last executing test programs:

8m56.992530432s ago: executing program 0 (id=347):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000d40)=0xffff0c3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x5)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x4000423)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000ffff27a87000fedb000000000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000005000128009000100766c616e0000000040000280340003800c00010001000000008000000c000100f1ffffff0c0000000c000100f1000000050000000c0001000100000040000000060001000400000008000500", @ANYRES32=r6, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
syz_usb_connect$uac2(0xe, 0xc6, &(0x7f0000000940)=ANY=[@ANYBLOB="12010003000000201e0400304000010203010902b40003015ee001080b01000108200509040000000101200009240180000610000007240c060d060d09040100000102200009040101010102200009240201f90680ff0709050109000077000904020000010220000904020101010220000c2402010501f50750cd8abd0924020103404d02060d2402010e030dd0dccba90bc80f24020107048d04aba7b186ef4ffe0a240202030020730605090582099f07807f04082501000f040800"/198], &(0x7f0000000b80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xb7, 0x0, 0x4, 0x40, 0xc}, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000edeae165e637b61ec14e5597e883a194dedd84396169505350f2beb7ad4131398f57cf434b44fe695b4fa982106aa7efab2538a0d5"], 0x8, [{0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="2d03775ac79fc86365e2054c4668c95ced417c2e183a460bdb67a1cd9c658f87897371cbad12b1c073c2160eafa253d6ec642ebe87687572f1a0f1b570de00ba12abe0b33d3ae62a24b0f1d323c6cd395a436658aea7a4aed10cedf0ddaf5c8d20de458a524b4c317238d70900c8cb6adc87"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="360366a6214fae7e2b9c988a3de49ffd57c9a2e0f935b6cf814781ae0f2dce6219be90a362ea3637aa4503aa00"/54]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100a}}, {0xba, &(0x7f0000000a40)=@string={0xba, 0x3, "34cf112e1690b31e7b4702c051dfa52daa3c661d1613b757c00819a0acea1a3f796a1eb6e2ec65edade1f4f1d322e48cb5f8d8b5a338e3a5728952242d2752e1acc866334d03e508be53fd08b0b44a97de78d43a3989aaef36fcb245e01180991b29978481f3076f7141b8c489ad00bb017ecbaa96d1ff356962575a63e5dec897ad02698704ec2a784fc3fdccfa91d09550cc96d378847f18e679aee8a0ff85bc2a6003da8b0a9d856fc30f5476053d3274f75d01dba6a5"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x459}}, {0xcc, &(0x7f0000000d80)=@string={0xcc, 0x3, "1a5e6c4de73b114bbf1bd1a8eb484eaad6ebb4d75fcfd11801f4ddc5b98a3a6cacd96439589b563f2affaef43b2846a3a503b9966039e2fe43e1a93ff1e275cb585a8271dc32ad3dd7035cd6ebeacdb426a0a31ba295df33289007b8a496f53c78f47deda03e2b0f4e9ed576d67fa2bad4c156229af007801c5de52229d1afc586fbab262564a53b36475722877be7df696e728f21c139b2fe005bbceb7cc1cdf90cec61630e783ea698755218907050526b1a1e05a4baa59eb54b33fd732f48dc3e07a0ed3496dbb2fe"}}, {0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="7603303bf1ee3fd34c32942ca81ad793e7ab6c079a91e00176a95a5e4508b0ffae608151b2b83c78eeecbcc5a7fec70b5bed170af61971fe693670eedcfb0c6595a1e794b8c4caa55a2f3203af17968f5cdaabfd66d3eb477e76fe04828512c3f6c98a8730c06d8169ca4884a08f810826b23782e500"]}]})
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_128={{0x304}, "00020600", "3d966b820b67cdbf176dc75c8832af4b", '\x00\x00\x00@', "000000000100"}, 0x28)
syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000240))
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99dfe25366db886525ab80ef54836d05b03d0b4bfe7a6a614713e8c4de", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba2187907201a5edf75900ea24c56f4b2f453054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2d4e9dd17699a099d14f5ee5b3932061f3b51f72d3ad7b5627838", 0xe2}, {&(0x7f00000007c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320ea34f07", 0xd1}], 0x5}, 0xc0d0)

8m55.956245744s ago: executing program 0 (id=352):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
socket$key(0xf, 0x3, 0x2)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)

8m55.546819274s ago: executing program 0 (id=355):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
r1 = io_uring_setup(0x1b1c, &(0x7f0000000100)={0x0, 0x5ba4, 0x400, 0x2, 0x3d6})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000000, 0x10, r1, 0x0)

8m55.451762669s ago: executing program 0 (id=356):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x4, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0xa}]}, 0x40}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x5c8, 0x460, 0x460, 0xffffffff, 0x350, 0x350, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, &(0x7f0000000440), {[{{@uncond, 0x0, 0x1e8, 0x220, 0x0, {}, [@common=@addrtype={{0x30}, {0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e24, 0x4e23], [0x0, 0x8, 0xb49, 0x2, 0x5, 0x1000, 0x3e, 0x6, 0x4, 0xff, 0x7, 0x3, 0xfffffff8, 0x1400, 0x4, 0xfffffff8, 0x8, 0x6, 0x200, 0x4a, 0xfffffe01, 0x45d, 0x5, 0x6, 0x2, 0x2, 0x7000000, 0x10001, 0xc, 0x2, 0x13cfcc84, 0x7ca1, 0x6, 0x5, 0x2, 0x2, 0x5a, 0x3, 0x8, 0x7fffffff, 0x9, 0x401, 0xfffff71a, 0x63, 0x100, 0x44d6, 0xf05c, 0x6, 0xe, 0xfffffffd, 0x8, 0x4, 0xe, 0x0, 0x1, 0x3, 0xc, 0x7, 0x2, 0x6, 0x80, 0x7f, 0x9, 0x3c], 0x5, [{0x40, 0xff}, {0x80, 0x5, 0x1}, {0x7f, 0xe, 0x8}, {0xd6, 0x9, 0x1}], 0x2, 0x2, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @private=0xa010101, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x1, 0x5, 0xf303, 0x38f7, 0x6, 0x2, 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x18, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @gre_key=0x8000, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xe, 0x3, 0x1}}, @common=@icmp={{0x28}, {0x8, 'R\t'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x13, @ipv6=@mcast2, @ipv4=@loopback, @port=0x4e23, @icmp_id=0x68}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syz_tun\x00', 'wg0\x00', {}, {0xff}, 0x88, 0x0, 0x40}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xa, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x64, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x628)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @loopback]}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1)

8m55.069725758s ago: executing program 0 (id=360):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=ANY=[@ANYRESOCT=0x0], 0x15c4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x4040040}, 0x8052)
io_setup(0x2, &(0x7f0000000040))
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)=0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8f72, 0x10}, 0x9092, 0x1000, 0xfffffff8, 0x2, 0x9, 0x6, 0x456, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3ffffffffe, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
gettid()
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300048d9}, 0x20044040)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640200000000800134000002a"], 0x64}, 0x1, 0x0, 0x0, 0x4040881}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

8m54.857840228s ago: executing program 0 (id=365):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x10, 0x2, 0x3be}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x6a0a, @remote, 0x8}}}, 0x32)
setsockopt(r0, 0x400002a, 0x6, &(0x7f0000000000), 0x0)

8m54.81232863s ago: executing program 32 (id=365):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x10, 0x2, 0x3be}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x6a0a, @remote, 0x8}}}, 0x32)
setsockopt(r0, 0x400002a, 0x6, &(0x7f0000000000), 0x0)

7m6.551891013s ago: executing program 5 (id=1264):
memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)='q', 0x1, 0x8)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x6000000000000, 0x800})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f00000002c0)=""/199, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
readv(r2, &(0x7f0000000800)=[{&(0x7f0000000540)=""/59, 0x3b}], 0x1)

7m6.372192202s ago: executing program 5 (id=1265):
r0 = syz_open_procfs$namespace(0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r0], 0x0)

7m6.311044085s ago: executing program 5 (id=1266):
memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)='q', 0x1, 0x8)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x6000000000000, 0x800})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f00000002c0)=""/199, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
readv(r2, &(0x7f0000000800)=[{&(0x7f0000000540)=""/59, 0x3b}], 0x1)

7m6.173346351s ago: executing program 5 (id=1267):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001300)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@i_version}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64039}], 0x1)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000c40)}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x2, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r5=>0x0})
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r6, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x5, 0x28, 0x5, 0x1, 0x0, 0xf, 0x4001, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x10a82, 0x5, 0x1, 0x7, 0x400, 0x5, 0x8, 0x0, 0x3, 0x0, 0x3}, r6, 0x2, r2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0xffe0}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3e2}, {&(0x7f0000002b40)="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", 0x1d2}], 0x2}, 0x8400)
sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)

7m5.211128219s ago: executing program 5 (id=1275):
memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)='q', 0x1, 0x8)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x6000000000000, 0x800})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f00000002c0)=""/199, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
readv(r2, &(0x7f0000000800)=[{&(0x7f0000000540)=""/59, 0x3b}], 0x1)

7m4.527060143s ago: executing program 5 (id=1286):
r0 = socket$unix(0x1, 0x1, 0x0)
unshare(0x2a020400)
preadv2(r0, 0x0, 0x0, 0x5, 0x4, 0x1)
add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
io_setup(0x8, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000080)="f6dd", 0x2, 0x4, 0x0, 0x0, r1}])
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18)

7m4.517385144s ago: executing program 33 (id=1286):
r0 = socket$unix(0x1, 0x1, 0x0)
unshare(0x2a020400)
preadv2(r0, 0x0, 0x0, 0x5, 0x4, 0x1)
add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
io_setup(0x8, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000080)="f6dd", 0x2, 0x4, 0x0, 0x0, r1}])
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18)

4m48.313755123s ago: executing program 6 (id=2514):
socket(0xa, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x10010, r0, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000200000007"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)='%pS    \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r9 = gettid()
clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))
rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x100000000000000, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000000000000100000d000000000900000003005c48000000000000000d0000000000000000010000130400000002000000010100000b000000000000120300000000612e00"], &(0x7f0000000900)=""/252, 0x5c, 0xfc, 0x1}, 0x28)
setresuid(0xee00, 0xee00, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000)
memfd_secret(0x80000)
msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000005d9546"], 0x8, 0x8fa2496c381b7ad5)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)

4m47.76251328s ago: executing program 6 (id=2519):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)

4m44.446644654s ago: executing program 6 (id=2527):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r1, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x9, 0x9c, 0x9, 0x30, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x80, 0x7, 0x1, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="00012cbd7000fbdbdf251400000040000180140002007369743000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="080003008100b000"], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20005880)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xfa688eeae07e7c5b, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095b253c6e3751175891d0abff8dc8c5abdef28b2c884f3b5e0b5a207d5eceb8abc2985685412648375e90ee806372c423d63d21d904334fb241672df2ace253abb1f0d7d1fbc103b946455d8812d9921738f57801d08c4775e8389468f9aee6c876dc1c30856f0c52438ce34eb91bb31e0583bf9d0bf6d689877227b9b750322eb60818ef7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r6}, 0x20)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r6}, 0x20)
ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000680)={0x1, 0x7ff})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0xe)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r10=>r7}, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES32=r10, @ANYBLOB="0100000000002000004475a51f00000000000000", @ANYRES64=r8, @ANYRES32, @ANYRESOCT], 0x50)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r11=>0x0)
r12 = syz_clone3(&(0x7f0000000300)={0x80800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f0000000200)=""/125, 0x7d, &(0x7f0000000280)=""/76, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0xa}, 0x58)
r13 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r0, &(0x7f0000000380)={r13, r0})

4m44.32950799s ago: executing program 6 (id=2530):
syz_io_uring_setup(0x2817, &(0x7f0000000080)={0x0, 0xc978, 0x3000, 0x4, 0x1ed}, 0x0, &(0x7f0000000100))
futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
clock_getres(0x6, &(0x7f0000000180))
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}, {0x6, 0xffff, 0x5}]}]}, {0x0, [0x61, 0x30, 0x61, 0x61, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x1}, 0x28)
open(&(0x7f0000000140)='./file1\x00', 0x8a040, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0)
syz_clone3(&(0x7f00000007c0)={0x1e0180, &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0), {0x36}, &(0x7f00000004c0)=""/245, 0xf5, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58)

4m43.999440097s ago: executing program 6 (id=2533):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="11", 0xfea4}, {&(0x7f0000000400)="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", 0x1000}], 0x2, 0x4000001, 0x0)
r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r10, 0x2)
r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r11, 0x2)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000d0000000800000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r12}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r12, &(0x7f00000006c0), 0x0}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r11)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002abd7000fedbdf250300000005002d000100000008003c0007001000050033110200000008002b00db89000008003b20ff0f0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048010)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x8)

4m43.393436907s ago: executing program 6 (id=2536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYBLOB="05002d"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0x6, 0x13)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x80, &(0x7f0000000cc0)}, 0x8bb3a321ef809a)

4m43.33077164s ago: executing program 34 (id=2536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYBLOB="05002d"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0x6, 0x13)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x80, &(0x7f0000000cc0)}, 0x8bb3a321ef809a)

4m28.370625082s ago: executing program 2 (id=2637):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=")
socket$kcm(0x10, 0x2, 0x0)
epoll_create(0x5)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x25}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a90000000f3020000000000000000"], 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x8)
pipe2(&(0x7f0000000200)={0x0, <r2=>0x0}, 0x0)
r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffd, 0x353, 0x0, r2}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

4m25.207576839s ago: executing program 2 (id=2654):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x1, 0xa61, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x5, 0x3}})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40)

4m23.844680537s ago: executing program 2 (id=2668):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (fail_nth: 2)

4m23.568420161s ago: executing program 2 (id=2669):
socket$packet(0x11, 0x2, 0x300)
socket$nl_sock_diag(0x10, 0x3, 0x4)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$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")
fallocate(0xffffffffffffffff, 0x6, 0x6, 0x10001)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000004000000080000000800000000010100", @ANYRES32, @ANYBLOB="020000000000fffffffffffffff6ed0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/24, @ANYRES32=r1, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)

4m23.262941636s ago: executing program 2 (id=2674):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)

4m22.259729225s ago: executing program 2 (id=2678):
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x1, 0xa61, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x5, 0x3}})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40)

4m22.250506696s ago: executing program 35 (id=2678):
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x1, 0xa61, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x5, 0x3}})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40)

23.821920208s ago: executing program 8 (id=6852):
io_setup(0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640200000000800134000002a"], 0x64}, 0x1, 0x0, 0x0, 0x4040881}, 0x0) (fail_nth: 2)

23.718413423s ago: executing program 8 (id=6853):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_clone(0x1144380, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4005, 0x0, @empty, 0xd}, 0x1c)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d550230102030109"], 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]})
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000680)="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", 0xff)
syz_usb_connect$uac3(0x3, 0xfd, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x7, 0x0, 0x15, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x11, 0x80}, [@mixer_unit={0x7, 0x24, 0x5, 0x1, 0xff, "729d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x862, 0xfff, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x5, 0x30}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x4, 0x40, 0x10}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5f, 0x2, 0x5, 0x4, "eb", "2512"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x5, 0x9, "e2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xa3, 0x0, 0x81, {0xa, 0x25, 0x25, 0x8000, 0x0, 0x88e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x2, 0x1, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9, 0xea, 0x8, 0xc}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x7, 0x5, "e40cfeac"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x5, 0x9, "", 'j7'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0xf7, "115151", "8937"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2c, 0x4, 0xfe, 0x7, "97d46b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xde, 0x0, 0x0, {0xa, 0x25, 0x25, 0x2, 0xf5, 0x9}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0x7, 0x3, 0x8, 0xc1}, 0x9a, &(0x7f00000002c0)={0x5, 0xf, 0x9a, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0xf2, 0x4, 0x9, 0xf0f, 0xc7, [0xff3fc0, 0x3f30, 0xd8, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x5a, 0x7f2b}, @generic={0x58, 0x10, 0x2, "0c1ad2a499e9da95b878fe3872c5b029be6870198aa16ed7e48f33a9f16d93f0b2f4fcf25dd5d70e9e53e4504610971567363bd695ad82d5cb04154dc2da669eb32c4d8994edc89ccf7ef21bb6ed09b01d21de0f79"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "a92d637ad63e2f3aea883b9d3e2a391a"}]}, 0x6, [{0x18, &(0x7f0000000100)=@string={0x18, 0x3, "8c12b58d2e2c2b598e9f85c7e998e539c978cbe1b963"}}, {0xb9, &(0x7f0000000380)=@string={0xb9, 0x3, "cf159a95c949eb8a460c72ea11e4e481ba276813852412eed04ae15277ea6f1766463fc6def84f17fd2e2388169d36c43d13bf6856d80b35970ea35054fc272f20dca609f8bad5fc3b5b098cf3ee339c3d1513530f0151bd919d051f23051183e9a5d801d4f02074213ded43c983145f656e528c7b0ae508e29c1d920a6020e794308f1f47dedd76e1e3aea2e45cc60067f42ec6137c51134aecfcb02efc77785866e0ff5c81a1db9e2e70080cedf383f77fca3c90bb29"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x415}}, {0xda, &(0x7f0000000440)=@string={0xda, 0x3, "84ead7542d9695dc56eb51c386c7ea48bcb923eba3d52be92680ae281ec09af46e030dadfa959f9aea95c7c0467b2aa52dc46d596e82348c8759928e9c2f1a244b2fb9a460551742b7bf8b4d040ce9ca3e9392c5edd9256e2587a9817d75d14e46f5d26f40aca6282071ac815e9e4023f5b31d2d941aa95ade5c6836afd2386ef8f640ed7702af921ebff9c963c0f7b277e706f8d4564e2806f47b6cbddf2d173697c94ae6b09df7d33eb01559629a5c7fd370162f9ea37e25cb642bd1e93790b5486f4395204a040f1ef18812cf619d2293a861d606ce7d"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2009}}, {0x55, &(0x7f0000000580)=@string={0x55, 0x3, "16df8c4521d36e87d734990ad8a9e040b06b725acf612bea6cab00aa481d23e6e05efadc88bd5a206feb6c3456316dc56c0da695cd4f1c9c7a82ef3704d25e28fad03308d5da93149edb12bd8d5243db1c4b4d"}}]})
close_range(r0, r3, 0x0)

