detected capacity change from 0 to 1024
[   33.083338][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.093953][ T3927] netlink: 140 bytes leftover after parsing attributes in process `syz.0.118'.
[   33.104534][ T3927] netlink: 140 bytes leftover after parsing attributes in process `syz.0.118'.
[   33.113933][ T3927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'.
[   33.126139][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.340272][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[   33.349960][   T29] audit: type=1326 audit(1768999723.888:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f86bacb9 code=0x7ffc0000
[   33.373410][   T29] audit: type=1326 audit(1768999723.888:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79f86bacb9 code=0x7ffc0000
[   33.396557][   T29] audit: type=1326 audit(1768999723.888:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f86bacb9 code=0x7ffc0000
[   33.417389][ T3943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.451314][ T3943] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   33.464835][ T3949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[   33.495860][ T3951] tmpfs: Unknown parameter 'Ð-¹õß'
[   33.524505][ T3954] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[   33.537229][ T3954] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   33.547575][ T3954] process 'syz.1.128' launched '/dev/fd/6' with NULL argv: empty string added
[   33.705153][ T3963] block device autoloading is deprecated and will be removed.
[   33.737565][ T3965] loop2: detected capacity change from 0 to 256
[   33.761134][ T3965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[   33.769376][ T3965] FAT-fs (loop2): Filesystem has been set read-only
[   33.880897][ T3971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'.
[   33.907710][ T3781] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   33.922805][ T3781] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   33.932225][ T3781] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   33.941892][ T3781] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   33.957906][ T3781] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.970361][ T3781] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.981385][ T3977] loop0: detected capacity change from 0 to 1024
[   33.988678][ T3781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.997461][ T3781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.007835][ T3977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.032679][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.081772][ T3986] loop4: detected capacity change from 0 to 1024
[   34.091094][ T3986] EXT4-fs: Ignoring removed bh option
[   34.096713][ T3986] ext4: Unknown parameter 'dont_appraise'
[   34.124200][ T3990] loop3: detected capacity change from 0 to 512
[   34.356760][ T4008] netlink: 92 bytes leftover after parsing attributes in process `syz.4.147'.
[   34.362747][ T4007] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   34.377296][ T4007] bond2 (unregistering): Released all slaves
[   34.409974][ T4010] loop3: detected capacity change from 0 to 512
[   34.425838][ T4010] EXT4-fs: inline encryption not supported
[   34.440667][ T4010] ext4: Bad value for 'debug_want_extra_isize'
[   34.454524][ T4012] loop4: detected capacity change from 0 to 128
[   34.472334][ T4012] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.485021][ T4012] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   34.497240][ T4010] loop3: detected capacity change from 0 to 2048
[   34.533146][ T4012] 8021q: adding VLAN 0 to HW filter on device bond1
[   34.558127][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.603005][ T4007] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   34.751563][ T4033] syzkaller0: entered promiscuous mode
[   34.757089][ T4033] syzkaller0: entered allmulticast mode
[   34.773014][ T4040] loop3: detected capacity change from 0 to 1024
[   34.852944][ T4040] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.154: Failed to acquire dquot type 0
[   34.864998][ T4040] EXT4-fs (loop3): 1 truncate cleaned up
[   34.871507][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.957289][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.091864][ T4056] netlink: 'syz.2.158': attribute type 1 has an invalid length.
[   35.102287][ T4064] FAULT_INJECTION: forcing a failure.
