last executing test programs:

3m15.743856251s ago: executing program 2 (id=1109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0b04000000000000000002000003480004802800018007000100637400001c0002800500030001000000080001400000001708000240000000011c0001800a00010072656469720000000c00028008090040000000170900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x24004050}, 0x4010)

3m15.57397452s ago: executing program 2 (id=1110):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r0 = syz_open_pts(0xffffffffffffffff, 0xc0000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x12)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffff6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m15.560525411s ago: executing program 2 (id=1113):
msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000)
msgsnd(0x0, 0x0, 0x0, 0x8fa2496c381b7ad5)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400000a0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x400, 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000)
r3 = syz_pidfd_open(r2, 0x0)
wait4(r2, 0x0, 0x8, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180))
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/139, 0x8b}, 0x7f}], 0x1, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x4, 0x6, 0x0, 0x100, 0x6, 0x110022})
msgctl$IPC_SET(0x0, 0x1, 0x0)

3m14.684414672s ago: executing program 2 (id=1121):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000280)='./file0/../file0\x00', 0xfffffffffffffff6)

3m14.628328856s ago: executing program 2 (id=1123):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r0 = syz_open_pts(0xffffffffffffffff, 0xc0000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x12)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffff6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m14.138281985s ago: executing program 2 (id=1130):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab4", 0xf1}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3m14.110620566s ago: executing program 32 (id=1130):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab4", 0xf1}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

44.617876095s ago: executing program 4 (id=3122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x12}, 0x8042, 0x0, 0x21b, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r5, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000bc0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "0d9916", 0x14, 0x3a, 0x1, @loopback, @private2, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r3], 0x108}}], 0x1, 0xc040)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r2, 0x1, 0x400a00, 0x25dfdbf5, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="00000000030000001b00"/28], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000))
setuid(0xee00)
fspick(0xffffffffffffffff, 0x0, 0x1)

44.516055311s ago: executing program 4 (id=3125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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")

44.477599654s ago: executing program 4 (id=3127):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)

44.456550215s ago: executing program 4 (id=3128):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

44.062882618s ago: executing program 4 (id=3129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r4 = io_uring_setup(0x6528, &(0x7f0000000380)={0x0, 0x8894, 0x400a, 0x3, 0x16c})
syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x966, 0x0, 0x1, 0xc6, 0x0, r4}, &(0x7f0000000500), &(0x7f0000000540))
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r3, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="350728bd7000ffdbdf0b0100000008000500040000000c00028006000b0002000000"], 0x28}}, 0x40800)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)={0x28, r1, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
mkdirat(r6, &(0x7f0000002040)='./file0\x00', 0x5)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x48, r5, 0x200, 0x70bd29, 0x25dfdffc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x40)

43.927715526s ago: executing program 4 (id=3132):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896) (fail_nth: 1)

28.773384887s ago: executing program 33 (id=3132):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896) (fail_nth: 1)

14.644542498s ago: executing program 1 (id=3419):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00'}) (async, rerun: 64)
sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "db8e61947449ee9136c0e38b88f09e2f"}) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="a84fe3fc4efaefc9e60b30bd467ad6651506f4152b81d9e898d192044cd63a7feabe56e2bdab07"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x200c0c4)

14.484076887s ago: executing program 1 (id=3423):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000000)=ANY=[], 0x48)

14.316313237s ago: executing program 1 (id=3426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x7, 0x4, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
unshare(0x6c000200)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xdbfa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]})
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0)
truncate(0x0, 0x8fff5)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014000180c200"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

13.705007873s ago: executing program 1 (id=3436):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f00000017c0)=ANY=[], 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10)
unshare(0x22020400)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000582300140012800c0001006d616376746170000400028008000500", @ANYRES8=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0))
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000040))

13.492985765s ago: executing program 1 (id=3440):
r0 = socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40082)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000005, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000008ab4eb8c45d0ae172aa0b000000e90000", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38)
readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1)
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)
r6 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000140)=ANY=[], 0x118)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r1, 0x0}, 0x0])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000440b6d5002e000000000000001f00"/36], 0x24}}, 0x814)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x261, 0x4)

13.210652921s ago: executing program 1 (id=3446):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181)
rmdir(&(0x7f0000000000)='./file0\x00')
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x10005, 0x1, 0xfffffc03, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open_tree(r0, &(0x7f0000000280)='\x00', 0x89901)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
uname(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000000)="db95cf4f3573b937a565817b10ad15a8b35c391209c072878454e93bfcf4d0468ab011585c0f578977c49c15d7fbcc66204443ddaa58437699ae45d595fc17d648532238c86808012e5b9c07cd06cef8de7c6814543e5681bc8dbd43b31324d56996c19c708ec59a310d6e32a16d3662e6fc770d5974e55620554f5a08a373e8a2b2980c18e4b5d15089ffc12dbfddd5997fb44fece3df9bc5b753b516ae3aee3a5eabcd4a2051b66a344f0c63ea0ce606cc6b15b87974b7b47bbb1a5d27ab0cb860f7d8471707c9336475c27bcac14ddfc18cb90ab9242bd9e75caf5c500cf629b9437ab7596fa717ce14d67ee0e3b014d968cd", 0xf4}, {&(0x7f0000000180)="3833ff52e937b2fb78cc4c48d3871a1d02b4dc3f60e0061f0484fa0e9b27df1f7d7d1177d29c8e4aa9437f2d5207743b05d8b191b7f4d6caef8903fd8350106db225bdabc617c2fdaecfa01f7fe686bb36d2c26d0ac19918859535a8816e29f1166463a8e733915d3073e6a351f1cca0cc322dfe804294dfcc66bc4c4550f409a15aaab319d2434c0181b1e846a4db457d4f5831f110f1524737eb9ea4c5fc5e68bc68fb5f8cf9af1bfb92c36f98294b0816c203dad49b9112c0346da3e1fcd3099f9bad7898d4958e", 0xc9}, {&(0x7f00000004c0)}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f00000042c0)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2c}, {0x10000, 0x3, 0x1, 0x4, 0x104000001, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x18000, 0x6e6bbc, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x5, 0x2, 0xbb, 0xfffffffe, 0x1, 0x1}}, 0xe8)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x4000, 0x0, 0x0, 0x0, r4}, 0x0, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/26, 0xfffffffffffffd6d)

13.162265684s ago: executing program 34 (id=3446):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181)
rmdir(&(0x7f0000000000)='./file0\x00')
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x10005, 0x1, 0xfffffc03, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
open_tree(r0, &(0x7f0000000280)='\x00', 0x89901)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
uname(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000000)="db95cf4f3573b937a565817b10ad15a8b35c391209c072878454e93bfcf4d0468ab011585c0f578977c49c15d7fbcc66204443ddaa58437699ae45d595fc17d648532238c86808012e5b9c07cd06cef8de7c6814543e5681bc8dbd43b31324d56996c19c708ec59a310d6e32a16d3662e6fc770d5974e55620554f5a08a373e8a2b2980c18e4b5d15089ffc12dbfddd5997fb44fece3df9bc5b753b516ae3aee3a5eabcd4a2051b66a344f0c63ea0ce606cc6b15b87974b7b47bbb1a5d27ab0cb860f7d8471707c9336475c27bcac14ddfc18cb90ab9242bd9e75caf5c500cf629b9437ab7596fa717ce14d67ee0e3b014d968cd", 0xf4}, {&(0x7f0000000180)="3833ff52e937b2fb78cc4c48d3871a1d02b4dc3f60e0061f0484fa0e9b27df1f7d7d1177d29c8e4aa9437f2d5207743b05d8b191b7f4d6caef8903fd8350106db225bdabc617c2fdaecfa01f7fe686bb36d2c26d0ac19918859535a8816e29f1166463a8e733915d3073e6a351f1cca0cc322dfe804294dfcc66bc4c4550f409a15aaab319d2434c0181b1e846a4db457d4f5831f110f1524737eb9ea4c5fc5e68bc68fb5f8cf9af1bfb92c36f98294b0816c203dad49b9112c0346da3e1fcd3099f9bad7898d4958e", 0xc9}, {&(0x7f00000004c0)}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f00000042c0)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2c}, {0x10000, 0x3, 0x1, 0x4, 0x104000001, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x18000, 0x6e6bbc, 0x1, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x5, 0x2, 0xbb, 0xfffffffe, 0x1, 0x1}}, 0xe8)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x4000, 0x0, 0x0, 0x0, r4}, 0x0, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/26, 0xfffffffffffffd6d)

3.871314334s ago: executing program 0 (id=3545):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10de}]}, 0x48}}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
inotify_init()
socket(0xa, 0x2, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
io_uring_setup(0x1554, &(0x7f0000000400)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7})
socket(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r5, 0x8001}}, 0x48)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.847930284s ago: executing program 0 (id=3551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x7, 0x4, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
unshare(0x6c000200)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]})
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0)
truncate(0x0, 0x8fff5)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014000180c200"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

2.672387644s ago: executing program 3 (id=3555):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.380014901s ago: executing program 6 (id=3561):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
inotify_init()
socket(0xa, 0x2, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
io_uring_setup(0x1554, &(0x7f0000000400)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7})
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.000559153s ago: executing program 6 (id=3564):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getxattr(0x0, 0x0, 0x0, 0x0)

1.957583316s ago: executing program 6 (id=3565):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x1008002, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/276], 0x1, 0x336, &(0x7f0000000880)="$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")
close(r0)
syz_read_part_table(0x105c, &(0x7f0000000000)="$eJzsz7uNAkEQBNC6vbmfcSIRUkCQAyISLKy1IADCwCUBIiAbXAYNWjYEwHjPmVGrqqUOr9XlfzZ8fx6T5NInKUnOpySLLqm11t16MvY+P+7B5i/ZtPd3XNmamSdZlv7rO8m1ZNrix+y3ZYiVZHV41pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8M5uAQAA//+4TQ5Z")
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000001080), 0x200200, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e20, @empty}}, 0x8, 0x5}, &(0x7f0000000000)=0x90)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000011c0)={r7, 0x65, "f544eea89b99572dba455ab426914ecc94879358fad5839304d4579e914dc21802d1f7996eb755dcad0eec8c7abee5c56b82aadc7ca682ccf6870002687b4153bbc71b7baf280da24b7a03e2306ac4869c35efb42650da95666c119f2ee3c289b9610d7f92"}, &(0x7f00000010c0)=0x6d)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001140)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000100060000000004001680080001000300000008001e00087c673f55c87fbd23dd000000942dd4a3963c61d157adbcd7eebb"], 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010000000000ffdbdf25000003e4", @ANYRES32=r8, @ANYBLOB="00f7ff0000000000100012800800eaff7369740004000280"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0)

1.759968527s ago: executing program 3 (id=3568):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfbf, 0xb47f, 0x789a, 0x2, 0x3, 0x3, 0x4, 0x0, 0x800000, 0x7097, 0x8, 0xfd1d, 0x52, 0x1, 0x1708974, 0x5, 0xf58, 0xa, 0x8, 0x2, 0x2, 0x7d, 0x3, 0xffffffff, 0x8, 0xfffffff4, 0x5, 0x9, 0x40000, 0xfffffffe, 0x2, 0xc0, 0x3, 0x7fffffff, 0x7, 0x5, 0x8, 0x3, 0xd, 0x8, 0xf8, 0x7adf, 0x2, 0x9, 0x6, 0x9, 0x10, 0x2, 0x80000001, 0x1, 0x6, 0xc, 0x9e, 0x21, 0xfffffffe, 0x1, 0xb52, 0x7, 0xcf59, 0x100, 0x8, 0x7fff, 0x8, 0x45c, 0x7, 0x4, 0x3, 0x0, 0x3, 0x9, 0x6, 0x7, 0x2, 0xfffffffa, 0x6, 0x0, 0x2, 0x3, 0x80000000, 0x4, 0x6, 0x2, 0x7, 0x5, 0x9ea, 0x81, 0x4, 0x0, 0xfffffff0, 0x35, 0x7c, 0x83b8, 0x4, 0x4, 0x9, 0x9, 0x7ff, 0x9b, 0x2, 0x1, 0x4, 0x2, 0x1, 0x7, 0x2, 0x5, 0x3, 0x8d4, 0x4, 0x0, 0xffffffff, 0x2, 0x2, 0x6, 0x2, 0x2, 0xd37, 0x9, 0x80000000, 0x3, 0x6, 0xffff, 0x1, 0x6, 0x7, 0x0, 0x6, 0x6, 0x4, 0x100, 0x9, 0x0, 0x80, 0x7, 0x3, 0x95f, 0x2, 0xfffffffe, 0x3, 0x3a3, 0xd, 0xffffffff, 0x7, 0x74, 0x4, 0x4, 0x80000001, 0x4, 0xfffffff9, 0x4, 0x101, 0xfffffff8, 0x9, 0x3, 0x2, 0x6, 0x9, 0x9, 0x9, 0x3, 0x2, 0x4, 0x256, 0x9, 0x1a34, 0x693, 0x80000000, 0xfff, 0x7, 0xe, 0x1800, 0x0, 0x4, 0xc, 0x1800, 0x7, 0xea7, 0x8001, 0x0, 0x4, 0x9, 0x1000, 0xfc, 0x1, 0x2, 0x1, 0x6, 0x0, 0x9, 0xf, 0x0, 0x6, 0x3, 0x7, 0x6d45, 0x3, 0x44f1, 0x3, 0x58448c5a, 0x1000, 0x8, 0xfffffff7, 0x9, 0x80000000, 0x4, 0xffff34f7, 0x2, 0x7899, 0x1ff, 0x6, 0xd, 0xf9fc, 0x2, 0x9, 0x6, 0x4, 0x2, 0x80000000, 0xf339, 0x8, 0x5, 0x3, 0x3, 0xfffffff9, 0xfffffff8, 0x200, 0x2, 0x7, 0xffffff7f, 0x81, 0x1ff, 0xffffffff, 0x8e1f, 0x5, 0xfffffff8, 0x2, 0xb, 0x6, 0x4, 0x7, 0x6ca2, 0x7ff, 0x5, 0x9, 0x8, 0x400, 0x9, 0x2, 0x7, 0x1, 0x4, 0x7, 0x2, 0xd299, 0x401, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x8, 0x4800, 0x5, 0xc}, {0x9, 0x0, 0xffff, 0xffff, 0x2, 0x3}, 0xa, 0x3, 0x152c}}]}}]}, 0x45c}}, 0x4c000)

1.744758708s ago: executing program 0 (id=3569):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4004855)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100))
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.580112908s ago: executing program 3 (id=3571):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000400, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x1, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x80, 0xb6, 0x9e, 0x9]}, &(0x7f0000000080)=0x78)
sendto$inet(r1, 0x0, 0x0, 0x14, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000006800010002000000fcffff7f00000000000000000600070001000000b7fe0500", @ANYRES32=0x0, @ANYBLOB="0000000028826a57d0024c937c212506b6b996158ffd9aeb36476ccc8d8807315228257fbcd916b4b6f2a58fd7a4613286794a426e336a298df0a0f689ce01934d8ed8c11091d8602d7226b4dc87f79118d1ff3189ed761a09b1d03ca2b92bdba120300ca05932318dfd380dae73aba782b2f64a38f684b49109ef2ef8a85567d09220f05067fa60003b072f681e9af90304eea581a7de6d3416e990405d016145451ff9373670f6f37f582403"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