22.622834187s ago: executing program 8 (id=6865):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e000003b96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

22.116690582s ago: executing program 8 (id=6870):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb60400"/258, 0x102}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e1", 0x2c}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b947238", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18e", 0xcc}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a496547", 0x30}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x1a8, 0xc8, 0x1a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x90000, 0x9, 0x3, 0x146dd345, 0x3, 0x43a, 0x6}}, @common=@srh1={{0x90}, {0x0, 0x7f, 0xb, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, [0xff0000ff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0x801, 0x21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x4695338a4f0a80fe, 0xffffffff, 0xff, 0xff000000], 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0xfc, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"25c9", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x4, 0x3, 0x6}, 0x5, 0xb8cc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r3)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)

21.980145889s ago: executing program 8 (id=6872):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xee8, <r0=>0x0}, 0x8)
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0)
mlockall(0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x1)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x2)
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000940)=""/150, 0x96}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/43}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r9, @ANYRES32=r9, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffd30, 0x0, 0x0, 0x10, 0x3}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

21.634801406s ago: executing program 8 (id=6875):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x3, 0x3}, &(0x7f00000005c0)=0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r4 = getpgid(0x0)
r5 = syz_pidfd_open(r4, 0x0)
pidfd_send_signal(r5, 0x10000030, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r7, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x42b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe41}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x43e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x24000040)

21.627514516s ago: executing program 36 (id=6875):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x3, 0x3}, &(0x7f00000005c0)=0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r4 = getpgid(0x0)
r5 = syz_pidfd_open(r4, 0x0)
pidfd_send_signal(r5, 0x10000030, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r7, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x42b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe41}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x43e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x24000040)

5.347096214s ago: executing program 3 (id=7026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

5.199630912s ago: executing program 3 (id=7029):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x10000042, 0x0, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
mprotect(&(0x7f0000126000/0x2000)=nil, 0x2000, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x6, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x4, 0x3, 0x1c, 0x13, 0x112, &(0x7f0000000440)="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"})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)

5.106971286s ago: executing program 3 (id=7031):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x20000c0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
io_setup(0x239f, &(0x7f0000000380))
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0)
syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0xdf68, 0x2, 0x3, 0x10f}, 0x0, 0x0)
syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
fallocate(r4, 0x1, 0xffc, 0x9)
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r5=>0xee00])
setregid(r5, r5)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)

4.034635999s ago: executing program 3 (id=7043):
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000380)='\x00', 0xfffffffffffffff8)
keyctl$setperm(0x5, r0, 0x2001101)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000580))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0xc6d, 0x0, &(0x7f0000000340), 0x0)
io_uring_enter(r6, 0x3516, 0xa00100, 0x0, 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', r8, 0x2f, 0x2, 0x4, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7800, 0x10, 0x0, 0xc}})
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x80801, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="b7ec4f4ac73cd787076401f9c65629fad4008af825052b390751232c0e26d7ecf80fb91c414a9e37fbb41b148202de53c33f27736d5d62197715c6c2ad6ea67145d82c770c43fe77a631826f87eb44d29a558927d4d3d0a293b27403e4bfe314fc626fd10b84fb86e8ae9e3bbefcea9e15d5815e616934c8ecf7b8478a11e94eb63b01337a051928499edfd555f9803152", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14)

3.399891831s ago: executing program 4 (id=7049):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xdc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_ife={0xc4, 0x1, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xdc}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0)
memfd_secret(0x80000)
syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
r4 = dup2(r1, r0)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140), 0x4)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.029938279s ago: executing program 4 (id=7052):
r0 = socket(0xa, 0x5, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x9, 0xf8, 0x5}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x62cd944b)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$packet(0x11, 0x3, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0x5}, {0x0, 0x8}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x4008080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007030000ac1414aa00000000180000000000000084000000050000000000000003000000"], 0x30, 0x4855}, 0x24000052)

2.82841717s ago: executing program 9 (id=7057):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008bc0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000340))
setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000380), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[], 0x118)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x4d}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x6, "fddcff6b443c"}})
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x4)
r6 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xea, 0x7e, &(0x7f0000000540)="1a34dd2a06f8bf5504465e42c8c39d0a6b50026ec72fdf51428000879d41e347a4528bf2a1897ac62ff321e1044679bcdb2057a6bf5bcb408f26ff2276264bd814c07235196cb7ecb921a19e9ea48e10f90fda97e9f8725edeeacaed2f4a18a19b681f1557f007eac753bcd4ddf851eb57af4b8cd7ddb6d583910c71370ad77d576384f70c1cebbc803b545cdcd979f61a0086f15a7d09b091c7a3f9c86d55b061c39e1a45f75cd87b7deec8c040abf4cc33cc1dba3e76c569212113dd67304126228616489ba0359581be6a61b781ebc6f7add1d2ee56b32b140a4446c194d7c3f703d4181bfc939627", &(0x7f00000003c0)=""/126, 0xe, 0x0, 0x64, 0x6b, &(0x7f0000000640)="3c9e03975e472551bad6e81127623a0fbb6b993db2252b9a39da85a091517c374bad2305fb83f8fe10d47c6cf11d9910d22a87845130a64a0fa328a8830007439a3ac8d5affddd8fc1e918d5be5a1ba6d7b6dbd5719a9ca3271673d85cfd9b14f58fae1b", &(0x7f00000006c0)="8416196411e3a80478787d36e40f4d56bd0f0ad35ea809d2133cd015db257e21355152d2cfee0c9f7c597930caba87eca378262a0efb0d240fd32a8ee538ed6f091df39b9b92dc3c29ae92958263756236e2d7e36952042df112cc3e285121c6f818dc9dd29e371b2a7228", 0x4, 0x0, 0x3}, 0x50)
unshare(0x62040200)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0xf66, @ipv4={'\x00', '\xff\xff', @loopback}, 0x48}, 0x1c)

2.717248935s ago: executing program 4 (id=7058):
pipe(&(0x7f00000000c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4, 0x40, 0x4, 0x7}, {0x2, 0xf, 0x59, 0x7}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"/312], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
fsopen(0x0, 0x0)
ptrace(0x10, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x2, @perf_bp={0x0, 0x8}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000280))

2.024187659s ago: executing program 3 (id=7061):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000013002f0a2bbd70000000000007006800", @ANYRES32=r3, @ANYBLOB="400900006522020024001a8009000100766c616e000000001400048010000480", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223, 0x40f00}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x36, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000480)={'wg1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18fe845a1a93ec9ef4ffffff000800000000b68000"/31, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=<r12=>r11, 0x35, 0x1, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), <r13=>0x0}, 0x40)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0xcab, 0x1, 0xe, 0x4000, r12, 0xa3ae, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r14, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r13}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="2f0000002820000004000000", @ANYRES32=0x0, @ANYBLOB="ca6de0f4c5979e3c10ed1add71ba49f5dabf10bdf2add927b2c0712b8d8be9cc789cb185b9195a147d68", @ANYRES64=r13], 0x20)
r15 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r16=>0x0}, 0x30)
r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r17, &(0x7f0000000380)='cgroup.max.descendants\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r15, r8, 0x0, 0x28, r8, @void, @void, @void, @value=r16, r13}, 0x20)

1.499885685s ago: executing program 9 (id=7062):
r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
timer_gettime(0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xb, 0x4, @thr={&(0x7f0000000240)="50fbd114f39af339ea257ee64f00d2e7546bb7f486ed152aa60f64b0c3e7f59152a4de9d7616da30ab9bc5e1da26246c313250e422a734b4fce7482afe987798a3e28554948d9c5142351db9f070185cfb695ce6197c075572d249ee001a0bb106da0e593dd25fb4729c1beeec43e68edc5ebc43e24fa74226a96686d304c0b78c030f999bd219b810fef51295da918b175fe270b315114168faae23b1540619a14fb2cc3ea29acc0c3f4b3b019111517a2903b3f9a7af425e7f0c8f98dd1c9b04223f5d19eb9b4eb8dec066cb8ad06ac328bb3178b91739063b47", 0x0}})

1.499360745s ago: executing program 3 (id=7063):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000008300000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000007d0000000000000000000095db7409b4ae7d09ef38ee9245177f607cd7bd06f6af64d747254af8e5fba7516fea15241fb76b30449eb4c44831f40b6ca1cbca5fe993821f500d9d6b3847300cf9f7f61f4b5c9eec94bf7307516f45056518afae208444f5d28fa2c59b109716e4c35f1aa3f24166cf090868cd0f5035ac7dd31cf963288d7807db28434f395b3e17134873f69c660f9889003abda1396acf82"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket(0x2, 0x3, 0x6)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0x0, [0xc414, 0x5, 0xfd, 0x8, 0x401], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x44f2, 0x1ed8, 0x7a, &(0x7f00000003c0)={[0xa]}, 0x8)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x10000)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_CLASSID={0x0, 0x3, {0xffe0, 0x2}}, @TCA_BPF_NAME={0x0, 0x7, './file0\x00'}, @TCA_BPF_NAME={0x0, 0x7, './file0\x00'}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x2, 0x9, 0xbb, 0x7fff8}, {0xe8f5, 0xff, 0x4, 0x6}, {0xfc00, 0xc, 0x0, 0xfffff000}, {0x3, 0xf, 0xc0, 0x8}, {0x400, 0xad, 0x1f, 0x80}, {0x5, 0x51, 0x7, 0x10000}]}}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r12, @ANYBLOB="cd40f3939d08f034e71eb45d73c9e1238c683184909941bfc9425df813a1bd731f3d32dea2f443f81bdebbba9018b045a35b00254d99a3e452ad95c31c07041062335641579d2952b57a670ce8bd"], 0x3c}}, 0x0)

1.427744439s ago: executing program 1 (id=7064):
r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) (fail_nth: 1)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
timer_gettime(0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xb, 0x4, @thr={&(0x7f0000000240)="50fbd114f39af339ea257ee64f00d2e7546bb7f486ed152aa60f64b0c3e7f59152a4de9d7616da30ab9bc5e1da26246c313250e422a734b4fce7482afe987798a3e28554948d9c5142351db9f070185cfb695ce6197c075572d249ee001a0bb106da0e593dd25fb4729c1beeec43e68edc5ebc43e24fa74226a96686d304c0b78c030f999bd219b810fef51295da918b175fe270b315114168faae23b1540619a14fb2cc3ea29acc0c3f4b3b019111517a2903b3f9a7af425e7f0c8f98dd1c9b04223f5d19eb9b4eb8dec066cb8ad06ac328bb3178b91739063b47", 0x0}})

1.336558103s ago: executing program 4 (id=7065):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="b9c8000000000000000000000000000000000f3a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket(0x21, 0x5, 0xffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':^@[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',:*\'().\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!-\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x35}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004001}, 0x24044811)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000280)={@remote, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffff6, 0x9, 0x4, 0x0, 0x1, 0x20000})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

1.093442926s ago: executing program 7 (id=7066):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25160000000c009900080000086a0000000a0006000802110000010000060008021100000000000a001a00ffffffffffff00000a00060008021100000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000000))
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x48380, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0\x00'})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0xa, 0xbf7ffffb)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000cc000000000004000000000000000000000000000000001d00000000000000000000002000"/104], 0x68)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})

1.061480677s ago: executing program 4 (id=7067):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x22, 0xe, &(0x7f0000002200)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x7fe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffa6b3}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
syz_open_pts(r0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x108000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
close(0x3)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x27, 0x1, 0x40, 0xfc, 0x0, 0xb1, 0x42750, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x20000000d07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x5, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="d15930b04b139a83984a93ceab6771271e74037278b6b885c91593192f341743880dc7ba825cad3598b50c67c3b0e763a7bfef151b50affb35cd36e4cf6a20447b6296da293d8164", 0x48}, {&(0x7f0000000540)="17a7a1d3347878ff1ec9fb2092e6c0ac8c99784082f8c1c7188eca8973a8acf337770c0efbd374c3e5777651f25d4e33b370471afccbc507d5c95c05664497468c99faffb249bc2d17a2f6e96ef150325b398d1c2f24ff4512f61f2ea10fdbd3dc39d3a74c57192e6c4310563d6a3cb58bdb912ca3e6d47c0c8cc392d70a87d407400f933ded17f74dbd71fb6856a6171e83ed053ab2544e239ef78c0dddce", 0x9f}], 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000)
brk(0x600000000000)
sendmsg$NL80211_CMD_SET_REG(r3, 0x0, 0x2400c000)
perf_event_open(0x0, 0x0, 0x20000000000000c, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80805, 0x0)

664.764037ms ago: executing program 9 (id=7068):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xdffffffc}}}}}}, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x4004045)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0x0, 0x0})
close(r7)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xb, 0x3, 0x5}, 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
r11 = gettid()
fstat(r9, 0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$unix(r7, &(0x7f0000000340)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [r10, r8]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, r12}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r0, r13, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}], 0xe0, 0x20000000}, 0x80)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000314010029bd7000fddbdf250900020073797a3000000000080041007369770014003300776c616e3100000000000000000000000900080000007a310000000008004100736977001400330064756d6d793000"/96], 0x60}, 0x1, 0x0, 0x0, 0x6004895}, 0x4000)

499.997825ms ago: executing program 1 (id=7069):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x5, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3c, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

499.303085ms ago: executing program 9 (id=7070):
socket$inet6_sctp(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfff8}, 0x0, 0x2000000, 0xd, 0x80004, 0x7, 0x0, 0xffffffffffffffff})

443.235458ms ago: executing program 7 (id=7071):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)

442.887847ms ago: executing program 7 (id=7072):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0x0, 0x0})
close(r2)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
gettid()
fstat(r4, 0x0)
fstat(r0, &(0x7f00000004c0))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000314010029bd7000fddbdf250900020073797a3000000000080041007369770014003300776c616e3100000000000000000000000900080000007a310000000008004100736977001400330064756d6d793000"/96], 0x60}, 0x1, 0x0, 0x0, 0x6004895}, 0x4000)

416.302869ms ago: executing program 1 (id=7073):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c00010062"], 0x34}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @empty, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x15, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0x26, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x25, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000240)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x51}}, 0x0, 0x1a}, 0x28)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0)
unshare(0x2040400)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
pread64(r5, &(0x7f0000001600)=""/4073, 0xfe9, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0xfffffff9, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

336.940193ms ago: executing program 7 (id=7074):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=")
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

224.657529ms ago: executing program 9 (id=7075):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x883}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x23b9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0)

224.310629ms ago: executing program 4 (id=7076):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0)

223.170359ms ago: executing program 7 (id=7077):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x0, 0x6, 0x0, 0x1, 0xf9, 0x6, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)={'system_u:object_r:hald_var_lib_t:s0', 0x20, 'unconfined_u\x00'}, 0x31)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
iopl(0x3)
r2 = socket$netlink(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x100, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x100)

177.250191ms ago: executing program 9 (id=7078):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x100, 0x401, 0x14, 0x3, 0x9, 0x7, 0xaad, 0x78, 0x20}, {0x9}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001380)={r4, 0x4}, &(0x7f00000013c0)=0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20)
stat(&(0x7f0000001d40)='./file1\x00', &(0x7f0000001d80))
memfd_secret(0x80000)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x69}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000e49400000000000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x1, 0x1, 0x1}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x8880)
r8 = socket(0x1, 0x3, 0x0)
sendmmsg$unix(r8, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x49}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x10, r5, 0x8000000)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg$unix(r11, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)='./file0\x00', 0x23, 0x80000, 0x31713})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

123.630154ms ago: executing program 1 (id=7079):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004014)

47.087887ms ago: executing program 1 (id=7080):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, 0x0, 0xfc, 0x7, 0x2, 0x9, 0x3, 0x3, 0x8, 'syz0\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/255, 0xff}, 0x9}, {{0x0, 0x0, 0x0}, 0x4000}], 0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x9000000}], 0x400000000000172, 0x4001c00)