[   35.102287][ T4064] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.115447][ T4064] CPU: 0 UID: 0 PID: 4064 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.115472][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   35.115482][ T4064] Call Trace:
[   35.115563][ T4064]  <TASK>
[   35.115571][ T4064]  __dump_stack+0x1d/0x30
[   35.115596][ T4064]  dump_stack_lvl+0x95/0xd0
[   35.115684][ T4064]  dump_stack+0x15/0x1b
[   35.115700][ T4064]  should_fail_ex+0x263/0x280
[   35.115717][ T4064]  should_fail+0xb/0x20
[   35.115732][ T4064]  should_fail_usercopy+0x1a/0x20
[   35.115751][ T4064]  _copy_to_user+0x20/0xa0
[   35.115839][ T4064]  simple_read_from_buffer+0xb5/0x130
[   35.115866][ T4064]  proc_fail_nth_read+0x10e/0x150
[   35.115889][ T4064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   35.115975][ T4064]  vfs_read+0x1ab/0x7f0
[   35.116005][ T4064]  ? __rcu_read_unlock+0x4e/0x70
[   35.116022][ T4064]  ? __fget_files+0x184/0x1c0
[   35.116117][ T4064]  ? mutex_lock+0x57/0x90
[   35.116134][ T4064]  ksys_read+0xdc/0x1a0
[   35.116193][ T4064]  __x64_sys_read+0x40/0x50
[   35.116224][ T4064]  x64_sys_call+0x2889/0x3000
[   35.116245][ T4064]  do_syscall_64+0xc0/0x2a0
[   35.116312][ T4064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.116340][ T4064] RIP: 0033:0x7fc56433b58e
[   35.116360][ T4064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   35.116378][ T4064] RSP: 002b:00007fc562dd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   35.116397][ T4064] RAX: ffffffffffffffda RBX: 00007fc562dd76c0 RCX: 00007fc56433b58e
[   35.116413][ T4064] RDX: 000000000000000f RSI: 00007fc562dd70a0 RDI: 0000000000000004
[   35.116466][ T4064] RBP: 00007fc562dd7090 R08: 0000000000000000 R09: 0000000000000000
[   35.116477][ T4064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.116488][ T4064] R13: 00007fc5645f6038 R14: 00007fc5645f5fa0 R15: 00007ffe1de11088
[   35.116515][ T4064]  </TASK>
[   35.332163][ T4056] 8021q: adding VLAN 0 to HW filter on device bond1
[   35.346754][ T4071] rtc_cmos 00:00: Alarms can be up to one day in the future
[   35.359198][ T4067] gre1: entered allmulticast mode
[   35.388097][ T4068] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   35.470679][ T4087] loop4: detected capacity change from 0 to 1024
[   35.496276][ T4087] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.166: Failed to acquire dquot type 0
[   35.500145][ T4096] syzkaller0: entered promiscuous mode
[   35.513020][ T4096] syzkaller0: entered allmulticast mode
[   35.622108][ T4087] EXT4-fs (loop4): 1 truncate cleaned up
[   35.628502][ T4087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.691767][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.782196][ T4118] can0: slcan on ttyS3.
[   35.808502][ T4121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.843026][ T4121] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.897809][ T4121] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.175: corrupted inode contents
[   35.911493][ T4117] can0 (unregistered): slcan off ttyS3.
[   35.974759][ T4121] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.175: mark_inode_dirty error
[   35.996030][ T4157] EXT4-fs: Ignoring removed bh option
[   36.021802][ T4121] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.175: corrupted inode contents
[   36.021981][ T4121] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.175: mark_inode_dirty error
[   36.083754][ T4167] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.182: Failed to acquire dquot type 0
[   36.095757][ T4167] EXT4-fs (loop3): 1 truncate cleaned up
[   36.101924][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.131898][ T4157] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   36.150898][ T4121] EXT4-fs (loop2): shut down requested (1)
[   36.184480][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.218151][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.263822][ T4187] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   36.274684][ T4188] ext4: Unknown parameter 'obj_role'
[   36.278169][ T4183] syzkaller0: entered promiscuous mode
[   36.285540][ T4183] syzkaller0: entered allmulticast mode
[   36.293009][    T9] hid (null): global environment stack underflow
[   36.299463][    T9] hid (null): global environment stack underflow
[   36.312135][    T9] hid (null): invalid report_count -113052494
[   36.318258][    T9] hid (null): report_id 0 is invalid
[   36.323652][    T9] hid (null): global environment stack underflow