1.474768284s ago: executing program 0 (id=3572):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x7, 0x4, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
unshare(0x6c000200)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xdbfa)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]})
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0)
truncate(0x0, 0x8fff5)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014000180c200"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

1.203960919s ago: executing program 7 (id=3575):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getxattr(0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800)

1.149724443s ago: executing program 5 (id=3576):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getxattr(0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

1.122247564s ago: executing program 7 (id=3577):
r0 = socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40082)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000005, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000008ab4eb8c45d0ae172aa0b000000e90000", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38)
readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1)
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)
r6 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000140)=ANY=[], 0x118)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x5, 0x0, 0x6}])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x814)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x261, 0x4)

704.570519ms ago: executing program 5 (id=3578):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xffffffffffffffa9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeec, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

627.588533ms ago: executing program 7 (id=3579):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100"], 0x54}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[], 0x1, 0x1b1, &(0x7f0000000240)="$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") (async)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async, rerun: 64)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003840)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x30}}], 0x1, 0x44010) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x0, 0x2}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xffffafbb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000400))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) (async)
ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x81, 0x0, "5dee470000000000000000000000000c00"})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x30}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x10, 0x100}, 0x94)

621.980383ms ago: executing program 5 (id=3580):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d4", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

608.516884ms ago: executing program 6 (id=3581):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0xb}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x2) (fail_nth: 3)

409.110545ms ago: executing program 5 (id=3582):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x7, 0xf8, 0x9, 0x401}, {0x3, 0x0, 0x7f, 0x4}]})
iopl(0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x7}, 0x80, 0x0}}], 0x1, 0x80)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xc732, 0xb, 0x30, 0x1}, {0x2, 0x8, 0x2}]}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d3000000000000014001680100001"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40)

408.796946ms ago: executing program 3 (id=3583):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x1000, 0x4) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0)

397.768686ms ago: executing program 7 (id=3584):
r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={<r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b09000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe80, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)

353.643099ms ago: executing program 6 (id=3585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES64=r0], 0x38}}, 0x0)

282.689513ms ago: executing program 5 (id=3586):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2a, 0x1, 0x45, 0x3, 0x0, 0x7, 0x7c120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x10000, 0x10003, 0x80000001, 0x6, 0x8, 0x20005, 0xf, 0x0, 0x9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sched_setaffinity(0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x40, 0xffffffff, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x2, 0x2, 0x73f, 0x800000000000000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000270001002abd7000fedbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000020)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='vfat\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2d, 0x3, 0xfd, 0xfff, 0x11, @empty, @empty, 0x20, 0x7, 0x40, 0x6}})
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r5)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r7, 0x4)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
recvfrom$inet_nvme(r6, 0x0, 0x0, 0x40000002, 0x0, 0x0)

266.762174ms ago: executing program 5 (id=3587):
syz_open_dev$sg(0x0, 0x0, 0x8002)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@block_validity}, {@orlov}, {@nogrpid}, {@nobarrier}, {@errors_continue}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000280)=ANY=[], 0x700, 0x1)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
socket$inet6(0xa, 0x800000000000002, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

266.304454ms ago: executing program 6 (id=3588):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x60}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
r9 = io_uring_setup(0x512, &(0x7f0000000640)={0x0, 0xdda8, 0x800, 0x503fc, 0x2e0})
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0)

208.410137ms ago: executing program 3 (id=3589):
r0 = socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40082)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000005, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000008ab4eb8c45d0ae172aa0b000000e90000", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38)
readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1)
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)
r6 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000140)=ANY=[], 0x118)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x5, 0x0, 0x6}])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x814)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x261, 0x4)

206.480797ms ago: executing program 0 (id=3590):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009b80)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffff}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x24040084)

58.517786ms ago: executing program 7 (id=3591):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn")
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xffffffffffffffa9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeec, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

47.890157ms ago: executing program 7 (id=3592):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
inotify_init()
socket(0xa, 0x2, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
io_uring_setup(0x1554, &(0x7f0000000400)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7})
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48)
writev(r0, 0x0, 0x0)

947.4µs ago: executing program 0 (id=3593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES64=r0], 0x38}}, 0x0) (fail_nth: 3)

0s ago: executing program 3 (id=3594):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006000000040000000000000e0300000000000000000000000000000d04000000040000000000000400000000010000000000000e03001c0000000000005f2e0061"], 0x0, 0x56}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
ioctl$RTC_WIE_OFF(r2, 0x7010)
fchown(r2, 0xee01, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r4, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfc3, 0xb47f, 0x789a, 0x2, 0x3, 0x3, 0x4, 0x0, 0x800000, 0x7097, 0x8, 0xfd1d, 0x52, 0x1, 0x1708974, 0x5, 0xf58, 0xa, 0x8, 0x2, 0x2, 0x7d, 0x3, 0xffffffff, 0x8, 0xfffffff4, 0x5, 0x9, 0x40000, 0xfffffffe, 0x2, 0xc0, 0x3, 0x7fffffff, 0x7, 0x5, 0x8, 0x3, 0xd, 0x8, 0xf8, 0x7adf, 0x2, 0x9, 0x6, 0x9, 0x10, 0xffffffff, 0x80000001, 0x1, 0x6, 0xc, 0x9e, 0x21, 0xfffffffe, 0x1, 0xb52, 0x7, 0xcf59, 0x100, 0x8, 0x7fff, 0x8, 0x45c, 0x7, 0x4, 0x3, 0x0, 0x3, 0x9, 0x6, 0x7, 0x2, 0xfffffffa, 0x6, 0x0, 0x2, 0x3, 0x80000000, 0x4, 0x6, 0x2, 0x7, 0x5, 0x9ea, 0x81, 0x4, 0x0, 0xfffffff0, 0x35, 0x7c, 0x83b8, 0x4, 0x4, 0x9, 0x9, 0x7ff, 0x9b, 0x2, 0x1, 0x4, 0x2, 0x1, 0x7, 0x2, 0x5, 0x3, 0x8d4, 0x4, 0x0, 0xffffffff, 0x2, 0x2, 0x6, 0x2, 0x2, 0xd37, 0x9, 0x80000000, 0x3, 0x6, 0xffff, 0x1, 0x6, 0x7, 0x0, 0x6, 0x6, 0x4, 0x100, 0x9, 0x0, 0x80, 0x7, 0x3, 0x95f, 0x2, 0xfffffffe, 0x3, 0x3a3, 0xd, 0xffffffff, 0x7, 0x74, 0x4, 0x4, 0x80000001, 0x4, 0xfffffff9, 0x4, 0x101, 0xfffffff8, 0x9, 0x3, 0x2, 0x6, 0x9, 0x9, 0x9, 0x3, 0x2, 0x4, 0x256, 0x9, 0x1a34, 0x693, 0x80000000, 0x1003, 0x7, 0xe, 0x1800, 0x0, 0x4, 0xc, 0x1800, 0x7, 0xea7, 0x8001, 0x0, 0x4, 0x9, 0x1000, 0xfc, 0x1, 0x2, 0x1, 0x6, 0x0, 0x9, 0xf, 0x0, 0x6, 0x3, 0x7, 0x8, 0x3, 0x44f1, 0x3, 0x58448c5a, 0x1000, 0x8, 0xfffffff7, 0x9, 0x80000000, 0x4, 0xffff34f7, 0x2, 0x7899, 0x1ff, 0x6, 0xd, 0xf9fc, 0x2, 0x9, 0x6, 0x4, 0x2, 0x80000000, 0xf339, 0x8, 0x2, 0x6, 0x3, 0xfffffff9, 0xfffffff8, 0x200, 0x2, 0x7, 0xffffff7f, 0x81, 0x1ff, 0xffffffff, 0x8e1f, 0x5, 0xfffffff8, 0x2, 0xb, 0x6, 0x4, 0x7, 0x6ca2, 0x7ff, 0x5, 0x1, 0x8, 0x400, 0x9, 0x2, 0x7, 0x1, 0x4, 0x7, 0x2, 0xd299, 0x401, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x8, 0x4800, 0x5, 0xc}, {0x9, 0x0, 0xffff, 0xffff, 0x2, 0x3}, 0xa, 0x3, 0x152c}}]}}]}, 0x45c}}, 0x4c000)

kernel console output (not intermixed with test programs):

