last executing test programs:

9m5.14813055s ago: executing program 32 (id=26):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x1000000, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)

8m57.959154724s ago: executing program 33 (id=85):
socket(0x2, 0x80805, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xb, 0x82, 0x0, 0x0, 0x1, 0x4000000, 0x48000000, 0x0, 0xfffffffe, 0x0})
r0 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800a7ff0000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

8m48.797704134s ago: executing program 34 (id=188):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xa4ff, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)

8m31.057386414s ago: executing program 35 (id=352):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="9500"/17], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x50)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
gettid()
semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x915b, 0x800}], 0x1, &(0x7f0000000100)={0x77359400})
r1 = socket$pptp(0x18, 0x1, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f00000005c0)={[{@noblock_validity}, {@sb={'sb', 0x3d, 0x6}}, {}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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")
creat(&(0x7f0000000180)='./file0\x00', 0x81)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
open(0x0, 0x8000, 0x112)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x12, 0x19, 0x11, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]})
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x440001ad)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000c80)="6e25dceb9f340d2e303ac5c1caa238bdf9b065b504d2f71abc0df5f5a5504d10f118b42870cdb60c4355119bd80f01ed795ceb2ba7f3f6ce649108f631f53bdc084539fba803c68866078b85995ce9ee8d73b09a57b6a2aaf420d31d67173815292524a9218ffd35d9c154d34b9589ce0ffb91c7e5326eb38765090d5edc0225019881853060cbfac866a22558b7", 0x8e}], 0x1)

8m6.750148219s ago: executing program 36 (id=692):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf52, 0x0, 0xffff, 0x9e02, 0xb})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
ftruncate(r7, 0x51a9497)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x8001, <r8=>0x0}, 0x8)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x11, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ab6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0xb, 0x7, 0xc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffe0, 0x4}], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, &(0x7f0000000340), 0x40f00, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x2, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xfff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, @fallback=0x33, r7, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x73dc, 0x908}, 0x10, r8, r9, 0x6, 0x0, &(0x7f0000000640)=[{0x4, 0x3, 0x6, 0x2}, {0x5, 0x1, 0xa, 0x3}, {0x1, 0x3, 0xc, 0x3}, {0x1, 0x2, 0x1, 0x5}, {0x2, 0x3, 0xf}, {0x1, 0x5, 0x4, 0xb}], 0x10, 0xfffffffd}, 0x94)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r10, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x1}, 0x10)

8m5.859040238s ago: executing program 37 (id=699):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @local}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000001000000890b040a0101027f00000100000076001d"], 0x40}, 0x20000000)

7m57.91771222s ago: executing program 38 (id=757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc, 0x9}, {}, {0x1}, {}, {}, {}, {}, {0xfffffffe, 0x0, 0x10}, {}, {0xd5}, {0x40000}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x14}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c8}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x543d}, {0x0, 0x0, 0x0, 0x20008}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0xb6d9e26613a92f7e}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

7m13.992229867s ago: executing program 39 (id=1299):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x1b, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x78}, 0x1, 0x7}, 0x0)

7m13.913670474s ago: executing program 40 (id=1303):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00')
getdents64(r0, &(0x7f0000000000)=""/27, 0x1b)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10)
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)
getdents(r0, &(0x7f00000000c0)=""/163, 0xa3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[@ANYBLOB="e4acffffffff6487a2bed3d608004500001403000000006c907800000000000000000420880b0000000000000800000086dd080088be000000001000000001000022eb00000000200080000200000000000000000000000800655800000000"], 0x0)
unshare(0x2040400)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000)
recvmsg(r5, &(0x7f0000000d00)={&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

6m25.04208434s ago: executing program 41 (id=1859):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x80000000}, &(0x7f0000000140)=0x8)
copy_file_range(r0, &(0x7f0000000040)=0x8, r0, &(0x7f0000000080)=0x1fd, 0x6, 0x0)

6m13.377765262s ago: executing program 42 (id=2020):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
recvfrom$inet(r0, &(0x7f0000000200)=""/149, 0x95, 0x40000060, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0)

6m10.962814302s ago: executing program 43 (id=2049):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x0)

5m59.351694271s ago: executing program 44 (id=2122):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x240}], 0x2, 0x5e5f)
shutdown(r1, 0x0)

5m55.949802974s ago: executing program 45 (id=2162):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}, 0x4e}]})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x300)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@journal_checksum}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@auto_da_alloc}, {@discard}, {@data_err_ignore}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@sysvgroups}], [{@obj_type={'obj_type', 0x3d, '\'\\-'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsfloor}]}, 0x1, 0x553, &(0x7f00000009c0)="$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")
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
fdatasync(0xffffffffffffffff)

5m44.541585879s ago: executing program 46 (id=2341):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000000)=[{r0}, {r0, 0x40}], 0x2, 0x5e5f)
shutdown(r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x1c}}, 0x20000840)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0, 0x20})
ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000100), 0x1004)
sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000240)='l', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5m42.642199696s ago: executing program 47 (id=2359):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
pipe(&(0x7f0000000500))
r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r8 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r7, 0x0, 0x2)
fchdir(r10)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f00000001c0), 0x10)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "59df9bafbcfdb56315f245396a297796990e82b4ae58f23aceb70576cbc23bcf", "2b536027a7994037f51fcc3a0ec483e3792474f83462ba98870aa688d1b5cdb0", "918ccf48820000000000cd231f8ff94845fe17b702610000000000429200", "34f031fbffffffffffffff9c000600000000000000000000f0ffffffffffffff", "bb500649861d98c16388c84037d69c38e4bef90c3cb04c56b47c7dc408fa5f7c", "5958dd3d80c1542523c508e5", 0x882c, 0x0, 0xbc, 0x201}})

5m20.916011199s ago: executing program 48 (id=2547):
syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x88d2, 0x800, 0x808000}, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0xdd5}, 0x0, 0x4, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xeff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x80003, 0xff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
memfd_secret(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x400007ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40)

5m16.295523345s ago: executing program 49 (id=2586):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf25ffef0000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="de4ce25b728ba604660053b2686d7d5ba28c6f99ca8fd22d8aded159f0c23fb1e2919778a8b86593c0cbf9fa95005d5d6eb67a3d7f10bb9a3a39efdd3325fcdae346276391d165df3d78090d00020000f897cef5c9bcab360307d9f874edfe7d5d2e7e85fd423af01e94e1d1bdee2072f0df78b49b9c6e08d5f4"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

4m54.820840901s ago: executing program 50 (id=2830):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0xb1, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)="2a73ed35", 0x4}, {&(0x7f0000000180)="e5e9febf4ee797eb45b324ea73e315f6fbe9e0325431cf785cab1284e89571bbf9bfb9ccf884d22b743f3494f11aac61d850f3e77e1724af698221d50b4788ccc936bf640e2685b73866194c38035da958c136e28559433a03a685cd0b71f3b26dd3fc4b2bdd4006ca9825a4c19e4dbe91e438f59acad05c555f05467e62932bbb9936b297cbf746492ed760cbd0460a1561b95c6c1739f80181581af44e887f4a7095396005b4c046a40c3a9f0f24146232a23c7b9b61b916095ee3b7af3d4d484fd7e951661355e288f072f2a0", 0xce}, {&(0x7f0000000280)="4948dec2c3095edb1b2939958701625d8b9e35b9e5936621c8014197aeeec2d4d8bdb7361623be1142adac93a3f4b07b0702080bccf07cd2cc39967513b1a6a2c89eedf580010353182a4c6fcaeb830fcf7c525b1e9e31c3b56e3c1fe4adf3fb6ae7018651ea4793aa26ae58e0563524628f49c560b2d391b0c6c82b5c98b0659b022dcd641d43f060bdc8b5610d3d2af04560a7b9d8d1c4639aa0073b6b678a441685df5b90a95e6c47", 0xaa}], 0x3}}], 0x1, 0x4000000)

4m47.131329156s ago: executing program 2 (id=2890):
r0 = socket(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0x3, 0xfffffffd, 0x4, 0x7}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24)

4m47.076364037s ago: executing program 2 (id=2892):
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100)
close(r0)
socket(0x1e, 0x4, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4m46.98052207s ago: executing program 51 (id=2895):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x1, 0x803, 0x0)
set_mempolicy(0x1, &(0x7f0000000000)=0x4, 0xb)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x83a000, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

4m46.708934504s ago: executing program 52 (id=2900):
ioctl$sock_ifreq(0xffffffffffffffff, 0x89ef, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x1000000e, 0x9, 0x10000089, 0xfffffffb, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4)
r1 = syz_open_procfs(0x0, 0x0)
writev(r1, &(0x7f00000002c0), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, 0x0, 0x840)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil)
syz_emit_ethernet(0x2a, &(0x7f0000000740)={@link_local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x4}, @end, @lsrr={0x83, 0x3, 0xd6}]}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x85, 0x97, &(0x7f0000000240)="d0e0d06c5910950afd11b0b3aa30cb3833d713de12a8e1cc0dcfae9b0c525afc0299e7ac05c7dbc0ee13feaa3a39a769ce265c10df80fce27aaa28f8314581d93760aa093f20f03427075867cb57e11752edd0537c9dac1333fc38da704456f1b994d9d9f1a1b4287b6e5724270682cf5894daae729953406a7e492634ee6719e46e753037", &(0x7f0000000300)=""/151, 0x3ec7, 0x0, 0x76, 0x3, &(0x7f0000000000)="68163881214ee37c420ea3d7b9b66568c83018daf3cfdb5763fb8ea615b7141e54a3499bc1b1802cafa31707a6b652b7c2764e0cb0cd92bfbc5ec15c18d7670a4299b9d77c40f28b3b6d65aedb4dba3b2f6250e1467fc903d1c805492bce6ff2bfdbf4bf208d08ea3fe16fd352d6d5192e99357baa39", &(0x7f00000000c0)="739f8f", 0x4, 0x0, 0x7ff}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x3000084, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x17, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xc, 0xd, &(0x7f0000000480)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000500)='GPL\x00', 0xcc12, 0xfb, &(0x7f0000000680)=""/251, 0x41000, 0x13, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xf, 0x7, 0x2}, 0x10, 0x0, r2, 0x9, &(0x7f0000000780)=[r1, r1], &(0x7f00000007c0)=[{0x2, 0x1, 0xd, 0xa}, {0x3, 0x4, 0xb, 0xb}, {0x1, 0x2, 0x9, 0x5}, {0x2, 0x3, 0x4, 0xb}, {0x0, 0x4, 0x6, 0x3}, {0x4, 0x3, 0xd, 0x1}, {0x0, 0x3, 0xf}, {0x3, 0x4, 0x10}, {0x1, 0x1, 0x7, 0xb}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

4m46.176672124s ago: executing program 2 (id=2904):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0x20, 0x0, 0x2e696, 0xfd, "00120dd608f500001e20000080c90a008000"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0xa02, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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")
mlockall(0x2)
r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000)

4m45.715202116s ago: executing program 2 (id=2906):
syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @private=0xa010100}, 0x10)
fsopen(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001c40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="aa345d3b1232ac2882c30296304464eae66fe8a5c104a0f1bf8ba06eb0a2ef4343a60d9e284eadb2bfdc9190e341b1668e57bcd4e42d11de4c83d952ce703955990c40c6106c8d3d0f9ebb26e5dbfd19a2e76e06000a383d63dad66461d73c3ba0277cd9323f81a74452c96c97d9624e9d3c7b7b267c467d9d756710a0458fdc1aa1defd34bb96ad621aa2713d9cabcb15855b05854fb5d8f199128e76b62c47ec18", @ANYBLOB="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", @ANYRESOCT, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0)
fdatasync(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)

4m45.332963251s ago: executing program 2 (id=2914):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x200000000040}, 0x0, 0x6, 0xfffffefe, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b000600000008000100"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(r7, 0xc0205865, &(0x7f0000000a00)={&(0x7f0000000440)=0x2aa0, 0x1, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000009c0)})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008090}, 0x20084000)
setitimer(0x2, &(0x7f0000000140)={{0x0, 0xea60}, {r2, r3/1000+10000}}, &(0x7f0000000180))
setrlimit(0x7, &(0x7f0000000000)={0x5, 0x4})
getrlimit(0x5, &(0x7f0000000040))

4m44.581058784s ago: executing program 2 (id=2923):
mmap(&(0x7f0000976000/0x2000)=nil, 0x2000, 0x2000004, 0x4008032, 0xffffffffffffffff, 0x535a3000)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x5e})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, r2, 0x8000000)
r3 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
recvmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x120)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000007c0)}, 0x20)
write$cgroup_pid(r4, 0x0, 0x0)
lseek(r3, 0xffffe80000000001, 0x1)
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/169, 0xa9}, {0x0}], 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x6, &(0x7f0000000440)=@raw=[@ldst={0x0, 0x0, 0x0, 0x8, 0x2, 0x10, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000480)='GPL\x00', 0x1, 0x88, &(0x7f0000000500)=""/136, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x3, 0x44, 0x5}, {0x2, 0x2, 0x0, 0x3}, {0x0, 0x3, 0x6, 0x1}, {0x3, 0x3, 0x10}], 0x10, 0x6}, 0x94)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x33a, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0xd, 0x0, 0x5, 0x10, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @ldst={0x3, 0x3, 0x2, 0x3, 0x0, 0x50, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7c9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x8, 0x2, 0x3}, 0x10, 0xb6c3, r8, 0x3, &(0x7f0000000800)=[r9], &(0x7f0000000840)=[{0x2, 0x4, 0xb, 0x4}, {0x4, 0x4, 0xf, 0xb}, {0x5, 0x3, 0x4, 0x1}], 0x10, 0x3}, 0x94)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x161043, 0x0)
unshare(0x26020480)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000940))
pread64(r10, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x84000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r12, &(0x7f0000001f00)=""/4091, 0xffb)
write$selinux_access(r12, &(0x7f00000000c0)={'system_u:object_r:ptmx_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xd8}, 0x41)

4m44.552510739s ago: executing program 53 (id=2923):
mmap(&(0x7f0000976000/0x2000)=nil, 0x2000, 0x2000004, 0x4008032, 0xffffffffffffffff, 0x535a3000)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x5e})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, r2, 0x8000000)
r3 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
recvmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x120)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000007c0)}, 0x20)
write$cgroup_pid(r4, 0x0, 0x0)
lseek(r3, 0xffffe80000000001, 0x1)
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/169, 0xa9}, {0x0}], 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x6, &(0x7f0000000440)=@raw=[@ldst={0x0, 0x0, 0x0, 0x8, 0x2, 0x10, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000480)='GPL\x00', 0x1, 0x88, &(0x7f0000000500)=""/136, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x3, 0x44, 0x5}, {0x2, 0x2, 0x0, 0x3}, {0x0, 0x3, 0x6, 0x1}, {0x3, 0x3, 0x10}], 0x10, 0x6}, 0x94)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x33a, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0xd, 0x0, 0x5, 0x10, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @ldst={0x3, 0x3, 0x2, 0x3, 0x0, 0x50, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7c9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x8, 0x2, 0x3}, 0x10, 0xb6c3, r8, 0x3, &(0x7f0000000800)=[r9], &(0x7f0000000840)=[{0x2, 0x4, 0xb, 0x4}, {0x4, 0x4, 0xf, 0xb}, {0x5, 0x3, 0x4, 0x1}], 0x10, 0x3}, 0x94)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x161043, 0x0)
unshare(0x26020480)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000940))
pread64(r10, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x84000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r12, &(0x7f0000001f00)=""/4091, 0xffb)
write$selinux_access(r12, &(0x7f00000000c0)={'system_u:object_r:ptmx_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xd8}, 0x41)