[   36.330013][    T9] hid (null): unknown global tag 0x7d
[   36.335454][    T9] hid (null): unknown global tag 0xe
[   36.341016][    T9] hid (null): unknown global tag 0xd
[   36.346440][    T9] hid (null): unknown global tag 0x61
[   36.352243][    T9] hid (null): invalid report_size 52262
[   36.357954][    T9] hid (null): report_id 0 is invalid
[   36.363347][    T9] hid (null): bogus close delimiter
[   36.368620][    T9] hid (null): unknown global tag 0xc
[   36.374054][    T9] hid (null): unknown global tag 0xba
[   36.379442][    T9] hid (null): unknown global tag 0xc
[   36.384780][    T9] hid (null): global environment stack underflow
[   36.391219][    T9] hid (null): unknown global tag 0xd
[   36.396669][    T9] hid (null): unknown global tag 0x3d
[   36.402182][    T9] hid (null): unknown global tag 0xe
[   36.407483][    T9] hid (null): global environment stack underflow
[   36.413992][    T9] hid (null): unknown global tag 0xc
[   36.419331][    T9] hid (null): report_id 129330793 is invalid
[   36.425451][    T9] hid (null): global environment stack underflow
[   36.431887][    T9] hid (null): unknown global tag 0xc8
[   36.437448][    T9] hid (null): invalid report_count 43423
[   36.443153][    T9] hid (null): invalid report_size 23487
[   36.448724][    T9] hid (null): unknown global tag 0xe
[   36.454293][    T9] hid (null): unknown global tag 0xca
[   36.459691][    T9] hid (null): unknown global tag 0xe
[   36.465003][    T9] hid (null): unknown global tag 0xc
[   36.470303][    T9] hid (null): report_id 2957150879 is invalid
[   36.476453][    T9] hid (null): invalid report_count 42292
[   36.482197][    T9] hid (null): unknown global tag 0xc
[   36.487508][    T9] hid (null): invalid report_size -1298691640
[   36.493635][    T9] hid (null): unknown global tag 0xd
[   36.499146][    T9] hid (null): unknown global tag 0xd
[   36.504598][    T9] hid (null): unknown global tag 0xd
[   36.510030][    T9] hid (null): unknown global tag 0xd
[   36.515467][    T9] hid (null): unknown global tag 0xb3
[   36.520956][    T9] hid (null): invalid report_count 54967
[   36.526646][    T9] hid (null): unknown global tag 0xd
[   36.532020][    T9] hid (null): invalid report_count -642092142
[   36.538164][    T9] hid (null): unknown global tag 0xe
[   36.552614][    T9] hid (null): report_id 2058837506 is invalid
[   36.558806][    T9] hid (null): invalid report_size 369827073
[   36.563392][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.564752][    T9] hid (null): unknown global tag 0xc
[   36.564831][    T9] hid (null): invalid report_size 534636838
[   36.746748][    T9] hid-generic 0400:400000:0009.0001: collection stack underflow
[   36.749549][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.754518][    T9] hid-generic 0400:400000:0009.0001: item 0 2 0 12 parsing failed
[   36.771977][    T9] hid-generic 0400:400000:0009.0001: probe with driver hid-generic failed with error -22
[   36.888459][ T4245] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   36.923444][ T4245] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.940265][ T4245] ext2 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.979353][ T4252] msdos: Unknown parameter ''
[   36.989595][ T4245] EXT4-fs (loop1): shut down requested (2)
[   37.059517][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.121193][ T4266] __nla_validate_parse: 8 callbacks suppressed
[   37.121209][ T4266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'.
[   37.142996][ T4266] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.149867][ T4266] EXT4-fs: inline encryption not supported
[   37.163708][ T4266] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   37.237232][ T4270] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.201: Failed to acquire dquot type 0
[   37.249007][ T4270] EXT4-fs (loop2): 1 truncate cleaned up
[   37.255293][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.346236][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.376424][   T29] kauditd_printk_skb: 82 callbacks suppressed
[   37.376440][   T29] audit: type=1400 audit(1768999727.918:460): avc:  denied  { bind } for  pid=4271 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   37.389238][ T4279] xt_SECMARK: invalid mode: 2
[   37.463821][ T4281] syzkaller0: entered promiscuous mode
[   37.469374][ T4281] syzkaller0: entered allmulticast mode
[   37.484943][ T4286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'.
[   37.688913][ T4304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'.
