last executing test programs:

1m50.463180772s ago: executing program 3 (id=89):
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/122, 0x7a}], 0x1)

1m50.04459874s ago: executing program 3 (id=93):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

1m49.877550352s ago: executing program 3 (id=96):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x26, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x60000600)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x4, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x123dc9b, 0x0, 0x5, 0x0, &(0x7f0000000240))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r3 = dup(r2)
sendmmsg$inet(r3, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb", 0x7b}, {0x0}, {&(0x7f00000005c0)="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", 0x1c6}], 0x3}}], 0x1, 0x400d5)
r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
fcntl$notify(r4, 0x402, 0x24)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12de000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
close(0x3)
preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
shutdown(r6, 0x1)
recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)

1m48.940867682s ago: executing program 3 (id=101):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206fdff000000000000000000000004050004000100000005000500020000000d000300686173683a6d6163000000000c00078008000640000000060900020073797a300000000005000400000000001e3e20a4670fd19baf28d6a09dbb79f44888446803f639dbd31e9a0215b3cd54a0019a661695fcd7c7b9120f9b700a4415d33f25ae88b0475cacfccd120906a4ae948992d99ba05fada281a0a95af164841e4ff5d18a70e842127e946ef2942427da5c83ce049489"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586956)
preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x89, 0x3)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=")
chdir(0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r5 = socket$inet6(0xa, 0x3, 0x6)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x10, &(0x7f00000004c0)=ANY=[])
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

1m47.815325569s ago: executing program 3 (id=106):
syz_io_uring_setup(0x82b, &(0x7f0000000300)={0x0, 0xcd1d, 0x10000, 0x0, 0xc}, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x10, &(0x7f0000000200)=<r0=>0x0)
io_getevents(r0, 0xfffffffffffffff7, 0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x989680})
io_getevents(r0, 0x1, 0x3, &(0x7f0000000680)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x3938700})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
readv(r1, &(0x7f00000000c0), 0x0)

1m45.757949278s ago: executing program 3 (id=115):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112})
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
connect$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

1m45.335208145s ago: executing program 32 (id=115):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112})
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
connect$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

1m41.250814387s ago: executing program 1 (id=139):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
clock_adjtime(0xffffffd3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000680), 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000800)=""/118, 0x76}, {&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x9, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
waitid(0x1, 0x0, 0x0, 0x80000004, 0x0)
r5 = socket(0x15, 0x5, 0x0)
socket(0xa, 0x3, 0x3a)
getsockname$l2tp6(r5, 0x0, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800011, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRES32=r5, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a783dfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYRES32], 0x0, 0x32b, &(0x7f0000000340)="$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")

1m40.317236597s ago: executing program 1 (id=146):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001540), &(0x7f0000001580)=0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x6)
write$bt_hci(r5, &(0x7f0000000e80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"8d2c6f"}}}, 0x7)
write(r3, 0x0, 0x0)
r6 = socket$kcm(0x10, 0xb1c1c0939e4f562e, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x9)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="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", 0x12e}], 0x1}, 0x80054)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001340)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000340)="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", 0x1000, r0}, 0x68)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000013c0)={0x1f, 0x37, 0x1, {0x1, 0x0, 0x7, r9, 0x1, '\x00'}}, 0x1f)
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000015c0))
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m39.5709665s ago: executing program 1 (id=149):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)
getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000040))
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r2=>0x0}, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, r2}, 0x94)
socket(0x10, 0x2, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1})
signalfd(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r5, 0x40f8, 0x2cf2, 0xa5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_buf(r8, 0x1, 0x3b, 0x0, &(0x7f00000000c0))
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0)
kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x23, 0x116094000, 0x41000000}], 0x0)

1m38.683756058s ago: executing program 1 (id=160):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r0) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'macsec0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000c40)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d72656c61786564006e6f6a6f6c6965742c6d61703d6ff0a2b466662c73657373696f6e3d3078303030303030303030303030303036302c696f636861727365743d6d6163677265656b412203bc91fde777b21d626c6f636b3d3078303030303030283030303030306330302c696f636861727365743d69734f383835392d322c73657373696f6e3d3078303030303030303030303030090035632c73686f776173736f632c696f636861727365743d6d6163637972696c6c69632c636865636b3d7374726963742c6673636f6e7428a4743d73797374656d5f752c7065726d69745f64697265637469"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="1600"], 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000b80)=0x6)
recvmsg$kcm(r3, &(0x7f0000000880)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000780)=""/38, 0x26}], 0x7, &(0x7f0000000840)=""/31, 0x1f}, 0x41) (async)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000000400048014000000110001", @ANYRES64], 0x58}}, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
open_tree(r8, &(0x7f00000001c0)='./cgroup\x00', 0x8901) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r9 = getpid()
sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