3m46.57195963s ago: executing program 5 (id=3373):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2)
kexec_load(0x3e00, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="9f", 0x1}], 0x1}}], 0x1, 0x44804)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080008000000e7ff0800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000)
r3 = epoll_create1(0x80000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x5, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x5})
shutdown(r0, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dvmrp1\x00'})
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r4, 0x0)

3m45.665747356s ago: executing program 5 (id=3378):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x208, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x591302, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x41, 0x40, &(0x7f00000000c0)="5fdcc9ab63daacbe593bfdff73e4a97783e1e58085c71ed8fbfc67dac39eb59a23552992ff7869f03cc8478726879000709067986b5b34d122f46c4a11fb9f7fae", &(0x7f0000000040)=""/64, 0x0, 0x0, 0xd6, 0xa4, &(0x7f00000001c0)="9eac5a159c06370d60f8401f86939995fc82fb6de7f0ad7dddae3467b67658e0a80f2d23eb315d699356615b079e3b783154f83ccc08374349ba03237bccf1cfa297a29020a1c64226983ec97c2f1062f32373a7d00d54bcf06357b8d7a8d57b48da671c62221250f95cb5c1661d56ba5fe6b479868ddc9d8a7022ba93c06e7f09fac958a7b4466a94ac1240483a64dca3490f8582f47ce9cb9f5ca936a4e8dbc098310766fd7a616d3147f7e108a2dbc17f8d11d7a0ad50f64a4550206dbf3a7e95ce298f559539350fdecf683f11fdaa30df3f3c78", &(0x7f00000003c0)="3562488c0282dad2daa1a45cb16749434a238c3ea17ce51c4957372d73ac03fc0f1a700d50296f17b824f4b56058f102e2fc35316180df3ac55c3222c8ffcf9d2927c9ddc416239c20118227c7d561bb5cfd330a4e82e9ec879ec10ad3f4db61ac2922100c5bbedc748a8f5627970c13d4d1cb77a8c4dbd921f1db3af063ea50ff8ba98bfaf93d57e89a6097784c1b888cb62e61bd268eec17f0333c106fa3cfebd969d7", 0x2, 0x0, 0x7fffffff}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)

3m45.364637352s ago: executing program 5 (id=3379):
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x8, 0xfffffffe, 0x21e}, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
epoll_create1(0x0) (async)
io_uring_enter(r3, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async, rerun: 64)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) (async, rerun: 32)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async, rerun: 32)
r8 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0xb, &(0x7f0000000000)=0xdcd5, 0x4) (async)
setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f0000000080)=0xf2b, 0x4) (async)
getsockopt$inet6_buf(r10, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000440)={r8, &(0x7f0000000000)='-^[%}\x00', 0x80, &(0x7f00000000c0)={@align=0x3a3, {0x4, 0x200, 0x0, 0x100000000}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000400)=0x3da6})
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000740)='./file1\x00', 0x1000000, &(0x7f0000003580)=ANY=[], 0xfe, 0x19c, &(0x7f0000000200)="$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")

3m45.364336872s ago: executing program 5 (id=3380):
r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0xa08, &(0x7f0000008280)="$eJzs3c1vXOW9B/DvGduJMSgJkMvlRkAm4SYY8HVs55LciMW9iT1JzPXLle1IRHdBKHGqKG5pSSsBqtQgVV0VtVKrLtod6qorJDZlU7Frd+2qi0oV/wLqKlIruToz43hsjz2O69gmfD7WzJyX33me33l9NOOZ84Qvl8WDK8YWF+uPLY5f+fUOZMwedmHs848+/rB8fHAn+9KVV4rfJL1Jqkl3kqeTntGxmenJDgXdSq4l+SwpkuxP43VTrqX4cR5bHv8sxS/Lete1b7Ml08kiX2m7ffwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVIyODQ0NF/syPnXl9WpDUl1jdGxmusji4to5S8s0fFrv9bv4tGO9SVE+0tu71NX304eXZz+VpHo8zzTGnql3SJ7evP/oU4defbK7srT8etn8U/Zvvtjb771/682Fhfl3Hkgie9+l2tT47PT45PlLter47HT13JkzQ6cuX5ytXhyfqM1enZ2rTVZHZ2rn56Znqv2jL1aHz507Xa0NXp2+MnVpbHCitjTx7H+MDA2dqb42+H+18zOz01OnXhucHb08PjExPnWpHlPOLmPOlgfi/47PVedq5yer1Rs3F+ZPr8qpq350tUwog4Y7rUkZNNIpaGRoZGR4eGRk+INm79n3Jpx55dwrZ4eGuodWyci+VREP6KBlb3lk/d28/Rdx2KJKo/1PJjKeqVzJ69mXapu/0YxlJtP525lysbXzm5ba/xOnahvW29r+N1v57pbZR8qn43muOdq7TvvfNtOd/Lud9/J+buXNLGQh83ln1zPa2b9LqWUq45nNdMYzmfP1KdXmlGrO5UzOZChv5HKOZjbVXMx4JlLLbK5mNnOpZbJ+dM2klvOZy3RmUk1/RvNiqhnOuZzL6VRTy2CuZjpXMpVLGcv5eik3crO+3U9vkOO9oOHNBI1sELSmud9E+78yojwpdrQdYs/Z9ms4bNVis/3f1zm0f3QnEgIAAAC23b/9PgcOP/G7vyRFnq1/Ln9xfKI2tNtpAQAAANuo/nW9Z8qXnnLo2RTe/wMAAMDDpqj/xq5I0pejjaGlX0L5EAAAAAAeEvX//z+X4ujyBO//AQAA4CHT+R77HSOKgaXb/1avN16vNyMaY0XfxfGJ2uDo9MSrwzlZv8tA/ZcGa0rrSoqe+s8PXsqxRtSxvsZr33KJZZ29ZdTw4KvDeSnHmyvS/3z58nx/m8iRRuQLjcgXWiO7siLydBkJAA+74xu0x5tt/1/KQCNi4Ei9ye8+0qYNHtKyAsBecTy3m0PNLs3atP/NXnieW6/9/88N3v+XEU/kxtHGVwoG81bezkKuZyDNbxwcbVfqUm8Eja8hDHT4NKCv+ZWFP56tZGDN5wG999a1NXY+Ixlo+4lAS7lFeldsrK5t3vgAsEuOb9gOb679H+jw/n+5zd2/S2sJALS614N924FKM2qjmM4Du7yKAMAqWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfpu6gf8fTiYLC/PJ1u7/v7WB3vvJcOOBSjaI+fvOrM7ODHQl2a3a/zv3vVS5j/fKpjOwcmCXL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsiCLpaje9kuxPMpTk1M5n9eDc2e0Etkt1a4sVd3M37+bAdqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBV17z/fyWN10cbk9JdSU4kuZbk/3c7x+10d7cT2DXfqD+33P+/kvRksUh3Y7en6Bkdm5meLHd/sb+c//lHH39YPjqXvbZXhbKAsoYVnUs0a2iZ0rNyqcfrS/WNzd++9Z23v1Udu1A/MC/MXZwYm7w08z/LgU8VnzS6QKgWyxOX8v3eid/+pKXQfc3KPynXtL3V9V6s1zu2tt5/bbf0OvVuws2F+ZGyprna63Pf/ebNd1tmPZFjyfP9Sf/Kmr5ePtap6djq7blS8UXxw+JAfp5r9f1fbo1isSh30cH6+j9y4+bC/OBbby9cv5fT91fkdChHk1xPejef09EU6+VTP+oqPWWtQ/Wg8ulwh/I21FLi8Drb9fH6YdN3X+tQXX8d6jps92ZGp9tm9NNvP5mT972nT3aosa3ii+LPxeX8KT9o6f+jUu7/E2l7drYpoh7ZcqS0zltxelUakfU1H2md8cbqMtc9K+95pGMEm/WjfC3/dW//V1qu/819VTYLD/561FJj+/Miuf/z4lcH17Qoy+ot0uFVLVLz6rPeMs08Dzei1snzX/Jy0n3kvq4oL3e4ojyo8/8XRX/+mjv6/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa+IulqN72SnEhyKMnBcryaLK6OubOF+ip9xVbS3DZbyfnLp1h3RYu7uZt3c2CnMwIAAAAAAADgwbgw9vlHH39YPur/j+/Kv1eac6pJd5JDxc96Rsdmpic7FNSTXFv6l37v/eVwrXx6bHn8s3Ls6Q4L7e7XBwDgS+0fAQAA//9T8Gpj")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x66)

3m44.887337911s ago: executing program 5 (id=3387):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00')
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250600e4ee8b5809ba000008000900040000000800190000001b7079bff30b0356bf2561b6000006001a00"/64], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4804c)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$watch_queue(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087})
r3 = io_uring_setup(0x57e, &(0x7f0000000440)={0x0, 0x372, 0x10, 0x0, 0x2c4})
close(r3)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r5, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r0}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffcf4, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x20048811)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x54, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x4, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xe0000, &(0x7f0000000940)=ANY=[@ANYRES32=r6, @ANYRES8=0x0], 0x6, 0x2bf, &(0x7f0000000980)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x42, 0x0)

3m44.608682191s ago: executing program 5 (id=3389):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcff000000001972a42fda0000000000000000000000f63afa441bbdc2180b8f9aec75017011d43c4ec11c77354ec1b47b59cc653a0f9fa1ea994c2e5f8e1badf10a5c7bb014899ad657b4b36330c946b6b93246a709ba77d9e0e4411dab30f8f7c4861f512331f3acb223204fbeef9db8909841104442c90e82a7f1b01bf110fb9b66ca7b4d3db0cbcfa55c5652a0f8576f43d2000000000000004540ca3e81d9abde176573f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000140), &(0x7f0000000300)='%-5lx  \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x60000000}, 0xc)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$char_usb(r5, &(0x7f0000000240)="2acd4aecf91c42629a13fe53", 0xc)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0xffbffffb, 0x1, 0x400}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe5574b1ec18a652e}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0)

3m44.588790367s ago: executing program 54 (id=3389):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcff000000001972a42fda0000000000000000000000f63afa441bbdc2180b8f9aec75017011d43c4ec11c77354ec1b47b59cc653a0f9fa1ea994c2e5f8e1badf10a5c7bb014899ad657b4b36330c946b6b93246a709ba77d9e0e4411dab30f8f7c4861f512331f3acb223204fbeef9db8909841104442c90e82a7f1b01bf110fb9b66ca7b4d3db0cbcfa55c5652a0f8576f43d2000000000000004540ca3e81d9abde176573f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000140), &(0x7f0000000300)='%-5lx  \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x60000000}, 0xc)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$char_usb(r5, &(0x7f0000000240)="2acd4aecf91c42629a13fe53", 0xc)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0xffbffffb, 0x1, 0x400}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe5574b1ec18a652e}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0)

2m40.339081795s ago: executing program 3 (id=4047):
open(&(0x7f0000000000)='.\x00', 0x0, 0xa)
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2m38.552604724s ago: executing program 3 (id=4061):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="de4ce25b728ba604660053b2686d7d5ba28c6f99ca8fd22d8aded159f0c23fb1e2919778a8b86593c0cbf9fa95005d5d6eb67a3d7f10bb9a3a39efdd3325fcdae346276391d165df3d78090d00020000f897cef5c9bcab360307d9f874edfe7d5d2e7e85fd423af01e94e1d1bdee2072f0df78b49b9c6e08d5f4"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2m37.585833318s ago: executing program 3 (id=4071):
open(&(0x7f0000000000)='.\x00', 0x0, 0xa)
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2m36.685766256s ago: executing program 3 (id=4080):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x002\x06o\xf8\x88M\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xeeq\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\xaf\x94\xa4\xc4/\x17\xb7\xf0\x90r\xfd\xa9L\x1d\x1d\x7f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7h\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0h\xd1\xe0\xf82\xc2+>\xb56=]4i\xca\x11\x91\xd0\xda`\x18\x0f\xb5\xd9\xc4U\x99\x05t\xf9Dc\xc4Pc\x8e\xaea\x14iP\x026\x15O\xa87\xfd\xe3\x85\xfbdo\x99\x055\x03\xf1\x8d\xd5\xfd\xbe\x92\xb2B<', 0x6)
r2 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000003c0)=[r1], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8002, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {}, {@nodiscard}, {@delalloc}, {@resgid}, {@jqfmt_vfsv0}, {@init_itable}]}, 0xff, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==")
fcntl$setsig(r0, 0xa, 0xd)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x1)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000100)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x14, 0xc, 0x22}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000000000008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f7bb5850f36fc3ed00000d000000"], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r9, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="3d9a9e113f", 0x5}], 0x1}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r11=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="00000000000000000000000000000000ed1054af7fece558d2a490bfa86fe33dbe5b9d73c982cf9242eb9ed629f949effd7d06d5341be13de265cb4f898dd11f7b5e8ec8bfaafd800498b4bb50ff197f668375ae141aafc65943c3f29eac45b6fe75ef9fb316a1e0d652e405ba92db2156e4ef568042cf384f483826da1e9ea4b755658d70034d8865a4afc2c66c162c7951b0da0f523c60b0efd1c562b2a0e671db50e632968ba85ca09945fece497cc2cb56f9203ad856fb3e864a57d867214d", 0xc1, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r11, 0x1, 0x5, 0x6, @broadcast}, 0x14)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000007c0)={r0, &(0x7f0000000640)='\x00\x00\x00\x00', 0x40000, &(0x7f0000000700)={@_ha_fsid={[0x200, 0x6]}, {0xf, 0x7fff, 0x8, 0x9}}, 0x4, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x1000002})

2m35.886320026s ago: executing program 3 (id=4087):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040))
syslog(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(0x0, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)

2m35.523659348s ago: executing program 3 (id=4091):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x54, 0x1)
gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m35.494444932s ago: executing program 55 (id=4091):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x54, 0x1)
gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m35.242174008s ago: executing program 9 (id=4094):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x5}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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")
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x5}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) (async)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async)
write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") (async)

2m35.127445584s ago: executing program 9 (id=4096):
r0 = io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x4000, 0x80, 0x0, 0x2a8})
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r2 = syz_open_pts(r1, 0x141601)
fcntl$setstatus(r2, 0x4, 0x182400)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1b)
close_range(r0, 0xffffffffffffffff, 0x0)

2m35.107632279s ago: executing program 9 (id=4098):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000080)=0xd0, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x2203, 0x0)

2m35.05954512s ago: executing program 9 (id=4099):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x002\x06o\xf8\x88M\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xeeq\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\xaf\x94\xa4\xc4/\x17\xb7\xf0\x90r\xfd\xa9L\x1d\x1d\x7f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7h\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0h\xd1\xe0\xf82\xc2+>\xb56=]4i\xca\x11\x91\xd0\xda`\x18\x0f\xb5\xd9\xc4U\x99\x05t\xf9Dc\xc4Pc\x8e\xaea\x14iP\x026\x15O\xa87\xfd\xe3\x85\xfbdo\x99\x055\x03\xf1\x8d\xd5\xfd\xbe\x92\xb2B<', 0x6)
r2 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000003c0)=[r1], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8002, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {}, {@nodiscard}, {@delalloc}, {@resgid}, {@jqfmt_vfsv0}, {@init_itable}]}, 0xff, 0x4b4, &(0x7f0000000c80)="$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")
fcntl$setsig(r0, 0xa, 0xd)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x1)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000100)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x14, 0xc, 0x22}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000000000008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f7bb5850f36fc3ed00000d000000"], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r9, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="3d9a9e113f", 0x5}], 0x1}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r11=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="00000000000000000000000000000000ed1054af7fece558d2a490bfa86fe33dbe5b9d73c982cf9242eb9ed629f949effd7d06d5341be13de265cb4f898dd11f7b5e8ec8bfaafd800498b4bb50ff197f668375ae141aafc65943c3f29eac45b6fe75ef9fb316a1e0d652e405ba92db2156e4ef568042cf384f483826da1e9ea4b755658d70034d8865a4afc2c66c162c7951b0da0f523c60b0efd1c562b2a0e671db50e632968ba85ca09945fece497cc2cb56f9203ad856fb3e864a57d867214d", 0xc1, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r11, 0x1, 0x5, 0x6, @broadcast}, 0x14)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000007c0)={r0, &(0x7f0000000640)='\x00\x00\x00\x00', 0x40000, &(0x7f0000000700)={@_ha_fsid={[0x200, 0x6]}, {0xf, 0x7fff, 0x8, 0x9}}, 0x4, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x1000002})