46.716157ms ago: executing program 1 (id=7081):
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x4, 0x103)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
close(0x3)
r6 = syz_pidfd_open(r3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
pidfd_getfd(r6, r7, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

0s ago: executing program 7 (id=7082):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x8, 0x0, 0x2, 0x0, 0xff, 0x18008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x49e8}, 0x10208, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x60, 0x0, 0x0, 0x40, 0x0, 0x5, 0x84116, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000003, 0x0, 0x0, 0x2, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r3=>0x0}) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r4, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x5, 0x28, 0x5, 0x1, 0x0, 0xf, 0x4001, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x10a82, 0x5, 0x1, 0x3, 0x400, 0x5, 0x8, 0x0, 0x3, 0x0, 0x3}, r4, 0x5, r0, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0xffe0}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) (async)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0xfffefffe}, 0x80, &(0x7f0000000340)}, 0x24000495)
sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async, rerun: 64)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) (async, rerun: 32)
r7 = socket$kcm(0x10, 0x5, 0x0) (async, rerun: 32)
r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
ioctl$NILFS_IOCTL_GET_CPSTAT(r8, 0x80186e83, &(0x7f00000004c0)) (async)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r9, &(0x7f0000000080)=0x2, 0x12) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c00125686067d18a3cfa4eb83b548376a40bff2301b4e1030c337cca96d201f092011fc5071c2aa48630d677df607a802573decf260e5e9596de4273e0864c53a7e2521eac3559feca659263142be8892b0b72a431d16f308a802a0f3fe1e7880effda7842566b4999b6137e4bd3754f5b6fc15b2cd1b36f1ead2a188039c4068c17a449f000371f59efee4a6376d260afc0296c781ccaba997267caf3d90e9fac4cbc52c8422816888307157de6bcc8ddcde460261f065319699ad45f67f875a05", 0xed}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