1m38.486310984s ago: executing program 1 (id=164):
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0, 0xb}, 0x116a00, 0x4, 0x401, 0x9, 0x6, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000c80), 0x1, 0x55f, &(0x7f0000000580)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x43, 0xb9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20)
quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000b00)=0xd)
r5 = syz_io_uring_setup(0x6ffe, &(0x7f0000000b40)={0x0, 0x3646, 0x1000, 0x3, 0x61, 0x0, r2}, &(0x7f0000000bc0), &(0x7f0000000c00))
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000d40)={0x3, &(0x7f0000000d00)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x8, 0x0, 0xb928}, {0x50, 0x37, 0x0, 0x9}]}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsmount(r10, 0x0, 0x0)
r11 = fcntl$dupfd(r1, 0x0, r1)
r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000cc0)=[r9, r3, r10, r11, r0, r12], 0x6)

1m38.313250165s ago: executing program 1 (id=167):
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x40000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r2, &(0x7f0000000400)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[{0x101, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {}, {0x6a73}, {0x0, 0x0, 0x1}, {0x4}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3afd, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x6a)
socket$inet6_mptcp(0xa, 0x1, 0x106)
close(r0)
r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x1000, 0x1})
io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0)

1m38.219768818s ago: executing program 33 (id=167):
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x40000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r2, &(0x7f0000000400)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[{0x101, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {}, {0x6a73}, {0x0, 0x0, 0x1}, {0x4}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3afd, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x6a)
socket$inet6_mptcp(0xa, 0x1, 0x106)
close(r0)
r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x1000, 0x1})
io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0)

9.029153343s ago: executing program 4 (id=930):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000775e00000001000004d46c000000ac141433000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffff4818ffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fe0a000000ffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/226], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000006850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1000004d, 0x1, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040084)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002000000000000000000f10000000000000001071c4e230000000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b800000004000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
fdatasync(0xffffffffffffffff)
r10 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800)
accept4$unix(r10, 0x0, &(0x7f0000000180), 0x800)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f0000000000)={0x77359400}, 0x10)

6.770146117s ago: executing program 4 (id=942):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffe, 0xffef}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
timer_create(0x7, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000280)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
socket$inet_smc(0x2b, 0x1, 0x0)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xe)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
io_uring_enter(0xffffffffffffffff, 0x56d7, 0xf70d, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000280), 0x8)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0xf)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000040))
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10)
write(r6, 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
recvmsg(r3, &(0x7f00000001c0)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x40003f02)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)

6.767397036s ago: executing program 5 (id=944):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x23, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, @perf_config_ext={0x0, 0xfc}, 0x6221, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x2, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)

6.656900637s ago: executing program 2 (id=946):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x11c0, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x11c0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)

6.587547276s ago: executing program 5 (id=947):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x246040, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
splice(r3, 0x0, r5, 0x0, 0x39000, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4ba}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000100), 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0xd, 0x854b}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000300)=[r1, r2], &(0x7f0000000340)=[{0x5, 0x82, 0xc, 0x3}, {0x2, 0x3, 0x4}, {0x0, 0x4, 0x4, 0x4}, {0x4, 0x2, 0x7, 0xa}, {0x2, 0x5, 0x9, 0x3}, {0x3, 0x4, 0x4}, {0x2, 0x5, 0x7, 0x9}, {0x5, 0x5, 0x0, 0x2}], 0x10, 0xcb}, 0x94)

6.542031318s ago: executing program 2 (id=948):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xfffffffd, 0x4)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000180001060000806b33156b4225e08909a756f3b0718f0000000000001c140000fe000001000000000500130000000000e138822b1e972561809b16ffa890fc7ede63f1bcd08e499a6780496bd36b2dd561bddb543861a3e0ad84e652688b11d47abe1a5f"], 0x24}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @broadcast}, {0x306, @multicast}, 0x28, {0x2, 0x4e24, @broadcast}, 'veth0_macvtap\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffdffff4}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="a5", 0x1}], 0x1}, 0x2408c8c0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r7)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r8 = syz_open_procfs(r2, &(0x7f0000000040)='pagemap\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={r6, 0xfffffffa}, &(0x7f0000000340)=0x8)
ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000280))
r9 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300), &(0x7f0000000580))
r10 = eventfd(0x6)
io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000200)=r10, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, 0x0, 0x1)
preadv(r8, &(0x7f0000005d00)=[{&(0x7f0000005900)=""/211, 0xd3}], 0x1, 0x284, 0x9)

6.287248695s ago: executing program 6 (id=950):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r4, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)}, 0x20000004)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYBLOB="0000000000000000b7050000080000004608f0ff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f00000001c0)='./file1\x00', 0x2a8240, 0x194)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3)

4.464964063s ago: executing program 4 (id=960):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000200000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e4"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40)