[   37.705820][   T29] audit: type=1400 audit(1768999728.258:461): avc:  denied  { write } for  pid=4303 comm="syz.3.213" name="unix" dev="proc" ino=4026532543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   37.749846][   T29] audit: type=1400 audit(1768999728.258:462): avc:  denied  { create } for  pid=4305 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.769224][   T29] audit: type=1400 audit(1768999728.258:463): avc:  denied  { connect } for  pid=4305 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.788659][   T29] audit: type=1400 audit(1768999728.258:464): avc:  denied  { setopt } for  pid=4305 comm="syz.1.212" laddr=fe80::e lport=3743 faddr=ff02::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.868569][   T29] audit: type=1400 audit(1768999728.418:465): avc:  denied  { ioctl } for  pid=4317 comm="syz.3.217" path="socket:[7800]" dev="sockfs" ino=7800 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   37.868569][ T4318] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.922550][ T4318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.979368][   T29] audit: type=1400 audit(1768999728.528:466): avc:  denied  { create } for  pid=4316 comm="syz.2.216" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   38.001918][   T29] audit: type=1400 audit(1768999728.528:467): avc:  denied  { create } for  pid=4332 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.104167][ T4341] set_capacity_and_notify: 12 callbacks suppressed
[   38.104231][ T4341] loop4: detected capacity change from 0 to 512
[   38.135534][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   38.163839][   T29] audit: type=1400 audit(1768999728.708:468): avc:  denied  { allowed } for  pid=4344 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   38.208023][ T4341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.251537][ T4341] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.345340][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.424034][ T4353] syzkaller0: entered promiscuous mode
[   38.429535][ T4353] syzkaller0: entered allmulticast mode
[   38.444594][ T4356] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   38.502241][   T29] audit: type=1400 audit(1768999728.998:469): avc:  denied  { setopt } for  pid=4355 comm="syz.1.228" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.595844][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'.
[   38.633842][ T4338] can0: slcan on ttyS3.
[   38.741686][ T4338] can0 (unregistered): slcan off ttyS3.
[   38.743626][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   38.788195][    T9] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   38.807100][ T4373] loop1: detected capacity change from 0 to 2048
[   38.820858][ T4384] capability: warning: `syz.0.235' uses deprecated v2 capabilities in a way that may be insecure
[   38.841911][ T4381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'.
[   38.865345][ T4373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.032888][ T4318] syz.2.216 (4318) used greatest stack depth: 7224 bytes left
[   39.048631][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.066776][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.080480][ T3378] IPVS: starting estimator thread 0...
[   39.171474][ T4401] IPVS: using max 2304 ests per chain, 115200 per kthread
[   39.185533][ T4411] syzkaller0: entered promiscuous mode
[   39.191053][ T4411] syzkaller0: entered allmulticast mode
[   39.429432][ T4438] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   39.435841][ T4438] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   39.467553][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'.
[   39.689775][ T4469] netlink: 'syz.4.251': attribute type 13 has an invalid length.
[   39.697692][ T4469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.251'.
[   39.734492][ T4469] syz_tun: refused to change device tx_queue_len
[   39.740923][ T4469] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   39.757634][ T4473] rtc_cmos 00:00: Alarms can be up to one day in the future
[   39.788935][ T4473] FAULT_INJECTION: forcing a failure.
[   39.788935][ T4473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   39.802189][ T4473] CPU: 1 UID: 0 PID: 4473 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.802222][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   39.802279][ T4473] Call Trace:
[   39.802287][ T4473]  <TASK>
[   39.802294][ T4473]  __dump_stack+0x1d/0x30
[   39.802318][ T4473]  dump_stack_lvl+0x95/0xd0
[   39.802340][ T4473]  dump_stack+0x15/0x1b
[   39.802363][ T4473]  should_fail_ex+0x263/0x280
[   39.802459][ T4473]  should_fail+0xb/0x20
[   39.802476][ T4473]  should_fail_usercopy+0x1a/0x20
[   39.802562][ T4473]  _copy_to_user+0x20/0xa0
[   39.802587][ T4473]  simple_read_from_buffer+0xb5/0x130
[   39.802656][ T4473]  proc_fail_nth_read+0x10e/0x150
[   39.802706][ T4473]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   39.802726][ T4473]  vfs_read+0x1ab/0x7f0
[   39.802751][ T4473]  ? __schedule+0x82d/0xc90
[   39.802781][ T4473]  ? xfd_validate_state+0x45/0xf0
[   39.802806][ T4473]  ksys_read+0xdc/0x1a0
[   39.802836][ T4473]  __x64_sys_read+0x40/0x50
[   39.802903][ T4473]  x64_sys_call+0x2889/0x3000
[   39.802923][ T4473]  do_syscall_64+0xc0/0x2a0
[   39.802958][ T4473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.802991][ T4473] RIP: 0033:0x7fc56433b58e
[   39.803008][ T4473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   39.803025][ T4473] RSP: 002b:00007fc562dd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   39.803046][ T4473] RAX: ffffffffffffffda RBX: 00007fc562dd76c0 RCX: 00007fc56433b58e
[   39.803111][ T4473] RDX: 000000000000000f RSI: 00007fc562dd70a0 RDI: 0000000000000004
[   39.803124][ T4473] RBP: 00007fc562dd7090 R08: 0000000000000000 R09: 0000000000000000