) entered blocking state
[  295.942840][T13980] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.960220][T13980] bridge_slave_0: entered allmulticast mode
[  295.973218][T13980] bridge_slave_0: entered promiscuous mode
[  295.986199][T13980] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.993309][T13980] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.015579][T13980] bridge_slave_1: entered allmulticast mode
[  296.030892][T13980] bridge_slave_1: entered promiscuous mode
[  296.060773][T13432] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  296.068781][T13432] FAT-fs (loop1): Filesystem has been set read-only
[  296.099471][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.126458][T13980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.146707][T13980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.171947][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.189688][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.249268][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.271988][T13980] team0: Port device team_slave_0 added
[  296.313912][T13980] team0: Port device team_slave_1 added
[  296.405747][T13980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.412790][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  296.438983][T13980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.466863][T13980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.473881][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  296.499925][T13980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.536885][T14064] loop5: detected capacity change from 0 to 8192
[  296.558646][T13980] hsr_slave_0: entered promiscuous mode
[  296.564947][T13980] hsr_slave_1: entered promiscuous mode
[  296.996490][T13980] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  297.017437][T13980] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  297.039788][T13980] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  297.055824][T13980] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  297.147374][T13980] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.159383][T13980] 8021q: adding VLAN 0 to HW filter on device team0
[  297.212159][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.219350][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.258220][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.265430][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.278816][ T6995] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  297.286794][ T6995] FAT-fs (loop5): Filesystem has been set read-only
[  297.302502][T13980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  297.312987][T13980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.328747][T14102] serio: Serial port ptm0
[  297.368539][T14116] FAT-fs (loop1): unable to read boot sector
[  297.468557][T13980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.497497][T14102] serio: Serial port ptm0
[  297.504987][T14120] loop0: detected capacity change from 0 to 8192
[  297.563396][T14134] loop5: detected capacity change from 0 to 512
[  297.644226][T14134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.681491][   T29] audit: type=1400 audit(2582639304.038:5880): avc:  denied  { getopt } for  pid=14142 comm="syz.1.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  297.728278][T14147] loop1: detected capacity change from 0 to 128
[  297.753199][T14147] msdos: Unknown parameter '���?�!��U��%�8MH9H�����'
[  297.773356][T14134] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.788803][T14147] 9pnet_fd: Insufficient options for proto=fd
[  298.099781][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.139907][T13980] veth0_vlan: entered promiscuous mode
[  298.157549][T13980] veth1_vlan: entered promiscuous mode
[  298.192950][T13980] veth0_macvtap: entered promiscuous mode
[  298.207697][T13980] veth1_macvtap: entered promiscuous mode
[  298.229172][T13980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.247379][T13980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.268827][   T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.287219][   T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.325922][   T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.341977][   T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.412270][T13307] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  298.420345][T13307] FAT-fs (loop0): Filesystem has been set read-only
[  298.432015][   T29] audit: type=1400 audit(2582639304.798:5881): avc:  denied  { create } for  pid=14178 comm="syz.3.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  298.540103][T14179] loop3: detected capacity change from 0 to 8192
[  298.580968][   T29] audit: type=1400 audit(2582639304.948:5882): avc:  denied  { listen } for  pid=14184 comm="syz.0.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  298.605707][   T29] audit: type=1400 audit(2582639304.948:5883): avc:  denied  { accept } for  pid=14184 comm="syz.0.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  298.765961][T14190] loop5: detected capacity change from 0 to 1024
[  298.787143][T14190] EXT4-fs: Ignoring removed orlov option
[  298.817514][T14190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.911760][T14194] netlink: 'syz.5.3267': attribute type 10 has an invalid length.
[  299.002551][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.042626][T14202] loop5: detected capacity change from 0 to 256
[  299.120987][   T52] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.137249][T14207] lo speed is unknown, defaulting to 1000
[  299.143611][T14207] lo speed is unknown, defaulting to 1000
[  299.151067][T14195] lo speed is unknown, defaulting to 1000
[  299.161031][   T52] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.177366][T14208] pimreg: left allmulticast mode
[  299.206928][T14195] lo speed is unknown, defaulting to 1000
[  299.227001][   T52] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.241835][T13980] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  299.249808][T13980] FAT-fs (loop3): Filesystem has been set read-only
[  299.316494][   T52] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.352516][T14211] FAULT_INJECTION: forcing a failure.
[  299.352516][T14211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  299.365765][T14211] CPU: 1 UID: 0 PID: 14211 Comm: syz.3.3271 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  299.365836][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  299.365850][T14211] Call Trace:
[  299.365857][T14211]  <TASK>
[  299.365865][T14211]  __dump_stack+0x1d/0x30
[  299.365892][T14211]  dump_stack_lvl+0x95/0xd0
[  299.366052][T14211]  dump_stack+0x15/0x1b
[  299.366202][T14211]  should_fail_ex+0x263/0x280
[  299.366231][T14211]  should_fail+0xb/0x20
[  299.366254][T14211]  should_fail_usercopy+0x1a/0x20
[  299.366297][T14211]  _copy_to_iter+0x387/0xea0
[  299.366332][T14211]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  299.366426][T14211]  __skb_datagram_iter+0xc6/0x680
[  299.366460][T14211]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  299.366533][T14211]  skb_copy_datagram_iter+0x3d/0x100
[  299.366564][T14211]  netlink_recvmsg+0x1a8/0x550
[  299.366595][T14211]  ? __pfx_netlink_recvmsg+0x10/0x10
[  299.366685][T14211]  sock_recvmsg+0x139/0x160
[  299.366727][T14211]  ____sys_recvmsg+0xf5/0x280
[  299.366772][T14211]  ___sys_recvmsg+0x11f/0x3b0
[  299.366808][T14211]  do_recvmmsg+0x1ef/0x560
[  299.366850][T14211]  ? get_timespec64+0xd2/0x100
[  299.366878][T14211]  __x64_sys_recvmmsg+0xfb/0x170
[  299.366914][T14211]  x64_sys_call+0x2b75/0x3000
[  299.366965][T14211]  do_syscall_64+0xc0/0x2a0
[  299.367017][T14211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.367107][T14211] RIP: 0033:0x7f39bb97acb9
[  299.367128][T14211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.367154][T14211] RSP: 002b:00007f39ba3d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  299.367182][T14211] RAX: ffffffffffffffda RBX: 00007f39bbbf5fa0 RCX: 00007f39bb97acb9
[  299.367199][T14211] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  299.367214][T14211] RBP: 00007f39ba3d7090 R08: 0000200000003700 R09: 0000000000000000
[  299.367258][T14211] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[  299.367276][T14211] R13: 00007f39bbbf6038 R14: 00007f39bbbf5fa0 R15: 00007ffd9a1e6578
[  299.367310][T14211]  </TASK>
[  299.644714][T14195] chnl_net:caif_netlink_parms(): no params data found
[  299.691779][T14215] loop1: detected capacity change from 0 to 256
[  299.751959][   T52] bridge_slave_1: left allmulticast mode
[  299.757716][   T52] bridge_slave_1: left promiscuous mode
[  299.763471][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.776116][T14225] loop3: detected capacity change from 0 to 256
[  299.787488][T14224] loop0: detected capacity change from 0 to 512
[  299.835569][T14224] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  299.847919][   T52] bridge_slave_0: left allmulticast mode
[  299.853612][   T52] bridge_slave_0: left promiscuous mode
[  299.859188][T14224] EXT4-fs (loop0): 1 truncate cleaned up
[  299.859967][T14224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.865301][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.914212][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3279'.
[  299.960505][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.970106][T14234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14234 comm=syz.1.3279
[  300.055761][T14237] loop0: detected capacity change from 0 to 1024
[  300.085853][T14237] EXT4-fs: Ignoring removed orlov option
[  300.099510][T14237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.118464][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.135153][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.149866][   T52] bond0 (unregistering): Released all slaves
[  300.168680][T14237] netlink: 'syz.0.3280': attribute type 10 has an invalid length.
[  300.186421][T14229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.209620][   T52] IPVS: stopping backup sync thread 13661 ...
[  300.226600][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'.
[  300.235789][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3279'.
[  300.250408][T14237] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.270516][T14237] bridge_slave_1: left allmulticast mode
[  300.276427][T14237] bridge_slave_1: left promiscuous mode
[  300.282151][T14237] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.297775][T14241] loop5: detected capacity change from 0 to 8192
[  300.312954][T14237] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  300.333203][T14195] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.340402][T14195] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.361692][T14195] bridge_slave_0: entered allmulticast mode
[  300.369812][T14195] bridge_slave_0: entered promiscuous mode
[  300.384212][T14195] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.391450][T14195] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.421479][T14195] bridge_slave_1: entered allmulticast mode
[  300.433890][T14195] bridge_slave_1: entered promiscuous mode
[  300.455623][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.466638][   T52] hsr_slave_0: left promiscuous mode
[  300.476744][   T52] hsr_slave_1: left promiscuous mode
[  300.484178][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.491811][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.526454][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.533983][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.559596][   T52] veth1_macvtap: left promiscuous mode
[  300.565183][   T52] veth0_macvtap: left promiscuous mode
[  300.575547][   T52] veth1_vlan: left promiscuous mode
[  300.580830][   T52] veth0_vlan: left promiscuous mode
[  300.708502][   T52] team0 (unregistering): Port device team_slave_1 removed
[  300.718744][   T52] team0 (unregistering): Port device team_slave_0 removed
[  300.802875][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.815032][T14249] lo speed is unknown, defaulting to 1000
[  300.822257][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.832232][T14249] lo speed is unknown, defaulting to 1000
[  300.879978][T14195] team0: Port device team_slave_0 added
[  300.894376][T14195] team0: Port device team_slave_1 added
[  300.930664][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.937826][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.963827][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.982398][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.989575][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.015696][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.076326][T14263] loop0: detected capacity change from 0 to 256
[  301.144785][T14195] hsr_slave_0: entered promiscuous mode
[  301.176070][T14195] hsr_slave_1: entered promiscuous mode
[  301.181126][T14273] loop0: detected capacity change from 0 to 256
[  301.195674][T14195] debugfs: 'hsr0' already exists in 'hsr'
[  301.201704][T14195] Cannot create hsr debugfs directory
[  301.296513][ T6995] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  301.304404][ T6995] FAT-fs (loop5): Filesystem has been set read-only
[  301.391142][T14283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.448745][T14283] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.532958][   T29] audit: type=1400 audit(2582639307.898:5884): avc:  denied  { cpu } for  pid=14288 comm="syz.0.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  301.554827][T14300] netlink: 'syz.0.3291': attribute type 3 has an invalid length.
[  301.607830][T14302] FAULT_INJECTION: forcing a failure.
[  301.607830][T14302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.621090][T14302] CPU: 0 UID: 0 PID: 14302 Comm: syz.5.3290 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  301.621122][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  301.621209][T14302] Call Trace:
[  301.621225][T14302]  <TASK>
[  301.621236][T14302]  __dump_stack+0x1d/0x30
[  301.621262][T14302]  dump_stack_lvl+0x95/0xd0
[  301.621333][T14302]  dump_stack+0x15/0x1b
[  301.621397][T14302]  should_fail_ex+0x263/0x280
[  301.621491][T14302]  should_fail+0xb/0x20
[  301.621515][T14302]  should_fail_usercopy+0x1a/0x20
[  301.621546][T14302]  _copy_from_user+0x1c/0xb0
[  301.621573][T14302]  sctp_setsockopt+0x154/0xe30
[  301.621654][T14302]  sock_common_setsockopt+0x69/0x80
[  301.621718][T14302]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  301.621785][T14302]  __sys_setsockopt+0x184/0x200
[  301.621810][T14302]  __x64_sys_setsockopt+0x64/0x80
[  301.621837][T14302]  x64_sys_call+0x21d5/0x3000
[  301.621866][T14302]  do_syscall_64+0xc0/0x2a0
[  301.621951][T14302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.622053][T14302] RIP: 0033:0x7fc13c34acb9
[  301.622075][T14302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.622098][T14302] RSP: 002b:00007fc13ada7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  301.622124][T14302] RAX: ffffffffffffffda RBX: 00007fc13c5c5fa0 RCX: 00007fc13c34acb9
[  301.622142][T14302] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000003
[  301.622158][T14302] RBP: 00007fc13ada7090 R08: 0000000000000010 R09: 0000000000000000
[  301.622175][T14302] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  301.622270][T14302] R13: 00007fc13c5c6038 R14: 00007fc13c5c5fa0 R15: 00007ffc961e2bb8
[  301.622363][T14302]  </TASK>
[  301.815495][   T29] audit: type=1400 audit(2582639307.928:5885): avc:  denied  { shutdown } for  pid=14288 comm="syz.0.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  301.946409][T14309] EXT4-fs: Ignoring removed orlov option
[  301.974358][T14195] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  301.991245][T13432] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.992001][T14309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.035120][T14195] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  302.057628][T14195] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  302.091566][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.113624][T14195] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  302.210298][T14229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.259364][T14229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.298383][T14195] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.339568][T14195] 8021q: adding VLAN 0 to HW filter on device team0
[  302.360875][T14229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.406628][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.413760][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.426721][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.433943][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.458189][T14348] lo speed is unknown, defaulting to 1000
[  302.477974][ T3772] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.486405][T14348] lo speed is unknown, defaulting to 1000
[  302.505064][T14195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.515620][T14195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.635034][   T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.665001][   T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.693622][   T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.717544][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.732621][T14362] EXT4-fs: Ignoring removed oldalloc option
[  302.753906][T14362] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3299: Parent and EA inode have the same ino 15
[  302.785676][T14362] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3299: Parent and EA inode have the same ino 15
[  302.820469][T14362] EXT4-fs (loop3): 1 orphan inode deleted
[  302.834246][T14362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.979547][T14381] EXT4-fs: Ignoring removed orlov option
[  302.997433][T14381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.045207][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.081931][   T29] audit: type=1400 audit(2582639309.448:5886): avc:  denied  { connect } for  pid=14385 comm="syz.1.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  303.113785][T14390] ext4: Unknown parameter 'subj_user'