2m34.608671754s ago: executing program 9 (id=4109):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0ff}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m34.092652413s ago: executing program 9 (id=4114):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
ftruncate(r0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0xb, &(0x7f0000000340))
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100001f2feff00000000df2510000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001b"], 0x28}}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001400090527bd7000fddbdf25022000cb", @ANYRES32=r7, @ANYBLOB="0807000000040000080002007f000001"], 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
getsockopt(r8, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85e33320430000009600000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94)

2m34.092448403s ago: executing program 56 (id=4114):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
ftruncate(r0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0xb, &(0x7f0000000340))
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100001f2feff00000000df2510000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001b"], 0x28}}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001400090527bd7000fddbdf25022000cb", @ANYRES32=r7, @ANYBLOB="0807000000040000080002007f000001"], 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
getsockopt(r8, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85e33320430000009600000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94)

1m2.552651475s ago: executing program 7 (id=5481):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001300290a000008000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001a801800028014000500080000003e120000"], 0x3c}}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=<r4=>0x0, &(0x7f00000003c0)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x4000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {0x0}], 0x2}, 0x0, 0x8000})
io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r8, 0x7, 0x0, @val=@tcx}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x8045, 0x0, 0x15)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290180000000a1ffffff07000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0)

1m2.01148885s ago: executing program 7 (id=5485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000003300010700000000fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x24044094)
syz_genetlink_get_family_id$nl80211(0x0, r0)

1m1.883575553s ago: executing program 7 (id=5487):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0xb}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {}, {0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0xffffff91}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x81}, {}, {}, {}, {}, {}, {0xc0}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xabb7}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r11, 0x29, 0xb, &(0x7f0000000000)=0xdcd5, 0x4)
setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f0000000080)=0xf2b, 0x4)
getsockopt$inet6_buf(r11, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c5870000", @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf25030000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x40040)
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000001c0)={<r13=>r6, &(0x7f00000000c0)='netdevsim0\x00', 0x240001, &(0x7f0000000100)={@align=0x2, {0x4, 0xb, 0x9c52e0d}}, 0x40, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x347})
bind$xdp(r8, &(0x7f0000000200)={0x2c, 0x1, r9, 0xc, r13}, 0x10)
syz_io_uring_setup(0x34e5, &(0x7f0000000240)={0x0, 0xcc4d, 0x1000, 0x0, 0x1a4, 0x0, r13}, &(0x7f00000002c0), &(0x7f0000000300))
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})

1m1.579935378s ago: executing program 7 (id=5492):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[], [{@fsname={'fsname', 0x3d, '(/^)#@\\/[\x88/}]#*[**].{\'\'-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}, 0x1, 0x59f, &(0x7f0000001180)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r0 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x392)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tgkill(r4, r4, 0xd)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1m1.224098492s ago: executing program 7 (id=5497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000003300010700000000fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x24044094)
syz_genetlink_get_family_id$nl80211(0x0, r0)

1m0.768683345s ago: executing program 7 (id=5502):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
lsm_list_modules(0x0, 0x0, 0x10000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x10001}, 0x70bd2a, 0x3501, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc2583, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x86c9460748f085ce})
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

1m0.768452195s ago: executing program 57 (id=5502):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
lsm_list_modules(0x0, 0x0, 0x10000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x10001}, 0x70bd2a, 0x3501, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc2583, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x86c9460748f085ce})
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

2.996285224s ago: executing program 4 (id=6066):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC])
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x40000000, {0x80, 0x20, 0x0, 0xd7, 0xff, 0x11, 0x0, 0x5, 0x2400}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2bd, &(0x7f0000000a00)="$eJzs3UFrI2UYAOB3kjTNKpgiXhTBAT14KluvXhplBbEnJYJ60OB2QZKw0IWAFczuaX+BR/+HP8GLF/+B4FXwtnuojMxMJpPYpNa2acE+z+nd75v3+96Zb0lzmTdfvT4e3n+YxJNnv0Wnk0RjP/bjeRI70YjK42gFAPD/8TzL4s+s+tdL/yHzTmMzFQEAm1b+/S8tjm/dXEkAwIZ98tnnH/UODu59nKadeLX7dNJPImL8dNIv53sP4psYxWHcjW6cRGRzZVx8T2iluZ14azyd9PPM8Ze/zNbv/RFR5O9FN3ZO53/w4cG9vbQ0z3+hqi6N3oP5N5FuvLI6/51/5sd4Gv12vP3mQv270Y1fv46HMYr7kefW+d/vpen72Q/Pvvsi3ybPTxrR3y6uq2XN6zkRAAAAAAAAAAAAAAAAAAAAAABug900Tcr2PUX/nnyo6J8z6TdPivndtLLY32da9QdKqoXK/kBZzFr0TLP4seqvczdN02x2YZ3fitdaflgAAAAAAAAAAAAAAAAAAAAAco++PR4ORqPD6j3+w6Nq5CJBtUr1Wv9F19lfGHkjjoeD5voFt8+/V+txfeN5rWdeHK3WJZ/GcnDnjKm8nqvcqwi254d79GmUQXUwV7rXy++Vix4PB+lsqnrIw0Hyb3t1qoP7aXGqHZctLCv+S5xky2famZe6nNW+oqfRfnHl1F9Zlp1vnXd/L89oNpIULTbOt/vWLFh5g3nQOX0WP69fcO1HRvPynzoAAAAAAAAAAAAAAAAAAMAq9Uu/KyafrEkqxxsbLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArlH9+/9V0ImI5ZHlYKtOXntNHbTj6NFN3h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3w98BAAD//yuLSKY=")

2.001928257s ago: executing program 4 (id=6077):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x5210, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xdd, 0x2e9, &(0x7f0000000a40)="$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")
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r6)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$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")
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

1.770864351s ago: executing program 8 (id=6078):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000300000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240", @ANYRES16], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.688600695s ago: executing program 8 (id=6079):
syz_emit_ethernet(0xda, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$key(r1, 0x0, 0x48840)
timer_delete(r0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x11, 0x800000003, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fallocate(r4, 0x0, 0x2000000, 0x1001f3)

1.541978826s ago: executing program 8 (id=6080):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e)
readv(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000040)=""/68, 0x44}], 0x2)

1.388038735s ago: executing program 4 (id=6083):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x8001, 0x4)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r3, &(0x7f00000002c0)='L', 0x1)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0xbe0}, &(0x7f0000000240)=0x8)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x1, 0x4, 0x3, r6}, 0x10)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001740)={0x0, 0x8, 0x5, 0x1, 0x40, 0x7, 0x1, 0x7, {0x0, @in6={{0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x2, 0x2cf, 0x4, 0x0, 0x40}}, &(0x7f0000001800)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002040)={0x4, 0x0, 0x1, 0xffffffff}, &(0x7f0000002080)=0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x0, 0x5}}}]}]}]}}]}, 0x54}}, 0x0)

1.343097486s ago: executing program 4 (id=6085):
unshare(0x28040900)
unshare(0x6a040000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

1.20908104s ago: executing program 0 (id=6089):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000000c0)=0x8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r2, 0x0, 0x3}, 0x8) (async)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x4008000) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e22, 0x4, @remote, 0x6}}}, 0x84) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd29, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x804)

1.152645979s ago: executing program 0 (id=6090):
syz_emit_ethernet(0xda, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$key(r1, 0x0, 0x48840)
timer_delete(r0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x11, 0x800000003, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fallocate(r4, 0x0, 0x2000000, 0x1001f3)

846.249398ms ago: executing program 0 (id=6094):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file4\x00', 0x1000012, &(0x7f0000001380)=ANY=[], 0x88, 0x2a7, &(0x7f00000006c0)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000fe800000000000000005000000000029ac1414bb00000000000000000000000000000bc5ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000000000000000000000000000000000000000010000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ac14143b0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00000000000000fe800000000000000000000000000000000000000003000000080000000000000000001020010000000000000000000000000001000004d43200000000000000000000000000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000023500000200010000000000bf0a000000000000fe8000000000000000000000000000aa000004d42b"], 0x23c}}, 0x0)

771.675763ms ago: executing program 0 (id=6095):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x8001, 0x4)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r3, &(0x7f00000002c0)='L', 0x1)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0xbe0}, &(0x7f0000000240)=0x8)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x1, 0x4, 0x3, r6}, 0x10)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001740)={0x0, 0x8, 0x5, 0x1, 0x40, 0x7, 0x1, 0x7, {0x0, @in6={{0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x2, 0x2cf, 0x4, 0x0, 0x40}}, &(0x7f0000001800)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002040)={0x4, 0x0, 0x1, 0xffffffff}, &(0x7f0000002080)=0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x0, 0x5}}}]}]}]}}]}, 0x54}}, 0x0)

770.783133ms ago: executing program 4 (id=6097):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x4)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x3, 0x0, 0x38, 0x4006}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$RFKILL_IOC_MAX_SIZE(r3, 0x2, &(0x7f0000000040)=0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@dots}, {@fat=@discard}, {@dots}]}, 0xfe, 0x22d, &(0x7f0000000300)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4)
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x3000000, &(0x7f0000000b80)={[{@name={'name', 0x3d, 'Q'}}, {@name={'name', 0x3d, '\xe5-'}}]})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x68, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004004)

692.681347ms ago: executing program 0 (id=6099):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x641b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0xfffffff9}, 0x94)

601.87806ms ago: executing program 6 (id=6101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

588.731307ms ago: executing program 4 (id=6103):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040))
syslog(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)

588.383617ms ago: executing program 8 (id=6104):
syz_emit_ethernet(0xda, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$key(r1, 0x0, 0x48840)
timer_delete(r0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x11, 0x800000003, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fallocate(r4, 0x0, 0x2000000, 0x1001f3)

527.758845ms ago: executing program 0 (id=6105):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = syz_usbip_server_init(0x5)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0x7c41, &(0x7f0000000440)={0x0, 0x5065, 0x800, 0x0, 0x99})
io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000001780), 0xa)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r5=>0x0})
getpriority(0x2, r5)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

420.522303ms ago: executing program 6 (id=6107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r1 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty, 0x20}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4)

415.746412ms ago: executing program 1 (id=6108):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32)
chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async)
renameat2(r1, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file7/file0\x00', 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x9b, 0x4, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x5c, 0x0, 0x3}, 0x28) (async, rerun: 64)
r3 = socket$kcm(0xa, 0x1, 0x0)
pwrite64(r0, &(0x7f0000000280)="cb930e207f4be5fc50c9099269922c27d6", 0x11, 0x5) (async)
setsockopt$sock_attach_bpf(r3, 0x29, 0x10, 0x0, 0x1300) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000ffffffffffffc90d8510000002000000850000007d000000950033000073009500a5050000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb6, &(0x7f00000000c0)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

366.174342ms ago: executing program 6 (id=6109):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
creat(&(0x7f0000000200)='./bus\x00', 0x268)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0xff030000, 0x0, 0x0)

312.566822ms ago: executing program 1 (id=6110):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x8001, 0x4)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r3, &(0x7f00000002c0)='L', 0x1)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0xbe0}, &(0x7f0000000240)=0x8)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x1, 0x4, 0x3, r6}, 0x10)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001740)={0x0, 0x8, 0x5, 0x1, 0x40, 0x7, 0x1, 0x7, {0x0, @in6={{0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x2, 0x2cf, 0x4, 0x0, 0x40}}, &(0x7f0000001800)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002040)={0x4, 0x0, 0x1, 0xffffffff}, &(0x7f0000002080)=0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x0, 0x5}}}]}]}]}}]}, 0x54}}, 0x0)

281.053326ms ago: executing program 1 (id=6111):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d61736369692c00125c6f3ad370264551e3ffff7e80e44939e902bdf759e02dbdff45399cd965a877fb80b6f99d249537cb3ccf29a605586bcc81c95f7bdb69711ae6935ce36b"], 0x1, 0x566, &(0x7f0000000540)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000640)=""/140, 0x8c)

272.123874ms ago: executing program 8 (id=6112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000390400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x30)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c4}, 0x844)

195.568679ms ago: executing program 1 (id=6113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x20000000)

195.256939ms ago: executing program 6 (id=6114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000008000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d8"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)

153.01826ms ago: executing program 6 (id=6115):
socket$kcm(0xa, 0x922000000003, 0x11)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) (async)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
geteuid()

118.840194ms ago: executing program 8 (id=6116):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xeaff)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)

48.71774ms ago: executing program 1 (id=6117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

38.834488ms ago: executing program 1 (id=6118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xc4, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xc4, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async)