l, usb_gadget_register_driver returned -16
[  535.004955][T22172] ipvlan2: entered allmulticast mode
[  535.081064][T22173] lo speed is unknown, defaulting to 1000
[  535.478805][T22040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  535.536798][T22181] netlink: 'syz.7.6111': attribute type 13 has an invalid length.
[  535.917404][T22206] syzkaller0: entered promiscuous mode
[  535.933476][T22206] syzkaller0: entered allmulticast mode
[  535.960536][T22209] syzkaller0: entered promiscuous mode
[  535.966852][T22209] syzkaller0: entered allmulticast mode
[  536.036036][T22210] ipvlan2: entered allmulticast mode
[  536.042325][T22210] dummy0: entered allmulticast mode
[  536.181225][T22211] lo speed is unknown, defaulting to 1000
[  536.403864][T22219] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6125'.
[  536.477920][T22227] syzkaller0: entered promiscuous mode
[  536.483528][T22227] syzkaller0: entered allmulticast mode
[  536.683881][T22236] ipvlan2: entered allmulticast mode
[  536.767808][T22238] lo speed is unknown, defaulting to 1000
[  536.986287][T22247] lo speed is unknown, defaulting to 1000
[  537.465615][T22274] syzkaller0: entered promiscuous mode
[  537.518709][T22274] syzkaller0: entered allmulticast mode
[  537.550930][T22278] syzkaller1: entered promiscuous mode
[  537.563636][T22278] syzkaller1: entered allmulticast mode
[  538.420959][T22304] ipvlan2: entered allmulticast mode
[  538.783649][T22305] lo speed is unknown, defaulting to 1000
[  538.874046][T22307] lo speed is unknown, defaulting to 1000
[  539.003939][T22308] ipvlan2: entered allmulticast mode
[  539.210785][T22312] syzkaller0: entered promiscuous mode
[  539.231691][T22312] syzkaller0: entered allmulticast mode
[  539.408480][T22327] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6163'.
[  539.456563][T22327] syzkaller0: entered promiscuous mode
[  539.462362][T22327] syzkaller0: entered allmulticast mode
[  539.483058][T22331] syzkaller0: entered promiscuous mode
[  539.490361][T22331] syzkaller0: entered allmulticast mode
[  539.599608][T22338] syzkaller1: entered promiscuous mode
[  539.606429][T22338] syzkaller1: entered allmulticast mode
[  540.137533][T22346] ipvlan2: entered allmulticast mode
[  540.143683][T22346] dummy0: entered allmulticast mode
[  540.208608][T22348] lo speed is unknown, defaulting to 1000
[  540.295303][T22364] syzkaller0: entered promiscuous mode
[  540.306526][T22364] syzkaller0: entered allmulticast mode
[  540.325411][T22366] netlink: 'syz.8.6177': attribute type 25 has an invalid length.
[  540.336590][T22364] 0: reclassify loop, rule prio 0, protocol 800
[  540.418212][T22371] syzkaller0: entered promiscuous mode
[  540.439646][T22371] syzkaller0: entered allmulticast mode
[  540.473160][T22373] syzkaller0: entered promiscuous mode
[  540.489709][T22373] syzkaller0: entered allmulticast mode
[  540.520856][T22373] 0: reclassify loop, rule prio 0, protocol 800
[  540.867796][T22388] ipvlan2: entered allmulticast mode
[  541.072379][T22389] lo speed is unknown, defaulting to 1000
[  541.202188][T22395] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  541.215179][T22394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.235565][T22394] syzkaller0: entered promiscuous mode
[  541.255265][T22394] syzkaller0: entered allmulticast mode
[  541.290823][T22394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6189'.
[  541.307133][T22401] netlink: 'syz.7.6190': attribute type 25 has an invalid length.
[  541.326727][T22392] tipc: Resetting bearer <eth:syzkaller0>
[  541.339024][T22392] tipc: Disabling bearer <eth:syzkaller0>
[  541.470857][T22415] syzkaller0: entered promiscuous mode
[  541.476594][T22415] syzkaller0: entered allmulticast mode
[  541.485288][T22415] 0: reclassify loop, rule prio 0, protocol 800
[  541.496858][T22413] syzkaller1: entered promiscuous mode
[  541.502741][T22413] syzkaller1: entered allmulticast mode
[  541.560688][T22420] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6199'.
[  541.583701][T22420] syzkaller0: entered promiscuous mode
[  541.589250][T22420] syzkaller0: entered allmulticast mode
[  541.614664][T22424] netlink: 'syz.4.6201': attribute type 25 has an invalid length.
[  541.670413][T22423] syzkaller0: entered promiscuous mode
[  541.675926][T22423] syzkaller0: entered allmulticast mode
[  541.825451][T22437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.832773][T22437] syzkaller0: entered promiscuous mode
[  541.838289][T22437] syzkaller0: entered allmulticast mode
[  541.850041][T22441] syzkaller0: entered promiscuous mode
[  541.855779][T22441] syzkaller0: entered allmulticast mode
[  542.270751][T22447] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6208'.
[  542.466307][T22450] ipvlan2: entered allmulticast mode
[  542.767989][T22436] tipc: Resetting bearer <eth:syzkaller0>
[  542.777945][T22436] tipc: Disabling bearer <eth:syzkaller0>
[  542.785698][T22438] lo speed is unknown, defaulting to 1000
[  542.820999][T22456] syzkaller1: entered promiscuous mode
[  542.830940][T22456] syzkaller1: entered allmulticast mode
[  542.887657][T22458] usb usb7: usbfs: process 22458 (syz.8.6214) did not claim interface 0 before use
[  543.013658][T22481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.021921][T22481] syzkaller0: entered promiscuous mode
[  543.027648][T22481] syzkaller0: entered allmulticast mode
[  543.047340][T22481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6226'.
[  543.110188][T22480] tipc: Resetting bearer <eth:syzkaller0>
[  543.195409][T22480] tipc: Disabling bearer <eth:syzkaller0>
[  543.299729][T22498] usb usb7: usbfs: process 22498 (syz.4.6230) did not claim interface 0 before use
[  543.410424][T22494] ipvlan2: entered allmulticast mode
[  543.547673][T22499] lo speed is unknown, defaulting to 1000
[  543.771908][T22490] syzkaller0: entered promiscuous mode
[  543.777548][T22490] syzkaller0: entered allmulticast mode
[  543.796577][T22486] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6227'.
[  543.811046][T22501] syzkaller0: entered promiscuous mode
[  543.816680][T22501] syzkaller0: entered allmulticast mode
[  544.788132][T22513] ipvlan2: entered allmulticast mode
[  544.800482][T22513] dummy0: entered allmulticast mode
[  544.862687][T22514] lo speed is unknown, defaulting to 1000
[  544.929319][T22520] syzkaller1: entered promiscuous mode
[  544.938450][T22520] syzkaller1: entered allmulticast mode
[  544.950968][T22527] netlink: 'syz.8.6235': attribute type 25 has an invalid length.
[  545.034709][T22536] loop7: detected capacity change from 0 to 512
[  545.044240][T22536] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  545.060323][T22540] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  545.098757][T22540] usb usb7: usbfs: process 22540 (syz.1.6243) did not claim interface 0 before use
[  545.124354][T22538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.137428][T22536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.145381][T22538] syzkaller0: entered promiscuous mode
[  545.149443][T22536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.154066][T22538] syzkaller0: entered allmulticast mode
[  545.210953][T22538] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6241'.
[  545.267077][T22538] tipc: Resetting bearer <eth:syzkaller0>
[  545.309716][T22537] tipc: Resetting bearer <eth:syzkaller0>
[  545.325476][T22537] tipc: Disabling bearer <eth:syzkaller0>
[  545.381139][T22562] netlink: 'syz.4.6252': attribute type 25 has an invalid length.
[  545.417184][T22564] syzkaller1: entered promiscuous mode
[  545.427855][T22564] syzkaller1: entered allmulticast mode
[  545.540179][T22568] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6256'.
[  546.659654][T22573] ipvlan2: entered allmulticast mode
[  546.826248][T22578] ipvlan2: entered allmulticast mode
[  546.980035][T22575] lo speed is unknown, defaulting to 1000
[  547.068314][T22574] lo speed is unknown, defaulting to 1000
[  547.140382][T22592] ipvlan2: entered allmulticast mode
[  547.652920][T22593] lo speed is unknown, defaulting to 1000
[  547.810840][T22609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.828058][T22609] syzkaller0: entered promiscuous mode
[  547.834069][T22609] syzkaller0: entered allmulticast mode
[  547.843058][T22609] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6266'.
[  547.853913][T22609] tipc: Resetting bearer <eth:syzkaller0>
[  547.870130][T22606] tipc: Resetting bearer <eth:syzkaller0>
[  547.878699][T22606] tipc: Disabling bearer <eth:syzkaller0>
[  547.906516][T22611] syzkaller1: entered promiscuous mode
[  547.912417][T22611] syzkaller1: entered allmulticast mode
[  548.142129][T22622] lo speed is unknown, defaulting to 1000
[  548.534870][T22629] ipvlan2: entered allmulticast mode
[  548.625132][T22630] lo speed is unknown, defaulting to 1000
[  548.791644][T22636] syzkaller1: entered promiscuous mode
[  548.797501][T22636] syzkaller1: entered allmulticast mode
[  549.061948][T22650] syzkaller1: entered promiscuous mode
[  549.071943][T22651] loop8: detected capacity change from 0 to 512
[  549.099247][T22650] syzkaller1: entered allmulticast mode
[  549.107050][T22651] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  549.159146][T22651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.168504][T22651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.887037][T22658] lo speed is unknown, defaulting to 1000
[  549.926890][T10685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.974090][T10685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.026527][T10685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.058141][T22658] chnl_net:caif_netlink_parms(): no params data found
[  550.108788][T10685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.167574][T22658] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.178966][T22658] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.186228][T22658] bridge_slave_0: entered allmulticast mode
[  550.194429][T22658] bridge_slave_0: entered promiscuous mode
[  550.205861][T22658] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.219743][T22658] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.227309][T22658] bridge_slave_1: entered allmulticast mode
[  550.234006][T22658] bridge_slave_1: entered promiscuous mode
[  550.277592][T22658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.303251][T10685] bridge_slave_1: left allmulticast mode
[  550.309686][T10685] bridge_slave_1: left promiscuous mode
[  550.315684][T10685] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.327084][T10685] bridge_slave_0: left allmulticast mode
[  550.337841][T10685] bridge_slave_0: left promiscuous mode
[  550.348569][T10685] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.518332][T10685] gretap0 (unregistering): left promiscuous mode
[  550.671932][T10685] bond4 (unregistering): (slave bridge1): Releasing backup interface
[  550.680235][T10685] bridge1 (unregistering): left promiscuous mode
[  550.889245][T10685] bond5 (unregistering): (slave bridge2): Releasing backup interface
[  550.967572][T10685] bridge2 (unregistering): left promiscuous mode
[  551.040620][T10685] bond6 (unregistering): (slave bridge3): Releasing backup interface
[  551.094269][T10685] bridge3 (unregistering): left promiscuous mode
[  551.187405][T10685] bond9 (unregistering): (slave bridge4): Releasing backup interface
[  551.196958][T10685] bridge4 (unregistering): left promiscuous mode
[  551.281620][T10685] bond0 (unregistering): left promiscuous mode
[  551.287903][T10685] bond_slave_0: left promiscuous mode
[  551.301464][T10685] bond_slave_1: left promiscuous mode
[  551.309597][T10685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.334657][T10685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.344954][T10685] bond0 (unregistering): Released all slaves
[  551.353048][T10685] bond1 (unregistering): Released all slaves
[  551.379081][T10685] bond2 (unregistering): Released all slaves
[  551.398903][T10685] bond3 (unregistering): Released all slaves
[  551.419013][T10685] bond4 (unregistering): Released all slaves
[  551.427871][T10685] bond5 (unregistering): Released all slaves
[  551.443325][T10685] bond6 (unregistering): Released all slaves
[  551.463151][T10685] bond7 (unregistering): Released all slaves
[  551.483371][T10685] bond8 (unregistering): Released all slaves
[  551.501297][T10685] bond9 (unregistering): Released all slaves
[  551.514449][T22658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  551.561560][T22696] ipvlan2: entered allmulticast mode
[  551.581429][T22697] lo speed is unknown, defaulting to 1000
[  551.619631][T10685] tipc: Left network mode
[  551.636787][T10685] hsr_slave_0: left promiscuous mode
[  551.649005][T10685] hsr_slave_1: left promiscuous mode
[  551.720130][T10685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.727634][T10685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.743447][T10685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.751664][T10685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.763085][T10685] veth1_macvtap: left promiscuous mode
[  551.768678][T10685] veth0_macvtap: left promiscuous mode
[  551.782528][T10685] veth1_vlan: left promiscuous mode
[  551.798970][T10685] veth0_vlan: left promiscuous mode
[  551.999997][T10685] team0 (unregistering): Port device team_slave_1 removed
[  552.022542][T10685] team0 (unregistering): Port device team_slave_0 removed
[  552.103410][T22658] team0: Port device team_slave_0 added
[  552.124626][T22716] syzkaller0: entered promiscuous mode
[  552.158247][T22658] team0: Port device team_slave_1 added
[  552.230649][T22658] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.245045][T22658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.303707][T22658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.350079][T22721] lo speed is unknown, defaulting to 1000
[  552.362065][T22658] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.376272][T22658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.406248][T22658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.471294][T22726] syzkaller0: entered promiscuous mode
[  552.477153][T22726] syzkaller0: entered allmulticast mode
[  552.502726][T22741] lo speed is unknown, defaulting to 1000
[  552.511609][T22658] hsr_slave_0: entered promiscuous mode
[  552.518106][T22658] hsr_slave_1: entered promiscuous mode
[  552.531266][T22658] debugfs: 'hsr0' already exists in 'hsr'
[  552.537289][T22658] Cannot create hsr debugfs directory
[  552.588305][T10685] IPVS: stop unused estimator thread 0...
[  553.331699][T22775] ipvlan2: entered allmulticast mode
[  553.396503][T22777] lo speed is unknown, defaulting to 1000
[  553.448849][T22786] syzkaller0: entered promiscuous mode
[  553.523155][T22801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  553.557752][T22801] syzkaller0: entered promiscuous mode
[  553.581076][T22801] syzkaller0: entered allmulticast mode
[  553.593095][T22801] tipc: Resetting bearer <eth:syzkaller0>
[  553.634467][T22800] tipc: Resetting bearer <eth:syzkaller0>
[  553.642497][T22800] tipc: Disabling bearer <eth:syzkaller0>
[  553.704590][T22811] syzkaller1: entered promiscuous mode
[  553.710462][T22811] syzkaller1: entered allmulticast mode
[  553.791980][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  553.791999][   T28] audit: type=1400 audit(1774412523.892:12098): avc:  denied  { sqpoll } for  pid=22823 comm="syz.7.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  553.936802][T22842] syzkaller0: entered promiscuous mode
[  554.233378][T22658] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  554.255160][T22658] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  554.296771][T22658] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  554.308448][T22887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.316818][T22887] syzkaller0: entered promiscuous mode
[  554.323803][T22887] syzkaller0: entered allmulticast mode
[  554.339187][T22658] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  554.356167][T22887] tipc: Resetting bearer <eth:syzkaller0>
[  554.389032][T22886] tipc: Resetting bearer <eth:syzkaller0>
[  554.398938][T22886] tipc: Disabling bearer <eth:syzkaller0>
[  554.424566][T22901] syzkaller1: entered promiscuous mode
[  554.430643][T22901] syzkaller1: entered allmulticast mode
[  554.479517][T22658] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.503736][T22658] 8021q: adding VLAN 0 to HW filter on device team0
[  554.533348][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.541011][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.598177][T10683] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.605395][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.629682][T22919] syzkaller0: entered promiscuous mode
[  554.635296][T22919] syzkaller0: entered allmulticast mode
[  554.666325][T22658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  554.677485][T22658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  554.754219][T22934] usb usb7: usbfs: process 22934 (syz.1.6334) did not claim interface 0 before use
[  554.767592][T22932] syzkaller0: entered promiscuous mode
[  554.794211][T22658] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.836973][T22942] syzkaller0: entered promiscuous mode
[  554.858581][T22942] syzkaller0: entered allmulticast mode
[  554.900570][T22952] syzkaller1: entered promiscuous mode
[  554.906551][T22952] syzkaller1: entered allmulticast mode
[  554.933164][T22954] syzkaller0: entered promiscuous mode
[  554.939702][T22954] syzkaller0: entered allmulticast mode
[  555.045346][T22969] loop3: detected capacity change from 0 to 512
[  555.054644][T22969] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  555.168435][T22969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.177453][T22969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.369787][T22978] syzkaller0: entered promiscuous mode
[  555.589259][T22658] veth0_vlan: entered promiscuous mode
[  555.666780][T22658] veth1_vlan: entered promiscuous mode
[  555.767199][T22658] veth0_macvtap: entered promiscuous mode
[  555.775148][T22658] veth1_macvtap: entered promiscuous mode
[  555.799021][T22658] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.820298][T22658] batman_adv: batadv0: Interface activated: batadv_slave_1
[  555.835635][T10683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.862774][T10683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.876763][T22993] syzkaller1: entered promiscuous mode
[  555.885566][T22993] syzkaller1: entered allmulticast mode
[  555.896168][T10683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.906154][T10706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.045100][T23004] syzkaller0: entered promiscuous mode
[  556.051248][T23004] syzkaller0: entered allmulticast mode
[  556.073072][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6358'.
[  556.135235][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6360'.
[  556.178735][T23016] loop4: detected capacity change from 0 to 512
[  556.194560][T23016] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  556.228426][T23016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.238548][T23016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.257109][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6362'.
[  556.436324][T23017] FAULT_INJECTION: forcing a failure.
[  556.436324][T23017] name failslab, interval 1, probability 0, space 0, times 0
[  556.449195][T23017] CPU: 0 UID: 0 PID: 23017 Comm: syz.7.6360 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  556.449311][T23017] Tainted: [W]=WARN
[  556.449321][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  556.449338][T23017] Call Trace:
[  556.449346][T23017]  <TASK>
[  556.449356][T23017]  __dump_stack+0x1d/0x30
[  556.449395][T23017]  dump_stack_lvl+0x95/0xd0
[  556.449427][T23017]  dump_stack+0x15/0x1b
[  556.449456][T23017]  should_fail_ex+0x263/0x280
[  556.449547][T23017]  ? nsim_fib_event_nb+0x19f/0xda0
[  556.449643][T23017]  should_failslab+0x8c/0xb0
[  556.449740][T23017]  __kmalloc_cache_noprof+0x5f/0x410
[  556.449773][T23017]  nsim_fib_event_nb+0x19f/0xda0
[  556.449880][T23017]  ? kvfree_call_rcu+0xb3/0x390
[  556.449914][T23017]  ? _raw_spin_lock_bh+0x56/0xb0
[  556.449950][T23017]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  556.449985][T23017]  atomic_notifier_call_chain+0x8a/0x1d0
[  556.450106][T23017]  call_fib_notifiers+0x65/0xa0
[  556.450159][T23017]  call_fib6_notifiers+0x30/0x40
[  556.450208][T23017]  fib6_del+0x7aa/0x910
[  556.450268][T23017]  ? fib6_del+0x2f1/0x910
[  556.450344][T23017]  __ip6_del_rt+0x5e/0x120
[  556.450370][T23017]  ip6_del_rt+0x8c/0xc0
[  556.450389][T23017]  cleanup_prefix_route+0xb7/0x1f0
[  556.450413][T23017]  inet6_addr_modify+0x573/0xca0
[  556.450536][T23017]  ? igmp6_group_added+0xe0/0x320
[  556.450561][T23017]  ? __rcu_read_unlock+0x4e/0x70
[  556.450584][T23017]  ? ipv6_get_ifaddr+0x382/0x3c0
[  556.450689][T23017]  inet6_rtm_newaddr+0x7d5/0x9b0
[  556.450737][T23017]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  556.450767][T23017]  rtnetlink_rcv_msg+0x64b/0x720
[  556.450868][T23017]  netlink_rcv_skb+0x123/0x220
[  556.450909][T23017]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  556.450944][T23017]  rtnetlink_rcv+0x1c/0x30
[  556.450965][T23017]  netlink_unicast+0x5c0/0x690
[  556.451038][T23017]  netlink_sendmsg+0x5c8/0x6f0
[  556.451152][T23017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  556.451192][T23017]  ____sys_sendmsg+0x563/0x5b0
[  556.451240][T23017]  ___sys_sendmsg+0x195/0x1e0
[  556.451310][T23017]  __x64_sys_sendmsg+0xd4/0x160
[  556.451425][T23017]  x64_sys_call+0x194c/0x3020
[  556.451516][T23017]  do_syscall_64+0x12c/0x370
[  556.451618][T23017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.451647][T23017] RIP: 0033:0x7f895c4ec799
[  556.451668][T23017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.451692][T23017] RSP: 002b:00007f895af1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  556.451775][T23017] RAX: ffffffffffffffda RBX: 00007f895c766090 RCX: 00007f895c4ec799
[  556.451795][T23017] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  556.451849][T23017] RBP: 00007f895af1e090 R08: 0000000000000000 R09: 0000000000000000