[  303.136438][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'.
[  303.145527][T14390] netlink: 'syz.1.3301': attribute type 1 has an invalid length.
[  303.156561][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.189422][T14195] veth0_vlan: entered promiscuous mode
[  303.195210][T14390] tmpfs: Bad value for 'mpol'
[  303.227898][T14195] veth1_vlan: entered promiscuous mode
[  303.282259][T14195] veth0_macvtap: entered promiscuous mode
[  303.311246][T14195] veth1_macvtap: entered promiscuous mode
[  303.339256][   T29] audit: type=1400 audit(2582639309.708:5887): avc:  denied  { create } for  pid=14401 comm="syz.0.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  303.365153][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.400765][   T29] audit: type=1400 audit(2582639309.748:5888): avc:  denied  { ioctl } for  pid=14401 comm="syz.0.3307" path="socket:[47814]" dev="sockfs" ino=47814 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  303.427301][T14405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.456651][T14407] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  303.468289][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.476040][T14407] EXT4-fs (loop3): orphan cleanup on readonly fs
[  303.483443][T14407] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  303.493988][T14407] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  303.503757][T14407] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3309: Failed to acquire dquot type 1
[  303.521666][ T3772] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.536699][T14405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.547389][T14407] EXT4-fs (loop3): Remounting filesystem read-only
[  303.553958][T14407] EXT4-fs (loop3): 1 truncate cleaned up
[  303.567848][T14407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  303.583428][T14412] set_capacity_and_notify: 8 callbacks suppressed
[  303.583451][T14412] loop0: detected capacity change from 0 to 512
[  303.642868][T14407] netlink: 'syz.3.3309': attribute type 3 has an invalid length.
[  303.656946][T14412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.676685][T14412] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.689047][   T29] audit: type=1401 audit(2582639310.058:5889): op=fscreate invalid_context=DC
[  303.700834][ T3772] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.720793][T14405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.738249][ T3772] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.748800][ T3772] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.756405][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.811672][T14405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.824334][T14421] FAT-fs (loop13): unable to read boot sector
[  303.925594][ T3772] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.947408][ T3772] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.964260][ T3772] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.981407][ T3772] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.001595][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.036202][T14429] loop6: detected capacity change from 0 to 256
[  304.060986][T14431] netlink: 'syz.0.3315': attribute type 10 has an invalid length.
[  304.103970][T14431] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.136591][T14431] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.143748][T14431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.175970][T14439] FAULT_INJECTION: forcing a failure.
[  304.175970][T14439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.189199][T14439] CPU: 1 UID: 0 PID: 14439 Comm: syz.1.3318 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  304.189340][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  304.189358][T14439] Call Trace:
[  304.189367][T14439]  <TASK>
[  304.189377][T14439]  __dump_stack+0x1d/0x30
[  304.189404][T14439]  dump_stack_lvl+0x95/0xd0
[  304.189429][T14439]  dump_stack+0x15/0x1b
[  304.189456][T14439]  should_fail_ex+0x263/0x280
[  304.189564][T14439]  should_fail+0xb/0x20
[  304.189582][T14439]  should_fail_usercopy+0x1a/0x20
[  304.189607][T14439]  _copy_from_user+0x1c/0xb0
[  304.189633][T14439]  ___sys_sendmsg+0xc1/0x1e0
[  304.189709][T14439]  __x64_sys_sendmsg+0xd4/0x160
[  304.189737][T14439]  x64_sys_call+0x17ba/0x3000
[  304.189766][T14439]  do_syscall_64+0xc0/0x2a0
[  304.189797][T14439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.189864][T14439] RIP: 0033:0x7fac2a10acb9
[  304.189880][T14439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.189903][T14439] RSP: 002b:00007fac28b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.189941][T14439] RAX: ffffffffffffffda RBX: 00007fac2a386090 RCX: 00007fac2a10acb9
[  304.189957][T14439] RDX: 00000000200080d0 RSI: 0000200000001100 RDI: 0000000000000004
[  304.189970][T14439] RBP: 00007fac28b46090 R08: 0000000000000000 R09: 0000000000000000
[  304.189988][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.190005][T14439] R13: 00007fac2a386128 R14: 00007fac2a386090 R15: 00007fffe564a818
[  304.190090][T14439]  </TASK>
[  304.192507][T14431] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  304.425323][T14447] lo speed is unknown, defaulting to 1000
[  304.438019][T14447] lo speed is unknown, defaulting to 1000
[  304.458913][   T29] audit: type=1400 audit(2582639310.828:5890): avc:  denied  { ioctl } for  pid=14448 comm="syz.6.3322" path="socket:[49020]" dev="sockfs" ino=49020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  304.563063][T14456] FAULT_INJECTION: forcing a failure.
[  304.563063][T14456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.576410][T14456] CPU: 1 UID: 0 PID: 14456 Comm: syz.3.3325 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  304.576487][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  304.576505][T14456] Call Trace:
[  304.576513][T14456]  <TASK>
[  304.576524][T14456]  __dump_stack+0x1d/0x30
[  304.576631][T14456]  dump_stack_lvl+0x95/0xd0
[  304.576661][T14456]  dump_stack+0x15/0x1b
[  304.576711][T14456]  should_fail_ex+0x263/0x280
[  304.576732][T14456]  ? __pfx_ucma_resolve_ip+0x10/0x10
[  304.576761][T14456]  should_fail+0xb/0x20
[  304.576779][T14456]  should_fail_usercopy+0x1a/0x20
[  304.576810][T14456]  _copy_from_user+0x1c/0xb0
[  304.576911][T14456]  ucma_resolve_ip+0x4a/0x1f0
[  304.576940][T14456]  ? __pfx_ucma_resolve_ip+0x10/0x10
[  304.577027][T14456]  ucma_write+0x1c9/0x260
[  304.577057][T14456]  vfs_writev+0x42b/0x900
[  304.577117][T14456]  ? __pfx_ucma_write+0x10/0x10
[  304.577218][T14456]  do_writev+0xe9/0x210
[  304.577247][T14456]  __x64_sys_writev+0x45/0x50
[  304.577272][T14456]  x64_sys_call+0x1ba5/0x3000
[  304.577315][T14456]  do_syscall_64+0xc0/0x2a0
[  304.577353][T14456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.577383][T14456] RIP: 0033:0x7f39bb97acb9
[  304.577430][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.577456][T14456] RSP: 002b:00007f39ba3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  304.577523][T14456] RAX: ffffffffffffffda RBX: 00007f39bbbf5fa0 RCX: 00007f39bb97acb9
[  304.577541][T14456] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000d
[  304.577558][T14456] RBP: 00007f39ba3d7090 R08: 0000000000000000 R09: 0000000000000000
[  304.577572][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.577585][T14456] R13: 00007f39bbbf6038 R14: 00007f39bbbf5fa0 R15: 00007ffd9a1e6578
[  304.577607][T14456]  </TASK>
[  304.831374][T14461] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3327'.
[  304.880511][T14464] loop3: detected capacity change from 0 to 512
[  304.919062][T14464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.942065][T14464] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.986509][   T29] audit: type=1326 audit(2582639311.358:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.0.3330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa651abacb9 code=0x0
[  305.017700][T14478] loop1: detected capacity change from 0 to 256
[  305.161097][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.178923][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'.
[  305.241638][T14490] loop1: detected capacity change from 0 to 8192
[  305.659308][T14463] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.764766][T14547] loop5: detected capacity change from 0 to 1024
[  305.776676][T14547] EXT4-fs: Ignoring removed orlov option
[  305.798506][T14547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.835597][T14463] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.861930][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.887579][T14554] loop0: detected capacity change from 0 to 1024
[  305.894834][T14554] EXT4-fs: Ignoring removed orlov option
[  305.934971][T14554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.021812][T14561] netlink: 'syz.0.3340': attribute type 10 has an invalid length.
[  306.049465][T14563] loop3: detected capacity change from 0 to 256
[  306.067483][T14565] loop5: detected capacity change from 0 to 512
[  306.106006][T14565] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  306.114143][T14565] EXT4-fs (loop5): orphan cleanup on readonly fs
[  306.149004][T14463] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.160567][T14565] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3343: Failed to acquire dquot type 1
[  306.161267][T13432] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  306.176385][T14565] EXT4-fs (loop5): Remounting filesystem read-only
[  306.179947][T13432] FAT-fs (loop1): Filesystem has been set read-only
[  306.187760][T14565] EXT4-fs (loop5): 1 truncate cleaned up
[  306.201419][T14565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  306.229345][T14565] netlink: 'syz.5.3343': attribute type 3 has an invalid length.
[  306.241670][T14570] loop3: detected capacity change from 0 to 512
[  306.262007][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.277028][T14570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.322293][T14463] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.334901][T14570] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.359043][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.469317][   T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.487311][   T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.519085][   T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.543891][T14585] EXT4-fs: Ignoring removed orlov option
[  306.558800][   T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.591510][T14585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.636726][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.736374][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.779026][T14600] EXT4-fs: Ignoring removed orlov option
[  306.797674][T14600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.850633][T14598] FAULT_INJECTION: forcing a failure.
[  306.850633][T14598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.863911][T14598] CPU: 1 UID: 0 PID: 14598 Comm: syz.1.3351 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  306.863948][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.863965][T14598] Call Trace:
[  306.863974][T14598]  <TASK>
[  306.864066][T14598]  __dump_stack+0x1d/0x30
[  306.864214][T14598]  dump_stack_lvl+0x95/0xd0
[  306.864297][T14598]  dump_stack+0x15/0x1b
[  306.864363][T14598]  should_fail_ex+0x263/0x280
[  306.864437][T14598]  should_fail+0xb/0x20
[  306.864498][T14598]  should_fail_usercopy+0x1a/0x20
[  306.864687][T14598]  _copy_to_user+0x20/0xa0
[  306.864780][T14598]  simple_read_from_buffer+0xb5/0x130
[  306.864901][T14598]  proc_fail_nth_read+0x10e/0x150
[  306.865072][T14598]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.865180][T14598]  vfs_read+0x1ab/0x7f0
[  306.865281][T14598]  ? __schedule+0x82d/0xc90
[  306.865391][T14598]  ? __rcu_read_unlock+0x4e/0x70
[  306.865463][T14598]  ? __fget_files+0x184/0x1c0
[  306.865561][T14598]  ? mutex_lock+0x57/0x90
[  306.865649][T14598]  ksys_read+0xdc/0x1a0
[  306.865757][T14598]  __x64_sys_read+0x40/0x50
[  306.865944][T14598]  x64_sys_call+0x2889/0x3000
[  306.866031][T14598]  do_syscall_64+0xc0/0x2a0
[  306.866133][T14598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.866208][T14598] RIP: 0033:0x7fac2a0cb58e
[  306.866383][T14598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  306.866447][T14598] RSP: 002b:00007fac28b45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  306.866513][T14598] RAX: ffffffffffffffda RBX: 00007fac28b466c0 RCX: 00007fac2a0cb58e
[  306.866566][T14598] RDX: 000000000000000f RSI: 00007fac28b460a0 RDI: 0000000000000004
[  306.866609][T14598] RBP: 00007fac28b46090 R08: 0000000000000000 R09: 0000000000000000
[  306.866654][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.866729][T14598] R13: 00007fac2a386128 R14: 00007fac2a386090 R15: 00007fffe564a818
[  306.866780][T14598]  </TASK>
[  306.898363][T14600] netlink: 'syz.0.3356': attribute type 10 has an invalid length.
[  306.948202][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.968223][T14609] EXT4-fs: Ignoring removed orlov option
[  307.048798][T14609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.142301][T14615] EXT4-fs: Ignoring removed orlov option
[  307.194531][T14611] EXT4-fs: Ignoring removed oldalloc option
[  307.235569][T14611] EXT4-fs: inline encryption not supported
[  307.241182][T14609] netlink: 'syz.6.3357': attribute type 10 has an invalid length.
[  307.243627][T14615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.258772][T14609] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.269381][T14609] bridge_slave_1: left allmulticast mode
[  307.275061][T14609] bridge_slave_1: left promiscuous mode
[  307.280789][T14609] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.290945][T14611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  307.294970][T14609] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  307.375507][T14611] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  307.387315][T14621] netlink: 'syz.0.3368': attribute type 10 has an invalid length.
[  307.400285][T14611] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.3358: lblock 1 mapped to illegal pblock 1 (length 1)
[  307.416462][T14611] __quota_error: 3 callbacks suppressed
[  307.416479][T14611] Quota error (device loop1): write_blk: dquota write failed
[  307.429540][T14611] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  307.440361][T14611] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3358: Failed to acquire dquot type 0
[  307.451996][T14611] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.3358: Freeing blocks not in datazone - block = 0, count = 4096
[  307.501791][T14611] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3358: Invalid inode bitmap blk 0 in block_group 0
[  307.515501][ T3779] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  307.535545][ T3779] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  307.544136][ T3779] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0
[  307.556055][T14611] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  307.567711][T14611] EXT4-fs (loop1): 1 orphan inode deleted
[  307.574111][T14611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.648912][T13980] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  307.657217][T13980] FAT-fs (loop3): Filesystem has been set read-only
[  307.676500][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.962037][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.287413][T14642] EXT4-fs: Ignoring removed orlov option
[  308.332423][T13432] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.355823][T14642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.378077][T14651] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.425218][T14653] FAULT_INJECTION: forcing a failure.
[  308.425218][T14653] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.438385][T14653] CPU: 0 UID: 0 PID: 14653 Comm: syz.1.3367 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  308.438422][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.438516][T14653] Call Trace:
[  308.438524][T14653]  <TASK>
[  308.438534][T14653]  __dump_stack+0x1d/0x30
[  308.438567][T14653]  dump_stack_lvl+0x95/0xd0
[  308.438596][T14653]  dump_stack+0x15/0x1b
[  308.438692][T14653]  should_fail_ex+0x263/0x280
[  308.438719][T14653]  should_fail+0xb/0x20
[  308.438818][T14653]  should_fail_usercopy+0x1a/0x20
[  308.438847][T14653]  _copy_from_user+0x1c/0xb0
[  308.438880][T14653]  __sys_bind+0x106/0x290
[  308.438929][T14653]  __x64_sys_bind+0x3f/0x50
[  308.438971][T14653]  x64_sys_call+0x2ceb/0x3000
[  308.439036][T14653]  do_syscall_64+0xc0/0x2a0
[  308.439088][T14653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.439133][T14653] RIP: 0033:0x7fac2a10acb9
[  308.439150][T14653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.439214][T14653] RSP: 002b:00007fac28b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  308.439320][T14653] RAX: ffffffffffffffda RBX: 00007fac2a385fa0 RCX: 00007fac2a10acb9
[  308.439336][T14653] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000003
[  308.439371][T14653] RBP: 00007fac28b67090 R08: 0000000000000000 R09: 0000000000000000
[  308.439462][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.439476][T14653] R13: 00007fac2a386038 R14: 00007fac2a385fa0 R15: 00007fffe564a818
[  308.439496][T14653]  </TASK>
[  308.442501][T14658] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  308.597951][T14655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.625706][T14655] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.648622][T14651] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.687982][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.747733][T14651] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.806315][T14674] set_capacity_and_notify: 10 callbacks suppressed
[  308.806332][T14674] loop1: detected capacity change from 0 to 1024
[  308.820002][T14655] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 1: comm syz.5.3369: lblock 1 mapped to illegal pblock 1 (length 5)
[  308.834881][T14674] EXT4-fs: Ignoring removed orlov option
[  308.843290][T14655] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117