0s ago: executing program 6 (id=6119):
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r4, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x81)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x9, 0x1, 0x2}, {0xa4, 0x5, 0x90, 0x400}, {0x6, 0x5f, 0x6, 0xfffffffa}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x6f5}, 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0xe, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000440)=[0x0], <r8=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r7, 0x25, 0x2, @val=@tcx={@void, @value=r6, @void, @void, r8}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0)
r9 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
syz_open_dev$tty1(0xc, 0x4, 0x4)
getegid()
close(r9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x309, 0x70bd27, 0x25dfdbff, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)
lsetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@random={'os2.', 'syz_tun\x00'}, &(0x7f0000000540)='\x00', 0x1, 0x3)

kernel console output (not intermixed with test programs):

unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.964510][T29329] loop8: detected capacity change from 0 to 512
[  521.976160][T29329] EXT4-fs: Ignoring removed mblk_io_submit option
[  521.994140][T29329] EXT4-fs (loop8): orphan cleanup on readonly fs
[  522.000611][T29329] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  522.011545][T29329] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5552: attempt to clear invalid blocks 2 len 1
[  522.027222][T29332] loop4: detected capacity change from 0 to 1024
[  522.031862][T29329] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  522.034747][T29332] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  522.052126][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  522.058973][    C1] EXT4-fs (loop8): initial error at time 1772179961: ext4_clear_blocks:876: inode 13
[  522.068511][    C1] EXT4-fs (loop8): last error at time 1772179961: ext4_clear_blocks:876: inode 13
[  522.081396][T29329] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  522.096162][T29329] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5552: invalid indirect mapped block 1819239214 (level 0)
[  522.116695][T29329] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  522.116958][T29329] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5552: invalid indirect mapped block 1819239214 (level 1)
[  522.143385][T29342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.152033][T29342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.183422][T29329] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  522.183809][T29329] EXT4-fs (loop8): 1 truncate cleaned up
[  522.202771][T29329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  522.250168][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.319471][ T1031] IPVS: starting estimator thread 0...
[  522.337694][T29352] loop8: detected capacity change from 0 to 512
[  522.347551][T29352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  522.401865][T29352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.415759][T29353] IPVS: using max 2544 ests per chain, 127200 per kthread
[  522.425195][T29352] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.440971][T29352] EXT4-fs (loop8): shut down requested (0)
[  522.458727][T29361] syzkaller0: entered promiscuous mode
[  522.464254][T29361] syzkaller0: entered allmulticast mode
[  522.519879][T29363] xt_hashlimit: size too large, truncated to 1048576
[  522.550292][T29352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.589482][ T1919] Bluetooth: hci0: Frame reassembly failed (-84)
[  522.607784][T29368] loop6: detected capacity change from 0 to 128
[  522.615200][T29365] netlink: 'syz.8.5562': attribute type 3 has an invalid length.
[  522.734655][T29374] loop6: detected capacity change from 0 to 1024
[  522.792540][T29374] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  522.816973][T29377] loop0: detected capacity change from 0 to 128
[  522.842071][T29378] loop8: detected capacity change from 0 to 1024
[  522.870977][T29378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  522.883156][T29378] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.915176][T29375] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 3: comm syz.8.5564: lblock 3 mapped to illegal pblock 3 (length 3)
[  522.933706][T29375] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  522.946002][T29375] EXT4-fs (loop8): This should not happen!! Data will be lost
[  522.946002][T29375] 
[  523.277851][T29377] loop0: detected capacity change from 0 to 1024
[  523.316925][T29377] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  523.438607][T29393] EXT4-fs (loop6): orphan cleanup on readonly fs
[  523.454658][T29393] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5569: corrupted inode contents
[  523.466888][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.467156][T29393] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.5569: mark_inode_dirty error
[  523.476315][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  523.476335][    C1] EXT4-fs (loop6): initial error at time 1772179962: ext4_do_update_inode:5569: inode 16
[  523.476360][    C1] EXT4-fs (loop6): last error at time 1772179962: ext4_do_update_inode:5569: inode 16
[  523.495080][T29397] EXT4-fs: Ignoring removed bh option
[  523.504942][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.553244][T29393] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5569: corrupted inode contents
[  523.581494][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.603837][T29393] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5569: mark_inode_dirty error
[  523.625893][T29397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.643126][T29401] EXT4-fs: Ignoring removed nobh option
[  523.649195][T29401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  523.684595][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.685024][T29393] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5569: corrupted inode contents
[  523.706706][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.706892][T29393] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  523.724909][T29393] loop6: lost filesystem error report for type 5 error -117
[  523.725035][T29393] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5569: corrupted inode contents
[  523.764618][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.764804][T29393] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.5569: mark_inode_dirty error
[  523.788070][T29393] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  523.788281][T29393] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  523.807014][T29393] loop6: lost filesystem error report for type 5 error -117
[  523.807532][T29393] EXT4-fs (loop6): 1 truncate cleaned up
[  523.821896][ T1919] __quota_error: 79 callbacks suppressed
[  523.821907][ T1919] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  523.837325][ T1919] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1
[  523.838557][T29401] EXT4-fs (loop4): 1 truncate cleaned up
[  523.851996][ T1919] loop6: lost filesystem error report for type 5 error -117
[  523.855027][T29401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.855122][T29393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  523.917333][T22476] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:35: lblock 8 mapped to illegal pblock 8 (length 8)
[  523.933002][T22476] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  523.943330][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.945573][T22476] EXT4-fs (loop8): This should not happen!! Data will be lost
[  523.945573][T22476] 
[  523.965328][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  524.040195][T28902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.065241][T29412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  524.081920][T29412] EXT4-fs (loop0): 1 truncate cleaned up
[  524.088410][T29412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.102720][T29412] netlink: 'syz.0.5575': attribute type 4 has an invalid length.
[  524.161818][T29415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5571'.
[  524.190084][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.209808][T29423] ieee802154 phy1 wpan1: encryption failed: -22
[  524.268933][T29425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5577'.
[  524.287299][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.422506][T29432] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  524.541351][T29434] syzkaller0: entered promiscuous mode
[  524.546906][T29434] syzkaller0: entered allmulticast mode
[  524.659719][T29436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.669045][T29436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.778339][ T3627] Bluetooth: hci0: command 0x1003 tx timeout
[  524.778474][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  524.920100][   T28] audit: type=1326 audit(1772179964.295:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7ffc0000
[  524.947527][T29445] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  524.959101][   T28] audit: type=1326 audit(1772179964.314:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7ffc0000
[  524.983634][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5583'.
[  524.985408][   T28] audit: type=1326 audit(1772179964.314:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff83d75c799 code=0x7ffc0000
[  525.016274][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5583'.
[  525.031401][   T28] audit: type=1326 audit(1772179964.314:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7ffc0000
[  525.056897][   T28] audit: type=1326 audit(1772179964.314:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7ffc0000
[  525.081363][   T28] audit: type=1326 audit(1772179964.314:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff83d75c799 code=0x7ffc0000
[  525.107049][   T28] audit: type=1326 audit(1772179964.314:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff83d75c502 code=0x7ffc0000
[  525.137717][   T28] audit: type=1326 audit(1772179964.314:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff83d71cfce code=0x7ffc0000
[  525.162807][   T28] audit: type=1326 audit(1772179964.314:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29444 comm="syz.8.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff83d75c5c7 code=0x7ffc0000
[  525.342532][T29466] syzkaller0: entered promiscuous mode
[  525.353653][T29466] syzkaller0: entered allmulticast mode
[  525.416643][T29469] ieee802154 phy1 wpan1: encryption failed: -22
[  525.812604][T29460] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  525.902545][T29475] SELinux:  policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c
[  525.912931][T29475] SELinux: failed to load policy
[  526.013354][T29481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5597'.
[  526.055835][T29483] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5598'.
[  526.169826][T29488] syzkaller0: entered promiscuous mode
[  526.175322][T29488] syzkaller0: entered allmulticast mode
[  526.230875][T29490] EXT4-fs: Ignoring removed orlov option
[  526.268460][T29490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.308844][T29490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5601'.
[  526.337449][T29485] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  526.625628][T29507] FAT-fs (loop6): Directory bread(block 64) failed
[  526.632328][T29507] FAT-fs (loop6): Directory bread(block 65) failed
[  526.638912][T29507] FAT-fs (loop6): Directory bread(block 66) failed
[  526.645620][T29507] FAT-fs (loop6): Directory bread(block 67) failed
[  526.652290][T29507] FAT-fs (loop6): Directory bread(block 68) failed
[  526.659028][T29507] FAT-fs (loop6): Directory bread(block 69) failed
[  526.665614][T29507] FAT-fs (loop6): Directory bread(block 70) failed
[  526.672235][T29507] FAT-fs (loop6): Directory bread(block 71) failed
[  526.678985][T29507] FAT-fs (loop6): Directory bread(block 72) failed
[  526.685655][T29507] FAT-fs (loop6): Directory bread(block 73) failed
[  526.832725][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.659881][T29523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.672365][T29523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.283973][T29532] syzkaller0: entered promiscuous mode
[  529.289514][T29532] syzkaller0: entered allmulticast mode
[  529.483922][T29534] set_capacity_and_notify: 16 callbacks suppressed
[  529.483968][T29534] loop8: detected capacity change from 0 to 512
[  529.547967][T29534] EXT4-fs (loop8): orphan cleanup on readonly fs
[  529.572901][T29534] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.5610: corrupted inode contents
[  529.587381][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.599697][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  529.615233][    C0] EXT4-fs (loop8): initial error at time 1772179968: ext4_do_update_inode:5569: inode 16
[  529.625059][    C0] EXT4-fs (loop8): last error at time 1772179968: ext4_do_update_inode:5569: inode 16
[  529.651928][T29534] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #16: comm syz.8.5610: mark_inode_dirty error
[  529.673389][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.680713][T29534] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.5610: corrupted inode contents
[  529.703413][T29543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5616'.
[  529.718242][T29544] loop4: detected capacity change from 0 to 128
[  529.718501][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.725095][T29544] vfat: Unknown parameter ''
[  529.739118][T29534] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5610: mark_inode_dirty error
[  529.752028][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5617'.
[  529.759096][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.763383][T29534] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.5610: corrupted inode contents
[  529.765676][T29549] netlink: 'syz.1.5617': attribute type 1 has an invalid length.
[  529.778212][T29549] netlink: 'syz.1.5617': attribute type 2 has an invalid length.
[  529.799687][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.809693][T29534] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  529.841461][T29534] loop8: lost filesystem error report for type 5 error -117
[  529.844157][T29534] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.5610: corrupted inode contents
[  529.848845][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5620'.
[  529.883681][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.885008][T29534] EXT4-fs error (device loop8): ext4_truncate:4587: inode #16: comm syz.8.5610: mark_inode_dirty error
[  529.923581][T29555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5619'.
[  529.958093][T29534] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  529.960849][T29534] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  529.981236][T29555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5619'.
[  530.004458][T29534] loop8: lost filesystem error report for type 5 error -117
[  530.009972][T29534] EXT4-fs (loop8): 1 truncate cleaned up
[  530.010618][T29555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5619'.
[  530.032788][T11908] __quota_error: 54 callbacks suppressed
[  530.032801][T11908] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  530.048487][T11908] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 1
[  530.060474][T11908] loop8: lost filesystem error report for type 5 error -117
[  530.069990][T29534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  530.167494][T29560] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0
[  530.325102][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.381458][T29562] loop8: detected capacity change from 0 to 128
[  530.593136][T29563] loop8: detected capacity change from 0 to 1024
[  530.600719][T29563] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  530.673649][T29568] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5624'.
[  530.874362][T29580] syzkaller0: entered promiscuous mode
[  530.879859][T29580] syzkaller0: entered allmulticast mode
[  530.988622][T29589] netlink: 'syz.8.5631': attribute type 39 has an invalid length.
[  531.031330][T29592] loop4: detected capacity change from 0 to 1024
[  531.043530][T29592] EXT4-fs: inline encryption not supported
[  531.058015][T29592] EXT4-fs: Ignoring removed bh option
[  531.078020][T29592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.144360][T29592] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  531.160309][T29582] loop0: detected capacity change from 0 to 32768
[  531.175157][T29592] EXT4-fs (loop4): Remounting filesystem read-only
[  531.207742][ T3304]  loop0: p1 p3 < >
[  531.215741][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.227222][T29604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.238407][T29604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.248179][T29606] loop8: detected capacity change from 0 to 128
[  531.257122][T29582]  loop0: p1 p3 < >
[  531.334117][T29610] loop4: detected capacity change from 0 to 512
[  531.341988][T29610] EXT4-fs: Ignoring removed i_version option
[  531.366616][T29610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.422075][T29606] loop8: detected capacity change from 0 to 1024
[  531.433803][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  531.447131][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  531.449554][T29606] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  531.850802][T29622] netlink: 'syz.6.5639': attribute type 3 has an invalid length.
[  531.860642][T29622] netlink: 'syz.6.5639': attribute type 4 has an invalid length.
[  531.868544][T29622] netlink: 9067 bytes leftover after parsing attributes in process `syz.6.5639'.
[  531.941183][T29625] syzkaller0: entered promiscuous mode
[  531.946800][T29625] syzkaller0: entered allmulticast mode
[  532.001974][T29629] netlink: 604 bytes leftover after parsing attributes in process `syz.6.5642'.
[  532.013187][T29629] loop6: detected capacity change from 0 to 512
[  532.022594][T29629] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5642: bg 0: block 393: padding at end of block bitmap is not set
[  532.038272][T29629] loop6: lost filesystem error report for type 5 error -117
[  532.038447][T29629] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  532.054506][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  532.054523][    C1] EXT4-fs (loop6): initial error at time 1772179970: ext4_validate_block_bitmap:441
[  532.054543][    C1] EXT4-fs (loop6): last error at time 1772179970: ext4_validate_block_bitmap:441
[  532.092942][T29629] loop6: lost filesystem error report for type 5 error -117
[  532.093201][T29629] EXT4-fs (loop6): 2 truncates cleaned up
[  532.109701][T29629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.140660][T28902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.411699][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.766988][T29663] syzkaller0: entered promiscuous mode
[  532.772476][T29663] syzkaller0: entered allmulticast mode
[  532.795639][T29654] vxcan1 speed is unknown, defaulting to 1000
[  532.896868][T29654] dummy0 speed is unknown, defaulting to 1000
[  532.918810][T29654] lo speed is unknown, defaulting to 1000
[  533.030460][T29666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.057324][T29670] EXT4-fs: inline encryption not supported
[  533.074392][T29670] EXT4-fs: Ignoring removed bh option
[  533.097352][T29670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.131712][T29666] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.5655: corrupted xattr block 113: invalid header
[  533.237255][T29676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65050 sclass=netlink_route_socket pid=29676 comm=syz.8.5656
[  533.253978][T29670] vhci_hcd vhci_hcd.4: default hub control req: 0014 v0301 i0006 l0
[  533.263385][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.275534][T29654] chnl_net:caif_netlink_parms(): no params data found
[  533.355181][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.363908][T29681] autofs4:pid:29681:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375)
[  533.404310][T29642] kexec: Could not allocate control_code_buffer
[  533.430410][T29654] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.454758][T29654] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.481689][T29654] bridge_slave_0: entered allmulticast mode
[  533.502148][T29654] bridge_slave_0: entered promiscuous mode
[  533.525567][T29654] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.532692][T29654] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.541939][   T28] audit: type=1400 audit(1772179972.340:5499): avc:  denied  { append } for  pid=29691 comm="syz.4.5659" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  533.571697][T29654] bridge_slave_1: entered allmulticast mode
[  533.578553][T29654] bridge_slave_1: entered promiscuous mode