4.109519062s ago: executing program 6 (id=961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
clock_adjtime(0xffffffd3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
recvmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000680), 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000800)=""/118, 0x76}, {&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x9, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
waitid(0x1, 0x0, 0x0, 0x80000004, 0x0)
r4 = socket(0x15, 0x5, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcb, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}, 0x5c)
getsockname$l2tp6(r4, 0x0, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800011, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a783dfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYRES32], 0x0, 0x32b, &(0x7f0000000340)="$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")

3.333574569s ago: executing program 4 (id=963):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
clock_adjtime(0xffffffd3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000680), 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000800)=""/118, 0x76}, {&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x9, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
waitid(0x1, 0x0, 0x0, 0x80000004, 0x0)
r5 = socket(0x15, 0x5, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcb, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}, 0x5c)
getsockname$l2tp6(r5, 0x0, &(0x7f0000000080))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800011, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES16=r7, @ANYRESDEC, @ANYRES32=r5, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a783dfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYRES32], 0x0, 0x32b, &(0x7f0000000340)="$eJzs3V9oW1UcwPFf/nS9rWsTRAUH6k/ng4qEJc/CDKMVMTDRVaYD4Y7daMg1KbkhmiFNBoO9+OCL/55VEBkUxAdBGPPBB5GWsXff9tYH65PDf0dO771NwtImptvq6Pfz0Pvj/M7vnnN70tv29NJsPPfhO38aY8puU5KSkOTz0k3YBktCXXn63dVrj7z6+hsvFUulhVdUF4un8gVVnX/sypn3Lz9xtXnfa9/Ofz8ta9k3NzYLN9YeWnt4459Tb1cCrQRaqzfV1bP1etM963t67uOgmlN92ffcwNNKLfAaW/mEiNh82a8vL7fVrZ07PLvc8IJA3Vpbq15bm3VtNtrqvuVWaprL5XRuVrALR+Ry67OiDZNDOyx9fdMY2Wz+bMx0V6IVd+7yLLGPNDr21v+DnTufmBORn/4euDngntZ3U3dE/EutpdZSeAzzxbJUxBdPjklG/hL7GjGfr4brbz++V1gtXX/mxx9UNSsrfiesNymR1GB9XjKSnYpG7dUvJmQhr6qaUu3V2+PU4dn++oJk5IGwJn79bdW/WFqw34mswfpD8tTRvvqcZOR6Wuriy/qVx3+/cfLSJ3H9Sl71xMnSVn1S4vqZm9sDOfLVb/u3RAAAAAAAAAAA/Gc53ZYd3D8P9+9ztsPF86o6l5WV+K+INh9G0f56Qqaj1JD9+WND9+fTciS9P9cMAAAAAMBBE7QvRlH7fNX1fa8RTBTYX+Vt4OzS58H5sE/cYozp7GnQvQXO9iU7cgfH+uLCqD4zErc8urj7CY8eT61Hy9XtpaZuywreEhwxxlRdP37Qdw8n/ON0X8uFzERTFWfcqvR4U5X0iOtKur4j8XOs9itlxAlnJAyeHKezDX6dcHU6Ay2JaH47V71w5pdvRp750C2fn51cvf13IQAAAAB3Q++H/uPSKX/X6px+9qMxS03mDs8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICDYoL/6Lb+6bCU2uD+L+OWa32poQMnNnkbaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L/wbwAAAP//8zfFXg==")

2.639972091s ago: executing program 0 (id=965):
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd'])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4)

2.63671147s ago: executing program 2 (id=966):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x5000000, {}, {}, @raw32}], 0xffc8)

2.57831102s ago: executing program 5 (id=967):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@lu, {0x3, 0x3, 0x3, 0x4, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.5201781s ago: executing program 0 (id=968):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r3, 0x9, 0x0)
socket(0x10, 0x803, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = fcntl$getown(r0, 0x9)
prlimit64(r4, 0xa, &(0x7f00000000c0)={0xaba3, 0x121e}, &(0x7f00000001c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000240)={0x8bbf, 0x40, 0x80000000, 0x2, 0x8, "808c3d79e5e900ac4b3ab202b9377a7c62cacc"})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@migrate={0x50, 0x21, 0x1, 0x70bd28, 0x25dfdbfc, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x4, 0x4e20, 0x0, 0x2, 0x80, 0xc0, 0x2e, 0x0, 0xee00}, 0x6e6bb5}}, 0x50}, 0x1, 0x0, 0x0, 0x8048044}, 0x4040)

2.52007422s ago: executing program 5 (id=969):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0xc00000000000000)