[  556.451867][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.451883][T23017] R13: 00007f895c766128 R14: 00007f895c766090 R15: 00007fff0169ad98
[  556.451909][T23017]  </TASK>
[  556.823842][T23024] lo speed is unknown, defaulting to 1000
[  557.342062][T23037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.351291][T23037] tipc: Resetting bearer <eth:syzkaller0>
[  557.381353][T23034] tipc: Disabling bearer <eth:syzkaller0>
[  557.406877][T23039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.414721][T23039] syzkaller0: entered promiscuous mode
[  557.438641][T23039] syzkaller0: entered allmulticast mode
[  557.638533][T23055] tipc: Resetting bearer <eth:syzkaller0>
[  557.662967][T23038] tipc: Resetting bearer <eth:syzkaller0>
[  557.690946][T23038] tipc: Disabling bearer <eth:syzkaller0>
[  557.717401][T23058] syzkaller0: entered promiscuous mode
[  557.723337][T23058] syzkaller0: entered allmulticast mode
[  557.770996][T23060] loop3: detected capacity change from 0 to 512
[  557.816777][T23060] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  557.826079][T23060] EXT4-fs (loop3): orphan cleanup on readonly fs
[  557.838977][T23060] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.6374: corrupted inode contents
[  557.853557][T23060] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  557.854132][T23060] EXT4-fs (loop3): Remounting filesystem read-only
[  557.863673][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  557.863801][    C0] EXT4-fs (loop3): initial error at time 1774412527: ext4_do_update_inode:5569: inode 16
[  557.863929][    C0] EXT4-fs (loop3): last error at time 1774412527: ext4_do_update_inode:5569: inode 16
[  557.906690][   T28] audit: type=1400 audit(1774412527.643:12099): avc:  denied  { mounton } for  pid=23059 comm="syz.3.6374" path="/164/file0" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  557.941825][T23060] EXT4-fs (loop3): 1 truncate cleaned up
[  558.006206][T23067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6377'.
[  558.015628][T10699] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  558.026555][T10699] Quota error (device loop3): write_blk: dquota write failed
[  558.034052][T10699] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  558.049402][T10699] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  558.060941][T10699] Quota error (device loop3): write_blk: dquota write failed
[  558.068740][T10699] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[  558.079022][T10699] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  558.089524][T10699] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  558.098944][T10699] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  558.135765][T23060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  558.169367][T23060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.421359][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6382'.
[  558.505923][T23090] syzkaller0: entered promiscuous mode
[  558.778510][T23102] syzkaller0: entered promiscuous mode
[  558.838281][T23102] syzkaller0: entered allmulticast mode
[  558.905853][T23111] loop3: detected capacity change from 0 to 512
[  558.945803][T23111] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  559.016630][T23111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.025524][T23111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.354624][T23126] syzkaller0: entered promiscuous mode
[  559.372019][T23126] syzkaller0: entered allmulticast mode
[  559.401695][T23126] 0: reclassify loop, rule prio 0, protocol 800
[  559.695798][T23155] syzkaller0: entered promiscuous mode
[  559.713645][T23155] syzkaller0: entered allmulticast mode
[  560.511240][   T28] audit: type=1326 audit(1774412530.178:12100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  560.539062][   T28] audit: type=1326 audit(1774412530.178:12101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.041412][   T28] audit: type=1326 audit(1774412530.178:12102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.066010][   T28] audit: type=1326 audit(1774412530.178:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.090204][   T28] audit: type=1326 audit(1774412530.178:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.118381][   T28] audit: type=1326 audit(1774412530.178:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.142654][   T28] audit: type=1326 audit(1774412530.178:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.168188][   T28] audit: type=1326 audit(1774412530.178:12107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.192685][   T28] audit: type=1326 audit(1774412530.178:12108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.246993][   T28] audit: type=1326 audit(1774412530.178:12109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23143 comm="syz.4.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7fc00000
[  561.352055][T23200] syzkaller0: entered promiscuous mode
[  561.358300][T23200] syzkaller0: entered allmulticast mode
[  561.544428][T23211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6423'.
[  561.666643][T23216] syzkaller0: entered promiscuous mode
[  561.667142][T23215] vhci_hcd vhci_hcd.4: invalid port number 9
[  561.672418][T23216] syzkaller0: entered allmulticast mode
[  563.725773][T23183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  563.791503][T23233] random: crng reseeded on system resumption
[  563.802871][T23234] loop4: detected capacity change from 0 to 764
[  563.903380][T23242] syzkaller0: entered promiscuous mode
[  563.923750][T23242] syzkaller0: entered allmulticast mode
[  563.948693][T23242] FAULT_INJECTION: forcing a failure.
[  563.948693][T23242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.968761][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.1.6432 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  563.968801][T23242] Tainted: [W]=WARN
[  563.968857][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  563.968874][T23242] Call Trace:
[  563.968883][T23242]  <TASK>
[  563.968893][T23242]  __dump_stack+0x1d/0x30
[  563.968965][T23242]  dump_stack_lvl+0x95/0xd0
[  563.968995][T23242]  dump_stack+0x15/0x1b
[  563.969021][T23242]  should_fail_ex+0x263/0x280
[  563.969048][T23242]  should_fail+0xb/0x20
[  563.969183][T23242]  should_fail_usercopy+0x1a/0x20
[  563.969225][T23242]  _copy_from_user+0x1c/0xb0
[  563.969265][T23242]  sock_do_ioctl+0xe5/0x230
[  563.969368][T23242]  sock_ioctl+0x41b/0x610
[  563.969455][T23242]  ? mutex_lock+0x57/0x90
[  563.969495][T23242]  ? __pfx_sock_ioctl+0x10/0x10
[  563.969517][T23242]  __se_sys_ioctl+0xce/0x140
[  563.969541][T23242]  __x64_sys_ioctl+0x43/0x50
[  563.969585][T23242]  x64_sys_call+0x1563/0x3020
[  563.969689][T23242]  do_syscall_64+0x12c/0x370
[  563.969727][T23242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.969752][T23242] RIP: 0033:0x7ff61d22c799
[  563.969768][T23242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.969905][T23242] RSP: 002b:00007ff61bc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  563.969933][T23242] RAX: ffffffffffffffda RBX: 00007ff61d4a5fa0 RCX: 00007ff61d22c799
[  563.969951][T23242] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000007
[  563.969990][T23242] RBP: 00007ff61bc87090 R08: 0000000000000000 R09: 0000000000000000
[  563.970003][T23242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.970015][T23242] R13: 00007ff61d4a6038 R14: 00007ff61d4a5fa0 R15: 00007ffc4afe0d58
[  563.970039][T23242]  </TASK>
[  564.225903][T23260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  564.236534][T23260] syzkaller0: entered promiscuous mode
[  564.269143][T23260] syzkaller0: entered allmulticast mode
[  564.278229][T23259] tipc: Resetting bearer <eth:syzkaller0>
[  564.300726][T23259] tipc: Disabling bearer <eth:syzkaller0>
[  564.378723][T23276] syzkaller0: entered promiscuous mode
[  564.384583][T23276] syzkaller0: entered allmulticast mode
[  564.525915][T23280] loop8: detected capacity change from 0 to 512
[  564.561477][T23280] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  564.570314][T23280] EXT4-fs (loop8): orphan cleanup on readonly fs
[  564.578266][T23280] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.6443: corrupted inode contents
[  564.591142][T23280] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  564.591356][T23280] EXT4-fs (loop8): Remounting filesystem read-only
[  564.600972][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  564.601013][    C0] EXT4-fs (loop8): initial error at time 1774412534: ext4_do_update_inode:5569: inode 16
[  564.601038][    C0] EXT4-fs (loop8): last error at time 1774412534: ext4_do_update_inode:5569: inode 16
[  564.639270][T23280] EXT4-fs (loop8): 1 truncate cleaned up
[  564.645368][T10685] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  564.656725][T10685] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  564.667917][T10685] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  564.679382][T23280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  564.713180][T20950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.909635][T23300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.935407][T23300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.066180][T23303] syzkaller0: entered promiscuous mode
[  565.071933][T23303] syzkaller0: entered allmulticast mode
[  565.080664][T23303] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6449'.
[  565.806528][T23310] syzkaller0: entered promiscuous mode
[  565.812597][T23310] syzkaller0: entered allmulticast mode
[  566.266348][T23335] loop4: detected capacity change from 0 to 128
[  566.302529][T23337] hsr0: entered allmulticast mode
[  566.307831][T23337] hsr_slave_0: entered allmulticast mode
[  566.313902][T23337] hsr_slave_1: entered allmulticast mode
[  566.320243][T23337] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6460'.
[  566.329995][T23337] hsr_slave_0: left promiscuous mode
[  566.336193][T23337] hsr_slave_1: left promiscuous mode
[  566.345612][T23337] hsr0 (unregistering): left allmulticast mode
[  566.462466][T23340] program syz.4.6461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  566.472805][   T28] kauditd_printk_skb: 68 callbacks suppressed
[  566.472824][   T28] audit: type=1400 audit(1774412535.762:12172): avc:  denied  { ioctl } for  pid=23339 comm="syz.4.6461" path="socket:[120294]" dev="sockfs" ino=120294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  566.525903][T23342] loop4: detected capacity change from 0 to 512
[  566.532725][T23342] ext4: Unknown parameter 'fowner'
[  566.582167][T23344] syzkaller0: entered promiscuous mode
[  566.587765][T23344] syzkaller0: entered allmulticast mode
[  566.775691][T23351] random: crng reseeded on system resumption
[  566.858901][T23351] netlink: 'syz.4.6466': attribute type 30 has an invalid length.
[  566.868140][   T28] audit: type=1400 audit(1774412536.136:12173): avc:  denied  { create } for  pid=23349 comm="syz.4.6466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  567.471716][T23264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  567.720227][T23369] syzkaller0: entered promiscuous mode
[  567.736615][T23369] syzkaller0: entered allmulticast mode
[  567.761760][T23369] 0: reclassify loop, rule prio 0, protocol 800
[  567.843402][T23371] syzkaller0: entered promiscuous mode
[  567.854582][T23371] syzkaller0: entered allmulticast mode
[  568.096604][T23408] loop4: detected capacity change from 0 to 128
[  568.105249][T23408] FAT-fs (loop4): Directory bread(block 524322) failed
[  568.122937][T23408] FAT-fs (loop4): Directory bread(block 524323) failed
[  568.131598][T23408] FAT-fs (loop4): Directory bread(block 524324) failed
[  568.139177][T23408] FAT-fs (loop4): Directory bread(block 524325) failed
[  568.147068][T23408] FAT-fs (loop4): Directory bread(block 524326) failed
[  568.154409][T23408] FAT-fs (loop4): Directory bread(block 524327) failed
[  568.173816][T23408] FAT-fs (loop4): Directory bread(block 524328) failed
[  568.183941][T23408] FAT-fs (loop4): Directory bread(block 524329) failed
[  568.185003][T23410] sit0: mtu less than device minimum
[  568.190941][   T28] audit: type=1400 audit(1774412537.362:12174): avc:  denied  { ioctl } for  pid=23409 comm="syz.8.6487" path="socket:[120389]" dev="sockfs" ino=120389 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  568.225557][T23408] FAT-fs (loop4): Directory bread(block 524322) failed
[  568.232730][T23408] FAT-fs (loop4): Directory bread(block 524323) failed
[  568.338837][T23414] syzkaller0: entered promiscuous mode
[  568.344839][T23414] syzkaller0: entered allmulticast mode
[  568.362021][T23414] 0: reclassify loop, rule prio 0, protocol 800
[  568.455801][T23421] loop8: detected capacity change from 0 to 128
[  568.463063][T23421] FAT-fs (loop8): Directory bread(block 524322) failed
[  568.480909][T23421] FAT-fs (loop8): Directory bread(block 524323) failed
[  568.488971][T23421] FAT-fs (loop8): Directory bread(block 524324) failed
[  568.496188][T23421] FAT-fs (loop8): Directory bread(block 524325) failed
[  568.503444][T23421] FAT-fs (loop8): Directory bread(block 524326) failed
[  568.510695][T23421] FAT-fs (loop8): Directory bread(block 524327) failed
[  568.517821][T23421] FAT-fs (loop8): Directory bread(block 524328) failed
[  568.524903][T23421] FAT-fs (loop8): Directory bread(block 524329) failed
[  568.532516][T23421] FAT-fs (loop8): Directory bread(block 524322) failed
[  568.540072][T23421] FAT-fs (loop8): Directory bread(block 524323) failed
[  568.548291][T23421] FAULT_INJECTION: forcing a failure.
[  568.548291][T23421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.562408][T23421] CPU: 0 UID: 0 PID: 23421 Comm: syz.8.6491 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  568.562490][T23421] Tainted: [W]=WARN
[  568.562499][T23421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  568.562516][T23421] Call Trace:
[  568.562525][T23421]  <TASK>
[  568.562535][T23421]  __dump_stack+0x1d/0x30
[  568.562569][T23421]  dump_stack_lvl+0x95/0xd0
[  568.562603][T23421]  dump_stack+0x15/0x1b
[  568.562624][T23421]  should_fail_ex+0x263/0x280
[  568.562650][T23421]  should_fail+0xb/0x20
[  568.562716][T23421]  should_fail_usercopy+0x1a/0x20
[  568.562816][T23421]  strncpy_from_user+0x27/0x250
[  568.562843][T23421]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  568.562874][T23421]  do_getname+0x59/0x1c0
[  568.562948][T23421]  getname_flags+0x1d/0x30
[  568.562969][T23421]  user_statfs+0x42/0x120
[  568.563023][T23421]  __x64_sys_statfs+0x65/0xf0
[  568.563068][T23421]  ? fput+0x8f/0xc0
[  568.563130][T23421]  ? ksys_write+0x194/0x1a0
[  568.563182][T23421]  x64_sys_call+0x29ba/0x3020
[  568.563216][T23421]  do_syscall_64+0x12c/0x370
[  568.563248][T23421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.563275][T23421] RIP: 0033:0x7f3dbd75c799
[  568.563290][T23421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.563321][T23421] RSP: 002b:00007f3dbc1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[  568.563386][T23421] RAX: ffffffffffffffda RBX: 00007f3dbd9d5fa0 RCX: 00007f3dbd75c799
[  568.563404][T23421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000ac0
[  568.563441][T23421] RBP: 00007f3dbc1b7090 R08: 0000000000000000 R09: 0000000000000000
[  568.563453][T23421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.563533][T23421] R13: 00007f3dbd9d6038 R14: 00007f3dbd9d5fa0 R15: 00007fff0517a148
[  568.563554][T23421]  </TASK>
[  568.929837][T23426] syzkaller0: entered promiscuous mode
[  568.935629][T23426] syzkaller0: entered allmulticast mode
[  569.055524][T23428] usb usb7: usbfs: process 23428 (syz.1.6494) did not claim interface 0 before use
[  569.303986][T23441] syzkaller0: entered promiscuous mode
[  569.309598][T23441] syzkaller0: entered allmulticast mode
[  571.131658][T23387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  571.322591][T23456] syzkaller0: entered promiscuous mode
[  571.328629][T23456] syzkaller0: entered allmulticast mode
[  571.344620][T23452] usb usb7: usbfs: process 23452 (syz.7.6505) did not claim interface 0 before use
[  571.828761][T23471] tipc: Started in network mode
[  571.856789][T23469] netlink: 'syz.7.6510': attribute type 2 has an invalid length.
[  571.878867][T23471] tipc: Node identity de11b3bd699b, cluster identity 4711
[  571.892204][T23471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.911708][T23477] syzkaller0: entered promiscuous mode
[  571.934286][T23477] syzkaller0: entered allmulticast mode
[  571.978179][T23470] tipc: Resetting bearer <eth:syzkaller0>
[  571.996345][T23470] tipc: Disabling bearer <eth:syzkaller0>
[  572.214972][T23495] usb usb7: usbfs: process 23495 (syz.8.6518) did not claim interface 0 before use
[  572.332098][T23509] loop8: detected capacity change from 0 to 512
[  572.373708][T23502] syzkaller0: entered promiscuous mode
[  572.379893][T23502] syzkaller0: entered allmulticast mode
[  572.741431][T23528] FAULT_INJECTION: forcing a failure.
[  572.741431][T23528] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.976532][T23528] CPU: 0 UID: 0 PID: 23528 Comm: syz.4.6529 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  572.976574][T23528] Tainted: [W]=WARN
[  572.976584][T23528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  572.976714][T23528] Call Trace:
[  572.976721][T23528]  <TASK>
[  572.976729][T23528]  __dump_stack+0x1d/0x30
[  572.976756][T23528]  dump_stack_lvl+0x95/0xd0
[  572.976781][T23528]  dump_stack+0x15/0x1b
[  572.976810][T23528]  should_fail_ex+0x263/0x280
[  572.976898][T23528]  should_fail+0xb/0x20
[  572.976921][T23528]  should_fail_usercopy+0x1a/0x20
[  572.976948][T23528]  _copy_from_user+0x1c/0xb0
[  572.977025][T23528]  do_handle_open+0x6d/0x790
[  572.977065][T23528]  __x64_sys_open_by_handle_at+0x44/0x50
[  572.977106][T23528]  x64_sys_call+0x153d/0x3020
[  572.977137][T23528]  do_syscall_64+0x12c/0x370
[  572.977210][T23528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.977236][T23528] RIP: 0033:0x7f5af202c799
[  572.977256][T23528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.977278][T23528] RSP: 002b:00007f5af0a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  572.977298][T23528] RAX: ffffffffffffffda RBX: 00007f5af22a5fa0 RCX: 00007f5af202c799
[  572.977337][T23528] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000001
[  572.977353][T23528] RBP: 00007f5af0a7f090 R08: 0000000000000000 R09: 0000000000000000
[  572.977369][T23528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.977381][T23528] R13: 00007f5af22a6038 R14: 00007f5af22a5fa0 R15: 00007ffea2b9c258
[  572.977480][T23528]  </TASK>
[  573.178100][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6530'.
[  573.443466][T23543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6532'.
[  573.466238][T23545] usb usb7: usbfs: process 23545 (syz.4.6534) did not claim interface 0 before use
[  573.585321][T23553] syzkaller0: entered promiscuous mode
[  573.591354][T23553] syzkaller0: entered allmulticast mode
[  573.723040][T23561] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.730495][T23561] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.782941][T23561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.793654][T23561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  573.857901][T10706] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.871470][T10706] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.890767][T10706] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.903417][T10685] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.932758][T23574] usb usb7: usbfs: process 23574 (syz.1.6545) did not claim interface 0 before use
[  574.045211][T23582] loop4: detected capacity change from 0 to 512
[  574.190943][T23582] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6548: invalid indirect mapped block 4294967295 (level 1)
[  574.221782][T23582] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.222048][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  574.238061][    C0] EXT4-fs (loop4): initial error at time 1774412543: ext4_free_branches:1023: inode 11
[  574.248010][    C0] EXT4-fs (loop4): last error at time 1774412543: ext4_free_branches:1023: inode 11
[  574.299751][T23582] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6548: invalid indirect mapped block 4294967295 (level 1)
[  574.341275][T23582] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.341621][T23582] EXT4-fs (loop4): 2 truncates cleaned up
[  574.377037][T23582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.399696][T23582] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6548'.
[  574.409527][T23582] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6548'.
[  574.489739][T23594] syzkaller0: entered promiscuous mode
[  574.505481][T23594] syzkaller0: entered allmulticast mode
[  574.506894][T22658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.880238][T23605] usb usb7: usbfs: process 23605 (syz.8.6556) did not claim interface 0 before use
[  575.519441][T23508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  575.613893][T23625] lo speed is unknown, defaulting to 1000
[  575.754591][T23632] usb usb7: usbfs: process 23632 (syz.7.6567) did not claim interface 0 before use
[  575.889009][T23639] syzkaller0: entered promiscuous mode
[  575.917058][T23639] syzkaller0: entered allmulticast mode
[  576.573797][T23656] sctp: [Deprecated]: syz.8.6574 (pid 23656) Use of struct sctp_assoc_value in delayed_ack socket option.
[  576.573797][T23656] Use struct sctp_sack_info instead
[  576.685206][T23656] sctp: [Deprecated]: syz.8.6574 (pid 23656) Use of struct sctp_assoc_value in delayed_ack socket option.
[  576.685206][T23656] Use struct sctp_sack_info instead
[  576.776456][T23662] syzkaller0: entered promiscuous mode
[  576.813689][T23662] syzkaller0: entered allmulticast mode
[  576.831060][T23662] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6576'.
[  576.965571][T23669] lo speed is unknown, defaulting to 1000
[  577.613762][T23682] loop8: detected capacity change from 0 to 512
[  577.690690][T23685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6585'.
[  577.705579][T23679] syzkaller0: entered promiscuous mode
[  577.712156][T23679] syzkaller0: entered allmulticast mode