[  533.626298][T29654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.637247][T29654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.666101][   T28] audit: type=1400 audit(1772179972.461:5500): avc:  denied  { write } for  pid=29701 comm="syz.8.5666" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  533.711314][T29654] team0: Port device team_slave_0 added
[  533.718055][T29654] team0: Port device team_slave_1 added
[  533.725639][   T28] audit: type=1400 audit(1772179972.461:5501): avc:  denied  { open } for  pid=29701 comm="syz.8.5666" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  533.728249][T29712] netlink: 'syz.4.5670': attribute type 39 has an invalid length.
[  533.801842][T29654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.808954][T29654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.809893][T29710] vhci_hcd vhci_hcd.4: default hub control req: 0014 v0301 i0006 l0
[  533.849497][T29654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.861109][T29654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.868593][T29654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.894960][T29654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.950200][T29654] hsr_slave_0: entered promiscuous mode
[  533.970888][T29654] hsr_slave_1: entered promiscuous mode
[  533.981236][T29714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.989654][T29654] debugfs: 'hsr0' already exists in 'hsr'
[  533.999334][T29654] Cannot create hsr debugfs directory
[  534.042664][ T1919] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  534.062138][T29727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5674'.
[  534.068432][ T1919] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  534.084322][ T1919] EXT4-fs (loop0): This should not happen!! Data will be lost
[  534.084322][ T1919] 
[  534.107266][ T1919] EXT4-fs (loop0): Total free blocks count 0
[  534.115649][ T1919] EXT4-fs (loop0): Free/Dirty block details
[  534.120641][T11922] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  534.127527][ T1919] EXT4-fs (loop0): free_blocks=2415919504
[  534.146867][ T1919] EXT4-fs (loop0): dirty_blocks=16
[  534.151985][ T1919] EXT4-fs (loop0): Block reservation details
[  534.158273][ T1919] EXT4-fs (loop0): i_reserved_data_blocks=1
[  534.158520][T11922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  534.165181][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.217837][T29654] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.245308][T11922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.259594][T11922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  534.301198][T29654] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.352608][T29745] Cannot find add_set index 0 as target
[  534.364528][   T28] audit: type=1326 audit(1772179973.125:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471a9fc799 code=0x7fc00000
[  534.457821][T29654] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.552141][T29654] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.571750][T29768] EXT4-fs: inline encryption not supported
[  534.587206][T29768] EXT4-fs: Ignoring removed bh option
[  534.624826][T29768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.700032][T29654] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  534.746414][T29768] vhci_hcd vhci_hcd.4: default hub control req: 0014 v0301 i0006 l0
[  534.766299][T29654] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  534.805734][T29654] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  534.819741][T29654] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  534.838963][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.858488][T29792] syzkaller1: entered promiscuous mode
[  534.871801][T29792] syzkaller1: entered allmulticast mode
[  534.888023][T29807] set_capacity_and_notify: 6 callbacks suppressed
[  534.888039][T29807] loop4: detected capacity change from 0 to 1024
[  534.894792][T29806] loop0: detected capacity change from 0 to 2048
[  534.935879][T29807] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  534.962014][T29806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  535.027915][T29654] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.062219][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.078218][T29654] 8021q: adding VLAN 0 to HW filter on device team0
[  535.111200][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.118279][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.140820][   T28] audit: type=1400 audit(1772179973.846:5503): avc:  denied  { setcheckreqprot } for  pid=29796 comm="syz.8.5689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  535.163043][T29797] IPv6: NLM_F_CREATE should be specified when creating new route
[  535.180809][T11908] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.187915][T11908] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.392404][T29654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  535.467372][T29654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  535.869476][T29839] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2)
[  535.996341][T29839] bond3 (unregistering): Released all slaves
[  536.007823][T29847] loop8: detected capacity change from 0 to 1024
[  536.017251][T29848] loop4: detected capacity change from 0 to 128
[  536.042221][T29847] EXT4-fs: inline encryption not supported
[  536.068118][T29847] EXT4-fs: Ignoring removed bh option
[  536.144551][T29847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.190396][T29856] loop4: detected capacity change from 0 to 1024
[  536.225545][T29654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.243153][T29856] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  536.284658][T29847] vhci_hcd vhci_hcd.4: default hub control req: 0014 v0301 i0006 l0
[  536.362067][T29866] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  536.380954][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.426250][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.438175][T29866] EXT4-fs (loop8): Remounting filesystem read-only
[  536.452769][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.501832][T29880] loop0: detected capacity change from 0 to 1024
[  536.532624][T29654] veth0_vlan: entered promiscuous mode
[  536.550992][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.571746][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.580631][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.583676][T29654] veth1_vlan: entered promiscuous mode
[  536.599430][T29880] EXT4-fs: Ignoring removed nomblk_io_submit option
[  536.623698][T29880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  536.671285][T29654] veth0_macvtap: entered promiscuous mode
[  536.690690][T29880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002]
[  536.709973][T29654] veth1_macvtap: entered promiscuous mode
[  536.721292][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.739472][T29889] loop4: detected capacity change from 0 to 512
[  536.748065][T29654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.755788][T29880] System zones: 0-1, 3-36
[  536.762765][T29889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  536.784123][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  536.798029][T29654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.819420][T29889] EXT4-fs (loop4): 1 truncate cleaned up
[  536.829811][T11924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.846347][T29889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.848803][T29880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.859089][T11906] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.891306][T29889] netlink: 'syz.4.5707': attribute type 4 has an invalid length.
[  536.900070][T29892] lo: entered promiscuous mode
[  536.977291][T11906] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.986114][T11906] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.050819][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.072860][T29904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.081601][T29904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.093958][T29905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5712'.
[  537.105556][T29908] syzkaller0: entered promiscuous mode
[  537.111029][T29908] syzkaller0: entered allmulticast mode
[  537.111248][T29907] loop8: detected capacity change from 0 to 1764
[  537.154339][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.183544][T29912] loop4: detected capacity change from 0 to 1024
[  537.250482][T29912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  537.267208][T29912] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.316295][T29912] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5713: bg 0: block 112: padding at end of block bitmap is not set
[  537.331084][T29912] EXT4-fs (loop4): Remounting filesystem read-only
[  537.345919][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  537.375250][T29928] IPVS: Error connecting to the multicast addr
[  537.469428][T29941] loop4: detected capacity change from 0 to 128
[  537.479563][T29941] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  537.496635][T29944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5719'.
[  537.555517][T29941] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.597320][T28117] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  537.669345][T29952] syzkaller0: entered promiscuous mode
[  537.679315][T29952] syzkaller0: entered allmulticast mode
[  537.727202][T29956] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  537.762742][   T28] audit: type=1326 audit(1772179976.306:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.764822][T29956] EXT4-fs (loop6): 1 truncate cleaned up
[  537.807017][   T28] audit: type=1326 audit(1772179976.306:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.809695][T29956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  537.830801][   T28] audit: type=1326 audit(1772179976.306:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.866237][   T28] audit: type=1326 audit(1772179976.306:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.890213][   T28] audit: type=1326 audit(1772179976.306:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.913909][   T28] audit: type=1326 audit(1772179976.306:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0e547cfce code=0x7ffc0000
[  537.938901][   T28] audit: type=1326 audit(1772179976.306:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.942648][T29956] netlink: 'syz.6.5726': attribute type 4 has an invalid length.
[  537.962538][   T28] audit: type=1326 audit(1772179976.306:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  537.962561][   T28] audit: type=1326 audit(1772179976.306:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  538.019819][   T28] audit: type=1326 audit(1772179976.306:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29957 comm="syz.4.5727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  538.044443][T29961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.053845][T29961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.173962][T29654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.319301][T29973] Q�6�`Ҙ: renamed from lo
[  538.347151][    C0] blk_print_req_error: 7 callbacks suppressed
[  538.347169][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.363865][    C0] buffer_io_error: 6 callbacks suppressed
[  538.363880][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.420947][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.431590][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.439644][T29973]  loop6: unable to read partition table
[  538.451922][T29973] loop_reread_partitions: partition scan of loop6 (�N�h*h�������p��� "�o��?<��ʺ��XD��
b��p0�O{���>.) failed (rc=-5)
[  538.452433][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.476091][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.496513][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.507185][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.515182][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5734'.
[  538.526062][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.536724][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.629349][T29986] Cannot find add_set index 0 as target
[  538.696211][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.706865][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.714874][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.725489][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.733365][T29983]  loop6: unable to read partition table
[  538.739185][T29983] loop_reread_partitions: partition scan of loop6 (�N�h*h�������p��� "�o��?<��ʺ��XD��
b��p0�O{���>.) failed (rc=-5)
[  538.740496][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.763239][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.771653][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.782296][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.795671][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  538.806303][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.849416][T29994] syzkaller0: entered promiscuous mode
[  538.854950][T29994] syzkaller0: entered allmulticast mode
[  538.935393][T29996] iso9660: Bad value for 'map'
[  538.987574][T30011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.006351][T30010] sctp: [Deprecated]: syz.6.5742 (pid 30010) Use of struct sctp_assoc_value in delayed_ack socket option.
[  539.006351][T30010] Use struct sctp_sack_info instead
[  539.008522][T30011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.082986][T30015] netlink: 'syz.6.5746': attribute type 29 has an invalid length.
[  539.103741][T30015] netlink: 'syz.6.5746': attribute type 29 has an invalid length.
[  539.244910][T30020] EXT4-fs: Ignoring removed nobh option
[  539.258505][T30020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  539.273453][T30019] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  539.295358][T30020] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  539.349622][T30020] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.5746: lblock 2 mapped to illegal pblock 2 (length 1)
[  539.370940][T30020] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  539.374381][T30020] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.5746: lblock 0 mapped to illegal pblock 48 (length 1)
[  539.383507][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  539.383528][    C0] EXT4-fs (loop6): initial error at time 1772179977: ext4_map_blocks:776: inode 3: block 2
[  539.383615][    C0] EXT4-fs (loop6): last error at time 1772179977: ext4_map_blocks:776: inode 3: block 2
[  539.386393][T30019] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  539.397792][T30020] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  539.437628][T30020] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5746: Failed to acquire dquot type 0
[  539.488581][T30020] loop6: lost filesystem error report for type 5 error -117
[  539.489790][T30020] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  539.517559][T30020] loop6: lost filesystem error report for type 5 error -117
[  539.520639][T30020] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.5746: mark_inode_dirty error
[  539.563804][T30020] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  539.563955][T30020] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  539.592126][T30035] EXT4-fs: Ignoring removed nobh option
[  539.598113][T30035] EXT4-fs: Ignoring removed bh option
[  539.603658][T30020] EXT4-fs (loop6): 1 orphan inode deleted
[  539.610606][T30035] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  539.621121][T30020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.633418][T11906] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1)
[  539.676422][T11906] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0
[  539.764330][T30047] syzkaller0: entered promiscuous mode
[  539.777881][T30049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.781100][T30047] syzkaller0: entered allmulticast mode
[  539.810156][T30049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.067139][T29654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.119570][T11924] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1)
[  540.151938][T11924] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  540.152128][T11924] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:31: Failed to release dquot type 0
[  540.186035][T11924] loop6: lost filesystem error report for type 5 error -117
[  540.186375][T29654] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  540.211810][T29654] loop6: lost filesystem error report for type 5 error -117
[  540.212067][T29654] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  540.229322][T29654] loop6: lost filesystem error report for type 5 error -117
[  540.229421][T29654] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  540.248359][T29654] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  540.428151][T30068] netlink: 'syz.0.5761': attribute type 1 has an invalid length.
[  540.523525][T30068] 8021q: adding VLAN 0 to HW filter on device bond3
[  540.526561][T30070] siw: device registration error -23
[  540.639269][T30077] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  540.666828][T30076] macsec1: entered allmulticast mode
[  541.109129][T30082] set_capacity_and_notify: 8 callbacks suppressed
[  541.109147][T30082] loop4: detected capacity change from 0 to 512
[  541.134517][T30082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.5763: iget: bad extra_isize 90 (inode size 256)
[  541.150717][T30082] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  541.150861][T30082] EXT4-fs (loop4): Remounting filesystem read-only
[  541.160009][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  541.160045][    C1] EXT4-fs (loop4): initial error at time 1772179979: ext4_xattr_inode_iget:441: inode 11
[  541.160088][    C1] EXT4-fs (loop4): last error at time 1772179979: ext4_xattr_inode_iget:441: inode 11
[  541.182567][T30087] syzkaller0: entered promiscuous mode
[  541.198794][T30082] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -30)
[  541.209864][T30082] EXT4-fs (loop4): 1 orphan inode deleted
[  541.216176][T30082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.228574][T30087] syzkaller0: entered allmulticast mode
[  541.253561][T30082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.486606][T30101] loop0: detected capacity change from 0 to 512
[  541.694885][T30101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.771340][T30101] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  541.846321][T30106] loop8: detected capacity change from 0 to 128
[  541.861123][T18014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.007306][T30112] loop8: detected capacity change from 0 to 1024
[  542.092264][T30112] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  542.139946][T30122] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  542.146913][T30122] tipc: Enabled bearer <udp:s>, priority 10
[  542.185918][ T5980] IPVS: starting estimator thread 0...
[  542.202772][T30124] loop0: detected capacity change from 0 to 164
[  542.232113][T30124] iso9660: Bad value for 'check'
[  542.289497][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  542.578160][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  542.615484][T30131] ipvlan3: entered allmulticast mode
[  542.621367][T30131] dummy0: entered allmulticast mode
[  542.724659][T30133] xt_recent: Unsupported userspace flags (000000b1)
[  543.144750][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  543.175987][T30132] vxcan1 speed is unknown, defaulting to 1000
[  543.224494][T30132] dummy0 speed is unknown, defaulting to 1000
[  543.230908][T30132] lo speed is unknown, defaulting to 1000
[  543.380284][T30123] IPVS: using max 2496 ests per chain, 124800 per kthread
[  543.496519][T30139] syzkaller0: entered promiscuous mode
[  543.502176][T30139] syzkaller0: entered allmulticast mode
[  543.946314][T30153] __nla_validate_parse: 3 callbacks suppressed
[  543.946329][T30153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5784'.
[  544.083627][T30155] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5786'.
[  544.092696][T30155] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5786'.
[  544.101746][T30155] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5786'.
[  544.162713][T30165] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  544.167015][T30169] loop4: detected capacity change from 0 to 164
[  544.169315][T30165] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  544.196939][T30165] vhci_hcd vhci_hcd.0: Device attached
[  544.231091][T30172] loop8: detected capacity change from 0 to 128
[  544.262807][T30166] vhci_hcd: connection closed
[  544.263007][T22476] vhci_hcd vhci_hcd.6: stop threads
[  544.277939][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  544.286569][T22476] vhci_hcd vhci_hcd.6: release socket
[  544.292300][T22476] vhci_hcd vhci_hcd.6: disconnect device
[  544.389484][T30185] vxcan1 speed is unknown, defaulting to 1000
[  544.414299][T30186] loop8: detected capacity change from 0 to 1024
[  544.440058][T30186] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  544.460184][T30187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5793'.