2.51966307s ago: executing program 2 (id=970):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = shmget(0x1, 0xb000, 0x200, &(0x7f0000ff5000/0xb000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8009, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x1, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x4, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffefff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x42, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0xffffffff, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
msgget$private(0x0, 0x11)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000002c0)=@generic={0x1, 0xffffffffffffffff, 0x1})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$UHID_INPUT(r8, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2.427246095s ago: executing program 5 (id=971):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x2a, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
tgkill(0x0, 0x0, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x11, r7, 0x80000000)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)=ANY=[@ANYBLOB="140000002700010027bd7000fddbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x8000)

2.407532881s ago: executing program 4 (id=972):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000027bd0040000900000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYBLOB], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40088, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x20, 0x4, 0x800000, 0x4, 0x2, 0x42, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x22020400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, 0x0, 0x48804)

1.834286833s ago: executing program 0 (id=973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001000900000000ff9f000a00000000000000080001000200000004000b"], 0x24}}, 0x0)

1.826583812s ago: executing program 0 (id=974):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112})
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)

909.445785ms ago: executing program 6 (id=975):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000340)="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", &(0x7f00000004c0)=""/92, 0x4}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
fchdir(r1)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x40d, 0x30bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8209}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c}, 0x80)
r7 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffd)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x40010, 0xffffffffffffffff, 0xec776000)
keyctl$describe(0x6, r7, &(0x7f0000004580)=""/185, 0xb9)
unshare(0x2040400)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
listen(r8, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x4, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000540)=0x2, 0x4)

909.130835ms ago: executing program 4 (id=976):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xfffffffd, 0x4)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000180001060000806b33156b4225e08909a756f3b0718f0000000000001c140000fe000001000000000500130000000000e138822b1e972561809b16ffa890fc7ede63f1bcd08e499a6780496bd36b2dd561bddb543861a3e0ad84e652688b11d47abe1a5f"], 0x24}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @broadcast}, {0x306, @multicast}, 0x28, {0x2, 0x4e24, @broadcast}, 'veth0_macvtap\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffdffff4}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="a5", 0x1}], 0x1}, 0x2408c8c0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r7)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r8 = syz_open_procfs(r2, &(0x7f0000000040)='pagemap\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={r6, 0xfffffffa}, &(0x7f0000000340)=0x8)
ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000280))
r9 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300), &(0x7f0000000580))
r10 = eventfd(0x6)
io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000200)=r10, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, 0x0, 0x1)
preadv(r8, &(0x7f0000005d00)=[{&(0x7f0000005900)=""/211, 0xd3}], 0x1, 0x284, 0x9)

736.203206ms ago: executing program 0 (id=977):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, @perf_config_ext={0x63f5, 0xfffffffffffffff7}, 0x2110, 0x4, 0x0, 0x7, 0x0, 0x8, 0xfff, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000001a80)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
timer_settime(0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
unshare(0x6a000200)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = dup(r3)
openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x5800}, 0x500)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="02000000d808742b98d7c30200000001000000000000000000000000abbc0000000000"], 0x50)
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000001300))
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r7, r8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdf8fa51c9d, &(0x7f0000000400)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0xffffffffffffffeb)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x40, <r9=>0x0}, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

600.197382ms ago: executing program 6 (id=978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x81ffffff}, 0x0)

458.879718ms ago: executing program 6 (id=979):
socket(0x2a, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="fc00000019000100000000000400000000000000000000000000000000000000ac1414aa00000000000000000000000000000005000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000000000000008bffffffffffffff00000000000000000000000000000000dff90000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000002000000000000080000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4048001}, 0x80)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010003904000000000000060000000000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5, @ANYBLOB="52000700ff90ffffffdc17bed970dea04812485ec5d7408acbd5fb48cffabfafc5f4628d3b50fd57c8985a1767d389a58b63173dcf5007fd0a6a43c9a3969d5fcacf4b5bde5bfafb5eb5f11a5d"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000)
sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1ed, 0x8000, 0x0)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x4020400)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0}, 0x94)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(0x4)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x1, 0x0, 0x4, 0x2, 0x3}})
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x2000083, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404d88c}, 0x0)

439.841005ms ago: executing program 2 (id=980):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000be3000/0x2000)=nil, 0x2000, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000000000248a7b76000014000280100001004641544d414e5f52"], 0xfd12}}, 0x0)

342.233918ms ago: executing program 0 (id=981):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r0 = add_key$keyring(0x0, &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000940)='big_key\x00', &(0x7f0000000980)='\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r5, r5, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, r5, 0xbff4, 0x100000002})
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xefff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, {}, {}, {}, 0x0, 0x1000, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

308.070712ms ago: executing program 2 (id=982):
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xd912dbfad8e30d4c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x40000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r3, &(0x7f0000000400)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[{0x101, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {}, {0x6a73}, {0x4}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3afd, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x66)
socket$inet6_mptcp(0xa, 0x1, 0x106)
close(r0)
r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x1000, 0x1})
io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0)