[   39.803138][ T4473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.803151][ T4473] R13: 00007fc5645f6038 R14: 00007fc5645f5fa0 R15: 00007ffe1de11088
[   39.803169][ T4473]  </TASK>
[   40.019216][ T4479] loop0: detected capacity change from 0 to 1024
[   40.035065][ T4479] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.258: Failed to acquire dquot type 0
[   40.047012][ T4479] EXT4-fs (loop0): 1 truncate cleaned up
[   40.053143][ T4479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.079959][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.135790][ T4495] loop4: detected capacity change from 0 to 512
[   40.225565][ T4495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.228469][ T4492] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   40.269352][ T4495] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.309633][ T4507] rtc_cmos 00:00: Alarms can be up to one day in the future
[   40.366212][ T4512] rtc_cmos 00:00: Alarms can be up to one day in the future
[   40.415696][ T4495] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz.4.262: path /55/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   40.428377][ T4521] loop1: detected capacity change from 0 to 164
[   40.535223][ T4539] rtc_cmos 00:00: Alarms can be up to one day in the future
[   40.573855][ T4536] loop0: detected capacity change from 0 to 512
[   40.621512][ T4536] FAT-fs (loop0): bogus number of FAT structure
[   40.627855][ T4536] FAT-fs (loop0): Can't find a valid FAT filesystem
[   40.651591][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.801674][ T4564] loop2: detected capacity change from 0 to 764
[   40.823972][ T4565] loop1: detected capacity change from 0 to 512
[   40.865125][ T4569] loop4: detected capacity change from 0 to 512
[   40.873726][ T4562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   41.003211][ T4569] EXT4-fs: Ignoring removed nobh option
[   41.061647][ T4578] sctp: [Deprecated]: syz.3.290 (pid 4578) Use of int in maxseg socket option.
[   41.061647][ T4578] Use struct sctp_assoc_value instead
[   41.091205][ T4578] loop3: detected capacity change from 0 to 1024
[   41.125446][ T4578] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.290: Failed to acquire dquot type 0
[   41.187097][ T4578] EXT4-fs (loop3): 1 truncate cleaned up
[   41.197883][ T4578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.214142][ T4569] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[   41.274467][ T4595] Unable to read rock-ridge attributes
[   41.289539][ T3378] IPVS: starting estimator thread 0...
[   41.322879][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.389928][ T4610] rtc_cmos 00:00: Alarms can be up to one day in the future
[   41.398822][ T4598] IPVS: using max 2352 ests per chain, 117600 per kthread
[   41.483138][ T3776] IPVS: stop unused estimator thread 0...
[   42.150389][ T4647] vfat: Unknown parameter '0x0000000000000003'
[   42.167044][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   42.175961][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   42.249880][ T4645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.265952][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   42.275039][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   42.284544][ T4645] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.313946][ T4663] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.356258][ T4663] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.384786][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.409398][ T4663] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.492580][ T4691] sctp: [Deprecated]: syz.3.324 (pid 4691) Use of int in maxseg socket option.
[   42.492580][ T4691] Use struct sctp_assoc_value instead
[   42.516072][ T4663] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.537907][ T4691] __quota_error: 84 callbacks suppressed
[   42.537921][ T4691] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   42.554108][ T4691] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   42.563782][ T4691] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.324: Failed to acquire dquot type 0
[   42.576754][   T29] audit: type=1400 audit(1768999733.128:550): avc:  denied  { create } for  pid=4686 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   42.601873][ T4691] EXT4-fs (loop3): 1 truncate cleaned up
[   42.608585][ T4691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.631319][ T3778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.639951][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.652112][ T3778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.669238][ T3778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.677686][ T3778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.742943][ T4718] EXT4-fs: Ignoring removed orlov option
[   42.751009][ T4718] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.765097][ T4718] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[   42.788761][ T4718] System zones: 0-1, 3-36
[   42.798459][ T4718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.822350][ T4726] EXT4-fs: Ignoring removed nobh option
[   42.854567][ T4726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.881476][ T4726] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.905256][   T29] audit: type=1400 audit(1768999733.458:551): avc:  denied  { setattr } for  pid=4715 comm="syz.4.328" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.022569][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.052477][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.090518][   T29] audit: type=1326 audit(1768999733.638:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862804acb9 code=0x7ffc0000
[   43.121896][ T4740] netlink: 'syz.4.332': attribute type 11 has an invalid length.