[  544.505920][T30185] dummy0 speed is unknown, defaulting to 1000
[  544.512439][T30185] lo speed is unknown, defaulting to 1000
[  544.559224][T30194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.581490][T30194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.602344][T30196] loop8: detected capacity change from 0 to 512
[  544.610974][T30196] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  544.633522][T30196] EXT4-fs (loop8): 1 truncate cleaned up
[  544.654512][T30196] netlink: 'syz.8.5798': attribute type 4 has an invalid length.
[  544.719188][T30200] loop0: detected capacity change from 0 to 512
[  544.768770][T30200] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  544.842487][T30200] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  544.866333][T30207] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  544.920502][T30211] netlink: 'syz.6.5802': attribute type 2 has an invalid length.
[  544.920520][T30211] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5802'.
[  545.172991][T30232] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  545.218797][T30233] usb usb1: usbfs: process 30233 (syz.1.5810) did not claim interface 0 before use
[  545.337946][T30239] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  545.349432][   T28] kauditd_printk_skb: 62 callbacks suppressed
[  545.349447][   T28] audit: type=1326 audit(1772179983.406:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.4.5813" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0e54bc799 code=0x0
[  545.389867][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  545.408375][T30243] FAULT_INJECTION: forcing a failure.
[  545.408375][T30243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  545.458055][T30243] CPU: 0 UID: 0 PID: 30243 Comm: syz.6.5814 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  545.458088][T30243] Tainted: [W]=WARN
[  545.458096][T30243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  545.458109][T30243] Call Trace:
[  545.458231][T30243]  <TASK>
[  545.458240][T30243]  __dump_stack+0x1d/0x30
[  545.458288][T30243]  dump_stack_lvl+0x95/0xd0
[  545.458308][T30243]  dump_stack+0x15/0x1b
[  545.458381][T30243]  should_fail_ex+0x263/0x280
[  545.458406][T30243]  should_fail+0xb/0x20
[  545.458425][T30243]  should_fail_usercopy+0x1a/0x20
[  545.458507][T30243]  _copy_from_user+0x1c/0xb0
[  545.458545][T30243]  ___sys_sendmsg+0xc1/0x1e0
[  545.458580][T30243]  __x64_sys_sendmsg+0xd4/0x160
[  545.458614][T30243]  x64_sys_call+0x194c/0x3020
[  545.458654][T30243]  do_syscall_64+0x12c/0x370
[  545.458677][T30243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.458727][T30243] RIP: 0033:0x7fca8318c799
[  545.458744][T30243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  545.458761][T30243] RSP: 002b:00007fca81bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  545.458787][T30243] RAX: ffffffffffffffda RBX: 00007fca83405fa0 RCX: 00007fca8318c799
[  545.458803][T30243] RDX: 0000000024044094 RSI: 00002000000029c0 RDI: 0000000000000003
[  545.458872][T30243] RBP: 00007fca81bdf090 R08: 0000000000000000 R09: 0000000000000000
[  545.458886][T30243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.458900][T30243] R13: 00007fca83406038 R14: 00007fca83405fa0 R15: 00007ffd73f70cc8
[  545.458919][T30243]  </TASK>
[  545.644881][T30245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5813'.
[  545.806581][T30256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.838745][T30248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5813: bg 0: block 345: padding at end of block bitmap is not set
[  545.871483][T30256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.879524][T30248] EXT4-fs (loop4): Remounting filesystem read-only
[  545.895414][T11908] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  545.935670][T30264] 8021q: adding VLAN 0 to HW filter on device bond3
[  545.949881][T30264] bond_slave_0: entered promiscuous mode
[  545.955592][T30264] bond_slave_1: entered promiscuous mode
[  545.961809][T30264] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  545.993830][T30264] bond3: (slave macvlan2): making interface the new active one
[  546.004255][T30264] bond3: (slave macvlan2): Enslaving as an active interface with an up link
[  546.044496][T30269] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  546.062700][   T28] audit: type=1400 audit(1772179984.060:5573): avc:  denied  { create } for  pid=30273 comm="syz.1.5825" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  546.098432][   T28] audit: type=1400 audit(1772179984.088:5574): avc:  denied  { unlink } for  pid=23657 comm="syz-executor" name="file0" dev="tmpfs" ino=1822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  546.132917][T30269] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  546.133960][T30276] ipvlan3: entered allmulticast mode
[  546.171624][T30278] FAULT_INJECTION: forcing a failure.
[  546.171624][T30278] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  546.185420][T30278] CPU: 0 UID: 0 PID: 30278 Comm: syz.1.5827 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  546.185495][T30278] Tainted: [W]=WARN
[  546.185503][T30278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  546.185516][T30278] Call Trace:
[  546.185523][T30278]  <TASK>
[  546.185531][T30278]  __dump_stack+0x1d/0x30
[  546.185565][T30278]  dump_stack_lvl+0x95/0xd0
[  546.185590][T30278]  dump_stack+0x15/0x1b
[  546.185610][T30278]  should_fail_ex+0x263/0x280
[  546.185634][T30278]  should_fail_alloc_page+0xf2/0x100
[  546.185712][T30278]  __alloc_frozen_pages_noprof+0x108/0x360
[  546.185743][T30278]  alloc_pages_mpol+0xb3/0x260
[  546.185768][T30278]  vma_alloc_folio_noprof+0x1a9/0x300
[  546.185858][T30278]  handle_mm_fault+0x111f/0x3020
[  546.185885][T30278]  ? vma_start_read+0x1c7/0x2c0
[  546.185931][T30278]  do_user_addr_fault+0x62f/0x1050
[  546.186056][T30278]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  546.186083][T30278]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  546.186108][T30278]  ? trace_page_fault_user+0x1f/0xe0
[  546.186174][T30278]  exc_page_fault+0x62/0xa0
[  546.186301][T30278]  asm_exc_page_fault+0x26/0x30
[  546.186323][T30278] RIP: 0033:0x7f471a8bdf4b
[  546.186341][T30278] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  546.186358][T30278] RSP: 002b:00007f471944dfa0 EFLAGS: 00010206
[  546.186375][T30278] RAX: 0000000000000000 RBX: 00007f471ac75fa0 RCX: 0000000000000000
[  546.186390][T30278] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000040
[  546.186404][T30278] RBP: 00007f471944f090 R08: 0000000000000000 R09: 0000000000000000
[  546.186474][T30278] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001
[  546.186488][T30278] R13: 00007f471ac76038 R14: 00007f471ac75fa0 R15: 00007ffd4aa8b298
[  546.186507][T30278]  </TASK>
[  546.186518][T30278] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  546.489179][ T3393] IPVS: starting estimator thread 0...
[  546.501736][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  546.507025][T30298] set_capacity_and_notify: 7 callbacks suppressed
[  546.507042][T30298] loop4: detected capacity change from 0 to 1024
[  546.507616][T30298] EXT4-fs: inline encryption not supported
[  546.507945][T30298] EXT4-fs: Ignoring removed bh option
[  546.508260][T30302] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  546.553304][T30298] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  546.579152][T30298] EXT4-fs (loop4): Remounting filesystem read-only
[  546.619411][T30300] IPVS: using max 2592 ests per chain, 129600 per kthread
[  546.634504][T30301] bridge_slave_0: left allmulticast mode
[  546.634526][T30301] bridge_slave_0: left promiscuous mode
[  546.634656][T30301] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.637552][T30301] bridge_slave_1: left allmulticast mode
[  546.637572][T30301] bridge_slave_1: left promiscuous mode
[  546.637722][T30301] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.650247][T30301] bond0: (slave bond_slave_0): Releasing backup interface
[  546.657359][T30301] bond_slave_0: left promiscuous mode
[  546.665249][T30301] bond0: (slave bond_slave_1): Releasing backup interface
[  546.673928][T30301] bond_slave_1: left promiscuous mode
[  546.690018][T30301] team0: Port device team_slave_0 removed
[  546.694781][T30309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5834'.
[  546.706656][T30301] team0: Port device ������ removed
[  546.708141][T30301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.841435][T30301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.853186][T30301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.866542][T30301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.878147][T30301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  547.027721][T11908] bond3: (slave macvlan2): link status definitely down, disabling slave
[  547.036151][T11908] bond3: now running without any active interface!
[  547.576473][T30323] ipvlan2: entered allmulticast mode
[  547.582138][T30323] dummy0: entered allmulticast mode
[  547.613630][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  547.934162][T30326] xt_recent: Unsupported userspace flags (000000b1)
[  547.952681][T30332] loop8: detected capacity change from 0 to 128
[  547.961214][T30330] loop0: detected capacity change from 0 to 256
[  548.052194][T30325] vxcan1 speed is unknown, defaulting to 1000
[  548.087750][T30325] dummy0 speed is unknown, defaulting to 1000
[  548.094199][T30325] lo speed is unknown, defaulting to 1000
[  548.427154][T30332] FAULT_INJECTION: forcing a failure.
[  548.427154][T30332] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  548.454490][T30332] CPU: 1 UID: 0 PID: 30332 Comm: syz.8.5841 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  548.454562][T30332] Tainted: [W]=WARN
[  548.454569][T30332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  548.454580][T30332] Call Trace:
[  548.454586][T30332]  <TASK>
[  548.454624][T30332]  __dump_stack+0x1d/0x30
[  548.454648][T30332]  dump_stack_lvl+0x95/0xd0
[  548.454671][T30332]  dump_stack+0x15/0x1b
[  548.454692][T30332]  should_fail_ex+0x263/0x280
[  548.454749][T30332]  should_fail_alloc_page+0xf2/0x100
[  548.454791][T30332]  __alloc_frozen_pages_noprof+0x108/0x360
[  548.454822][T30332]  alloc_pages_mpol+0xb3/0x260
[  548.454851][T30332]  folio_alloc_noprof+0x96/0x150
[  548.454887][T30332]  filemap_alloc_folio_noprof+0x92/0x220
[  548.454976][T30332]  __filemap_get_folio_mpol+0x295/0x680
[  548.455049][T30332]  ? xas_load+0x413/0x430
[  548.455080][T30332]  cont_write_begin+0x5ca/0x970
[  548.455104][T30332]  ? mod_memcg_lruvec_state+0x1a1/0x290
[  548.455147][T30332]  ? strcmp+0x22/0x50
[  548.455218][T30332]  fat_write_begin+0x4f/0xe0
[  548.455245][T30332]  ? __pfx_fat_get_block+0x10/0x10
[  548.455292][T30332]  generic_perform_write+0x183/0x490
[  548.455324][T30332]  __generic_file_write_iter+0xec/0x120
[  548.455396][T30332]  generic_file_write_iter+0x8d/0x310
[  548.455440][T30332]  ? css_rstat_updated+0xbb/0x280
[  548.455463][T30332]  ? count_memcg_events+0x11f/0x210
[  548.455483][T30332]  ? __rcu_read_unlock+0x4e/0x70
[  548.455505][T30332]  ? avc_policy_seqno+0x15/0x30
[  548.455536][T30332]  ? selinux_file_permission+0x1f2/0x690
[  548.455561][T30332]  ? security_file_permission+0x22/0x70
[  548.455595][T30332]  aio_write+0x2fe/0x430
[  548.455678][T30332]  io_submit_one+0xbc1/0x1350
[  548.455734][T30332]  __se_sys_io_submit+0xfb/0x280
[  548.455764][T30332]  __x64_sys_io_submit+0x43/0x50
[  548.455796][T30332]  x64_sys_call+0x19d5/0x3020
[  548.455886][T30332]  do_syscall_64+0x12c/0x370
[  548.455909][T30332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.455932][T30332] RIP: 0033:0x7ff83d75c799
[  548.455958][T30332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.455977][T30332] RSP: 002b:00007ff83c1b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  548.456035][T30332] RAX: ffffffffffffffda RBX: 00007ff83d9d5fa0 RCX: 00007ff83d75c799
[  548.456126][T30332] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007ff83c18e000
[  548.456205][T30332] RBP: 00007ff83c1b7090 R08: 0000000000000000 R09: 0000000000000000
[  548.456217][T30332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.456228][T30332] R13: 00007ff83d9d6038 R14: 00007ff83d9d5fa0 R15: 00007ffc7ff1cd58
[  548.456249][T30332]  </TASK>
[  548.472049][T30344] loop4: detected capacity change from 0 to 512
[  548.482581][T30341] 8021q: adding VLAN 0 to HW filter on device bond1
[  548.503980][T30344] EXT4-fs: Ignoring removed nobh option
[  548.725249][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  548.736072][T30344] EXT4-fs: Ignoring removed bh option
[  548.779070][T30344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  548.822789][T30344] EXT4-fs (loop4): 1 truncate cleaned up
[  548.828769][T30344] EXT4-fs mount: 10 callbacks suppressed
[  548.828790][T30344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.881434][T30357] loop6: detected capacity change from 0 to 1024
[  548.883458][T30359] loop8: detected capacity change from 0 to 512
[  548.919716][T30357] EXT4-fs: inline encryption not supported
[  548.925647][T30357] EXT4-fs: Ignoring removed bh option
[  548.931477][T30344] FAULT_INJECTION: forcing a failure.
[  548.931477][T30344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  548.952932][T30344] CPU: 0 UID: 0 PID: 30344 Comm: syz.4.5844 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  548.952965][T30344] Tainted: [W]=WARN
[  548.953020][T30344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  548.953032][T30344] Call Trace:
[  548.953040][T30344]  <TASK>
[  548.953048][T30344]  __dump_stack+0x1d/0x30
[  548.953072][T30344]  dump_stack_lvl+0x95/0xd0
[  548.953134][T30344]  dump_stack+0x15/0x1b
[  548.953157][T30344]  should_fail_ex+0x263/0x280
[  548.953186][T30344]  should_fail+0xb/0x20
[  548.953229][T30344]  should_fail_usercopy+0x1a/0x20
[  548.953250][T30344]  _copy_from_user+0x1c/0xb0
[  548.953278][T30344]  vmemdup_user+0x5e/0xd0
[  548.953300][T30344]  path_setxattrat+0x1b1/0x310
[  548.953394][T30344]  __x64_sys_setxattr+0x6e/0x90
[  548.953419][T30344]  x64_sys_call+0x2ee2/0x3020
[  548.953446][T30344]  do_syscall_64+0x12c/0x370
[  548.953563][T30344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.953623][T30344] RIP: 0033:0x7ff0e54bc799
[  548.953638][T30344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.953656][T30344] RSP: 002b:00007ff0e3f0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  548.953741][T30344] RAX: ffffffffffffffda RBX: 00007ff0e5735fa0 RCX: 00007ff0e54bc799
[  548.953753][T30344] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240
[  548.953837][T30344] RBP: 00007ff0e3f0f090 R08: 0000000000000001 R09: 0000000000000000
[  548.953852][T30344] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  548.953866][T30344] R13: 00007ff0e5736038 R14: 00007ff0e5735fa0 R15: 00007ffe7e5eeda8
[  548.953930][T30344]  </TASK>
[  549.137542][T30359] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  549.156391][T30359] EXT4-fs (loop8): 1 truncate cleaned up
[  549.162597][T30359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  549.164104][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.178225][T30359] netlink: 'syz.8.5850': attribute type 4 has an invalid length.
[  549.192091][T30357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.223179][T30369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5852'.
[  549.266514][T30371] loop4: detected capacity change from 0 to 128
[  549.290215][T30372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.290479][T30372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.319788][T30371] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  549.334814][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.389166][T30357] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  549.430929][T30357] EXT4-fs (loop6): Remounting filesystem read-only
[  549.465314][T30371] loop4: detected capacity change from 0 to 1024
[  549.503792][T30371] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  549.525464][T29654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.586776][T30385] team0: Port device gtp0 added
[  549.592330][T30387] netlink: 'syz.6.5858': attribute type 2 has an invalid length.
[  549.702963][T30390] gretap0: entered promiscuous mode
[  549.837085][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  549.933461][T30396] syzkaller1: entered promiscuous mode
[  549.942327][T30396] syzkaller1: entered allmulticast mode
[  549.974502][T30394] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5863'.
[  549.989883][T30396] qrtr: Invalid version 26
[  550.268825][T30404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5865'.
[  550.338991][T30407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.370360][T30407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.720437][T30421] loop6: detected capacity change from 0 to 1024
[  550.745386][T30421] EXT4-fs: inline encryption not supported
[  550.751234][T30411] vxcan1 speed is unknown, defaulting to 1000
[  550.781376][T30421] EXT4-fs: Ignoring removed bh option
[  550.788355][T30411] dummy0 speed is unknown, defaulting to 1000
[  550.795482][T30411] lo speed is unknown, defaulting to 1000
[  550.803890][T30421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.857501][T30421] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  550.872631][T30421] EXT4-fs (loop6): Remounting filesystem read-only
[  550.894671][T30411] chnl_net:caif_netlink_parms(): no params data found
[  550.914379][T29654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.948871][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  550.960635][T30411] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.967772][T30411] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.974995][T30411] bridge_slave_0: entered allmulticast mode
[  550.981557][T30411] bridge_slave_0: entered promiscuous mode
[  550.988339][T30411] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.001875][T30411] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.009129][T30411] bridge_slave_1: entered allmulticast mode
[  551.015771][T30411] bridge_slave_1: entered promiscuous mode
[  551.041340][T30411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.052169][T30411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  551.081495][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5874'.
[  551.103891][T30437] loop6: detected capacity change from 0 to 1024
[  551.144217][T30411] team0: Port device team_slave_0 added
[  551.150981][T30411] team0: Port device team_slave_1 added
[  551.194780][T30437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  551.203462][T30437] System zones: 0-1, 3-8
[  551.220646][T30411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.245234][T30411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.276477][T30437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  551.327294][T30437] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.341339][T30411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.369872][T30411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.384261][T30411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.419347][T30411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.445885][T30461] can0: slcan on ttyS3.
[  551.526412][T30411] hsr_slave_0: entered promiscuous mode
[  551.541348][T30411] hsr_slave_1: entered promiscuous mode
[  551.557048][T30411] debugfs: 'hsr0' already exists in 'hsr'
[  551.567358][T30411] Cannot create hsr debugfs directory
[  551.704155][T30411] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.724744][T30411] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.796480][T30411] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.806350][T30411] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.852468][T29654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  551.869861][T30411] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.891477][T30484] IPv6: NLM_F_CREATE should be specified when creating new route
[  551.894099][T30411] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.060699][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  552.116069][T30411] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  552.127110][T30411] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.137645][T30491] loop8: detected capacity change from 0 to 512
[  552.145643][T30491] EXT4-fs: Ignoring removed i_version option
[  552.157527][T30491] EXT4-fs: Ignoring removed bh option
[  552.169695][T30491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.182300][T30491] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  552.229889][T30411] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  552.240111][T30411] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  552.285821][T30495] ipvlan2: entered allmulticast mode
[  552.291438][T30495] dummy0: entered allmulticast mode
[  552.319774][T30458] can0 (unregistered): slcan off ttyS3.