263.952075ms ago: executing program 6 (id=983):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
ioprio_set$pid(0x1, r1, 0x620ef3e415f01972)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstatfs(0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getpid()
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x11, &(0x7f0000000100), 0x1, 0x616, &(0x7f0000000b40)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mremap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00004d3000/0x1000)=nil)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)
r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r8, &(0x7f0000000240)=[{&(0x7f0000001080)=';', 0x1}], 0x1)
r9 = socket(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @broadcast}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d", @ANYRESHEX=r9], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010)

0s ago: executing program 5 (id=984):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}}], 0x2, 0xb0)

kernel console output (not intermixed with test programs):

T5023] udevd[5023]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   77.203516][ T3391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   77.583159][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   77.584438][ T5023] udevd[5023]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   77.593288][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   77.633590][ T5232] xt_bpf: check failed: parse error
[   77.937258][ T5230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.979090][ T5230] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.121642][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.168017][ T5255] FAULT_INJECTION: forcing a failure.
[   78.168017][ T5255] name failslab, interval 1, probability 0, space 0, times 0
[   78.202840][ T5255] CPU: 0 UID: 0 PID: 5255 Comm: syz.0.422 Not tainted syzkaller #0 PREEMPT(full) 
[   78.202868][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   78.202879][ T5255] Call Trace:
[   78.202886][ T5255]  <TASK>
[   78.202893][ T5255]  __dump_stack+0x1d/0x30
[   78.202918][ T5255]  dump_stack_lvl+0x95/0xd0
[   78.202974][ T5255]  dump_stack+0x15/0x1b
[   78.203009][ T5255]  should_fail_ex+0x263/0x280
[   78.203030][ T5255]  should_failslab+0x8c/0xb0
[   78.203050][ T5255]  kmem_cache_alloc_noprof+0x66/0x400
[   78.203072][ T5255]  ? skb_clone+0x151/0x1f0
[   78.203175][ T5255]  skb_clone+0x151/0x1f0
[   78.203314][ T5255]  __netlink_deliver_tap+0x2c9/0x500
[   78.203339][ T5255]  netlink_unicast+0x66b/0x690
[   78.203359][ T5255]  netlink_sendmsg+0x5c8/0x6f0
[   78.203439][ T5255]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.203464][ T5255]  ____sys_sendmsg+0x5af/0x600
[   78.203542][ T5255]  ___sys_sendmsg+0x195/0x1e0
[   78.203576][ T5255]  __x64_sys_sendmsg+0xd4/0x160
[   78.203605][ T5255]  x64_sys_call+0x194c/0x3020
[   78.203628][ T5255]  do_syscall_64+0x12c/0x370
[   78.203691][ T5255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.203712][ T5255] RIP: 0033:0x7fbcd1c8c799
[   78.203727][ T5255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.203743][ T5255] RSP: 002b:00007fbcd06df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.203870][ T5255] RAX: ffffffffffffffda RBX: 00007fbcd1f05fa0 RCX: 00007fbcd1c8c799
[   78.203885][ T5255] RDX: 0000000004004890 RSI: 0000200000000180 RDI: 0000000000000003
[   78.203898][ T5255] RBP: 00007fbcd06df090 R08: 0000000000000000 R09: 0000000000000000
[   78.203911][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.203924][ T5255] R13: 00007fbcd1f06038 R14: 00007fbcd1f05fa0 R15: 00007fff7f998508
[   78.204018][ T5255]  </TASK>
[   78.204040][ T5255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'.
[   78.272047][ T5257] netlink: 'syz.4.423': attribute type 10 has an invalid length.
[   78.448141][ T5257] syz_tun: entered promiscuous mode
[   78.475784][ T5257] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   78.500865][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.535211][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'.
[   78.589471][ T5257] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.760961][ T5269] set_capacity_and_notify: 1 callbacks suppressed
[   78.761030][ T5269] loop2: detected capacity change from 0 to 2048
[   78.836657][ T3301] Alternate GPT is invalid, using primary GPT.
[   78.859803][ T3301]  loop2: p2 p3 p7
[   78.868256][ T5269] Alternate GPT is invalid, using primary GPT.
[   78.874584][ T5269]  loop2: p2 p3 p7
[   78.902630][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   78.951807][ T5023] udevd[5023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   78.960809][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   78.962962][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   78.984980][ T5275] loop0: detected capacity change from 0 to 128
[   79.108921][ T5273] loop4: detected capacity change from 0 to 512
[   79.134474][ T5273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.158950][ T5273] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.428: invalid indirect mapped block 4294967295 (level 1)