[   43.129745][ T4740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.332'.
[   43.146650][   T29] audit: type=1400 audit(1768999733.638:553): avc:  denied  { accept } for  pid=4742 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   43.166080][   T29] audit: type=1326 audit(1768999733.668:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8628007abb code=0x7ffc0000
[   43.189356][   T29] audit: type=1326 audit(1768999733.668:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862804acb9 code=0x7ffc0000
[   43.212650][   T29] audit: type=1326 audit(1768999733.668:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862804acb9 code=0x7ffc0000
[   43.236488][   T29] audit: type=1326 audit(1768999733.668:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862804acb9 code=0x7ffc0000
[   43.269337][ T4739] set_capacity_and_notify: 7 callbacks suppressed
[   43.269353][ T4739] loop4: detected capacity change from 0 to 2048
[   43.290653][ T4746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.335'.
[   43.313708][ T4750] sctp: [Deprecated]: syz.0.336 (pid 4750) Use of int in maxseg socket option.
[   43.313708][ T4750] Use struct sctp_assoc_value instead
[   43.332023][ T4739]  loop4: p1 < > p4
[   43.332939][ T4750] loop0: detected capacity change from 0 to 1024
[   43.337976][ T4739] loop4: p4 size 8388608 extends beyond EOD, truncated
[   43.357594][ T4750] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.336: Failed to acquire dquot type 0
[   43.369878][ T4750] EXT4-fs (loop0): 1 truncate cleaned up
[   43.376206][ T4750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.414875][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.476849][ T4758] loop0: detected capacity change from 0 to 128
[   43.623212][ T4776] loop0: detected capacity change from 0 to 764
[   43.634203][ T4778] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[   43.643359][ T4776] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   43.655672][ T4778] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[   43.695131][ T4783] rtc_cmos 00:00: Alarms can be up to one day in the future
[   43.818794][ T4797] loop4: detected capacity change from 0 to 512
[   43.830055][ T4797] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   43.839349][ T4797] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   43.847871][ T4797] EXT4-fs (loop4): SIPHASH is not a valid default hash value
[   43.869657][ T4797] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   43.892517][ T4797] bond2 (unregistering): Released all slaves
[   43.907136][ T4802] loop0: detected capacity change from 0 to 512
[   43.954552][ T4805] loop0: detected capacity change from 0 to 1024
[   43.962912][ T4805] EXT4-fs: Ignoring removed oldalloc option
[   43.968966][ T4805] EXT4-fs: Ignoring removed bh option
[   43.974472][ T4805] ext2: Unknown parameter 'measure'
[   44.068636][ T4816] netlink: 76 bytes leftover after parsing attributes in process `syz.4.358'.
[   44.086050][ T4816] tmpfs: Bad value for 'mpol'
[   44.113427][ T4819] loop3: detected capacity change from 0 to 128
[   44.138141][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'.
[   44.154136][ T4831] x_tables: duplicate underflow at hook 1
[   44.178822][ T4834] ±ÿ: renamed from team_slave_1 (while UP)
[   44.256313][ T4844] random: crng reseeded on system resumption
[   44.265917][ T4844] loop1: detected capacity change from 0 to 512
[   44.274011][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[   44.295386][ T4844] wireguard0: entered promiscuous mode
[   44.300945][ T4844] wireguard0: entered allmulticast mode
[   44.344090][ T4852] loop3: detected capacity change from 0 to 512
[   44.347814][ T4851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=4851 comm=syz.1.368
[   44.384850][ T4852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.403822][ T4852] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.459927][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.542663][ T4865] wireguard0: entered promiscuous mode
[   44.548198][ T4865] wireguard0: entered allmulticast mode
[   44.857739][ T4875] rtc_cmos 00:00: Alarms can be up to one day in the future
[   44.975017][ T4881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   45.001169][ T4881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.037687][ T4881] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.052299][ T4881] netlink: 'syz.4.378': attribute type 5 has an invalid length.
[   45.060137][ T4881] netlink: 'syz.4.378': attribute type 11 has an invalid length.