[  577.806635][T23689] netlink: 'syz.3.6586': attribute type 4 has an invalid length.
[  577.825501][T23689] netlink: 'syz.3.6586': attribute type 30 has an invalid length.
[  578.081050][T23700] syzkaller0: entered promiscuous mode
[  578.092226][T23700] syzkaller0: entered allmulticast mode
[  578.222427][T23700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6591'.
[  578.259284][T23704] loop3: detected capacity change from 0 to 512
[  578.315779][T23704] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  578.375250][T23704] EXT4-fs (loop3): 1 orphan inode deleted
[  578.381755][T23704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  578.398380][T23711] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6593'.
[  578.419614][T20632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.666179][T23718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6597'.
[  578.714626][T23721] FAULT_INJECTION: forcing a failure.
[  578.714626][T23721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  578.750804][T23721] CPU: 0 UID: 0 PID: 23721 Comm: syz.8.6596 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  578.750901][T23721] Tainted: [W]=WARN
[  578.750908][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  578.750921][T23721] Call Trace:
[  578.750927][T23721]  <TASK>
[  578.750934][T23721]  __dump_stack+0x1d/0x30
[  578.750964][T23721]  dump_stack_lvl+0x95/0xd0
[  578.751110][T23721]  dump_stack+0x15/0x1b
[  578.751135][T23721]  should_fail_ex+0x263/0x280
[  578.751171][T23721]  should_fail+0xb/0x20
[  578.751197][T23721]  should_fail_usercopy+0x1a/0x20
[  578.751288][T23721]  _copy_from_user+0x1c/0xb0
[  578.751327][T23721]  ___sys_sendmsg+0xc1/0x1e0
[  578.751432][T23721]  ? path_openat+0x1b01/0x2050
[  578.751489][T23721]  __sys_sendmmsg+0x185/0x320
[  578.751537][T23721]  __x64_sys_sendmmsg+0x57/0x70
[  578.751579][T23721]  x64_sys_call+0x27aa/0x3020
[  578.751646][T23721]  do_syscall_64+0x12c/0x370
[  578.751674][T23721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.751764][T23721] RIP: 0033:0x7f3dbd75c799
[  578.751784][T23721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.751802][T23721] RSP: 002b:00007f3dbc1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  578.751821][T23721] RAX: ffffffffffffffda RBX: 00007f3dbd9d5fa0 RCX: 00007f3dbd75c799
[  578.751837][T23721] RDX: 0000000000000002 RSI: 0000200000003c80 RDI: 0000000000000003
[  578.751907][T23721] RBP: 00007f3dbc1b7090 R08: 0000000000000000 R09: 0000000000000000
[  578.751919][T23721] R10: 0000000000044845 R11: 0000000000000246 R12: 0000000000000001
[  578.751931][T23721] R13: 00007f3dbd9d6038 R14: 00007f3dbd9d5fa0 R15: 00007fff0517a148
[  578.751952][T23721]  </TASK>
[  579.029736][T23727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6601'.
[  579.056981][T23729] syzkaller0: entered promiscuous mode
[  579.092959][T23729] syzkaller0: entered allmulticast mode
[  579.129934][T23729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6603'.
[  579.142693][T23737] loop8: detected capacity change from 0 to 512
[  579.227242][T23737] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  579.245218][T23737] EXT4-fs (loop8): orphan cleanup on readonly fs
[  579.286512][T23737] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.6606: corrupted inode contents
[  579.300988][T23743] syzkaller0: entered promiscuous mode
[  579.314236][T23737] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  579.316395][T23743] syzkaller0: entered allmulticast mode
[  579.325999][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  579.326024][    C0] EXT4-fs (loop8): initial error at time 1774412547: ext4_do_update_inode:5569: inode 16
[  579.326064][    C0] EXT4-fs (loop8): last error at time 1774412547: ext4_do_update_inode:5569: inode 16
[  579.360920][T23737] EXT4-fs (loop8): Remounting filesystem read-only
[  579.384284][T23737] EXT4-fs (loop8): 1 truncate cleaned up
[  579.396883][T10703] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  579.407613][T10703] Quota error (device loop8): write_blk: dquota write failed
[  579.424983][T10703] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries
[  579.441843][T23748] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6609'.
[  579.468016][T10703] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  579.491861][T10703] Quota error (device loop8): write_blk: dquota write failed
[  579.507742][T10703] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list
[  579.518128][T10703] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  579.529472][T10703] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  579.539578][T10703] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  579.550688][T23737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  579.598851][T20950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.840128][T23760] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6615'.
[  579.938496][T23764] syzkaller0: entered promiscuous mode
[  579.954101][T23764] syzkaller0: entered allmulticast mode
[  579.968019][T23764] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6617'.
[  579.996003][   T28] audit: type=1326 audit(1774412548.409:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23734 comm="syz.3.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef19dec799 code=0x7fc00000
[  580.569157][T23788] ipvlan2: entered allmulticast mode
[  580.737516][T23789] lo speed is unknown, defaulting to 1000
[  580.991931][T23795] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6626'.
[  581.143609][T23802] syzkaller0: entered promiscuous mode
[  581.149181][T23802] syzkaller0: entered allmulticast mode
[  581.313822][T23815] syzkaller0: entered promiscuous mode
[  581.319517][T23815] syzkaller0: entered allmulticast mode
[  581.395993][T23815] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6634'.
[  581.431329][T23822] loop3: detected capacity change from 0 to 512
[  581.486215][T23822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  581.500729][T23822] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  581.611003][T23837] loop4: detected capacity change from 0 to 512
[  581.618162][T23835] rdma_op ffff888103db2d80 conn xmit_rdma 0000000000000000
[  581.844233][T23843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6645'.
[  582.092586][   T28] audit: type=1326 audit(1774412550.354:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c4ec799 code=0x7fc00000
[  582.128636][T23835] loop8: detected capacity change from 0 to 764
[  582.267608][T23847] syzkaller0: entered promiscuous mode
[  582.274756][T23847] syzkaller0: entered allmulticast mode
[  582.291764][   T28] audit: type=1326 audit(1774412550.354:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895c4ec799 code=0x7fc00000
[  582.317653][   T28] audit: type=1326 audit(1774412550.354:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c4ec799 code=0x7fc00000
[  582.440561][T20632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.497620][T23835] rock: directory entry would overflow storage
[  582.509434][T23835] rock: sig=0x4f50, size=4, remaining=3
[  582.515569][T23835] iso9660: Corrupted directory entry in block 6 of inode 1792
[  582.639936][T23865] ip6tnl1: entered promiscuous mode
[  582.645779][T23865] ip6tnl1: entered allmulticast mode
[  582.657292][T23866] syzkaller0: entered promiscuous mode
[  582.663270][T23866] syzkaller0: entered allmulticast mode
[  582.696823][T23866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6652'.
[  582.820342][T23877] syzkaller0: entered promiscuous mode
[  582.825974][T23877] syzkaller0: entered allmulticast mode
[  583.299379][T23903] syzkaller0: entered promiscuous mode
[  583.305699][T23903] syzkaller0: entered allmulticast mode
[  583.373519][T23907] syzkaller0: entered promiscuous mode
[  583.379597][T23907] syzkaller0: entered allmulticast mode
[  583.412582][T23911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  583.429809][T23911] syzkaller0: entered promiscuous mode
[  583.435478][T23911] syzkaller0: entered allmulticast mode
[  583.451434][T23911] tipc: Resetting bearer <eth:syzkaller0>
[  583.477206][T23910] tipc: Resetting bearer <eth:syzkaller0>
[  583.520203][T23910] tipc: Disabling bearer <eth:syzkaller0>
[  583.814417][T23929] syzkaller0: entered promiscuous mode
[  583.820278][T23929] syzkaller0: entered allmulticast mode
[  583.904143][T23938] syzkaller0: entered promiscuous mode
[  583.912669][T23938] syzkaller0: entered allmulticast mode
[  583.936223][T23941] syzkaller0: entered promiscuous mode
[  583.943931][T23941] syzkaller0: entered allmulticast mode
[  584.121577][T23957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  584.182975][T23950] syzkaller0: entered promiscuous mode
[  584.188765][T23950] syzkaller0: entered allmulticast mode
[  584.198615][T23950] tipc: Resetting bearer <eth:syzkaller0>
[  584.205730][T23949] tipc: Resetting bearer <eth:syzkaller0>
[  584.213006][T23949] tipc: Disabling bearer <eth:syzkaller0>
[  584.255008][T23965] loop3: detected capacity change from 0 to 512
[  584.313820][T23969] __nla_validate_parse: 9 callbacks suppressed
[  584.313878][T23969] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6697'.
[  584.779714][T23982] syzkaller0: entered promiscuous mode
[  584.805765][T23982] syzkaller0: entered allmulticast mode
[  584.829930][T23983] syzkaller0: entered promiscuous mode
[  584.836284][T23983] syzkaller0: entered allmulticast mode
[  584.844446][T23983] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6701'.
[  584.993141][T23989] lo speed is unknown, defaulting to 1000
[  585.025947][T23991] loop8: detected capacity change from 0 to 512
[  585.300543][T23991] EXT4-fs (loop8): failed to initialize system zone (-117)
[  585.344135][T23991] EXT4-fs (loop8): mount failed
[  585.441647][T23989] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6704'.
[  585.525549][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6704'.
[  585.702420][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6705'.
[  585.809169][   T28] kauditd_printk_skb: 91 callbacks suppressed
[  585.809185][   T28] audit: type=1326 audit(1774412553.843:12270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  585.878453][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6708'.
[  585.933183][T24005] bridge2: entered promiscuous mode
[  585.938830][T24005] bridge2: entered allmulticast mode
[  585.955613][T24005] loop7: detected capacity change from 0 to 2048
[  585.986894][T24012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  585.996449][   T28] audit: type=1326 audit(1774412554.021:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24013 comm="syz.1.6712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff61d22c799 code=0x0
[  586.028800][T24012] syzkaller0: entered promiscuous mode
[  586.034568][T24012] syzkaller0: entered allmulticast mode
[  586.046378][T20657]  loop7: p3 p4 < >
[  586.050892][T20657] loop7: p3 start 11362048 is beyond EOD, truncated
[  586.069402][T24005]  loop7: p3 p4 < >
[  586.074095][T24005] loop7: p3 start 11362048 is beyond EOD, truncated
[  586.095697][T24012] tipc: Resetting bearer <eth:syzkaller0>
[  586.109772][T24011] tipc: Resetting bearer <eth:syzkaller0>
[  586.129226][T24011] tipc: Disabling bearer <eth:syzkaller0>
[  586.157234][T20657] udevd[20657]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  586.230871][T24021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.279855][T24021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.323856][T24026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6717'.
[  586.348240][T24021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.369661][T24029] loop8: detected capacity change from 0 to 512
[  586.382152][T24029] ext4: Unknown parameter 'fowner>00000000004294967295'
[  586.395286][T24021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.567496][T24031] syzkaller0: entered promiscuous mode
[  586.592058][T24031] syzkaller0: entered allmulticast mode
[  586.600494][T24034] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6716'.
[  586.637557][T24039] loop3: detected capacity change from 0 to 512
[  586.744737][T24042] netlink: 172 bytes leftover after parsing attributes in process `syz.8.6720'.
[  586.990296][T24047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24047 comm=syz.1.6722
[  587.294484][T24060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6728'.
[  587.357951][T24061] lo speed is unknown, defaulting to 1000
[  587.850383][T24074] ipvlan2: entered allmulticast mode
[  588.016169][T24075] lo speed is unknown, defaulting to 1000
[  588.655407][   T28] audit: type=1400 audit(1774412556.509:12272): avc:  denied  { ioctl } for  pid=24101 comm="syz.3.6744" path="socket:[123484]" dev="sockfs" ino=123484 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  588.902641][   T28] audit: type=1400 audit(1774412556.734:12273): avc:  denied  { getopt } for  pid=24116 comm="syz.3.6748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  589.031162][T24122] ipvlan2: entered allmulticast mode
[  589.171966][T24123] lo speed is unknown, defaulting to 1000
[  589.430557][   T28] audit: type=1400 audit(1774412556.743:12274): avc:  denied  { nlmsg_read } for  pid=24114 comm="syz.1.6749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  589.613340][T24136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24136 comm=syz.3.6752
[  589.806669][T24136] netlink: 'syz.3.6752': attribute type 1 has an invalid length.
[  589.879209][   T28] audit: type=1400 audit(1774412557.650:12275): avc:  denied  { mount } for  pid=24144 comm="syz.4.6755" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  589.928398][T24143] bond1: (slave gretap1): making interface the new active one
[  589.938894][T24143] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  589.960516][T24146] vlan2: entered allmulticast mode
[  589.972453][T24146] bond1: entered allmulticast mode
[  590.002737][T24146] gretap1: entered allmulticast mode
[  590.036560][T24136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=24136 comm=syz.3.6752
[  590.048852][T24146] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  590.083322][T24141] syzkaller0: entered promiscuous mode
[  590.089126][T24141] syzkaller0: entered allmulticast mode
[  590.194210][T24153] syzkaller0: entered promiscuous mode
[  590.200499][T24153] syzkaller0: entered allmulticast mode
[  590.248896][T24153] __nla_validate_parse: 3 callbacks suppressed
[  590.248918][T24153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6757'.
[  590.300444][T24161] loop7: detected capacity change from 0 to 512
[  590.323354][T24161] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  590.378973][T24154] lo speed is unknown, defaulting to 1000
[  590.570369][T24170] loop3: detected capacity change from 0 to 512
[  590.628271][T24170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.689171][T24170] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  591.390803][T20632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.489577][T24192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6767'.
[  591.540871][   T28] audit: type=1400 audit(1774412559.203:12276): avc:  denied  { map } for  pid=24191 comm="syz.3.6768" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  591.591513][   T28] audit: type=1400 audit(1774412559.250:12277): avc:  denied  { watch watch_reads } for  pid=24198 comm="syz.4.6769" path="/80/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  591.675875][T24201] syzkaller0: entered promiscuous mode
[  591.690710][T24201] syzkaller0: entered allmulticast mode
[  591.710334][T24201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6770'.
[  591.776812][T24203] loop3: detected capacity change from 0 to 512
[  592.449227][T24224] netlink: 'syz.7.6779': attribute type 3 has an invalid length.
[  592.481149][T24224] netlink: 'syz.7.6779': attribute type 3 has an invalid length.
[  592.513335][T24224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6779'.
[  592.751669][T24235] syzkaller0: entered promiscuous mode
[  592.757416][T24235] syzkaller0: entered allmulticast mode
[  592.880484][T24236] ipvlan2: entered allmulticast mode
[  592.954464][T24237] lo speed is unknown, defaulting to 1000
[  593.088238][T24235] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6782'.
[  593.099172][T24227] loop3: detected capacity change from 0 to 256
[  593.337347][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6784'.
[  593.379787][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6784'.
[  593.614619][T24245] netlink: 'syz.1.6785': attribute type 5 has an invalid length.
[  593.663298][T24247] syzkaller0: entered promiscuous mode
[  593.671003][T24245] netlink: 'syz.1.6785': attribute type 21 has an invalid length.
[  593.679018][T24247] syzkaller0: entered allmulticast mode
[  593.694047][T24245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6785'.
[  593.717314][   T28] audit: type=1400 audit(1774412561.242:12278): avc:  denied  { write } for  pid=24244 comm="syz.1.6785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  593.768372][T24249] FAULT_INJECTION: forcing a failure.
[  593.768372][T24249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  593.823396][T24249] CPU: 0 UID: 0 PID: 24249 Comm: syz.1.6787 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  593.823430][T24249] Tainted: [W]=WARN
[  593.823439][T24249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  593.823455][T24249] Call Trace:
[  593.823464][T24249]  <TASK>
[  593.823505][T24249]  __dump_stack+0x1d/0x30
[  593.823534][T24249]  dump_stack_lvl+0x95/0xd0
[  593.823620][T24249]  dump_stack+0x15/0x1b
[  593.823648][T24249]  should_fail_ex+0x263/0x280
[  593.823683][T24249]  should_fail+0xb/0x20
[  593.823708][T24249]  should_fail_usercopy+0x1a/0x20
[  593.823780][T24249]  _copy_to_user+0x20/0xa0
[  593.823845][T24249]  simple_read_from_buffer+0xb5/0x130
[  593.823925][T24249]  proc_fail_nth_read+0x10e/0x150
[  593.823957][T24249]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  593.824081][T24249]  vfs_read+0x1ab/0x7f0
[  593.824124][T24249]  ? __rcu_read_unlock+0x4e/0x70
[  593.824149][T24249]  ? __fget_files+0x184/0x1c0
[  593.824255][T24249]  ? mutex_lock+0x57/0x90
[  593.824417][T24249]  ksys_read+0xdc/0x1a0
[  593.824437][T24249]  __x64_sys_read+0x40/0x50
[  593.824499][T24249]  x64_sys_call+0x2886/0x3020
[  593.824567][T24249]  do_syscall_64+0x12c/0x370
[  593.824593][T24249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.824623][T24249] RIP: 0033:0x7ff61d1ecfce
[  593.824642][T24249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  593.824701][T24249] RSP: 002b:00007ff61bc86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  593.824722][T24249] RAX: ffffffffffffffda RBX: 00007ff61bc876c0 RCX: 00007ff61d1ecfce
[  593.824736][T24249] RDX: 000000000000000f RSI: 00007ff61bc870a0 RDI: 0000000000000006
[  593.824749][T24249] RBP: 00007ff61bc87090 R08: 0000000000000000 R09: 0000000000000000
[  593.824765][T24249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  593.824783][T24249] R13: 00007ff61d4a6038 R14: 00007ff61d4a5fa0 R15: 00007ffc4afe0d58
[  593.824827][T24249]  </TASK>
[  595.172676][T24268] batadv0: entered promiscuous mode
[  595.379959][T24268] macvtap1: entered promiscuous mode
[  595.386112][T24268] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  595.395620][T24268] batadv0: left promiscuous mode
[  595.430656][T24270] loop7: detected capacity change from 0 to 2048
[  595.497604][T24270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.666441][T24278] lo speed is unknown, defaulting to 1000
[  595.731752][T24276] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  595.772317][T24286] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6795'.
[  596.003072][T24286] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6795'.
[  596.377658][T24298] syzkaller0: entered promiscuous mode
[  596.391722][T24298] syzkaller0: entered allmulticast mode
[  596.582812][T24302] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  597.252577][T20187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.448553][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6807'.
[  597.518840][   T28] audit: type=1326 audit(1774412564.806:12279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7ffc0000
[  597.543887][   T28] audit: type=1326 audit(1774412564.825:12280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7ffc0000
[  597.568797][   T28] audit: type=1326 audit(1774412564.825:12281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7ffc0000
[  597.597874][   T28] audit: type=1326 audit(1774412564.825:12282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ff61d22c799 code=0x7ffc0000
[  597.622781][   T28] audit: type=1326 audit(1774412564.825:12283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7ffc0000
[  597.647164][   T28] audit: type=1326 audit(1774412564.825:12284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7ffc0000
[  597.672384][   T28] audit: type=1326 audit(1774412564.825:12285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff61d1ecfce code=0x7ffc0000
[  597.696709][   T28] audit: type=1326 audit(1774412564.853:12286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff61d1ecfce code=0x7ffc0000
[  597.723616][   T28] audit: type=1326 audit(1774412564.872:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff61d1ecfce code=0x7ffc0000
[  597.748497][   T28] audit: type=1326 audit(1774412564.900:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.1.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff61d1ecfce code=0x7ffc0000
[  598.245804][T24334] lo speed is unknown, defaulting to 1000
[  598.478723][T24340] syzkaller0: entered promiscuous mode
[  598.484606][T24340] syzkaller0: entered allmulticast mode
[  598.496119][T24340] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6811'.
[  598.883260][T24288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  598.988620][T24348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.017966][T24348] +
: renamed from syzkaller0
[  599.023533][T24351] loop4: detected capacity change from 0 to 256
[  599.034730][T24348] tipc: Disabling bearer <eth:syzkaller0>
[  599.044811][T24353] loop8: detected capacity change from 0 to 256
[  599.068404][T24353] vfat: Unknown parameter 'check˥'