[   79.173716][ T5284] loop5: detected capacity change from 0 to 1024
[   79.189778][ T5284] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   79.200399][ T5273] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   79.201471][ T5273] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.428: invalid indirect mapped block 4294967295 (level 1)
[   79.211149][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   79.211216][    C0] EXT4-fs (loop4): initial error at time 1772564848: ext4_free_branches:1023: inode 11
[   79.211368][    C0] EXT4-fs (loop4): last error at time 1772564848: ext4_free_branches:1023: inode 11
[   79.437734][ T5284] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.433: Invalid block bitmap block 0 in block_group 0
[   79.469840][ T5284] loop5: lost filesystem error report for type 5 error -117
[   79.469984][ T5284] __quota_error: 9 callbacks suppressed
[   79.469994][ T5284] Quota error (device loop5): write_blk: dquota write failed
[   79.482929][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   79.482950][    C0] EXT4-fs (loop5): initial error at time 1772564848: ext4_read_block_bitmap_nowait:483
[   79.482978][    C0] EXT4-fs (loop5): last error at time 1772564848: ext4_read_block_bitmap_nowait:483
[   79.541960][ T5273] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   79.549672][ T5284] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   79.551030][ T5273] EXT4-fs (loop4): 2 truncates cleaned up
[   79.559027][ T5284] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.433: Failed to acquire dquot type 0
[   79.559051][ T5284] loop5: lost filesystem error report for type 5 error -117
[   79.579401][ T5284] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.433: Freeing blocks not in datazone - block = 0, count = 4096
[   79.591737][ T5273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.610383][ T5284] loop5: lost filesystem error report for type 5 error -117
[   79.620252][ T5284] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.433: Invalid inode bitmap blk 0 in block_group 0
[   79.640200][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   79.650315][  T857] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7
[   79.657660][ T5284] loop5: lost filesystem error report for type 5 error -117
[   79.661827][ T5284] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[   79.663130][  T857] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0
[   79.669193][ T5284] loop5: lost filesystem error report for type 5 error -117
[   79.678910][   T28] audit: type=1400 audit(1772564848.629:500): avc:  denied  { ioctl } for  pid=5270 comm="syz.4.428" path="/78/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=17 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   79.709919][  T857] loop5: lost filesystem error report for type 5 error -117
[   79.749442][ T5284] EXT4-fs (loop5): 1 orphan inode deleted
[   79.763655][ T5284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.876041][ T5284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.973315][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.094965][ T5305] loop0: detected capacity change from 0 to 128
[   80.109678][ T5305] FAT-fs (loop0): bogus sectors per cluster 0
[   80.115758][ T5305] FAT-fs (loop0): Can't find a valid FAT filesystem
[   80.171074][ T5299] loop2: detected capacity change from 0 to 512
[   80.402998][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.440511][ T3517] IPVS: starting estimator thread 0...
[   80.446365][ T5299] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   80.475371][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.513746][ T5314] ipvlan2: entered promiscuous mode
[   80.534002][ T5310] IPVS: using max 2448 ests per chain, 122400 per kthread
[   80.679710][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   80.713133][   T70] IPVS: stop unused estimator thread 0...
[   80.768977][   T28] audit: type=1400 audit(1772564849.709:501): avc:  denied  { ioctl } for  pid=5330 comm="syz.0.446" path="socket:[11318]" dev="sockfs" ino=11318 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   80.804098][   T28] audit: type=1400 audit(1772564849.749:502): avc:  denied  { bind } for  pid=5323 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.843637][   T28] audit: type=1400 audit(1772564849.749:503): avc:  denied  { listen } for  pid=5323 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.891621][   T28] audit: type=1400 audit(1772564849.749:504): avc:  denied  { connect } for  pid=5323 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.922969][   T28] audit: type=1400 audit(1772564849.749:505): avc:  denied  { create } for  pid=5323 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   81.029131][   T28] audit: type=1400 audit(1772564849.749:506): avc:  denied  { write } for  pid=5323 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.198041][ T5356] loop2: detected capacity change from 0 to 512
[   81.261430][ T5356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.421768][ T5367] FAULT_INJECTION: forcing a failure.