[  308.855744][T14655] EXT4-fs (loop5): This should not happen!! Data will be lost
[  308.855744][T14655] 
[  308.867647][T14665] loop6: detected capacity change from 0 to 8192
[  308.875120][T14651] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.912691][T14674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.939523][T14678] loop3: detected capacity change from 0 to 4096
[  308.969283][T14678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.985081][   T56] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8)
[  309.001607][   T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  309.014430][   T56] EXT4-fs (loop5): This should not happen!! Data will be lost
[  309.014430][   T56] 
[  309.047179][T14682] netlink: 'syz.1.3374': attribute type 10 has an invalid length.
[  309.097290][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.115583][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.127071][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.136690][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.208305][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  309.217421][T14685] loop0: detected capacity change from 0 to 512
[  309.248200][T14685] FAT-fs (loop0): IO charset u���#w�w9��C=Y撳�t����EŒ&y3�_�S��@�rRh�B�&5d����xpO���߁�up���@H��X��[��曖[����7VG���1�� y�{�.#����v��X�����)P1u�&-�@=�6A�x�a'�ێ�e��� y�o�E������
[  309.248200][T14685] r��� not found
[  309.275143][T13432] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.445226][T14685] loop0: detected capacity change from 0 to 8192
[  309.454090][T14692] loop5: detected capacity change from 0 to 512
[  309.486271][ T3558]  loop0: p1 p2 p3 < > p4 < p5 p6 >
[  309.491552][ T3558] loop0: partition table partially beyond EOD, truncated
[  309.506021][ T3558] loop0: p1 start 30976 is beyond EOD, truncated
[  309.512513][ T3558] loop0: p2 size 16128 extends beyond EOD, truncated
[  309.532671][ T3558] loop0: p3 start 327168 is beyond EOD, truncated
[  309.544551][ T3558] loop0: p5 start 30976 is beyond EOD, truncated
[  309.551048][ T3558] loop0: p6 size 16128 extends beyond EOD, truncated
[  309.588677][T14685]  loop0: p1 p2 p3 < > p4 < p5 p6 >
[  309.593950][T14685] loop0: partition table partially beyond EOD, truncated
[  309.620765][T14685] loop0: p1 start 30976 is beyond EOD, truncated
[  309.627332][T14685] loop0: p2 size 16128 extends beyond EOD, truncated
[  309.668138][T14685] loop0: p3 start 327168 is beyond EOD, truncated
[  309.677947][T14685] loop0: p5 start 30976 is beyond EOD, truncated
[  309.684340][T14685] loop0: p6 size 16128 extends beyond EOD, truncated
[  309.703439][T14692] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.768120][T14195] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  309.776215][T14195] FAT-fs (loop6): Filesystem has been set read-only
[  309.944273][T14705] loop3: detected capacity change from 0 to 1024
[  309.961748][T14707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3383'.
[  309.967476][T14705] EXT4-fs: Ignoring removed orlov option
[  310.009055][T14709] FAULT_INJECTION: forcing a failure.
[  310.009055][T14709] name failslab, interval 1, probability 0, space 0, times 0
[  310.021758][T14709] CPU: 1 UID: 0 PID: 14709 Comm: syz.0.3384 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  310.021796][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  310.021814][T14709] Call Trace:
[  310.021823][T14709]  <TASK>
[  310.021846][T14709]  __dump_stack+0x1d/0x30
[  310.021878][T14709]  dump_stack_lvl+0x95/0xd0
[  310.021951][T14709]  dump_stack+0x15/0x1b
[  310.022026][T14709]  should_fail_ex+0x263/0x280
[  310.022048][T14709]  should_failslab+0x8c/0xb0
[  310.022070][T14709]  __kmalloc_cache_noprof+0x64/0x4a0
[  310.022155][T14709]  ? nsim_fib_event_nb+0x1a0/0xcb0
[  310.022275][T14709]  nsim_fib_event_nb+0x1a0/0xcb0
[  310.022363][T14709]  ? fib_nh_match+0x8ba/0xa40
[  310.022407][T14709]  ? avc_has_perm_noaudit+0xab/0x130
[  310.022453][T14709]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  310.022607][T14709]  atomic_notifier_call_chain+0x76/0x1b0
[  310.022653][T14709]  call_fib_notifiers+0x65/0xa0
[  310.022696][T14709]  call_fib4_notifiers+0x77/0xb0
[  310.022806][T14709]  fib_table_delete+0x7b5/0x8b0
[  310.022900][T14709]  ip_rt_ioctl+0x5e8/0xa70
[  310.022949][T14709]  inet_ioctl+0x33f/0x3a0
[  310.022997][T14709]  sock_do_ioctl+0x73/0x230
[  310.023044][T14709]  sock_ioctl+0x41b/0x610
[  310.023076][T14709]  ? mutex_lock+0x57/0x90
[  310.023098][T14709]  ? __pfx_sock_ioctl+0x10/0x10
[  310.023195][T14709]  __se_sys_ioctl+0xce/0x140
[  310.023303][T14709]  __x64_sys_ioctl+0x43/0x50
[  310.023344][T14709]  x64_sys_call+0x14b0/0x3000
[  310.023378][T14709]  do_syscall_64+0xc0/0x2a0
[  310.023449][T14709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.023472][T14709] RIP: 0033:0x7fa651abacb9
[  310.023489][T14709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.023509][T14709] RSP: 002b:00007fa650517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  310.023540][T14709] RAX: ffffffffffffffda RBX: 00007fa651d35fa0 RCX: 00007fa651abacb9
[  310.023622][T14709] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003
[  310.023639][T14709] RBP: 00007fa650517090 R08: 0000000000000000 R09: 0000000000000000
[  310.023656][T14709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.023670][T14709] R13: 00007fa651d36038 R14: 00007fa651d35fa0 R15: 00007ffe3835a8a8
[  310.023690][T14709]  </TASK>
[  310.295619][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  310.295704][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  310.334838][T14720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14720 comm=syz.0.3386
[  310.348719][T14720] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  310.360675][ T3556] udevd[3556]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[  310.377518][T14712] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3385'.
[  310.379510][T14720] 8021q: adding VLAN 0 to HW filter on device bond1
[  310.434867][T14727] bond1: (slave veth3): Enslaving as an active interface with a down link
[  310.521769][T14735] loop3: detected capacity change from 0 to 1024
[  310.522384][T14727] bond1: (slave dummy0): making interface the new active one
[  310.534754][T14735] EXT4-fs: Ignoring removed orlov option
[  310.541634][T14727] dummy0: entered promiscuous mode
[  310.555061][T14727] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  310.591667][T14720] bond1 (unregistering): (slave veth3): Releasing active interface
[  310.607107][T14720] bond1 (unregistering): (slave dummy0): Releasing active interface
[  310.621113][T14720] bond1 (unregistering): Released all slaves
[  310.628717][T14732] netlink: 'syz.3.3389': attribute type 10 has an invalid length.
[  310.639106][T14732] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.647256][T14732] bridge_slave_1: left allmulticast mode
[  310.652993][T14732] bridge_slave_1: left promiscuous mode
[  310.658933][T14732] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.666247][T14727] loop0: detected capacity change from 0 to 512
[  310.675695][T14732] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  310.686294][T14727] journal_path: not usable as path
[  310.691518][T14727] EXT4-fs: error: could not find journal device path
[  310.816008][T14742] loop6: detected capacity change from 0 to 8192
[  311.003922][T14749] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.528268][T14784] FAULT_INJECTION: forcing a failure.
[  311.528268][T14784] name failslab, interval 1, probability 0, space 0, times 0
[  311.541119][T14784] CPU: 0 UID: 0 PID: 14784 Comm: syz.5.3403 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  311.541226][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  311.541241][T14784] Call Trace:
[  311.541247][T14784]  <TASK>
[  311.541255][T14784]  __dump_stack+0x1d/0x30
[  311.541281][T14784]  dump_stack_lvl+0x95/0xd0
[  311.541310][T14784]  dump_stack+0x15/0x1b
[  311.541386][T14784]  should_fail_ex+0x263/0x280
[  311.541414][T14784]  ? __pfx_proc_alloc_inode+0x10/0x10
[  311.541446][T14784]  should_failslab+0x8c/0xb0
[  311.541469][T14784]  kmem_cache_alloc_lru_noprof+0x6c/0x490
[  311.541498][T14784]  ? proc_alloc_inode+0x34/0x90
[  311.541587][T14784]  ? __d_lookup_rcu+0x28b/0x2d0
[  311.541621][T14784]  ? __pfx_proc_alloc_inode+0x10/0x10
[  311.541656][T14784]  proc_alloc_inode+0x34/0x90
[  311.541751][T14784]  alloc_inode+0x40/0x170
[  311.541777][T14784]  new_inode+0x1d/0xe0
[  311.541799][T14784]  proc_get_inode+0x21/0x370
[  311.541869][T14784]  proc_lookup_de+0x196/0x240
[  311.541909][T14784]  proc_lookup+0x7e/0x90
[  311.541965][T14784]  proc_root_lookup+0x37/0x50
[  311.542008][T14784]  __lookup_slow+0x19d/0x260
[  311.542040][T14784]  lookup_slow+0x3c/0x60
[  311.542146][T14784]  link_path_walk+0x946/0xe30
[  311.542180][T14784]  path_openat+0x1bf/0x23c0
[  311.542311][T14784]  ? _parse_integer_limit+0x170/0x190
[  311.542378][T14784]  ? kstrtouint+0x76/0xc0
[  311.542422][T14784]  do_filp_open+0x15d/0x280
[  311.542503][T14784]  do_sys_openat2+0xa6/0x150
[  311.542590][T14784]  __x64_sys_openat+0xf2/0x120
[  311.542673][T14784]  x64_sys_call+0x2b07/0x3000
[  311.542705][T14784]  do_syscall_64+0xc0/0x2a0
[  311.542741][T14784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.542770][T14784] RIP: 0033:0x7fc13c34acb9
[  311.542794][T14784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.542819][T14784] RSP: 002b:00007fc13ada7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  311.542844][T14784] RAX: ffffffffffffffda RBX: 00007fc13c5c5fa0 RCX: 00007fc13c34acb9
[  311.542885][T14784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  311.542903][T14784] RBP: 00007fc13ada7090 R08: 0000000000000000 R09: 0000000000000000
[  311.542917][T14784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.542929][T14784] R13: 00007fc13c5c6038 R14: 00007fc13c5c5fa0 R15: 00007ffc961e2bb8
[  311.542956][T14784]  </TASK>
[  311.825463][T14788] netlink: 'syz.5.3405': attribute type 10 has an invalid length.
[  311.834032][T14787] EXT4-fs (loop5): Invalid log cluster size: 134217728
[  311.841839][T14788] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  311.857123][T14195] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  311.865283][T14195] FAT-fs (loop6): Filesystem has been set read-only
[  311.895087][T14790] EXT4-fs: Ignoring removed orlov option
[  311.916579][T14771] EXT4-fs (loop1): 1 truncate cleaned up
[  311.933953][T14771] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3400'.
[  311.949534][   T29] audit: type=1326 audit(2582639318.318:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.1.3400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac2a10acb9 code=0x0
[  312.005184][T14797] netlink: 'syz.0.3404': attribute type 10 has an invalid length.
[  312.025919][   T29] audit: type=1400 audit(2582639318.368:5894): avc:  denied  { append } for  pid=14770 comm="syz.1.3400" name="rt_cache" dev="proc" ino=4026534045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  312.124947][T14812] FAULT_INJECTION: forcing a failure.
[  312.124947][T14812] name failslab, interval 1, probability 0, space 0, times 0
[  312.138393][T14812] CPU: 0 UID: 0 PID: 14812 Comm: syz.0.3410 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  312.138439][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  312.138454][T14812] Call Trace:
[  312.138462][T14812]  <TASK>
[  312.138473][T14812]  __dump_stack+0x1d/0x30
[  312.138505][T14812]  dump_stack_lvl+0x95/0xd0
[  312.138531][T14812]  dump_stack+0x15/0x1b
[  312.138565][T14812]  should_fail_ex+0x263/0x280
[  312.138589][T14812]  should_failslab+0x8c/0xb0
[  312.138618][T14812]  __kvmalloc_node_noprof+0x148/0x680
[  312.138646][T14812]  ? nf_hook_entries_grow+0x1cb/0x460
[  312.138682][T14812]  nf_hook_entries_grow+0x1cb/0x460
[  312.138712][T14812]  ? xas_load+0x413/0x430
[  312.138816][T14812]  __nf_register_net_hook+0x18e/0x480
[  312.138855][T14812]  ? __kmalloc_noprof+0x4a3/0x580
[  312.138952][T14812]  ? bm_init+0x4c/0x6f0
[  312.139043][T14812]  nf_register_net_hook+0x88/0x130
[  312.139141][T14812]  nf_register_net_hooks+0x44/0x150
[  312.139180][T14812]  nf_defrag_ipv6_enable+0x6e/0xc0
[  312.139273][T14812]  nf_ct_netns_do_get+0x161/0x3a0
[  312.139359][T14812]  ? mutex_unlock+0x4e/0x90
[  312.139386][T14812]  nf_ct_netns_get+0x87/0xc0
[  312.139420][T14812]  connmark_tg_check+0x35/0xa0
[  312.139513][T14812]  xt_check_target+0x28d/0x4c0
[  312.139549][T14812]  ? xt_find_match+0x1d1/0x210
[  312.139581][T14812]  ? mutex_unlock+0x4e/0x90
[  312.139611][T14812]  ? xt_find_target+0x1cd/0x200
[  312.139646][T14812]  translate_table+0xddf/0x11b0
[  312.139699][T14812]  do_ip6t_set_ctl+0x6d9/0x8f0
[  312.139740][T14812]  ? kstrtoull+0x111/0x140
[  312.139782][T14812]  ? __rcu_read_unlock+0x4e/0x70
[  312.139806][T14812]  nf_setsockopt+0x199/0x1b0
[  312.139922][T14812]  ipv6_setsockopt+0x11a/0x130
[  312.139961][T14812]  tcp_setsockopt+0x98/0xb0
[  312.140001][T14812]  sock_common_setsockopt+0x69/0x80
[  312.140039][T14812]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  312.140144][T14812]  __sys_setsockopt+0x184/0x200
[  312.140188][T14812]  __x64_sys_setsockopt+0x64/0x80
[  312.140218][T14812]  x64_sys_call+0x21d5/0x3000
[  312.140259][T14812]  do_syscall_64+0xc0/0x2a0
[  312.140316][T14812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.140357][T14812] RIP: 0033:0x7fa651abacb9
[  312.140378][T14812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.140404][T14812] RSP: 002b:00007fa650517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  312.140423][T14812] RAX: ffffffffffffffda RBX: 00007fa651d35fa0 RCX: 00007fa651abacb9
[  312.140436][T14812] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  312.140505][T14812] RBP: 00007fa650517090 R08: 0000000000000408 R09: 0000000000000000
[  312.140521][T14812] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001
[  312.140533][T14812] R13: 00007fa651d36038 R14: 00007fa651d35fa0 R15: 00007ffe3835a8a8
[  312.140553][T14812]  </TASK>
[  312.140563][T14812] cannot load conntrack support for proto=10
[  312.436446][T14814] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.436956][T14813] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.482461][   T29] audit: type=1400 audit(2582639318.848:5895): avc:  denied  { bind } for  pid=14817 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  312.528046][T14813] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.578403][T14820] EXT4-fs: Ignoring removed orlov option
[  312.588439][T14813] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.604557][   T29] audit: type=1326 audit(2582639318.968:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bb97acb9 code=0x7ffc0000
[  312.628417][   T29] audit: type=1326 audit(2582639318.968:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bb97acb9 code=0x7ffc0000
[  312.651969][   T29] audit: type=1326 audit(2582639318.968:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f39bb9371ac code=0x7ffc0000
[  312.675565][   T29] audit: type=1326 audit(2582639318.968:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f39bb93720e code=0x7ffc0000
[  312.718713][   T29] audit: type=1326 audit(2582639318.968:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f39bb97acb9 code=0x7ffc0000
[  312.742580][   T29] audit: type=1326 audit(2582639318.968:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39bb97aa22 code=0x7ffc0000
[  312.766420][   T29] audit: type=1326 audit(2582639318.998:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f39bb9371ac code=0x7ffc0000
[  312.790049][   T29] audit: type=1326 audit(2582639318.998:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f39bb93720e code=0x7ffc0000
[  312.813641][   T29] audit: type=1326 audit(2582639318.998:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.3.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39bb97acb9 code=0x7ffc0000
[  312.857792][T14813] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.868330][ T3558]  loop3: p1 p3 p4
[  312.872263][ T3558] loop3: p1 size 477167616 extends beyond EOD, truncated
[  312.880415][ T3558] loop3: p3 start 4294901760 is beyond EOD, truncated
[  312.887362][ T3558] loop3: p4 size 32768 extends beyond EOD, truncated
[  312.932229][T14825]  loop3: p1 p3 p4
[  312.936597][T14825] loop3: p1 size 477167616 extends beyond EOD, truncated
[  312.959395][T14825] loop3: p3 start 4294901760 is beyond EOD, truncated
[  312.966451][T14825] loop3: p4 size 32768 extends beyond EOD, truncated
[  313.008559][T14843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  313.038456][   T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.062734][T14843] EXT4-fs (loop1): 1 truncate cleaned up
[  313.086925][   T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.126915][   T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.158359][   T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.269185][T14867] netlink: 'syz.3.3421': attribute type 10 has an invalid length.
[  313.323552][T14870] Invalid ELF header type: 2 != 1
[  313.345887][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  313.357596][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  313.393548][T14872] lo speed is unknown, defaulting to 1000
[  313.405016][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  313.424689][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  313.458965][T14872] lo speed is unknown, defaulting to 1000
[  313.468594][T14880] EXT4-fs: Ignoring removed orlov option
[  313.588742][T14888] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.617403][T14895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=14895 comm=syz.5.3431
[  313.720897][T14888] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.756050][T14899] syzkaller0: entered promiscuous mode
[  313.761726][T14899] syzkaller0: entered allmulticast mode
[  313.769681][T14899] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  313.797186][T14888] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.862456][T14195] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  313.870669][T14195] FAT-fs (loop6): Filesystem has been set read-only
[  313.887867][T14888] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.976988][T14921] serio: Serial port ptm0