[  552.818041][T30411] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  553.172515][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  553.209155][T30411] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  553.250841][T30506] loop6: detected capacity change from 0 to 512
[  553.272893][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.288348][T30516] netlink: 'syz.1.5891': attribute type 7 has an invalid length.
[  553.302620][T30506] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  553.329628][T30519] can0: slcan on ttyS3.
[  553.366222][T30506] EXT4-fs (loop6): 1 truncate cleaned up
[  553.372422][T30506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.387204][T30506] netlink: 'syz.6.5890': attribute type 4 has an invalid length.
[  553.420979][T30411] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.440284][T30411] 8021q: adding VLAN 0 to HW filter on device team0
[  553.453058][T11922] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.460147][T11922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.481598][T30539] loop8: detected capacity change from 0 to 512
[  553.504261][T30539] EXT4-fs: Ignoring removed mblk_io_submit option
[  553.510718][T30539] ext2: Unknown parameter 'nodiscard..'
[  553.516733][T11922] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.523790][T11922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.598379][T29654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.638377][T30557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5896'.
[  553.667538][T30411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.879624][T30411] veth0_vlan: entered promiscuous mode
[  553.889584][T30581] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002
[  553.912571][T30411] veth1_vlan: entered promiscuous mode
[  553.930272][T30411] veth0_macvtap: entered promiscuous mode
[  553.938186][T30411] veth1_macvtap: entered promiscuous mode
[  553.951164][T30411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.963813][T30411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.982118][T22476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.993079][T22476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.014265][T22476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.024872][T22476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.061275][   T28] audit: type=1400 audit(1772179991.543:5575): avc:  denied  { write } for  pid=30411 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  554.089169][   T28] audit: type=1400 audit(1772179991.543:5576): avc:  denied  { open } for  pid=30411 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  554.127509][T30597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5903'.
[  554.145520][T30502] can0 (unregistered): slcan off ttyS3.
[  554.176649][T30603] netlink: 'syz.4.5904': attribute type 10 has an invalid length.
[  554.280291][T30619] loop0: detected capacity change from 0 to 512
[  554.286674][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  554.323014][T30619] EXT4-fs: dax option not supported
[  554.422627][T30619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30619 comm=syz.0.5906
[  554.736449][T30645] loop0: detected capacity change from 0 to 1024
[  554.797784][T30645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  554.810021][T30645] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  554.855747][T30644] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.5910: lblock 3 mapped to illegal pblock 3 (length 3)
[  554.870498][T30644] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  554.882848][T30644] EXT4-fs (loop0): This should not happen!! Data will be lost
[  554.882848][T30644] 
[  555.256166][T30653] loop4: detected capacity change from 0 to 2048
[  555.288260][T30653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.396198][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  555.473781][ T1919] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  555.546858][ T1919] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  555.577319][ T1919] EXT4-fs (loop0): This should not happen!! Data will be lost
[  555.577319][ T1919] 
[  555.603729][T30411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  555.648333][T30663] 9p: Unknown uid 00000000004294967295
[  555.749549][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  556.077991][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.078305][T30670] netlink: 'syz.0.5918': attribute type 13 has an invalid length.
[  556.509288][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  556.590865][T30670] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.598087][T30670] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.050356][T30670] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.088563][T30670] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.409295][T11924] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.480452][T11924] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.511558][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5917'.
[  557.534076][T11924] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.576970][T11924] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  557.619815][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  557.660779][   T28] audit: type=1326 audit(1772179994.911:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30678 comm="syz.6.5921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca8318c799 code=0x0
[  557.836428][T30694] random: crng reseeded on system resumption
[  558.080473][   T28] audit: type=1326 audit(1772179995.313:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  558.300196][   T28] audit: type=1326 audit(1772179995.341:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  558.356827][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5927'.
[  558.385622][T30705] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  558.463177][T30707] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.5928'.
[  558.720965][   T28] audit: type=1326 audit(1772179995.884:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  558.731657][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  558.790515][T30716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.807764][   T28] audit: type=1326 audit(1772179995.884:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  558.826460][T30714] syzkaller0: entered promiscuous mode
[  558.838956][T30716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.849406][T30714] syzkaller0: entered allmulticast mode
[  558.855453][   T28] audit: type=1326 audit(1772179995.884:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  558.911345][   T28] audit: type=1326 audit(1772179995.884:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  558.956258][   T28] audit: type=1326 audit(1772179995.884:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.8.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83d75c799 code=0x7fc00000
[  559.043097][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5932'.
[  559.071387][T30720] veth0_to_bond: entered allmulticast mode
[  559.092646][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5932'.
[  559.232658][T30724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=30724 comm=syz.8.5933
[  559.487663][T30732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=30732 comm=syz.4.5934
[  559.843457][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  559.875779][T30734] loop6: detected capacity change from 0 to 128
[  559.885129][T30734] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  559.923694][T30734] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  559.997150][T11922] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  560.105303][T30741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5938'.
[  560.128872][T30741] netlink: 'syz.8.5938': attribute type 30 has an invalid length.
[  560.173176][ T1919] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  560.192878][T30739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5938'.
[  560.236291][T30739] netlink: 'syz.8.5938': attribute type 30 has an invalid length.
[  560.281948][ T1919] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  560.325367][ T1919] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  560.366722][ T1919] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  560.855747][T30760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5945'.
[  560.864830][T30760] netlink: 196 bytes leftover after parsing attributes in process `syz.8.5945'.
[  560.874168][T30760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5945'.
[  560.955378][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  561.013279][T30763] loop4: detected capacity change from 0 to 128
[  561.023332][T30763] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  561.126135][T30763] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  561.173649][   T28] kauditd_printk_skb: 61 callbacks suppressed
[  561.173670][   T28] audit: type=1400 audit(1772179998.194:5646): avc:  denied  { watch watch_reads } for  pid=30756 comm="syz.4.5944" path="/120/bus" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  561.395241][T30773] FAULT_INJECTION: forcing a failure.
[  561.395241][T30773] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.408551][T30773] CPU: 0 UID: 0 PID: 30773 Comm: syz.6.5950 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  561.408581][T30773] Tainted: [W]=WARN
[  561.408588][T30773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  561.408620][T30773] Call Trace:
[  561.408626][T30773]  <TASK>
[  561.408709][T30773]  __dump_stack+0x1d/0x30
[  561.408733][T30773]  dump_stack_lvl+0x95/0xd0
[  561.408753][T30773]  dump_stack+0x15/0x1b
[  561.408773][T30773]  should_fail_ex+0x263/0x280
[  561.408792][T30773]  should_fail+0xb/0x20
[  561.408807][T30773]  should_fail_usercopy+0x1a/0x20
[  561.408828][T30773]  _copy_from_user+0x1c/0xb0
[  561.408874][T30773]  ___sys_sendmsg+0xc1/0x1e0
[  561.408969][T30773]  __x64_sys_sendmsg+0xd4/0x160
[  561.409001][T30773]  x64_sys_call+0x194c/0x3020
[  561.409030][T30773]  do_syscall_64+0x12c/0x370
[  561.409049][T30773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.409069][T30773] RIP: 0033:0x7fca8318c799
[  561.409141][T30773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  561.409157][T30773] RSP: 002b:00007fca81bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  561.409175][T30773] RAX: ffffffffffffffda RBX: 00007fca83405fa0 RCX: 00007fca8318c799
[  561.409220][T30773] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  561.409232][T30773] RBP: 00007fca81bdf090 R08: 0000000000000000 R09: 0000000000000000
[  561.409243][T30773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.409254][T30773] R13: 00007fca83406038 R14: 00007fca83405fa0 R15: 00007ffd73f70cc8
[  561.409278][T30773]  </TASK>
[  561.588374][T30775] loop6: detected capacity change from 0 to 128
[  561.598395][T30775] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  561.610943][T30775] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  561.630110][T29654] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  561.842490][T30793] loop4: detected capacity change from 0 to 2048
[  562.067129][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  562.168945][T30793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.325703][T30812] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  562.447059][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.816217][T30822] netlink: 'syz.6.5969': attribute type 1 has an invalid length.
[  562.863248][T30818] autofs4:pid:30818:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.32), cmd(0xc0189374)
[  562.889320][T30818] autofs4:pid:30818:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  563.178936][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  563.341242][T30842] loop4: detected capacity change from 0 to 1024
[  563.617730][T30842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  563.663814][T30852] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  563.694543][T30852] SELinux: failed to load policy
[  563.695121][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.762061][T30864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.770792][T30864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.836133][   T28] audit: type=1326 audit(1772180000.692:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  563.860200][   T28] audit: type=1326 audit(1772180000.692:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  563.884509][   T28] audit: type=1326 audit(1772180000.692:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  563.909177][   T28] audit: type=1326 audit(1772180000.692:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  563.940907][   T28] audit: type=1326 audit(1772180000.692:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  563.980625][T30867] vxcan1 speed is unknown, defaulting to 1000
[  563.991434][   T28] audit: type=1326 audit(1772180000.720:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  564.047588][   T28] audit: type=1326 audit(1772180000.720:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  564.093355][   T28] audit: type=1326 audit(1772180000.720:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e54bc799 code=0x7ffc0000
[  564.145777][   T28] audit: type=1326 audit(1772180000.738:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30863 comm="syz.4.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0e547cfce code=0x7ffc0000
[  564.180426][T30867] dummy0 speed is unknown, defaulting to 1000
[  564.187148][T30867] lo speed is unknown, defaulting to 1000
[  564.290789][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  564.395152][T30869] vxcan1 speed is unknown, defaulting to 1000
[  564.913878][T30903] loop8: detected capacity change from 0 to 256
[  564.971772][T30903] vfat: Unknown parameter ''
[  565.012147][T30869] dummy0 speed is unknown, defaulting to 1000
[  565.069317][T30869] lo speed is unknown, defaulting to 1000
[  565.192505][T30910] loop0: detected capacity change from 0 to 128
[  565.286663][T30912] loop8: detected capacity change from 0 to 2048
[  565.402717][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  565.418254][T30869] chnl_net:caif_netlink_parms(): no params data found
[  565.460452][T30912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.573774][T30920] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  565.637835][T11911] unregister_netdevice: waiting for bond2 to become free. Usage count = 2
[  565.772835][T30869] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.958260][T30869] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.969564][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.989620][T30869] bridge_slave_0: entered allmulticast mode
[  566.008300][T30869] bridge_slave_0: entered promiscuous mode
[  566.040452][T30933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.041711][T30869] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.049035][T30933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.080813][T30869] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.095653][T30869] bridge_slave_1: entered allmulticast mode
[  566.102234][T30869] bridge_slave_1: entered promiscuous mode
[  566.120998][T30869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.131590][T30869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.153504][T30869] team0: Port device team_slave_0 added
[  566.168778][T30869] team0: Port device team_slave_1 added
[  566.188259][T30869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.195725][T30869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.224737][T30939] loop0: detected capacity change from 0 to 256
[  566.231085][T30869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.242447][T30869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.270683][T30869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.296959][T30869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.337139][T30869] hsr_slave_0: entered promiscuous mode
[  566.357352][T30869] hsr_slave_1: entered promiscuous mode
[  566.363374][T30869] debugfs: 'hsr0' already exists in 'hsr'
[  566.369302][T30869] Cannot create hsr debugfs directory
[  566.401834][T30945] tipc: Started in network mode
[  566.407373][T30945] tipc: Node identity 4, cluster identity 4711
[  566.413655][T30945] tipc: Node number set to 4
[  566.470947][T30958] loop4: detected capacity change from 0 to 128
[  566.495238][T30869] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.514436][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  566.538813][T30869] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.559331][T30958] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  566.702376][T30869] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.722203][T30966] loop8: detected capacity change from 0 to 128
[  566.756193][T30958] loop4: detected capacity change from 0 to 1024
[  566.817763][T30869] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.858654][T30958] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  566.900014][T30966] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  566.973092][T30869] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  567.057804][T30966] loop8: detected capacity change from 0 to 1024
[  567.068447][T30869] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  567.082350][T30966] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  567.095168][T30869] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  567.105586][T30869] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  567.186285][T30977] loop4: detected capacity change from 0 to 256
[  567.292359][T30977] FAT-fs (loop4): Directory bread(block 64) failed
[  567.299092][T30977] FAT-fs (loop4): Directory bread(block 65) failed
[  567.305760][T30977] FAT-fs (loop4): Directory bread(block 66) failed
[  567.312404][T30977] FAT-fs (loop4): Directory bread(block 67) failed
[  567.319160][T30977] FAT-fs (loop4): Directory bread(block 68) failed
[  567.325664][T30977] FAT-fs (loop4): Directory bread(block 69) failed
[  567.332244][T30977] FAT-fs (loop4): Directory bread(block 70) failed
[  567.338818][T30977] FAT-fs (loop4): Directory bread(block 71) failed
[  567.345333][T30977] FAT-fs (loop4): Directory bread(block 72) failed
[  567.351966][T30977] FAT-fs (loop4): Directory bread(block 73) failed
[  567.430006][T30979] loop8: detected capacity change from 0 to 128
[  567.523835][T30869] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.626286][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  567.764468][T30869] 8021q: adding VLAN 0 to HW filter on device team0
[  567.996171][T30990] loop0: detected capacity change from 0 to 512
[  568.054779][T11907] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.061845][T11907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  568.103286][T30990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.119963][T11907] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.121417][T30990] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  568.127059][T11907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.143637][T30979] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  568.162226][T30869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  568.162250][T30869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  568.420017][T30979] loop8: detected capacity change from 0 to 1024
[  568.467351][T30979] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  568.738102][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  568.826356][T30411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.869845][T30869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.107514][T30869] veth0_vlan: entered promiscuous mode
[  569.125077][T30869] veth1_vlan: entered promiscuous mode
[  569.162483][T30869] veth0_macvtap: entered promiscuous mode
[  569.193214][T30869] veth1_macvtap: entered promiscuous mode
[  569.219347][T30869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  569.241292][T30869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  569.241851][T31032] xt_hashlimit: size too large, truncated to 1048576
[  569.266990][T31032] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[  569.270157][T11908] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.293640][T11908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  569.299475][T31032] iso9660: Unknown parameter '�#O���S/>`������6�*u�;> O'
[  569.320069][T11908] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.325677][T31035] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe
[  569.342374][T11908] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  569.350615][T31032] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  569.442168][T31044] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  569.489333][T31040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  569.507601][T31048] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  569.530917][T31048] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  569.548153][T31048] EXT4-fs (loop4): orphan cleanup on readonly fs
[  569.555583][T30869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.563609][T31048] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.6030: Invalid inode table block 0 in block_group 0