[   81.421768][ T5367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.474478][ T5367] CPU: 1 UID: 0 PID: 5367 Comm: syz.6.457 Not tainted syzkaller #0 PREEMPT(full) 
[   81.474506][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   81.474519][ T5367] Call Trace:
[   81.474525][ T5367]  <TASK>
[   81.474532][ T5367]  __dump_stack+0x1d/0x30
[   81.474576][ T5367]  dump_stack_lvl+0x95/0xd0
[   81.474598][ T5367]  dump_stack+0x15/0x1b
[   81.474619][ T5367]  should_fail_ex+0x263/0x280
[   81.474649][ T5367]  should_fail+0xb/0x20
[   81.474666][ T5367]  should_fail_usercopy+0x1a/0x20
[   81.474689][ T5367]  _copy_from_user+0x1c/0xb0
[   81.474793][ T5367]  __sys_connect+0xd0/0x2a0
[   81.474854][ T5367]  __x64_sys_connect+0x3f/0x50
[   81.474951][ T5367]  x64_sys_call+0x2df0/0x3020
[   81.474974][ T5367]  do_syscall_64+0x12c/0x370
[   81.474995][ T5367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.475016][ T5367] RIP: 0033:0x7f4e46f5c799
[   81.475095][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.475119][ T5367] RSP: 002b:00007f4e459b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   81.475217][ T5367] RAX: ffffffffffffffda RBX: 00007f4e471d5fa0 RCX: 00007f4e46f5c799
[   81.475232][ T5367] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003
[   81.475245][ T5367] RBP: 00007f4e459b7090 R08: 0000000000000000 R09: 0000000000000000
[   81.475316][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.475327][ T5367] R13: 00007f4e471d6038 R14: 00007f4e471d5fa0 R15: 00007ffed39e4c48
[   81.475343][ T5367]  </TASK>
[   81.671956][ T5372] loop6: detected capacity change from 0 to 1024
[   81.696223][ T5372] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   81.746532][ T5372] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.459: Invalid block bitmap block 0 in block_group 0
[   81.782817][ T5372] loop6: lost filesystem error report for type 5 error -117
[   81.783045][ T5372] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.459: Failed to acquire dquot type 0
[   81.790435][    C0] EXT4-fs (loop6): error count since last fsck: 1
[   81.790450][    C0] EXT4-fs (loop6): initial error at time 1772564850: ext4_read_block_bitmap_nowait:483
[   81.790472][    C0] EXT4-fs (loop6): last error at time 1772564850: ext4_read_block_bitmap_nowait:483
[   81.849721][ T5372] loop6: lost filesystem error report for type 5 error -117
[   81.850418][ T5372] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.459: Freeing blocks not in datazone - block = 0, count = 4096
[   81.883821][ T5372] loop6: lost filesystem error report for type 5 error -117
[   81.884176][ T5372] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.459: Invalid inode bitmap blk 0 in block_group 0
[   81.909904][   T41] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0
[   81.910081][ T5381] loop4: detected capacity change from 0 to 1024
[   81.930547][   T41] loop6: lost filesystem error report for type 5 error -117
[   81.934252][ T5372] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[   81.960654][ T5381] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   81.971757][ T5372] EXT4-fs (loop6): 1 orphan inode deleted
[   81.985339][ T5372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.000144][ T5381] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.461: Invalid block bitmap block 0 in block_group 0
[   82.021194][ T5381] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.461: Failed to acquire dquot type 0
[   82.032343][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   82.032373][    C1] EXT4-fs (loop4): initial error at time 1772564850: ext4_read_block_bitmap_nowait:483
[   82.032394][    C1] EXT4-fs (loop4): last error at time 1772564850: ext4_read_block_bitmap_nowait:483
[   82.059775][ T5381] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.461: Freeing blocks not in datazone - block = 0, count = 4096
[   82.088494][ T5385] loop5: detected capacity change from 0 to 512
[   82.095049][ T5381] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.461: Invalid inode bitmap blk 0 in block_group 0
[   82.118536][  T857] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0
[   82.130175][ T5381] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   82.141436][ T5385] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   82.150600][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.153331][ T5381] EXT4-fs (loop4): 1 orphan inode deleted
[   82.166218][ T5385] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.462: bg 0: block 255: padding at end of block bitmap is not set
[   82.181359][ T5381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.200250][ T5385] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[   82.209628][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   82.216067][    C0] EXT4-fs (loop5): initial error at time 1772564851: ext4_validate_block_bitmap:441
[   82.222782][ T5385] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.462: invalid indirect mapped block 1 (level 1)
[   82.225466][    C0] EXT4-fs (loop5): last error at time 1772564851: ext4_mb_clear_bb:6685
[   82.239371][ T5385] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   82.247638][ T5385] EXT4-fs (loop5): 1 truncate cleaned up