[  313.992181][T14927] set_capacity_and_notify: 11 callbacks suppressed
[  313.992198][T14927] loop1: detected capacity change from 0 to 1024
[  314.024850][T14927] EXT4-fs: Ignoring removed nomblk_io_submit option
[  314.102922][T14933] loop5: detected capacity change from 0 to 1024
[  314.126757][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'.
[  314.131236][T14933] EXT4-fs: Ignoring removed orlov option
[  314.156743][T14921] serio: Serial port ptm0
[  314.187858][T13432] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256)
[  314.201503][T13432] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256)
[  314.268603][T14933] netlink: 'syz.5.3438': attribute type 10 has an invalid length.
[  314.360856][T14948] loop6: detected capacity change from 0 to 1024
[  314.375878][T14948] EXT4-fs: Ignoring removed orlov option
[  314.470060][ T3440] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.491111][T14957] loop5: detected capacity change from 0 to 1024
[  314.498292][T14957] EXT4-fs: Ignoring removed orlov option
[  314.511399][T14958] tipc: Started in network mode
[  314.516444][T14958] tipc: Node identity 6a61b2b07173, cluster identity 4711
[  314.523712][T14958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.537927][T14958] syzkaller0: entered promiscuous mode
[  314.543608][T14958] syzkaller0: entered allmulticast mode
[  314.565996][T14958] tipc: Resetting bearer <eth:syzkaller0>
[  314.576643][ T3440] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.593720][T14955] tipc: Resetting bearer <eth:syzkaller0>
[  314.614200][T14955] tipc: Disabling bearer <eth:syzkaller0>
[  314.633749][ T3440] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.646205][T14954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.654768][T14954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.688311][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.703354][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.727306][ T3440] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.738709][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.762150][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.827319][T14962] lo speed is unknown, defaulting to 1000
[  314.871085][T14984] FAULT_INJECTION: forcing a failure.
[  314.871085][T14984] name failslab, interval 1, probability 0, space 0, times 0
[  314.883902][T14984] CPU: 1 UID: 0 PID: 14984 Comm: syz.0.3453 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  314.883939][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  314.883956][T14984] Call Trace:
[  314.883966][T14984]  <TASK>
[  314.883976][T14984]  __dump_stack+0x1d/0x30
[  314.884041][T14984]  dump_stack_lvl+0x95/0xd0
[  314.884064][T14984]  dump_stack+0x15/0x1b
[  314.884091][T14984]  should_fail_ex+0x263/0x280
[  314.884124][T14984]  should_failslab+0x8c/0xb0
[  314.884146][T14984]  kmem_cache_alloc_noprof+0x68/0x490
[  314.884243][T14984]  ? alloc_empty_file+0x76/0x200
[  314.884275][T14984]  alloc_empty_file+0x76/0x200
[  314.884301][T14984]  alloc_file_pseudo+0xf6/0x190
[  314.884356][T14984]  anon_inode_getfile+0xa0/0x120
[  314.884398][T14984]  do_epoll_create+0x1b4/0x280
[  314.884434][T14984]  __x64_sys_epoll_create1+0x1e/0x30
[  314.884488][T14984]  x64_sys_call+0x114e/0x3000
[  314.884563][T14984]  do_syscall_64+0xc0/0x2a0
[  314.884618][T14984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.884641][T14984] RIP: 0033:0x7fa651abacb9
[  314.884658][T14984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.884677][T14984] RSP: 002b:00007fa650517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[  314.884707][T14984] RAX: ffffffffffffffda RBX: 00007fa651d35fa0 RCX: 00007fa651abacb9
[  314.884722][T14984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.884737][T14984] RBP: 00007fa650517090 R08: 0000000000000000 R09: 0000000000000000
[  314.884767][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.884834][T14984] R13: 00007fa651d36038 R14: 00007fa651d35fa0 R15: 00007ffe3835a8a8
[  314.884856][T14984]  </TASK>
[  315.061994][T14962] lo speed is unknown, defaulting to 1000
[  315.073374][ T3440] bridge_slave_0: left allmulticast mode
[  315.079121][ T3440] bridge_slave_0: left promiscuous mode
[  315.084887][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.105933][T14982] loop5: detected capacity change from 0 to 512
[  315.156892][T14993] xt_CT: You must specify a L4 protocol and not use inversions on it
[  315.177104][T14993] netlink: 'syz.6.3457': attribute type 3 has an invalid length.
[  315.184891][T14993] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.3457'.
[  315.200882][T14989] loop0: detected capacity change from 0 to 1024
[  315.208597][T14989] EXT4-fs: Ignoring removed orlov option
[  315.224799][T14982] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.331747][T15004] netlink: 'syz.0.3454': attribute type 10 has an invalid length.
[  315.389453][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.400500][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.413037][ T3440] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  315.422426][ T3440] bond0 (unregistering): Released all slaves
[  315.437869][T15006] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.477212][T15011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3462'.
[  315.492580][T15009] loop5: detected capacity change from 0 to 164
[  315.507918][T15006] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.574349][T13307] EXT4-fs unmount: 32 callbacks suppressed
[  315.574368][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.596944][ T3440] hsr_slave_0: left promiscuous mode
[  315.602959][ T3440] hsr_slave_1: left promiscuous mode
[  315.619211][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.626702][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.634483][T15023] loop0: detected capacity change from 0 to 1024
[  315.642720][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.650303][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.668210][T15023] EXT4-fs: Ignoring removed oldalloc option
[  315.685441][T15023] EXT4-fs: inline encryption not supported
[  315.695591][T15023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  315.707865][T15023] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  315.718394][ T3440] veth1_macvtap: left promiscuous mode
[  315.724203][ T3440] veth0_macvtap: left promiscuous mode
[  315.732247][ T3440] veth1_vlan: left promiscuous mode
[  315.750307][T15023] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.3464: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.764686][ T3440] veth0_vlan: left promiscuous mode
[  315.785470][T15023] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3464: Failed to acquire dquot type 0
[  315.821637][T15023] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.3464: Freeing blocks not in datazone - block = 0, count = 4096
[  315.848146][T15034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=15034 comm=syz.5.3465
[  315.849620][T15023] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3464: Invalid inode bitmap blk 0 in block_group 0
[  315.885988][ T3772] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.895810][T15023] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  315.909170][ T3772] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  315.909809][T15023] EXT4-fs (loop0): 1 orphan inode deleted
[  315.927517][T15023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.940557][ T3440] team0 (unregistering): Port device team_slave_1 removed
[  315.950974][ T3440] team0 (unregistering): Port device team_slave_0 removed
[  315.991310][T15006] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.081737][T14962] chnl_net:caif_netlink_parms(): no params data found
[  316.113609][T15006] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.343767][T15049] FAT-fs (loop11): unable to read boot sector
[  316.569350][ T3779] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.611059][T14962] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.618291][T14962] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.668621][T14962] bridge_slave_0: entered allmulticast mode
[  316.689565][T14962] bridge_slave_0: entered promiscuous mode
[  316.696625][T14962] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.697106][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.703912][T14962] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.720208][T14962] bridge_slave_1: entered allmulticast mode
[  316.727441][T14962] bridge_slave_1: entered promiscuous mode
[  316.747884][ T3779] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.780714][T14962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.793543][ T3779] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.803061][ T3779] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.824402][T14962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.881513][T15069] loop3: detected capacity change from 0 to 1024
[  316.891601][T15069] EXT4-fs: Ignoring removed orlov option
[  316.916098][T15069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.941980][T15078] loop0: detected capacity change from 0 to 512
[  316.978829][T15078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.997316][T15078] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.014334][T15082] FAT-fs (loop5): bogus logical sector size 13
[  317.020800][T15082] FAT-fs (loop5): Can't find a valid FAT filesystem
[  317.047680][T14962] team0: Port device team_slave_0 added
[  317.061052][T14962] team0: Port device team_slave_1 added
[  317.085317][T15088] netlink: 'syz.3.3473': attribute type 10 has an invalid length.
[  317.106850][T14962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.113883][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.140049][T14962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.171323][T14962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.178415][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.204522][T14962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.307435][T15103] EXT4-fs: Ignoring removed oldalloc option
[  317.360760][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.376350][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.385803][T15103] EXT4-fs: inline encryption not supported
[  317.392184][T15103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  317.418501][T15103] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  317.459819][T15103] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.3480: lblock 1 mapped to illegal pblock 1 (length 1)
[  317.533174][T15103] __quota_error: 226 callbacks suppressed
[  317.533215][T15103] Quota error (device loop6): write_blk: dquota write failed
[  317.546498][T15103] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  317.626727][T15103] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3480: Failed to acquire dquot type 0
[  317.655888][T15103] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3480: Freeing blocks not in datazone - block = 0, count = 4096
[  317.687442][T15103] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3480: Invalid inode bitmap blk 0 in block_group 0
[  317.700640][T15103] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  317.711121][T15103] EXT4-fs (loop6): 1 orphan inode deleted
[  317.718231][T15103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.943733][T14962] hsr_slave_0: entered promiscuous mode
[  317.950449][T14962] hsr_slave_1: entered promiscuous mode
[  318.001349][   T52] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  318.019043][T14962] debugfs: 'hsr0' already exists in 'hsr'
[  318.024857][T14962] Cannot create hsr debugfs directory
[  318.222605][   T52] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  318.231294][   T52] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[  318.322774][T15129] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3484: inode has both inline data and extents flags
[  318.375810][T15129] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3484: couldn't read orphan inode 15 (err -117)
[  318.416453][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.436914][T15129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.499270][T15148] FAULT_INJECTION: forcing a failure.
[  318.499270][T15148] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  318.512758][T15148] CPU: 1 UID: 0 PID: 15148 Comm: syz.6.3487 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  318.512788][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.512801][T15148] Call Trace:
[  318.512810][T15148]  <TASK>
[  318.512819][T15148]  __dump_stack+0x1d/0x30
[  318.512850][T15148]  dump_stack_lvl+0x95/0xd0
[  318.512937][T15148]  dump_stack+0x15/0x1b
[  318.513035][T15148]  should_fail_ex+0x263/0x280
[  318.513064][T15148]  should_fail_alloc_page+0xf2/0x100
[  318.513091][T15148]  __alloc_frozen_pages_noprof+0x108/0x350
[  318.513132][T15148]  alloc_pages_mpol+0xb3/0x260
[  318.513172][T15148]  alloc_pages_noprof+0x8f/0x130
[  318.513211][T15148]  get_free_pages_noprof+0xc/0x40
[  318.513273][T15148]  selinux_genfs_get_sid+0x33/0x180
[  318.513303][T15148]  inode_doinit_with_dentry+0x5fd/0x7a0
[  318.513397][T15148]  selinux_d_instantiate+0x27/0x40
[  318.513425][T15148]  security_d_instantiate+0x76/0x90
[  318.513475][T15148]  d_make_persistent+0x4f/0x110
[  318.513511][T15148]  __debugfs_create_file+0x14e/0x2b0
[  318.513532][T15148]  debugfs_create_file_full+0x3f/0x60
[  318.513636][T15148]  ? __pfx_vlan_setup+0x10/0x10
[  318.513724][T15148]  ref_tracker_dir_debugfs+0x10e/0x220
[  318.513765][T15148]  alloc_netdev_mqs+0x1a7/0xa40
[  318.513863][T15148]  rtnl_create_link+0x239/0x720
[  318.513896][T15148]  rtnl_newlink_create+0x174/0x650
[  318.513934][T15148]  ? security_capable+0x7b/0x90
[  318.514079][T15148]  ? netlink_ns_capable+0x86/0xa0
[  318.514110][T15148]  rtnl_newlink+0xf5b/0x1370
[  318.514218][T15148]  ? __memcg_slab_free_hook+0x135/0x230
[  318.514256][T15148]  ? __rcu_read_unlock+0x4e/0x70
[  318.514326][T15148]  ? avc_has_perm_noaudit+0xab/0x130
[  318.514372][T15148]  ? cred_has_capability+0x224/0x290
[  318.514414][T15148]  ? selinux_capable+0x31/0x40
[  318.514443][T15148]  ? security_capable+0x7b/0x90
[  318.514515][T15148]  ? ns_capable+0x7c/0xb0
[  318.514546][T15148]  ? __pfx_rtnl_newlink+0x10/0x10
[  318.514579][T15148]  rtnetlink_rcv_msg+0x64b/0x720
[  318.514629][T15148]  netlink_rcv_skb+0x123/0x220
[  318.514662][T15148]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  318.514706][T15148]  rtnetlink_rcv+0x1c/0x30
[  318.514890][T15148]  netlink_unicast+0x5c0/0x690
[  318.514920][T15148]  netlink_sendmsg+0x5c8/0x6f0
[  318.514958][T15148]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.515039][T15148]  __sock_sendmsg+0x145/0x170
[  318.515078][T15148]  ____sys_sendmsg+0x31e/0x4a0
[  318.515114][T15148]  ___sys_sendmsg+0x195/0x1e0
[  318.515229][T15148]  __x64_sys_sendmsg+0xd4/0x160
[  318.515301][T15148]  x64_sys_call+0x17ba/0x3000
[  318.515335][T15148]  do_syscall_64+0xc0/0x2a0
[  318.515377][T15148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.515404][T15148] RIP: 0033:0x7fc1b619acb9
[  318.515470][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.515494][T15148] RSP: 002b:00007fc1b4bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.515614][T15148] RAX: ffffffffffffffda RBX: 00007fc1b6415fa0 RCX: 00007fc1b619acb9
[  318.515632][T15148] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  318.515649][T15148] RBP: 00007fc1b4bf7090 R08: 0000000000000000 R09: 0000000000000000
[  318.515665][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  318.515727][T15148] R13: 00007fc1b6416038 R14: 00007fc1b6415fa0 R15: 00007ffca0f969a8
[  318.515747][T15148]  </TASK>
[  318.899235][T14962] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  318.920148][T14962] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  318.929805][T14962] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  318.943616][T15160] serio: Serial port ptm0
[  318.960679][T14962] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  319.055323][T14962] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.079528][T14962] 8021q: adding VLAN 0 to HW filter on device team0
[  319.102337][T15160] serio: Serial port ptm0
[  319.112352][T15184] set_capacity_and_notify: 3 callbacks suppressed
[  319.112371][T15184] loop0: detected capacity change from 0 to 512
[  319.128026][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.141152][T15184] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  319.152127][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.159298][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.168271][T15184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  319.171948][T15185] loop6: detected capacity change from 0 to 1024
[  319.191618][T15184] EXT4-fs (loop0): orphan cleanup on readonly fs
[  319.198067][T15184] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3495: bad orphan inode 3
[  319.218766][T15184] EXT4-fs (loop0): Remounting filesystem read-only
[  319.226209][T15184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  319.236386][T15185] EXT4-fs: Ignoring removed oldalloc option
[  319.244822][T15184] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.3495: dx entry: limit 0 != root limit 125
[  319.255118][T15185] EXT4-fs: inline encryption not supported
[  319.256745][T15184] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3495: Corrupt directory, running e2fsck is recommended
[  319.270300][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.282490][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.323404][T15185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  319.332493][T15185] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  319.351212][T15185] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.3496: lblock 1 mapped to illegal pblock 1 (length 1)
[  319.373232][T15185] Quota error (device loop6): write_blk: dquota write failed
[  319.380769][T15185] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  319.395301][T15185] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3496: Failed to acquire dquot type 0