[  569.577825][T31048] loop4: lost filesystem error report for type 5 error -117
[  569.577943][T31048] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  569.585388][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  569.585405][    C1] EXT4-fs (loop4): initial error at time 1772180006: __ext4_get_inode_loc:4782
[  569.585425][    C1] EXT4-fs (loop4): last error at time 1772180006: __ext4_get_inode_loc:4782
[  569.721607][T31048] loop4: lost filesystem error report for type 5 error -117
[  569.735493][T31050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  569.760696][T31048] EXT4-fs error (device loop4): ext4_quota_write:7390: inode #3: comm syz.4.6030: mark_inode_dirty error
[  569.763053][T31050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.786328][T31050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  569.798391][T31048] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  569.798756][T31048] __quota_error: 24 callbacks suppressed
[  569.798770][T31048] Quota error (device loop4): write_blk: dquota write failed
[  569.829204][T31048] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  569.847810][T31048] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6030: Failed to acquire dquot type 0
[  569.859283][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  570.273450][T31048] loop4: lost filesystem error report for type 5 error -117
[  570.320302][T31050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.412286][T31060] __nla_validate_parse: 2 callbacks suppressed
[  570.412324][T31060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6034'.
[  570.489280][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6034'.
[  570.530424][T31050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.617429][T31050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  570.664427][T31061] 8021q: adding VLAN 0 to HW filter on device batadv1
[  570.793297][T31048] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.6030: Invalid inode table block 0 in block_group 0
[  570.857033][T31050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.865599][T31048] loop4: lost filesystem error report for type 5 error -117
[  570.961735][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  570.982146][T31048] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  571.017319][T31050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.063239][T31048] loop4: lost filesystem error report for type 5 error -117
[  571.063555][T31048] EXT4-fs error (device loop4): ext4_ext_truncate:4528: inode #15: comm syz.4.6030: mark_inode_dirty error
[  571.140203][T31050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  571.328089][T31048] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  571.329079][T31048] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.6030: Invalid inode table block 0 in block_group 0
[  571.390945][T31050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  571.444694][T31050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.484596][T31048] loop4: lost filesystem error report for type 5 error -117
[  571.484718][T31048] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  571.516120][T31050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  571.529659][T31071] netlink: 792 bytes leftover after parsing attributes in process `syz.8.6037'.
[  571.541755][T31071] netlink: 792 bytes leftover after parsing attributes in process `syz.8.6037'.
[  571.552212][T31048] loop4: lost filesystem error report for type 5 error -117
[  571.552432][T31048] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  571.580427][T31071] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6037'.
[  571.589767][T31048] loop4: lost filesystem error report for type 5 error -117
[  571.589971][T31048] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.6030: Invalid inode table block 0 in block_group 0
[  571.650537][T31048] loop4: lost filesystem error report for type 5 error -117
[  571.650664][T31048] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  571.677976][T31048] loop4: lost filesystem error report for type 5 error -117
[  571.678070][T31048] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.6030: mark_inode_dirty error
[  571.715169][T11924] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  571.728592][T31048] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  571.728770][T11924] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  571.746797][T31048] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  571.746991][T11924] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  571.764147][T31048] EXT4-fs (loop4): 1 truncate cleaned up
[  571.767173][T11924] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  571.778491][T31048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  571.787926][T11924] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  571.799286][T11924] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  571.814799][T11924] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  571.833732][T31077] set_capacity_and_notify: 5 callbacks suppressed
[  571.833792][T11924] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  571.833748][T31077] loop8: detected capacity change from 0 to 164
[  571.834753][T31077] iso9660: Unknown parameter ''
[  571.854023][T11924] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  571.892080][T11924] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  571.900274][T11924] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  571.926568][T11924] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  571.997253][T28117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.073540][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  572.199573][   T28] audit: type=1400 audit(1772180008.512:5680): avc:  denied  { read } for  pid=31094 comm="syz.0.6044" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  572.262070][T31098] loop4: detected capacity change from 0 to 256
[  572.283338][T31095] loop0: detected capacity change from 0 to 2048
[  572.558878][T31098] FAT-fs (loop4): Directory bread(block 64) failed
[  572.565490][T31098] FAT-fs (loop4): Directory bread(block 65) failed
[  572.572201][T31098] FAT-fs (loop4): Directory bread(block 66) failed
[  572.578763][T31098] FAT-fs (loop4): Directory bread(block 67) failed
[  572.585431][T31098] FAT-fs (loop4): Directory bread(block 68) failed
[  572.592060][T31098] FAT-fs (loop4): Directory bread(block 69) failed
[  572.598809][T31098] FAT-fs (loop4): Directory bread(block 70) failed
[  572.605509][T31098] FAT-fs (loop4): Directory bread(block 71) failed
[  572.612057][T31098] FAT-fs (loop4): Directory bread(block 72) failed
[  572.618646][T31098] FAT-fs (loop4): Directory bread(block 73) failed
[  572.670952][   T28] audit: type=1400 audit(1772180008.951:5681): avc:  denied  { read } for  pid=31084 comm="syz.4.6041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  572.697200][   T28] audit: type=1400 audit(1772180008.979:5682): avc:  denied  { getopt } for  pid=31084 comm="syz.4.6041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  572.730398][T31104] Cannot find add_set index 0 as target
[  572.730607][T31106] loop6: detected capacity change from 0 to 512
[  572.759027][T31106] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  572.770180][T31106] EXT4-fs (loop6): orphan cleanup on readonly fs
[  572.786489][T31106] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7
[  572.797314][T31106] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  572.807325][T31106] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6048: Failed to acquire dquot type 1
[  572.810996][T31111] loop0: detected capacity change from 0 to 1024
[  572.832523][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  572.838989][    C0] EXT4-fs (loop6): initial error at time 1772180009: ext4_acquire_dquot:7001
[  572.847780][    C0] EXT4-fs (loop6): last error at time 1772180009: ext4_acquire_dquot:7001
[  572.855938][T31111] EXT4-fs: inline encryption not supported
[  572.857310][T31106] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.6048: corrupted inode contents
[  572.862174][T31111] EXT4-fs: Ignoring removed bh option
[  572.877990][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  572.887156][T31106] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.6048: mark_inode_dirty error
[  572.908118][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  572.908378][T31106] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.6048: corrupted inode contents
[  572.974981][T31111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.989165][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  572.989397][T31106] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.6048: mark_inode_dirty error
[  573.045521][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  573.047588][T31106] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.6048: corrupted inode contents
[  573.079640][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  573.080179][T31106] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  573.185688][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  573.252581][T31106] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.6048: corrupted inode contents
[  573.335325][T30411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.351580][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  573.358086][T31106] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.6048: mark_inode_dirty error
[  573.452683][T31106] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  573.486332][T31106] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  573.517188][T31106] EXT4-fs (loop6): 1 truncate cleaned up
[  573.525861][T31106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback.
[  573.548200][T31128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.557204][T31128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.842536][T31131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6055'.
[  573.868770][T31133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6056'.
[  573.902224][T31133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6056'.
[  573.939864][T31135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'.
[  573.949017][T31135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6057'.
[  573.969990][T31135] netlink: 'syz.1.6057': attribute type 13 has an invalid length.
[  573.989175][T31135] netlink: 'syz.1.6057': attribute type 12 has an invalid length.
[  574.006454][T31135] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  574.019066][T31135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  574.077349][   T28] audit: type=1326 audit(1772180010.270:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31134 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471a9fc799 code=0x7ffc0000
[  574.111699][T31139] loop8: detected capacity change from 0 to 128
[  574.122867][T30869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-0000002a0000.
[  574.123421][   T28] audit: type=1326 audit(1772180010.270:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31134 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471a9fc799 code=0x7ffc0000
[  574.183972][   T28] audit: type=1326 audit(1772180010.298:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31134 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471a9fc799 code=0x7ffc0000
[  574.260746][T31147] loop0: detected capacity change from 0 to 128
[  574.297547][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  574.318947][T31149] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  574.517180][T31158] tmpfs: Bad value for 'mpol'
[  574.591778][T31162] loop4: detected capacity change from 0 to 256
[  574.615751][T31159] loop0: detected capacity change from 0 to 1024
[  574.629638][T31159] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  574.643795][T31145] loop6: detected capacity change from 0 to 32768
[  574.665470][T31139] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  574.695946][ T5147]  loop6: p1 p2 p3 < p5 p6 >
[  574.696734][ T5147] loop6: p2 size 16775168 extends beyond EOD, truncated
[  574.699482][ T5147] loop6: p5 start 4294970168 is beyond EOD, truncated
[  574.704794][T31145]  loop6: p1 p2 p3 < p5 p6 >
[  574.705567][T31145] loop6: p2 size 16775168 extends beyond EOD, truncated
[  574.711628][T31145] loop6: p5 start 4294970168 is beyond EOD, truncated
[  574.763609][T31165] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  574.772294][T31165] EXT4-fs (loop0): 1 truncate cleaned up
[  574.772803][T31165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.775585][T31165] netlink: 'syz.0.6068': attribute type 4 has an invalid length.
[  574.905442][T30411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.238528][T31178] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  575.409004][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  575.593783][T31192] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6076: invalid indirect mapped block 4294967295 (level 1)
[  575.654958][T31192] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  575.655172][T31192] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6076: invalid indirect mapped block 4294967295 (level 1)
[  575.678267][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  575.678287][    C0] EXT4-fs (loop6): initial error at time 1772180011: ext4_free_branches:1023: inode 11
[  575.678316][    C0] EXT4-fs (loop6): last error at time 1772180011: ext4_free_branches:1023: inode 11
[  575.711439][T31196] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  575.736934][T31192] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  575.737168][T31192] EXT4-fs (loop6): 2 truncates cleaned up
[  575.783582][T31192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  575.863597][T31203] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  575.875529][T31203] EXT4-fs (loop8): 1 truncate cleaned up
[  575.881836][T31203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.932375][T31206] __nla_validate_parse: 2 callbacks suppressed
[  575.932392][T31206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6076'.
[  575.970665][T31195] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  575.996952][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.069046][T31206] bond1: option primary_reselect: invalid value (5)
[  576.096888][T31206] bond1 (unregistering): Released all slaves
[  576.150004][T31217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6083'.
[  576.160250][T31217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6083'.
[  576.229315][T31219] vxcan1 speed is unknown, defaulting to 1000
[  576.283034][T31219] dummy0 speed is unknown, defaulting to 1000
[  576.290156][T30869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.335768][T31219] lo speed is unknown, defaulting to 1000
[  576.372721][T31235] EXT4-fs: Ignoring removed orlov option
[  576.409715][T31236] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  576.410214][T31235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.445869][T31236] EXT4-fs (loop0): 1 truncate cleaned up
[  576.455033][T31235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6086'.
[  576.474933][T31236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.490191][T31238] vxcan1 speed is unknown, defaulting to 1000
[  576.510406][T30869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.520810][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  576.594163][ T5980] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  576.615476][ T5980] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  576.629181][T31238] dummy0 speed is unknown, defaulting to 1000
[  576.638859][T31238] lo speed is unknown, defaulting to 1000
[  576.670281][T31245] fido_id[31245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  576.693434][T30411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.756763][T31254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6095'.
[  576.767135][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6095'.
[  576.784118][T31258] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  576.881734][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  576.881775][   T28] audit: type=1400 audit(1772180012.889:5700): avc:  denied  { mounton } for  pid=31257 comm="syz.4.6097" path="/150/bus" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  576.910418][T31258] cgroup: name respecified
[  576.957399][T31269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6102'.
[  576.968326][T11913] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  576.993264][T31270] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  577.026980][T31277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  577.033614][T31277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  577.044311][   T28] audit: type=1400 audit(1772180013.039:5701): avc:  denied  { bind } for  pid=31276 comm="syz.1.6106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  577.048030][T31270] EXT4-fs (loop8): 1 truncate cleaned up
[  577.070621][T31277] vhci_hcd vhci_hcd.0: Device attached
[  577.094772][T31282] can0: slcan on ttyS3.
[  577.100599][T31270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  577.115847][T31278] vhci_hcd: connection closed
[  577.117197][T31286] netlink: 'syz.6.6107': attribute type 2 has an invalid length.
[  577.121332][T11906] vhci_hcd vhci_hcd.0: stop threads
[  577.122290][T31286] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6107'.
[  577.147068][T11906] vhci_hcd vhci_hcd.0: release socket
[  577.164040][T11906] vhci_hcd vhci_hcd.0: disconnect device
[  577.201931][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6110'.
[  577.212689][T31297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6110'.
[  577.226811][T31294] set_capacity_and_notify: 16 callbacks suppressed
[  577.226829][T31294] loop6: detected capacity change from 0 to 8192
[  577.270818][T26538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.316852][T30869] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  577.330885][T30869] FAT-fs (loop6): Filesystem has been set read-only
[  577.339784][T31311] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  577.388659][T31311] bridge0: entered promiscuous mode
[  577.493602][T31332] netlink: 'syz.1.6118': attribute type 5 has an invalid length.
[  577.523688][T31332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=31332 comm=syz.1.6118
[  577.545771][T31335] ==================================================================
[  577.553860][T31335] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  577.561399][T31335] 
[  577.563720][T31335] write to 0xffff888115549a00 of 8 bytes by task 31331 on cpu 0:
[  577.571435][T31335]  mas_wr_store_entry+0x20c5/0x2ed0
[  577.576646][T31335]  mas_store_prealloc+0x72e/0xa70
[  577.581672][T31335]  vma_complete+0x3c7/0x850
[  577.586166][T31335]  __split_vma+0x593/0x640
[  577.590567][T31335]  vma_modify+0xb2e/0xd00
[  577.594892][T31335]  vma_modify_flags+0x182/0x210
[  577.599734][T31335]  mprotect_fixup+0x312/0x5d0
[  577.604405][T31335]  do_mprotect_pkey+0x67b/0x920
[  577.609241][T31335]  __x64_sys_mprotect+0x48/0x60
[  577.614085][T31335]  x64_sys_call+0x2768/0x3020
[  577.618751][T31335]  do_syscall_64+0x12c/0x370
[  577.623324][T31335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.629206][T31335] 
[  577.631514][T31335] read to 0xffff888115549a00 of 8 bytes by task 31335 on cpu 1:
[  577.639124][T31335]  mas_state_walk+0x485/0x650
[  577.643793][T31335]  mas_walk+0x60/0x150
[  577.647853][T31335]  lock_vma_under_rcu+0xc9/0x210
[  577.652775][T31335]  do_user_addr_fault+0x232/0x1050
[  577.657882][T31335]  exc_page_fault+0x62/0xa0
[  577.662376][T31335]  asm_exc_page_fault+0x26/0x30
[  577.667239][T31335] 
[  577.669544][T31335] value changed: 0xffff888115549b0e -> 0xffff888115549a00
[  577.676630][T31335] 
[  577.678937][T31335] Reported by Kernel Concurrency Sanitizer on:
[  577.685073][T31335] CPU: 1 UID: 0 PID: 31335 Comm: syz.1.6118 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  577.695994][T31335] Tainted: [W]=WARN
[  577.699778][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  577.709815][T31335] ==================================================================
[  577.718131][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  577.750570][   T28] audit: type=1326 audit(1772180013.703:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31333 comm="syz.6.6119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a375c799 code=0x0
[  577.942742][T31274] can0 (unregistered): slcan off ttyS3.
[  578.830031][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  579.952570][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  581.053698][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  582.165545][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  583.277324][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  584.389173][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  585.501016][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  586.612870][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available