[   45.088477][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.168556][ T4902] EXT4-fs: Ignoring removed oldalloc option
[   45.174794][ T4902] EXT4-fs: Ignoring removed bh option
[   45.185705][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.285203][ T4904] netlink: 'syz.1.386': attribute type 1 has an invalid length.
[   45.416348][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   45.431116][ T4904] 8021q: adding VLAN 0 to HW filter on device bond2
[   45.609215][ T4925] xt_cgroup: invalid path, errno=-2
[   45.763882][ T4940] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[   45.814174][ T4902] ==================================================================
[   45.822564][ T4902] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark
[   45.830560][ T4902] 
[   45.832884][ T4902] write to 0xffff88810ce6fbd4 of 4 bytes by task 4912 on cpu 1:
[   45.840501][ T4902]  xas_set_mark+0x12b/0x140
[   45.845112][ T4902]  __folio_start_writeback+0x17b/0x370
[   45.850581][ T4902]  ext4_bio_write_folio+0x5ad/0x9f0
[   45.855785][ T4902]  mpage_process_page_bufs+0x4a1/0x620
[   45.861266][ T4902]  mpage_prepare_extent_to_map+0x7d4/0xc50
[   45.864918][ T4938] erspan0: entered promiscuous mode
[   45.867070][ T4902]  ext4_do_writepages+0x9f6/0x2800
[   45.877371][ T4902]  ext4_writepages+0x18f/0x320
[   45.882224][ T4902]  do_writepages+0x1c6/0x310
[   45.886828][ T4902]  file_write_and_wait_range+0x178/0x2f0
[   45.892598][ T4902]  generic_buffers_fsync_noflush+0x45/0x130
[   45.894268][ T4938] vlan2: entered promiscuous mode
[   45.898496][ T4902]  ext4_sync_file+0x1aa/0x680
[   45.898522][ T4902]  vfs_fsync_range+0x10d/0x130
[   45.912926][ T4902]  ext4_buffered_write_iter+0x34f/0x3c0
[   45.918489][ T4902]  ext4_file_write_iter+0x380/0xf70
[   45.923702][ T4902]  iter_file_splice_write+0x6bc/0xa80
[   45.929099][ T4902]  direct_splice_actor+0x156/0x2a0
[   45.934324][ T4902]  splice_direct_to_actor+0x311/0x670
[   45.939715][ T4902]  do_splice_direct+0x119/0x1a0
[   45.944583][ T4902]  do_sendfile+0x380/0x650
[   45.949048][ T4902]  __x64_sys_sendfile64+0x105/0x150
[   45.954341][ T4902]  x64_sys_call+0x2db1/0x3000
[   45.959024][ T4902]  do_syscall_64+0xc0/0x2a0
[   45.963622][ T4902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.969522][ T4902] 
[   45.971842][ T4902] read to 0xffff88810ce6fbd4 of 4 bytes by task 4902 on cpu 0:
[   45.979389][ T4902]  file_write_and_wait_range+0x130/0x2f0
[   45.985056][ T4902]  generic_buffers_fsync_noflush+0x45/0x130
[   45.990969][ T4902]  ext4_sync_file+0x1aa/0x680
[   45.995659][ T4902]  vfs_fsync_range+0x10d/0x130
[   46.000438][ T4902]  ext4_buffered_write_iter+0x34f/0x3c0
[   46.006009][ T4902]  ext4_file_write_iter+0x380/0xf70
[   46.011231][ T4902]  iter_file_splice_write+0x6bc/0xa80
[   46.016638][ T4902]  direct_splice_actor+0x156/0x2a0
[   46.021798][ T4902]  splice_direct_to_actor+0x311/0x670
[   46.027194][ T4902]  do_splice_direct+0x119/0x1a0
[   46.032067][ T4902]  do_sendfile+0x380/0x650
[   46.036488][ T4902]  __x64_sys_sendfile64+0x105/0x150
[   46.041687][ T4902]  x64_sys_call+0x2db1/0x3000
[   46.046366][ T4902]  do_syscall_64+0xc0/0x2a0
[   46.050884][ T4902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.056863][ T4902] 
[   46.059181][ T4902] value changed: 0x0a000021 -> 0x04000021
[   46.064883][ T4902] 
[   46.067302][ T4902] Reported by Kernel Concurrency Sanitizer on:
[   46.073445][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.083087][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.093126][ T4902] ==================================================================
[   46.142810][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.