[  599.089012][T24351] vfat: Bad value for 'shortname'
[  599.191998][T24360] syzkaller0: entered promiscuous mode
[  599.197748][T24360] syzkaller0: entered allmulticast mode
[  599.287335][T24364] lo speed is unknown, defaulting to 1000
[  599.363477][T24367] geneve1: entered promiscuous mode
[  599.374318][T24377] loop8: detected capacity change from 0 to 512
[  599.456518][T24379] loop7: detected capacity change from 0 to 512
[  599.483463][T24386] ip6gretap0: entered promiscuous mode
[  599.605831][T24391] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6829'.
[  599.624689][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6829'.
[  599.651929][T24391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6829'.
[  599.670393][T24391] loop4: detected capacity change from 0 to 512
[  599.687224][T24398] syzkaller0: entered promiscuous mode
[  599.697595][T24402] loop7: detected capacity change from 0 to 256
[  599.698851][T24398] syzkaller0: entered allmulticast mode
[  599.705733][T24391] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002e018, mo2=0002]
[  599.717800][T24391] System zones: 0-2, 18-18, 34-34
[  599.739460][T24402] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  599.751456][T24391] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  599.773185][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  599.780763][    C0] EXT4-fs (loop4): initial error at time 1774412566: ext4_mb_generate_buddy:1315
[  599.791336][    C0] EXT4-fs (loop4): last error at time 1774412566: ext4_mb_generate_buddy:1315
[  599.792901][T24402] FAULT_INJECTION: forcing a failure.
[  599.792901][T24402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  599.815570][T24391] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6829: corrupted inode contents
[  599.830050][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  599.831106][T24391] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.6829: mark_inode_dirty error
[  599.852103][T24402] CPU: 1 UID: 0 PID: 24402 Comm: syz.7.6833 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  599.852142][T24402] Tainted: [W]=WARN
[  599.852151][T24402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  599.852211][T24402] Call Trace:
[  599.852220][T24402]  <TASK>
[  599.852229][T24402]  __dump_stack+0x1d/0x30
[  599.852265][T24402]  dump_stack_lvl+0x95/0xd0
[  599.852296][T24402]  dump_stack+0x15/0x1b
[  599.852384][T24402]  should_fail_ex+0x263/0x280
[  599.852442][T24402]  should_fail+0xb/0x20
[  599.852469][T24402]  should_fail_usercopy+0x1a/0x20
[  599.852506][T24402]  strncpy_from_user+0x27/0x250
[  599.852526][T24402]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  599.852630][T24402]  do_getname+0x59/0x1c0
[  599.852713][T24402]  getname_flags+0x1d/0x30
[  599.852740][T24402]  do_sys_openat2+0x60/0x130
[  599.852824][T24402]  __x64_sys_open+0xe6/0x110
[  599.852862][T24402]  x64_sys_call+0x14b9/0x3020
[  599.852897][T24402]  do_syscall_64+0x12c/0x370
[  599.852925][T24402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.852999][T24402] RIP: 0033:0x7f895c4ec799
[  599.853058][T24402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.853077][T24402] RSP: 002b:00007f895af3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  599.853098][T24402] RAX: ffffffffffffffda RBX: 00007f895c765fa0 RCX: 00007f895c4ec799
[  599.853158][T24402] RDX: 0000000000000000 RSI: 0000000000080242 RDI: 0000200000000040
[  599.853215][T24402] RBP: 00007f895af3f090 R08: 0000000000000000 R09: 0000000000000000
[  599.853233][T24402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.853247][T24402] R13: 00007f895c766038 R14: 00007f895c765fa0 R15: 00007fff0169ad98
[  599.853272][T24402]  </TASK>
[  599.856311][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.037918][T24391] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6829: corrupted inode contents
[  600.069853][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.165698][T24391] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.6829: mark_inode_dirty error
[  600.265906][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.266260][T24391] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6829: corrupted inode contents
[  600.385338][T24414] syzkaller0: entered promiscuous mode
[  600.391014][T24414] syzkaller0: entered allmulticast mode
[  600.496690][T24417] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  600.519628][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.524244][T24391] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.6829: mark_inode_dirty error
[  600.657957][T24421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6840'.
[  600.709212][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.710339][T24391] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6829: corrupted inode contents
[  600.848449][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.850192][T24391] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  601.344478][T24391] loop4: lost filesystem error report for type 5 error -117
[  601.347360][T24391] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6829: corrupted inode contents
[  601.874388][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  601.874700][T24391] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.6829: mark_inode_dirty error
[  602.351820][T24391] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  602.352088][T24391] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  602.371710][T24391] loop4: lost filesystem error report for type 5 error -117
[  602.372983][T24391] EXT4-fs (loop4): 1 truncate cleaned up
[  602.380857][T24437] loop3: detected capacity change from 0 to 512
[  602.403191][T24391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.416934][T24391] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  602.547343][T10699] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 1
[  602.593007][T24442] syzkaller0: entered promiscuous mode
[  602.598732][T24442] syzkaller0: entered allmulticast mode
[  602.976596][T22658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.167238][T24449] ipvlan2: entered allmulticast mode
[  603.306534][T24450] lo speed is unknown, defaulting to 1000
[  603.708066][T24456] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  603.730012][T24456] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  603.745144][T24456] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  604.005467][T24470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.111992][T24470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.125702][T24470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.142314][T24470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.360375][T24482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6858'.
[  604.446806][T24488] loop4: detected capacity change from 0 to 1024
[  604.462744][T24488] EXT4-fs: test_dummy_encryption option not supported
[  604.476630][T24489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  604.512386][T24489] syzkaller0: entered promiscuous mode
[  604.531245][T24489] syzkaller0: entered allmulticast mode
[  604.645472][T24489] tipc: Resetting bearer <eth:syzkaller0>
[  604.661222][T24494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6862'.
[  604.671690][T24483] tipc: Resetting bearer <eth:syzkaller0>
[  604.680465][T24483] tipc: Disabling bearer <eth:syzkaller0>
[  604.843865][T24495] loop4: detected capacity change from 0 to 512
[  604.934496][   T28] kauditd_printk_skb: 397 callbacks suppressed
[  604.934522][   T28] audit: type=1326 audit(1774412571.532:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.7.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c4ec799 code=0x7fc00000
[  605.133280][T24495] EXT4-fs (loop4): 1 orphan inode deleted
[  605.153669][T24495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.170947][T10706] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  605.184781][T24495] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  605.237538][    T9] IPVS: starting estimator thread 0...
[  605.311711][T24505] syzkaller0: entered promiscuous mode
[  605.328508][T10706] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 1
[  605.390366][T24505] syzkaller0: entered allmulticast mode
[  605.404059][T24503] syzkaller0: entered promiscuous mode
[  605.438647][T24502] IPVS: using max 2496 ests per chain, 124800 per kthread
[  605.596353][T24511] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.612105][T24517] loop3: detected capacity change from 0 to 512
[  605.633980][T24517] EXT4-fs: Mount option(s) incompatible with ext3
[  605.679789][T24511] 8021q: adding VLAN 0 to HW filter on device team0
[  605.714638][T24511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  605.946529][T10706] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.976358][T24529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  606.001359][T24529] syzkaller0: entered promiscuous mode
[  606.028182][T24529] syzkaller0: entered allmulticast mode
[  606.061422][T10706] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.101699][T24529] tipc: Resetting bearer <eth:syzkaller0>
[  606.115423][T24528] tipc: Resetting bearer <eth:syzkaller0>
[  606.137206][T24528] tipc: Disabling bearer <eth:syzkaller0>
[  606.159170][T24527] netlink: 'syz.7.6873': attribute type 1 has an invalid length.
[  606.180645][T10706] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.276615][T10706] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.301715][T24536] syzkaller0: entered promiscuous mode
[  606.311115][T24536] syzkaller0: entered allmulticast mode
[  606.418770][T22658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.710860][T24554] lo speed is unknown, defaulting to 1000
[  606.903851][T10706] bridge_slave_1: left allmulticast mode
[  606.957005][T10706] bridge_slave_1: left promiscuous mode
[  606.987960][T10706] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.054755][T10706] bridge_slave_0: left allmulticast mode
[  607.078003][T10706] bridge_slave_0: left promiscuous mode
[  607.092398][T24564] loop3: detected capacity change from 0 to 512
[  607.101951][T24561] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  607.112743][T10706] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.256163][T24555] loop3: detected capacity change from 0 to 512
[  607.386778][T24555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  607.505106][T24555] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6883: invalid indirect mapped block 4294967295 (level 1)
[  607.519693][T24555] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  607.520169][T24555] EXT4-fs (loop3): Remounting filesystem read-only
[  607.529361][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  607.529385][    C1] EXT4-fs (loop3): initial error at time 1774412574: ext4_free_branches:1023: inode 11
[  607.529419][    C1] EXT4-fs (loop3): last error at time 1774412574: ext4_free_branches:1023: inode 11
[  607.566708][T24555] EXT4-fs (loop3): 2 truncates cleaned up
[  607.574315][T24555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.750543][T10706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  607.759924][T20632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.771596][T10706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  607.782337][T10706] bond0 (unregistering): Released all slaves
[  607.818014][T24531] lo speed is unknown, defaulting to 1000
[  607.838612][T10706] tipc: Disabling bearer <udp:syz1>
[  607.851746][T10706] tipc: Left network mode
[  607.870241][T10706] hsr_slave_0: left promiscuous mode
[  607.883453][T10706] hsr_slave_1: left promiscuous mode
[  607.895926][T10706] veth1_macvtap: left promiscuous mode
[  607.904964][T10706] veth0_macvtap: left promiscuous mode
[  607.930871][T10706] veth1_vlan: left promiscuous mode
[  607.955171][T10706] veth0_vlan: left promiscuous mode
[  608.201590][T10706] team0 (unregistering): Port device team_slave_1 removed
[  608.216190][T10706] team0 (unregistering): Port device team_slave_0 removed
[  608.419353][T24604] can0: slcan on ptm0.
[  608.523786][T24531] chnl_net:caif_netlink_parms(): no params data found
[  608.532352][T24612] loop3: detected capacity change from 0 to 512
[  608.560144][T24612] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  608.581961][T24603] can0 (unregistered): slcan off ptm0.
[  608.606658][T24612] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  608.656657][T24612] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  608.694090][T24612] System zones: 0-2, 18-18, 34-34
[  608.727976][T24612] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6892: bad orphan inode 15
[  608.744435][T24531] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.769569][T24612] loop3: lost filesystem error report for type 5 error -117
[  608.773442][T24612] ext4_test_bit(bit=14, block=18) = 1
[  608.780955][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  608.780983][    C1] EXT4-fs (loop3): initial error at time 1774412575: ext4_orphan_get:1417
[  608.781025][    C1] EXT4-fs (loop3): last error at time 1774412575: ext4_orphan_get:1417
[  608.816591][T24531] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.835794][T24531] bridge_slave_0: entered allmulticast mode
[  608.856415][T24531] bridge_slave_0: entered promiscuous mode
[  608.871138][T24531] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.900259][T24531] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.939962][T24612] is_bad_inode(inode)=0
[  608.944184][T24612] NEXT_ORPHAN(inode)=2264924160
[  608.949861][T24531] bridge_slave_1: entered allmulticast mode
[  608.961831][T24612] max_ino=32
[  608.965926][T24612] i_nlink=0
[  608.969815][T24531] bridge_slave_1: entered promiscuous mode
[  608.976167][T24612] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.6892: corrupted inode contents
[  609.019490][T24612] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  609.021554][T24531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.040163][T24612] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.6892: mark_inode_dirty error
[  609.055064][T24612] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  609.055294][T24612] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.6892: corrupted inode contents
[  609.077229][T24612] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  609.077459][T24612] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.6892: mark_inode_dirty error
[  609.108289][T24612] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  609.108756][T24612] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.6892: mark inode dirty (error -117)
[  609.113805][T24531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.137666][T24612] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  609.140788][   T28] audit: type=1400 audit(1774412575.676:12686): avc:  denied  { read } for  pid=24636 comm="syz.4.6895" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  609.180921][T24612] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117)
[  609.201335][T24612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.214531][T24531] team0: Port device team_slave_0 added
[  609.225609][T24531] team0: Port device team_slave_1 added
[  609.254975][T24531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.268485][T24531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.295356][T24531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.309507][T24648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6898'.
[  609.340034][T24531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.355859][T24531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.533863][T24531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.545106][T24647] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6897'.
[  609.582123][T24662] syzkaller0: entered promiscuous mode
[  609.588186][T24662] syzkaller0: entered allmulticast mode
[  609.685543][T24674] ipvlan2: entered allmulticast mode
[  609.805977][T24675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6892: bg 0: block 80: padding at end of block bitmap is not set
[  609.844170][T24675] ext4: Unknown parameter '�18446744073709551615����0xffffffffffffffff0xffffffffffffffff�5��q+�-���a�R�w��ǔ���&�hӉ8��4�'
[  609.877981][   T28] audit: type=1400 audit(1774412576.321:12687): avc:  denied  { remount } for  pid=24610 comm="syz.3.6892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  609.955450][T24676] lo speed is unknown, defaulting to 1000
[  610.086727][T24531] hsr_slave_0: entered promiscuous mode
[  610.111129][T24531] hsr_slave_1: entered promiscuous mode
[  610.117205][T24531] debugfs: 'hsr0' already exists in 'hsr'
[  610.131924][T24531] Cannot create hsr debugfs directory
[  610.161802][T20632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.232177][T24686] SELinux: failed to load policy
[  610.232686][   T28] audit: type=1400 audit(2000000000.327:12688): avc:  denied  { load_policy } for  pid=24685 comm="syz.3.6904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  610.466260][   T28] audit: type=1326 audit(2000000000.533:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.473133][T24712] netlink: 'syz.4.6909': attribute type 21 has an invalid length.
[  610.518165][T24712] loop4: detected capacity change from 0 to 512
[  610.530705][   T28] audit: type=1326 audit(2000000000.533:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.555826][T24531] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  610.562873][   T28] audit: type=1326 audit(2000000000.533:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.587238][   T28] audit: type=1326 audit(2000000000.533:12692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.611348][   T28] audit: type=1326 audit(2000000000.533:12693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.675764][T24712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  610.699515][T24712] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  610.714372][   T28] audit: type=1326 audit(2000000000.533:12694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.719551][T24531] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  610.757123][   T28] audit: type=1326 audit(2000000000.533:12695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.782110][   T28] audit: type=1326 audit(2000000000.533:12696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.809838][   T28] audit: type=1326 audit(2000000000.533:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.834779][T24531] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  610.842374][   T28] audit: type=1326 audit(2000000000.533:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24671 comm="syz.1.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61d22c799 code=0x7fc00000
[  610.868644][T24531] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  611.014753][T24531] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.029256][T24694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24694 comm=syz.3.6906
[  611.064327][T24531] 8021q: adding VLAN 0 to HW filter on device team0
[  611.074797][T10685] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.082174][T10685] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.103469][T24531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  611.114138][T24531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  611.140374][T10685] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.147598][T10685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.261145][T24531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.282074][T24718] loop3: detected capacity change from 0 to 512
[  611.303255][T24718] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  611.326226][T24718] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  611.464101][T24750] loop7: detected capacity change from 0 to 2048
[  611.491149][T24750] journal_path: Non-blockdev passed as './file0'
[  611.503128][T24750] EXT4-fs: error: could not find journal device path
[  611.606734][T22658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.678334][T24531] veth0_vlan: entered promiscuous mode
[  611.720778][T24531] veth1_vlan: entered promiscuous mode
[  611.756619][T24769] loop4: detected capacity change from 0 to 512
[  611.776303][T24769] EXT4-fs: dax option not supported
[  611.782747][T24531] veth0_macvtap: entered promiscuous mode
[  611.803569][T24531] veth1_macvtap: entered promiscuous mode
[  612.226095][T24776] loop4: detected capacity change from 0 to 128
[  612.299217][T24773] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6919'.
[  612.420600][T24531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.528545][T24531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.552709][T10706] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.566761][T10706] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.591533][T10706] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.605612][T10706] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.643438][T24783] loop7: detected capacity change from 0 to 512
[  612.830703][T24790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24790 comm=syz.7.6922
[  612.963616][T24798] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6876'.
[  613.030751][T24790] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.038016][T24790] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.140557][T24790] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.151658][T24790] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.234208][T10683] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.258488][T10683] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.306564][T10683] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.319771][T10703] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.351515][T24814] loop7: detected capacity change from 0 to 512
[  613.374111][T24814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  613.413972][T24814] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  613.479232][T20187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.552508][T24826] loop3: detected capacity change from 0 to 512
[  614.104232][T24846] ipvlan2: entered allmulticast mode
[  614.110544][T24846] dummy0: entered allmulticast mode
[  614.255654][T24847] lo speed is unknown, defaulting to 1000