[  319.407310][T15185] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3496: Freeing blocks not in datazone - block = 0, count = 4096
[  319.420280][T14962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  319.434830][T15185] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3496: Invalid inode bitmap blk 0 in block_group 0
[  319.449695][   T52] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  319.450377][T15185] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  319.491388][   T52] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  319.499939][   T52] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[  319.506475][T15185] EXT4-fs (loop6): 1 orphan inode deleted
[  319.536902][T15185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.648220][T15207] loop5: detected capacity change from 0 to 512
[  319.747548][T15195] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.3495: dx entry: limit 0 != root limit 125
[  319.759468][T15195] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3495: Corrupt directory, running e2fsck is recommended
[  319.775186][T15184] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.3495: dx entry: limit 0 != root limit 125
[  319.787117][T15184] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3495: Corrupt directory, running e2fsck is recommended
[  320.001566][T15207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.041923][T15207] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.057053][T15221] tipc: Started in network mode
[  320.062055][T15221] tipc: Node identity c20c480282c7, cluster identity 4711
[  320.069302][T15221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.114763][T13307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  320.136972][T15224] syzkaller0: entered promiscuous mode
[  320.142548][T15224] syzkaller0: entered allmulticast mode
[  320.179638][T15221] tipc: Resetting bearer <eth:syzkaller0>
[  320.196749][T15220] tipc: Resetting bearer <eth:syzkaller0>
[  320.206100][T15220] tipc: Disabling bearer <eth:syzkaller0>
[  320.243285][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.310710][T14962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.327787][T15232] loop6: detected capacity change from 0 to 1024
[  320.334560][T15232] EXT4-fs: Ignoring removed orlov option
[  320.369583][T15232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.382527][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.472173][T15250] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.518178][T15250] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.552058][T15232] netlink: 'syz.6.3504': attribute type 10 has an invalid length.
[  320.569582][T15250] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.609416][T14962] veth0_vlan: entered promiscuous mode
[  320.618328][T14962] veth1_vlan: entered promiscuous mode
[  320.637562][T14962] veth0_macvtap: entered promiscuous mode
[  320.647147][T15250] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.659174][T14962] veth1_macvtap: entered promiscuous mode
[  320.672311][T14962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.683881][T14962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.696569][ T3772] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.705667][ T3772] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.715521][   T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.724394][   T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.766895][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.786715][T15270] hub 2-0:1.0: USB hub found
[  320.791966][T15270] hub 2-0:1.0: 8 ports detected
[  320.802841][   T29] audit: type=1400 audit(2582639327.168:6128): avc:  denied  { connect } for  pid=15269 comm="syz.0.3512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  320.843139][ T3440] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.866574][T15274] loop6: detected capacity change from 0 to 1024
[  320.877990][T15274] EXT4-fs: Ignoring removed oldalloc option
[  320.884094][T15274] EXT4-fs: inline encryption not supported
[  320.884113][   T29] audit: type=1400 audit(2582639327.248:6129): avc:  denied  { write } for  pid=15269 comm="syz.0.3512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  320.911229][T15270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3512'.
[  320.921227][T15274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  320.922279][ T3440] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.955548][T15274] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  320.989792][T15283] SELinux:  Context system_u:object_r:fsa is not valid (left unmapped).
[  321.006773][   T29] audit: type=1400 audit(2582639327.368:6130): avc:  denied  { relabelto } for  pid=15282 comm="syz.0.3515" name="113" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa"
[  321.032149][   T29] audit: type=1400 audit(2582639327.368:6131): avc:  denied  { associate } for  pid=15282 comm="syz.0.3515" name="113" dev="tmpfs" ino=634 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa"
[  321.070802][T15274] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.3513: lblock 1 mapped to illegal pblock 1 (length 1)
[  321.084994][ T3440] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.104394][ T3440] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.111619][T15274] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3513: Failed to acquire dquot type 0
[  321.137659][T15274] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3513: Freeing blocks not in datazone - block = 0, count = 4096
[  321.141317][ T1040] kernel write not supported for file /uhid (pid: 1040 comm: kworker/1:2)
[  321.151897][T15274] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3513: Invalid inode bitmap blk 0 in block_group 0
[  321.172783][ T3440] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  321.177168][T15274] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  321.197517][T15274] EXT4-fs (loop6): 1 orphan inode deleted
[  321.204197][ T3440] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0
[  321.216046][T15293] loop5: detected capacity change from 0 to 512
[  321.224257][T15274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.295598][T15278] lo speed is unknown, defaulting to 1000
[  321.361161][T15293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.375136][T15293] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.547945][T15278] lo speed is unknown, defaulting to 1000
[  321.820151][T15307] loop3: detected capacity change from 0 to 1024
[  321.836718][T15307] EXT4-fs: Ignoring removed orlov option
[  321.910228][T14195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.920221][T15307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.932983][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.995831][T15313] FAULT_INJECTION: forcing a failure.
[  321.995831][T15313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.009053][T15313] CPU: 0 UID: 0 PID: 15313 Comm: syz.6.3521 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  322.009086][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  322.009136][T15313] Call Trace:
[  322.009151][T15313]  <TASK>
[  322.009158][T15313]  __dump_stack+0x1d/0x30
[  322.009190][T15313]  dump_stack_lvl+0x95/0xd0
[  322.009248][T15313]  dump_stack+0x15/0x1b
[  322.009276][T15313]  should_fail_ex+0x263/0x280
[  322.009305][T15313]  should_fail+0xb/0x20
[  322.009329][T15313]  should_fail_usercopy+0x1a/0x20
[  322.009427][T15313]  _copy_from_user+0x1c/0xb0
[  322.009461][T15313]  copy_from_bpfptr+0x5c/0x90
[  322.009488][T15313]  bpf_prog_load+0x73a/0x1140
[  322.009525][T15313]  ? security_bpf+0x2b/0x90
[  322.009618][T15313]  __sys_bpf+0x469/0x7b0
[  322.009651][T15313]  __x64_sys_bpf+0x41/0x50
[  322.009692][T15313]  x64_sys_call+0x28e1/0x3000
[  322.009773][T15313]  do_syscall_64+0xc0/0x2a0
[  322.009811][T15313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.009840][T15313] RIP: 0033:0x7fc1b619acb9
[  322.009861][T15313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.009955][T15313] RSP: 002b:00007fc1b4bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  322.009983][T15313] RAX: ffffffffffffffda RBX: 00007fc1b6415fa0 RCX: 00007fc1b619acb9
[  322.010013][T15313] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  322.010031][T15313] RBP: 00007fc1b4bf7090 R08: 0000000000000000 R09: 0000000000000000
[  322.010048][T15313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.010065][T15313] R13: 00007fc1b6416038 R14: 00007fc1b6415fa0 R15: 00007ffca0f969a8
[  322.010157][T15313]  </TASK>
[  322.016826][T15318] netlink: 'syz.3.3520': attribute type 10 has an invalid length.
[  322.116183][T15322] loop6: detected capacity change from 0 to 512
[  322.220029][T15322] FAT-fs (loop6): IO charset u���#w�w9��C=Y撳�t����EŒ&y3�_�S��@�rRh�B�&5d����xpO���߁�up���@H��X��[��曖[����7VG���1�� y�{�.#����v��X�����)P1u�&-�@=�6A�x�a'�ێ�e��� y�o�E������
[  322.220029][T15322] r��� not found
[  322.338741][T15332] loop5: detected capacity change from 0 to 1024
[  322.346236][T13980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.357796][T15332] EXT4-fs: Ignoring removed orlov option
[  322.387169][T15337] FAULT_INJECTION: forcing a failure.
[  322.387169][T15337] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.400361][T15337] CPU: 0 UID: 0 PID: 15337 Comm: syz.0.3532 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  322.400394][T15337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  322.400486][T15337] Call Trace:
[  322.400497][T15337]  <TASK>
[  322.400508][T15337]  __dump_stack+0x1d/0x30
[  322.400546][T15337]  dump_stack_lvl+0x95/0xd0
[  322.400576][T15337]  dump_stack+0x15/0x1b
[  322.400603][T15337]  should_fail_ex+0x263/0x280
[  322.400663][T15337]  should_fail+0xb/0x20
[  322.400705][T15337]  should_fail_usercopy+0x1a/0x20
[  322.400735][T15337]  _copy_from_iter+0xcf/0xea0
[  322.400762][T15337]  ? __alloc_skb+0x397/0x4b0
[  322.400787][T15337]  ? __alloc_skb+0x219/0x4b0
[  322.400878][T15337]  netlink_sendmsg+0x4ae/0x6f0
[  322.400966][T15337]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.401029][T15337]  __sock_sendmsg+0x145/0x170
[  322.401068][T15337]  ____sys_sendmsg+0x31e/0x4a0
[  322.401131][T15337]  ___sys_sendmsg+0x195/0x1e0
[  322.401169][T15337]  __x64_sys_sendmsg+0xd4/0x160
[  322.401225][T15337]  x64_sys_call+0x17ba/0x3000
[  322.401263][T15337]  do_syscall_64+0xc0/0x2a0
[  322.401308][T15337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.401335][T15337] RIP: 0033:0x7fa651abacb9
[  322.401352][T15337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.401371][T15337] RSP: 002b:00007fa650517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.401427][T15337] RAX: ffffffffffffffda RBX: 00007fa651d35fa0 RCX: 00007fa651abacb9
[  322.401448][T15337] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  322.401466][T15337] RBP: 00007fa650517090 R08: 0000000000000000 R09: 0000000000000000
[  322.401534][T15337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.401551][T15337] R13: 00007fa651d36038 R14: 00007fa651d35fa0 R15: 00007ffe3835a8a8
[  322.401579][T15337]  </TASK>
[  322.615624][T15332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.632386][T15322] loop6: detected capacity change from 0 to 8192
[  322.639147][T15342] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  322.696635][T15347] serio: Serial port ptm0
[  322.715540][ T3558]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  322.720818][ T3558] loop6: partition table partially beyond EOD, truncated
[  322.729889][ T3558] loop6: p1 start 30976 is beyond EOD, truncated
[  322.736399][ T3558] loop6: p2 size 16128 extends beyond EOD, truncated
[  322.776464][T15350] netlink: 'syz.5.3529': attribute type 10 has an invalid length.
[  322.808368][ T3558] loop6: p3 start 327168 is beyond EOD, truncated
[  322.823968][ T3558] loop6: p5 start 30976 is beyond EOD, truncated
[  322.831129][ T3558] loop6: p6 size 16128 extends beyond EOD, truncated
[  322.850989][T15322]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  322.856305][T15322] loop6: partition table partially beyond EOD, truncated
[  322.878251][T15347] serio: Serial port ptm0
[  322.898619][T15322] loop6: p1 start 30976 is beyond EOD, truncated
[  322.905206][T15322] loop6: p2 size 16128 extends beyond EOD, truncated
[  322.916732][T15322] loop6: p3 start 327168 is beyond EOD, truncated
[  322.924401][T15322] loop6: p5 start 30976 is beyond EOD, truncated
[  322.930956][T15322] loop6: p6 size 16128 extends beyond EOD, truncated
[  323.026164][T15355] FAULT_INJECTION: forcing a failure.
[  323.026164][T15355] name failslab, interval 1, probability 0, space 0, times 0
[  323.038958][T15355] CPU: 0 UID: 0 PID: 15355 Comm: syz.7.3536 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  323.038994][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  323.039054][T15355] Call Trace:
[  323.039063][T15355]  <TASK>
[  323.039073][T15355]  __dump_stack+0x1d/0x30
[  323.039106][T15355]  dump_stack_lvl+0x95/0xd0
[  323.039215][T15355]  dump_stack+0x15/0x1b
[  323.039241][T15355]  should_fail_ex+0x263/0x280
[  323.039267][T15355]  should_failslab+0x8c/0xb0
[  323.039361][T15355]  __kmalloc_cache_noprof+0x64/0x4a0
[  323.039468][T15355]  ? sctp_add_bind_addr+0x71/0x1e0
[  323.039499][T15355]  sctp_add_bind_addr+0x71/0x1e0
[  323.039526][T15355]  sctp_copy_local_addr_list+0x1b3/0x250
[  323.039552][T15355]  sctp_copy_one_addr+0x7f/0x280
[  323.039574][T15355]  sctp_bind_addr_copy+0x79/0x290
[  323.039602][T15355]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[  323.039673][T15355]  sctp_connect_new_asoc+0x1c3/0x3a0
[  323.039713][T15355]  sctp_sendmsg+0xff4/0x1a40
[  323.039750][T15355]  ? selinux_socket_sendmsg+0xe1/0x1c0
[  323.039865][T15355]  ? __pfx_sctp_sendmsg+0x10/0x10
[  323.039900][T15355]  inet_sendmsg+0xc5/0xd0
[  323.039946][T15355]  __sock_sendmsg+0x102/0x170
[  323.040002][T15355]  ____sys_sendmsg+0x31e/0x4a0
[  323.040029][T15355]  ___sys_sendmsg+0x195/0x1e0
[  323.040111][T15355]  __x64_sys_sendmsg+0xd4/0x160
[  323.040147][T15355]  x64_sys_call+0x17ba/0x3000
[  323.040181][T15355]  do_syscall_64+0xc0/0x2a0
[  323.040217][T15355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.040262][T15355] RIP: 0033:0x7f17cf6eacb9
[  323.040282][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.040308][T15355] RSP: 002b:00007f17ce147028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.040329][T15355] RAX: ffffffffffffffda RBX: 00007f17cf965fa0 RCX: 00007f17cf6eacb9
[  323.040401][T15355] RDX: 0000000000088000 RSI: 0000200000001600 RDI: 0000000000000003
[  323.040418][T15355] RBP: 00007f17ce147090 R08: 0000000000000000 R09: 0000000000000000
[  323.040444][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.040461][T15355] R13: 00007f17cf966038 R14: 00007f17cf965fa0 R15: 00007fff972cc048
[  323.040487][T15355]  </TASK>
[  323.050565][T15357] FAULT_INJECTION: forcing a failure.
[  323.050565][T15357] name failslab, interval 1, probability 0, space 0, times 0
[  323.202809][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  323.215077][T15357] CPU: 1 UID: 0 PID: 15357 Comm: syz.0.3538 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  323.215112][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  323.215161][T15357] Call Trace:
[  323.215194][T15357]  <TASK>
[  323.215233][T15357]  __dump_stack+0x1d/0x30
[  323.215370][T15357]  dump_stack_lvl+0x95/0xd0
[  323.215439][T15357]  dump_stack+0x15/0x1b
[  323.215504][T15357]  should_fail_ex+0x263/0x280
[  323.215649][T15357]  should_failslab+0x8c/0xb0
[  323.215775][T15357]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  323.215850][T15357]  ? __alloc_skb+0x2f0/0x4b0
[  323.215917][T15357]  __alloc_skb+0x2f0/0x4b0
[  323.216050][T15357]  ? __alloc_skb+0x219/0x4b0
[  323.216115][T15357]  netlink_ack+0xfd/0x500
[  323.216247][T15357]  netlink_rcv_skb+0x192/0x220
[  323.216332][T15357]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  323.216458][T15357]  rtnetlink_rcv+0x1c/0x30
[  323.216552][T15357]  netlink_unicast+0x5c0/0x690
[  323.216708][T15357]  netlink_sendmsg+0x5c8/0x6f0
[  323.216813][T15357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.216909][T15357]  __sock_sendmsg+0x145/0x170
[  323.217086][T15357]  ____sys_sendmsg+0x31e/0x4a0
[  323.217177][T15357]  ___sys_sendmsg+0x195/0x1e0
[  323.217360][T15357]  __x64_sys_sendmsg+0xd4/0x160
[  323.217449][T15357]  x64_sys_call+0x17ba/0x3000
[  323.217580][T15357]  do_syscall_64+0xc0/0x2a0
[  323.217697][T15357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.217769][T15357] RIP: 0033:0x7fa651abacb9
[  323.217825][T15357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.217889][T15357] RSP: 002b:00007fa650517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.218026][T15357] RAX: ffffffffffffffda RBX: 00007fa651d35fa0 RCX: 00007fa651abacb9
[  323.218093][T15357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  323.218144][T15357] RBP: 00007fa650517090 R08: 0000000000000000 R09: 0000000000000000
[  323.218186][T15357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.218259][T15357] R13: 00007fa651d36038 R14: 00007fa651d35fa0 R15: 00007ffe3835a8a8
[  323.218324][T15357]  </TASK>
[  323.230898][ T3556] udevd[3556]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  323.238177][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  323.510665][T15369] batadv_slave_1: entered promiscuous mode
[  323.544664][ T3556] udevd[3556]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  323.556427][ T3557] udevd[3557]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  323.567049][T15371] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3541: invalid indirect mapped block 4294967295 (level 1)
[  323.569152][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  323.605419][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.614729][T15371] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3541: invalid indirect mapped block 4294967295 (level 1)
[  323.631515][T15363] batadv_slave_1: left promiscuous mode
[  323.639441][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  323.639458][   T29] audit: type=1400 audit(2582639330.008:6139): avc:  denied  { mounton } for  pid=15373 comm="syz.3.3542" path="/bus" dev="ramfs" ino=52889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  323.649762][T15371] EXT4-fs (loop7): 2 truncates cleaned up
[  323.683146][T15371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.710970][T15374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.739499][T15371] lo speed is unknown, defaulting to 1000
[  323.745919][T15371] lo speed is unknown, defaulting to 1000
[  323.750011][T15382] EXT4-fs: Ignoring removed orlov option
[  323.757949][T15374] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.789787][T15374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.829395][T15382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.889543][T15390] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.952644][T15374] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3542: invalid indirect mapped block 4294967295 (level 1)
[  324.009155][T15390] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.019964][T15374] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3542: invalid indirect mapped block 4294967295 (level 1)
[  324.034589][T15382] netlink: 'syz.5.3543': attribute type 10 has an invalid length.
[  324.058098][T15374] EXT4-fs (loop3): 2 truncates cleaned up
[  324.071615][T15374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.087303][T15390] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.104052][T15374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.139952][T15374] set_capacity_and_notify: 4 callbacks suppressed
[  324.139974][T15374] loop3: detected capacity change from 0 to 1024
[  324.154307][T15390] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.164379][T15374] ext4: Unknown parameter 'noacl'
[  324.246990][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.256937][T15397] serio: Serial port ptm0
[  324.267219][T14962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.336383][T15401] loop5: detected capacity change from 0 to 512
[  324.362273][T15401] FAT-fs (loop5): IO charset u���#w�w9��C=Y撳�t����EŒ&y3�_�S��@�rRh�B�&5d����xpO���߁�up���@H��X��[��曖[����7VG���1�� y�{�.#����v��X�����)P1u�&-�@=�6A�x�a'�ێ�e��� y�o�E������
[  324.362273][T15401] r��� not found
[  324.422183][T15397] serio: Serial port ptm0
[  324.497823][T15404] loop7: detected capacity change from 0 to 512
[  324.573186][T15404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.606616][T15405] loop5: detected capacity change from 0 to 8192
[  324.617186][T15409] netlink: 'syz.3.3550': attribute type 10 has an invalid length.
[  324.627799][T15404] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.657942][T15404] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3549'.
[  324.667468][T15405]  loop5: p1 p2 p3 < > p4 < p5 p6 >
[  324.672723][T15405] loop5: partition table partially beyond EOD, truncated
[  324.712772][T15405] loop5: p1 start 30976 is beyond EOD, truncated
[  324.719437][T15405] loop5: p2 size 16128 extends beyond EOD, truncated
[  324.746051][T15405] loop5: p3 start 327168 is beyond EOD, truncated
[  324.755325][T15409] hsr0: entered promiscuous mode
[  324.762644][T15409] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  324.773637][T15405] loop5: p5 start 30976 is beyond EOD, truncated
[  324.780339][T15405] loop5: p6 size 16128 extends beyond EOD, truncated
[  324.784139][T15409] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  324.799573][T15409] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  324.894464][T14962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.918302][ T3440] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.944224][ T3779] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.041366][T15427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.054285][T15428] FAT-fs (loop11): unable to read boot sector
[  325.060576][ T3779] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.072910][ T3779] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.082530][T15414] lo speed is unknown, defaulting to 1000
[  325.089852][T15414] lo speed is unknown, defaulting to 1000
[  325.127149][T15427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.155577][   T29] audit: type=1326 audit(2582639331.518:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13c34acb9 code=0x7ffc0000
[  325.179184][   T29] audit: type=1326 audit(2582639331.518:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13c34acb9 code=0x7ffc0000
[  325.202799][   T29] audit: type=1326 audit(2582639331.518:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc13c34acb9 code=0x7ffc0000
[  325.226497][   T29] audit: type=1326 audit(2582639331.518:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13c34acb9 code=0x7ffc0000
[  325.250161][   T29] audit: type=1326 audit(2582639331.518:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13c34acb9 code=0x7ffc0000
[  325.280235][T15432] FAT-fs (loop15): unable to read boot sector
[  325.299879][T15436] FAULT_INJECTION: forcing a failure.
[  325.299879][T15436] name failslab, interval 1, probability 0, space 0, times 0
[  325.312689][T15436] CPU: 1 UID: 0 PID: 15436 Comm: syz.5.3560 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  325.312724][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.312741][T15436] Call Trace:
[  325.312751][T15436]  <TASK>
[  325.312761][T15436]  __dump_stack+0x1d/0x30
[  325.312823][T15436]  dump_stack_lvl+0x95/0xd0
[  325.312848][T15436]  dump_stack+0x15/0x1b
[  325.312937][T15436]  should_fail_ex+0x263/0x280
[  325.312959][T15436]  should_failslab+0x8c/0xb0
[  325.312994][T15436]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  325.313019][T15436]  ? __alloc_skb+0x2f0/0x4b0
[  325.313042][T15436]  __alloc_skb+0x2f0/0x4b0
[  325.313063][T15436]  ? __alloc_skb+0x219/0x4b0
[  325.313147][T15436]  netlink_dump+0x10d/0x8a0
[  325.313184][T15436]  ? __kfree_skb+0x109/0x150
[  325.313205][T15436]  ? nlmon_xmit+0x4f/0x60
[  325.313228][T15436]  __netlink_dump_start+0x43e/0x520
[  325.313292][T15436]  ? __pfx_neigh_dump_info+0x10/0x10
[  325.313312][T15436]  rtnetlink_rcv_msg+0x59f/0x720
[  325.313393][T15436]  ? __pfx_neigh_dump_info+0x10/0x10
[  325.313490][T15436]  ? __pfx_neigh_dump_info+0x10/0x10
[  325.313519][T15436]  netlink_rcv_skb+0x123/0x220
[  325.313549][T15436]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  325.313590][T15436]  rtnetlink_rcv+0x1c/0x30
[  325.313694][T15436]  netlink_unicast+0x5c0/0x690
[  325.313727][T15436]  netlink_sendmsg+0x5c8/0x6f0
[  325.313823][T15436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.313877][T15436]  __sock_sendmsg+0x145/0x170
[  325.313917][T15436]  ____sys_sendmsg+0x31e/0x4a0
[  325.313946][T15436]  ___sys_sendmsg+0x195/0x1e0
[  325.314028][T15436]  __x64_sys_sendmsg+0xd4/0x160
[  325.314062][T15436]  x64_sys_call+0x17ba/0x3000
[  325.314095][T15436]  do_syscall_64+0xc0/0x2a0
[  325.314151][T15436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.314185][T15436] RIP: 0033:0x7fc13c34acb9
[  325.314203][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.314284][T15436] RSP: 002b:00007fc13ada7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.314311][T15436] RAX: ffffffffffffffda RBX: 00007fc13c5c5fa0 RCX: 00007fc13c34acb9
[  325.314327][T15436] RDX: 0000000014048010 RSI: 0000200000000040 RDI: 0000000000000003
[  325.314359][T15436] RBP: 00007fc13ada7090 R08: 0000000000000000 R09: 0000000000000000
[  325.314372][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.314386][T15436] R13: 00007fc13c5c6038 R14: 00007fc13c5c5fa0 R15: 00007ffc961e2bb8
[  325.314412][T15436]  </TASK>
[  325.581314][T15427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.603489][T15440] loop5: detected capacity change from 0 to 256
[  325.647418][T15427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.658512][T15439] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  325.667397][T15439] FAT-fs (loop5): Filesystem has been set read-only
[  325.675645][   T29] audit: type=1326 audit(2582639332.048:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b619acb9 code=0x7ffc0000
[  325.701693][T15439] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  325.711330][   T29] audit: type=1326 audit(2582639332.048:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b619acb9 code=0x7ffc0000
[  325.735074][   T29] audit: type=1326 audit(2582639332.048:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc1b619acb9 code=0x7ffc0000
[  325.756515][T15439] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  325.758669][   T29] audit: type=1326 audit(2582639332.048:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15443 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b619acb9 code=0x7ffc0000
[  325.801825][T15448] loop6: detected capacity change from 0 to 512
[  325.811359][   T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.822504][T15448] FAT-fs (loop6): IO charset u���#w�w9��C=Y撳�t����EŒ&y3�_�S��@�rRh�B�&5d����xpO���߁�up���@H��X��[��曖[����7VG���1�� y�{�.#����v��X�����)P1u�&-�@=�6A�x�a'�ێ�e��� y�o�E������
[  325.822504][T15448] r��� not found
[  325.847405][ T3779] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.865451][ T3779] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.907476][   T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.997060][T15460] sch_tbf: peakrate 3 is lower than or equals to rate 12 !
[  326.039525][T15455] loop6: detected capacity change from 0 to 8192
[  326.166576][T15465] netlink: 'syz.7.3570': attribute type 8 has an invalid length.
[  326.220132][T15455]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  326.225459][T15455] loop6: partition table partially beyond EOD, truncated
[  326.246093][T15455] loop6: p1 start 30976 is beyond EOD, truncated
[  326.252570][T15455] loop6: p2 size 16128 extends beyond EOD, truncated
[  326.300426][T15467] FAT-fs (loop11): unable to read boot sector
[  326.307870][T15455] loop6: p3 start 327168 is beyond EOD, truncated
[  326.397659][T15455] loop6: p5 start 30976 is beyond EOD, truncated
[  326.404118][T15455] loop6: p6 size 16128 extends beyond EOD, truncated
[  326.484299][T15470] lo speed is unknown, defaulting to 1000
[  326.515936][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3571'.
[  326.546109][T15470] lo speed is unknown, defaulting to 1000
[  326.576686][T15485] FAULT_INJECTION: forcing a failure.
[  326.576686][T15485] name failslab, interval 1, probability 0, space 0, times 0
[  326.589426][T15485] CPU: 0 UID: 0 PID: 15485 Comm: syz.5.3576 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  326.589470][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  326.589485][T15485] Call Trace:
[  326.589493][T15485]  <TASK>
[  326.589502][T15485]  __dump_stack+0x1d/0x30
[  326.589528][T15485]  dump_stack_lvl+0x95/0xd0
[  326.589555][T15485]  dump_stack+0x15/0x1b
[  326.589581][T15485]  should_fail_ex+0x263/0x280
[  326.589609][T15485]  should_failslab+0x8c/0xb0
[  326.589637][T15485]  __kmalloc_node_track_caller_noprof+0xb8/0x590
[  326.589670][T15485]  ? sidtab_sid2str_get+0xa0/0x130
[  326.589761][T15485]  kmemdup_noprof+0x2b/0x70
[  326.589816][T15485]  sidtab_sid2str_get+0xa0/0x130
[  326.589854][T15485]  security_sid_to_context_core+0x1eb/0x2e0
[  326.589886][T15485]  security_sid_to_context+0x27/0x40
[  326.589991][T15485]  selinux_lsmprop_to_secctx+0x67/0xf0
[  326.590041][T15485]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  326.590077][T15485]  audit_log_subj_ctx+0xa4/0x3e0
[  326.590105][T15485]  ? skb_put+0xa9/0xf0
[  326.590147][T15485]  audit_log_task_context+0x48/0x70
[  326.590176][T15485]  audit_log_task+0xf3/0x250
[  326.590217][T15485]  ? kstrtouint+0x76/0xc0
[  326.590307][T15485]  audit_seccomp+0x60/0x100
[  326.590403][T15485]  ? __seccomp_filter+0x8db/0x1350
[  326.590438][T15485]  __seccomp_filter+0x8ec/0x1350
[  326.590471][T15485]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  326.590505][T15485]  ? vfs_write+0x86e/0x9f0
[  326.590547][T15485]  ? __rcu_read_unlock+0x4e/0x70
[  326.590571][T15485]  ? __fget_files+0x184/0x1c0
[  326.590659][T15485]  __secure_computing+0x81/0x150
[  326.590692][T15485]  syscall_trace_enter+0xce/0x1e0
[  326.590730][T15485]  do_syscall_64+0x9a/0x2a0
[  326.590807][T15485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.590830][T15485] RIP: 0033:0x7fc13c34acb9
[  326.590846][T15485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.590866][T15485] RSP: 002b:00007fc13ada7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf
[  326.590908][T15485] RAX: ffffffffffffffda RBX: 00007fc13c5c5fa0 RCX: 00007fc13c34acb9
[  326.590927][T15485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  326.590984][T15485] RBP: 00007fc13ada7090 R08: 0000000000000000 R09: 0000000000000000
[  326.591001][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.591017][T15485] R13: 00007fc13c5c6038 R14: 00007fc13c5c5fa0 R15: 00007ffc961e2bb8
[  326.591042][T15485]  </TASK>
[  326.980849][T15490] loop5: detected capacity change from 0 to 256
[  327.090027][T15495] FAULT_INJECTION: forcing a failure.
[  327.090027][T15495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.103216][T15495] CPU: 0 UID: 0 PID: 15495 Comm: syz.6.3581 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  327.103251][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  327.103269][T15495] Call Trace:
[  327.103323][T15495]  <TASK>
[  327.103334][T15495]  __dump_stack+0x1d/0x30
[  327.103430][T15495]  dump_stack_lvl+0x95/0xd0
[  327.103453][T15495]  dump_stack+0x15/0x1b
[  327.103532][T15495]  should_fail_ex+0x263/0x280
[  327.103561][T15495]  should_fail+0xb/0x20
[  327.103587][T15495]  should_fail_usercopy+0x1a/0x20
[  327.103618][T15495]  _copy_from_user+0x1c/0xb0
[  327.103706][T15495]  vmemdup_user+0x5e/0xd0
[  327.103827][T15495]  path_setxattrat+0x1b6/0x310
[  327.103920][T15495]  __x64_sys_fsetxattr+0x6b/0x80
[  327.103945][T15495]  x64_sys_call+0x23c4/0x3000
[  327.103971][T15495]  do_syscall_64+0xc0/0x2a0
[  327.104006][T15495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.104067][T15495] RIP: 0033:0x7fc1b619acb9
[  327.104084][T15495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.104103][T15495] RSP: 002b:00007fc1b4bf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  327.104203][T15495] RAX: ffffffffffffffda RBX: 00007fc1b6415fa0 RCX: 00007fc1b619acb9
[  327.104222][T15495] RDX: 0000200000000880 RSI: 0000200000000180 RDI: 0000000000000003
[  327.104299][T15495] RBP: 00007fc1b4bf7090 R08: 0000000000000002 R09: 0000000000000000
[  327.104317][T15495] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[  327.104334][T15495] R13: 00007fc1b6416038 R14: 00007fc1b6415fa0 R15: 00007ffca0f969a8
[  327.104428][T15495]  </TASK>
[  327.299896][T15505] loop7: detected capacity change from 0 to 512
[  327.307565][T15506] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3583'.
[  327.323777][T15498] gretap1: entered promiscuous mode
[  327.360698][T15510] FAT-fs (loop11): unable to read boot sector
[  327.373073][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  327.385025][ T3556] udevd[3556]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  327.388570][T15505] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  327.411435][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  327.440146][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3588'.
[  327.462321][T15514] loop5: detected capacity change from 0 to 1024
[  327.480756][T15514] EXT4-fs: Ignoring removed orlov option
[  327.523853][T15514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.565111][T15513] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  327.579577][   T56] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  327.601103][   T56] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  327.610686][   T56] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  327.620167][   T37] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  327.645925][T15527] netlink: 'syz.5.3587': attribute type 10 has an invalid length.
[  327.690791][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3588'.
[  327.716788][ T3000] ==================================================================
[  327.724936][ T3000] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath
[  327.732987][ T3000] 
[  327.735350][ T3000] write to 0xffff88811ad94330 of 8 bytes by task 3558 on cpu 0:
[  327.743016][ T3000]  dentry_unlink_inode+0x65/0x260
[  327.748084][ T3000]  d_delete+0x164/0x180
[  327.752279][ T3000]  d_delete_notify+0x32/0x100
[  327.756981][ T3000]  vfs_unlink+0x32c/0x440
[  327.761342][ T3000]  do_unlinkat+0x1e2/0x4b0
[  327.765781][ T3000]  __x64_sys_unlink+0x2e/0x40
[  327.770655][ T3000]  x64_sys_call+0x2f48/0x3000
[  327.775364][ T3000]  do_syscall_64+0xc0/0x2a0
[  327.779937][ T3000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.785889][ T3000] 
[  327.788233][ T3000] read to 0xffff88811ad94330 of 8 bytes by task 3000 on cpu 1:
[  327.795802][ T3000]  step_into_slowpath+0x12c/0x4c0
[  327.800967][ T3000]  path_lookupat+0x330/0x500
[  327.805599][ T3000]  filename_lookup+0x190/0x390
[  327.810390][ T3000]  do_readlinkat+0x7d/0x340
[  327.814929][ T3000]  __x64_sys_readlink+0x47/0x60
[  327.819818][ T3000]  x64_sys_call+0x2af1/0x3000
[  327.824614][ T3000]  do_syscall_64+0xc0/0x2a0
[  327.829158][ T3000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.835078][ T3000] 
[  327.837417][ T3000] value changed: 0xffff88811bd1c368 -> 0x0000000000000000
[  327.844551][ T3000] 
[  327.846896][ T3000] Reported by Kernel Concurrency Sanitizer on:
[  327.853070][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  327.862380][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  327.872471][ T3000] ==================================================================
[  327.900222][T15535] FAT-fs (loop3): IO charset koi8-ru not found
[  327.906858][T15531] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  327.928907][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.946985][T15531] bond1 (unregistering): Released all slaves
[  327.963881][   T31] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  327.972529][   T31] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  327.987163][   T31] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  328.001036][ T3779] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  328.009851][T15535] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.