[  614.724365][T24855] tipc: Started in network mode
[  614.729670][T24855] tipc: Node identity 421752151844, cluster identity 4711
[  614.737028][T24855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  614.804934][T24856] syzkaller0: entered promiscuous mode
[  614.810634][T24856] syzkaller0: entered allmulticast mode
[  614.823416][T24853] netlink: 'syz.7.6939': attribute type 10 has an invalid length.
[  614.858860][T24853] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  614.896451][T24855] tipc: Resetting bearer <eth:syzkaller0>
[  614.903931][T24854] tipc: Resetting bearer <eth:syzkaller0>
[  614.933593][T24854] tipc: Disabling bearer <eth:syzkaller0>
[  614.983908][T24861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.992573][T24861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.603759][T24883] loop7: detected capacity change from 0 to 512
[  615.616474][T24883] EXT4-fs (loop7): 1 truncate cleaned up
[  615.630815][T24883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.704336][T20187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.943170][T24895] syzkaller0: entered promiscuous mode
[  615.949063][T24895] syzkaller0: entered allmulticast mode
[  616.703743][T24902] loop7: detected capacity change from 0 to 1024
[  616.715181][T24902] EXT4-fs: inline encryption not supported
[  616.731500][T24902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.746413][   T28] kauditd_printk_skb: 146 callbacks suppressed
[  616.746432][   T28] audit: type=1400 audit(2000000006.416:12845): avc:  denied  { lock } for  pid=24901 comm="syz.7.6954" path="socket:[126793]" dev="sockfs" ino=126793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  616.787574][T20187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.831069][T24906] loop7: detected capacity change from 0 to 512
[  616.840026][T24906] FAT-fs (loop7): Directory bread(block 199916) failed
[  616.847294][T24906] FAT-fs (loop7): Directory bread(block 199917) failed
[  616.854304][T24906] FAT-fs (loop7): Directory bread(block 199918) failed
[  616.861621][T24906] FAT-fs (loop7): Directory bread(block 199919) failed
[  616.869297][T24906] FAT-fs (loop7): Directory bread(block 199920) failed
[  616.876416][T24906] FAT-fs (loop7): Directory bread(block 199921) failed
[  616.883625][T24906] FAT-fs (loop7): Directory bread(block 199922) failed
[  616.891150][T24906] FAT-fs (loop7): Directory bread(block 199923) failed
[  617.099200][T24913] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6957'.
[  617.191540][   T28] audit: type=1326 audit(2000000006.837:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24897 comm="syz.9.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4448fc799 code=0x7fc00000
[  617.241346][   T28] audit: type=1400 audit(2000000006.865:12847): avc:  denied  { bind } for  pid=24917 comm="syz.7.6959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  617.295384][T24923] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6961'.
[  617.312796][T24921] netlink: 'syz.9.6960': attribute type 8 has an invalid length.
[  617.361160][T24921] lo speed is unknown, defaulting to 1000
[  617.530811][T24927] loop9: detected capacity change from 0 to 512
[  617.545362][T24927] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6962: bg 0: block 248: padding at end of block bitmap is not set
[  617.560830][T24927] loop9: lost filesystem error report for type 5 error -117
[  617.561251][T24927] Quota error (device loop9): write_blk: dquota write failed
[  617.568779][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  617.568811][    C0] EXT4-fs (loop9): last error at time 2000000007: ext4_validate_block_bitmap:441
[  617.593016][T24927] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  617.603227][T24927] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.6962: Failed to acquire dquot type 1
[  617.614571][T24927] loop9: lost filesystem error report for type 5 error -117
[  617.615685][T24927] EXT4-fs (loop9): 1 truncate cleaned up
[  617.629286][T24927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.641817][T24927] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.652823][T24927] FAULT_INJECTION: forcing a failure.
[  617.652823][T24927] name failslab, interval 1, probability 0, space 0, times 0
[  617.665873][T24927] CPU: 0 UID: 0 PID: 24927 Comm: syz.9.6962 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  617.665943][T24927] Tainted: [W]=WARN
[  617.665951][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  617.665966][T24927] Call Trace:
[  617.666033][T24927]  <TASK>
[  617.666044][T24927]  __dump_stack+0x1d/0x30
[  617.666135][T24927]  dump_stack_lvl+0x95/0xd0
[  617.666166][T24927]  dump_stack+0x15/0x1b
[  617.666190][T24927]  should_fail_ex+0x263/0x280
[  617.666216][T24927]  should_failslab+0x8c/0xb0
[  617.666239][T24927]  kmem_cache_alloc_noprof+0x66/0x400
[  617.666296][T24927]  ? do_getname+0x2e/0x1c0
[  617.666321][T24927]  do_getname+0x2e/0x1c0
[  617.666398][T24927]  __se_sys_symlink+0x2f/0x1b0
[  617.666427][T24927]  __x64_sys_symlink+0x31/0x40
[  617.666486][T24927]  x64_sys_call+0x2465/0x3020
[  617.666515][T24927]  do_syscall_64+0x12c/0x370
[  617.666540][T24927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.666566][T24927] RIP: 0033:0x7fd4448fc799
[  617.666601][T24927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.666624][T24927] RSP: 002b:00007fd443357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  617.666646][T24927] RAX: ffffffffffffffda RBX: 00007fd444b75fa0 RCX: 00007fd4448fc799
[  617.666663][T24927] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  617.666748][T24927] RBP: 00007fd443357090 R08: 0000000000000000 R09: 0000000000000000
[  617.666764][T24927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  617.666836][T24927] R13: 00007fd444b76038 R14: 00007fd444b75fa0 R15: 00007ffc110caee8
[  617.666863][T24927]  </TASK>
[  617.846766][T24531] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.876246][ T7515] IPVS: starting estimator thread 0...
[  617.986787][T24933] IPVS: using max 2448 ests per chain, 122400 per kthread
[  618.196653][T24950] syzkaller0: entered promiscuous mode
[  618.202261][T24950] syzkaller0: entered allmulticast mode
[  618.368275][T24959] 9p: Bad value for 'wfdno'
[  618.374287][T24868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  618.637068][   T28] audit: type=1400 audit(2000000264.188:12848): avc:  denied  { ioctl } for  pid=24976 comm="syz.1.6979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=127207 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  618.772096][   T28] audit: type=1400 audit(2000000264.319:12849): avc:  denied  { read } for  pid=7515 comm="kworker/1:14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=127207 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  619.093884][T24990] netlink: 'syz.1.6982': attribute type 2 has an invalid length.
[  619.124054][T24986] loop4: detected capacity change from 0 to 8192
[  619.130692][T24990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6982'.
[  619.159456][T24997] loop3: detected capacity change from 0 to 512
[  619.226484][T20657]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  619.232566][T20657] loop4: p1 size 117440512 extends beyond EOD, truncated
[  619.281703][T20657] loop4: p2 start 4279370528 is beyond EOD, truncated
[  619.312388][T20657] loop4: p5 size 117440512 extends beyond EOD, truncated
[  619.329899][T25004] loop3: detected capacity change from 0 to 1024
[  619.363430][T20657] loop4: p6 start 4279370528 is beyond EOD, truncated
[  619.384226][T25004] EXT4-fs: Ignoring removed bh option
[  619.448179][T25004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.495227][   T28] audit: type=1400 audit(2000000264.983:12850): avc:  denied  { ioctl } for  pid=25012 comm="syz.9.6991" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  619.523862][T25014] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6991'.
[  619.541056][T25013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.551715][T24986]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  619.557189][T24986] loop4: p1 size 117440512 extends beyond EOD, truncated
[  619.586391][T25013] syzkaller0: entered promiscuous mode
[  619.600501][T25013] syzkaller0: entered allmulticast mode
[  619.606991][T24986] loop4: p2 start 4279370528 is beyond EOD, truncated
[  619.623737][T24986] loop4: p5 size 117440512 extends beyond EOD, truncated
[  619.638062][T24986] loop4: p6 start 4279370528 is beyond EOD, truncated
[  619.646130][T20632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.669297][T25013] tipc: Resetting bearer <eth:syzkaller0>
[  619.698936][T25011] tipc: Resetting bearer <eth:syzkaller0>
[  619.738755][T25011] tipc: Disabling bearer <eth:syzkaller0>
[  619.776865][T25021] syzkaller0: entered promiscuous mode
[  619.783553][T25021] syzkaller0: entered allmulticast mode
[  619.851084][T24567] udevd[24567]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  619.862403][T20657] udevd[20657]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  619.862949][T19065] udevd[19065]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  619.884434][T18471] udevd[18471]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  619.913111][T24567] udevd[24567]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  619.924452][T18471] udevd[18471]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  619.940857][T19065] udevd[19065]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  619.953246][T20657] udevd[20657]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  620.150345][   T28] audit: type=1326 audit(2000000265.610:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.9.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4448fc799 code=0x7ffc0000
[  620.175031][T25045] loop7: detected capacity change from 0 to 512
[  620.181945][   T28] audit: type=1326 audit(2000000265.638:12852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.9.7003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4448fc799 code=0x7ffc0000
[  620.305699][T25048] ipvlan2: entered allmulticast mode
[  620.502727][T25053] xt_TCPMSS: Only works on TCP SYN packets
[  620.524826][T25049] lo speed is unknown, defaulting to 1000
[  620.620934][T25052] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  620.750640][T25057] syzkaller0: entered promiscuous mode
[  620.768985][T25057] syzkaller0: entered allmulticast mode
[  620.822404][T25066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.017433][T25075] netlink: 'syz.9.7003': attribute type 1 has an invalid length.
[  621.025394][T25075] netlink: 'syz.9.7003': attribute type 2 has an invalid length.
[  621.394793][T25066] syzkaller0: entered promiscuous mode
[  621.403630][T25066] syzkaller0: entered allmulticast mode
[  621.422616][T25085] tipc: Resetting bearer <eth:syzkaller0>
[  621.449749][T25064] tipc: Resetting bearer <eth:syzkaller0>
[  621.462711][T25064] tipc: Disabling bearer <eth:syzkaller0>
[  621.592921][T25105] syzkaller0: entered promiscuous mode
[  621.598466][T25105] syzkaller0: entered allmulticast mode
[  621.639770][T25105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7017'.
[  621.768915][T25117] loop9: detected capacity change from 0 to 512
[  621.791146][T25119] loop7: detected capacity change from 0 to 512
[  621.808249][T25119] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  621.832571][T25119] EXT4-fs (loop7): 1 truncate cleaned up
[  621.859692][T25113] loop4: detected capacity change from 0 to 8192
[  621.870546][T25119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.950248][T25113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7021'.
[  621.970216][T25122] FAULT_INJECTION: forcing a failure.
[  621.970216][T25122] name failslab, interval 1, probability 0, space 0, times 0
[  621.983331][T25122] CPU: 0 UID: 0 PID: 25122 Comm: syz.3.7024 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  621.983453][T25122] Tainted: [W]=WARN
[  621.983460][T25122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  621.983475][T25122] Call Trace:
[  621.983482][T25122]  <TASK>
[  621.983492][T25122]  __dump_stack+0x1d/0x30
[  621.983524][T25122]  dump_stack_lvl+0x95/0xd0
[  621.983584][T25122]  dump_stack+0x15/0x1b
[  621.983612][T25122]  should_fail_ex+0x263/0x280
[  621.983646][T25122]  should_failslab+0x8c/0xb0
[  621.983674][T25122]  __kmalloc_noprof+0xb8/0x4e0
[  621.983765][T25122]  ? alloc_pipe_info+0x1c8/0x340
[  621.983793][T25122]  alloc_pipe_info+0x1c8/0x340
[  621.983829][T25122]  splice_direct_to_actor+0x591/0x670
[  621.983858][T25122]  ? kstrtouint_from_user+0xa8/0xf0
[  621.983889][T25122]  ? __pfx_direct_splice_actor+0x10/0x10
[  621.983918][T25122]  ? avc_policy_seqno+0x15/0x30
[  621.983950][T25122]  ? selinux_file_permission+0x1f2/0x690
[  621.984040][T25122]  ? do_splice_direct+0xca/0x1a0
[  621.984064][T25122]  do_splice_direct+0x119/0x1a0
[  621.984085][T25122]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  621.984175][T25122]  do_sendfile+0x382/0x650
[  621.984213][T25122]  __x64_sys_sendfile64+0x105/0x150
[  621.984294][T25122]  x64_sys_call+0x2dc4/0x3020
[  621.984324][T25122]  do_syscall_64+0x12c/0x370
[  621.984422][T25122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.984450][T25122] RIP: 0033:0x7fef19dec799
[  621.984470][T25122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.984491][T25122] RSP: 002b:00007fef1883f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  621.984516][T25122] RAX: ffffffffffffffda RBX: 00007fef1a065fa0 RCX: 00007fef19dec799
[  621.984596][T25122] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  621.984613][T25122] RBP: 00007fef1883f090 R08: 0000000000000000 R09: 0000000000000000
[  621.984629][T25122] R10: 252c000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.984642][T25122] R13: 00007fef1a066038 R14: 00007fef1a065fa0 R15: 00007ffc49b75f98
[  621.984676][T25122]  </TASK>
[  622.352064][T25127] syzkaller0: entered promiscuous mode
[  622.357601][T25127] syzkaller0: entered allmulticast mode
[  622.388641][T25129] set_capacity_and_notify: 1 callbacks suppressed
[  622.388674][T25129] loop4: detected capacity change from 0 to 1024
[  622.406780][T25129] EXT4-fs: test_dummy_encryption option not supported
[  622.450672][T20187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.685737][T25142] loop7: detected capacity change from 0 to 512
[  622.695186][T25142] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  622.870539][T25147] loop3: detected capacity change from 0 to 128
[  622.881525][T25142] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.7032: corrupted in-inode xattr: invalid size in ea xattr
[  622.983666][T25145] lo speed is unknown, defaulting to 1000
[  622.994226][T25142] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  622.995472][T25142] EXT4-fs (loop7): get orphan inode failed
[  623.005062][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  623.005081][    C1] EXT4-fs (loop7): initial error at time 2000000268: ext4_iget_extra_inode:5025: inode 15
[  623.005106][    C1] EXT4-fs (loop7): last error at time 2000000268: ext4_iget_extra_inode:5025: inode 15
[  623.255716][T25142] EXT4-fs (loop7): mount failed
[  623.322751][T25152] syzkaller0: entered promiscuous mode
[  623.329625][T25152] syzkaller0: entered allmulticast mode
[  623.341488][T25154] loop7: detected capacity change from 0 to 1024
[  623.356914][T25154] EXT4-fs: Ignoring removed nomblk_io_submit option
[  623.368728][T25154] EXT4-fs: test_dummy_encryption option not supported
[  623.383917][T25158] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7037'.
[  623.398486][T25152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7034'.
[  623.499513][T25162] syzkaller0: entered promiscuous mode
[  623.505094][T25162] syzkaller0: entered allmulticast mode
[  623.583280][T25164] loop7: detected capacity change from 0 to 512
[  623.773715][T25186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  623.783237][T25186] syzkaller0: entered promiscuous mode
[  623.790318][T25186] syzkaller0: entered allmulticast mode
[  623.803002][T25186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7044'.
[  623.900895][T25193] 9pnet_virtio: no channels available for device 
[  623.995791][T25164] EXT4-fs (loop7): 1 orphan inode deleted
[  624.009986][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7046'.
[  624.022417][T10701] __quota_error: 6 callbacks suppressed
[  624.022442][T10701] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  624.070652][T25164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.085543][T25181] tipc: Resetting bearer <eth:syzkaller0>
[  624.098931][T10701] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 1
[  624.110774][T10701] loop7: lost filesystem error report for type 5 error -117
[  624.113569][T25164] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  624.148157][T25181] tipc: Disabling bearer <eth:syzkaller0>
[  624.665664][   T28] audit: type=1400 audit(2000000269.828:12859): avc:  denied  { cmd } for  pid=25208 comm="syz.9.7051" path="socket:[128419]" dev="sockfs" ino=128419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  624.716043][T25213] syzkaller0: entered promiscuous mode
[  624.722100][T20187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.755834][T25213] syzkaller0: entered allmulticast mode
[  624.792140][T25221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7052'.
[  624.961879][T25226] syzkaller0: entered promiscuous mode
[  624.990279][T25226] syzkaller0: entered allmulticast mode
[  625.046025][   T28] audit: type=1326 audit(2000000270.184:12860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5af202c799 code=0x0
[  625.083573][T25233] lo speed is unknown, defaulting to 1000
[  625.147705][   T28] audit: type=1326 audit(2000000270.258:12861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  625.317984][   T28] audit: type=1326 audit(2000000270.258:12862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  625.373569][   T28] audit: type=1326 audit(2000000270.258:12863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  625.658959][   T28] audit: type=1326 audit(2000000270.258:12864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  625.683955][   T28] audit: type=1326 audit(2000000270.258:12865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  625.728444][   T28] audit: type=1326 audit(2000000270.258:12866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  625.757637][   T28] audit: type=1326 audit(2000000270.268:12867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.4.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af202c799 code=0x7ffc0000
[  626.071344][T25255] ipvlan2: entered allmulticast mode
[  626.109741][T25271] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7060'.
[  626.125551][T25253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  626.146825][T25258] lo speed is unknown, defaulting to 1000
[  626.226723][T25249] tipc: Disabling bearer <eth:syzkaller0>
[  626.315435][T25278] lo speed is unknown, defaulting to 1000
[  626.588692][T25283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7063'.
[  626.634890][T25295] lo speed is unknown, defaulting to 1000
[  626.683422][T25297] loop4: detected capacity change from 0 to 512
[  626.715678][T25297] EXT4-fs: Ignoring removed bh option
[  626.750289][T25297] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  626.814603][T25297] EXT4-fs (loop4): 1 truncate cleaned up
[  627.085266][T25307] netlink: 'syz.9.7068': attribute type 8 has an invalid length.
[  627.132493][T25297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.232033][T25315] netlink: 'syz.7.7072': attribute type 8 has an invalid length.
[  627.281688][T25297] __vm_enough_memory: pid: 25297, comm: syz.4.7067, bytes: 11727799824384 not enough memory for the allocation
[  627.345805][T25317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7073'.
[  627.376008][T25320] loop7: detected capacity change from 0 to 512
[  627.436753][T22658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.513784][T25327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.537922][T25327] syzkaller0: entered promiscuous mode
[  627.561440][T25327] syzkaller0: entered allmulticast mode
[  627.587279][T25327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7076'.
[  627.606464][T25326] tipc: Resetting bearer <eth:syzkaller0>
[  627.646276][T25326] tipc: Disabling bearer <eth:syzkaller0>
[  627.679556][T25339] ==================================================================
[  627.687872][T25339] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  627.695646][T25339] 
[  627.698188][T25339] write to 0xffff888130fee200 of 8 bytes by task 25337 on cpu 0:
[  627.706042][T25339]  mas_wr_store_entry+0x20c5/0x2ed0
[  627.711309][T25339]  mas_store_prealloc+0x72e/0xa70
[  627.716381][T25339]  vma_complete+0x3c7/0x850
[  627.720937][T25339]  __split_vma+0x593/0x640
[  627.725485][T25339]  vma_modify+0xb2e/0xd00
[  627.729864][T25339]  vma_modify_flags+0x182/0x210
[  627.734765][T25339]  mprotect_fixup+0x312/0x5d0
[  627.739483][T25339]  do_mprotect_pkey+0x67b/0x920
[  627.744385][T25339]  __x64_sys_mprotect+0x48/0x60
[  627.749552][T25339]  x64_sys_call+0x2768/0x3020
[  627.754486][T25339]  do_syscall_64+0x12c/0x370
[  627.759323][T25339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.765886][T25339] 
[  627.768631][T25339] read to 0xffff888130fee200 of 8 bytes by task 25339 on cpu 1:
[  627.776707][T25339]  mas_state_walk+0x485/0x650
[  627.781812][T25339]  mas_walk+0x60/0x150
[  627.785934][T25339]  lock_vma_under_rcu+0xc9/0x210
[  627.791038][T25339]  do_user_addr_fault+0x232/0x1050
[  627.796309][T25339]  exc_page_fault+0x62/0xa0
[  627.800981][T25339]  asm_exc_page_fault+0x26/0x30
[  627.805968][T25339] 
[  627.808925][T25339] value changed: 0xffff888130fee80e -> 0xffff888130fee200
[  627.817107][T25339] 
[  627.819625][T25339] Reported by Kernel Concurrency Sanitizer on:
[  627.826171][T25339] CPU: 1 UID: 0 PID: 25339 Comm: syz.7.7082 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  627.838636][T25339] Tainted: [W]=WARN
[  627.842473][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  627.852927][T25339] ==================================================================
[  627.969823][T25293] veth0_virt_wifi: entered promiscuous mode