[   82.263449][ T5385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.300562][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.405879][ T5398] FAULT_INJECTION: forcing a failure.
[   82.405879][ T5398] name failslab, interval 1, probability 0, space 0, times 0
[   82.418558][ T5398] CPU: 1 UID: 0 PID: 5398 Comm: syz.2.465 Not tainted syzkaller #0 PREEMPT(full) 
[   82.418584][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   82.418595][ T5398] Call Trace:
[   82.418603][ T5398]  <TASK>
[   82.418679][ T5398]  __dump_stack+0x1d/0x30
[   82.418705][ T5398]  dump_stack_lvl+0x95/0xd0
[   82.418728][ T5398]  dump_stack+0x15/0x1b
[   82.418747][ T5398]  should_fail_ex+0x263/0x280
[   82.418778][ T5398]  should_failslab+0x8c/0xb0
[   82.418830][ T5398]  kmem_cache_alloc_noprof+0x66/0x400
[   82.418852][ T5398]  ? dst_alloc+0xbd/0x100
[   82.418875][ T5398]  dst_alloc+0xbd/0x100
[   82.418953][ T5398]  ip_route_input_rcu+0x1683/0x1c10
[   82.418990][ T5398]  ip_route_input_noref+0x5f/0x90
[   82.419020][ T5398]  ip_rcv_finish_core+0x312/0xb60
[   82.419101][ T5398]  ? iptable_mangle_hook+0x119/0x260
[   82.419130][ T5398]  ip_rcv_finish+0x100/0x1c0
[   82.419259][ T5398]  ip_rcv+0x62/0x160
[   82.419281][ T5398]  ? __pfx_ip_rcv_finish+0x10/0x10
[   82.419304][ T5398]  ? __pfx_ip_rcv+0x10/0x10
[   82.419327][ T5398]  netif_receive_skb+0x137/0x530
[   82.419416][ T5398]  ? tun_rx_batched+0xd1/0x440
[   82.419437][ T5398]  tun_rx_batched+0x106/0x440
[   82.419460][ T5398]  ? eth_type_trans+0x215/0x3d0
[   82.419489][ T5398]  tun_get_user+0x2011/0x27c0
[   82.419515][ T5398]  ? ref_tracker_alloc+0x1eb/0x2f0
[   82.419541][ T5398]  tun_chr_write_iter+0x15e/0x210
[   82.419569][ T5398]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   82.419668][ T5398]  vfs_write+0x5a6/0x9f0
[   82.419796][ T5398]  ksys_write+0xdc/0x1a0
[   82.419944][ T5398]  __x64_sys_write+0x40/0x50
[   82.419959][ T5398]  x64_sys_call+0x27e1/0x3020
[   82.419980][ T5398]  do_syscall_64+0x12c/0x370
[   82.419998][ T5398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.420078][ T5398] RIP: 0033:0x7fb0a7e1cfce
[   82.420094][ T5398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   82.420111][ T5398] RSP: 002b:00007fb0a68aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   82.420131][ T5398] RAX: ffffffffffffffda RBX: 00007fb0a68af6c0 RCX: 00007fb0a7e1cfce
[   82.420149][ T5398] RDX: 00000000000000bf RSI: 0000200000000140 RDI: 00000000000000c8
[   82.420160][ T5398] RBP: 00007fb0a68af090 R08: 0000000000000000 R09: 0000000000000000
[   82.420174][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.420184][ T5398] R13: 00007fb0a80d6038 R14: 00007fb0a80d5fa0 R15: 00007ffd7687a278
[   82.420200][ T5398]  </TASK>
[   82.687425][ T5395] sctp: [Deprecated]: syz.6.464 (pid 5395) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.687425][ T5395] Use struct sctp_sack_info instead
[   82.820962][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.869961][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.908383][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'.
[   83.450926][ T5427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'.
[   83.511883][ T5435] netlink: 'syz.6.477': attribute type 10 has an invalid length.
[   83.526743][ T5435] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   83.546994][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.477'.
[   83.562804][ T5435] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.810137][   T70] Bluetooth: hci1: Frame reassembly failed (-84)
[   83.879793][ T3751] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   83.948762][   T70] Bluetooth: hci0: Frame reassembly failed (-84)
[   84.280592][ T5464] set_capacity_and_notify: 3 callbacks suppressed
[   84.280607][ T5464] loop6: detected capacity change from 0 to 512
[   84.298505][ T5464] EXT4-fs: inline encryption not supported
[   84.330381][ T5464] EXT4-fs (loop6): orphan cleanup on readonly fs
[   84.338364][ T5464] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   84.353865][ T5464] EXT4-fs (loop6): Cannot turn on quotas: error -117
[   84.361257][ T5464] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.485: bad orphan inode 14
[   84.371708][ T5464] ext4_test_bit(bit=13, block=18) = 1
[   84.377118][ T5464] is_bad_inode(inode)=0
[   84.381355][    C0] EXT4-fs (loop6): error count since last fsck: 1
[   84.381374][    C0] EXT4-fs (loop6): last error at time 1772564853: ext4_orphan_get:1417
[   84.400894][ T5464] NEXT_ORPHAN(inode)=0
[   84.404986][ T5464] max_ino=32
[   84.408222][ T5464] i_nlink=1
[   84.413066][ T5464] EXT4-fs (loop6): 1 truncate cleaned up
[   84.419068][ T5464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.443454][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.562812][ T5473] loop4: detected capacity change from 0 to 128
[   84.570638][ T5473] FAT-fs (loop4): bogus sectors per cluster 0
[   84.576743][ T5473] FAT-fs (loop4): Can't find a valid FAT filesystem
[   84.808128][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   84.808141][   T28] audit: type=1400 audit(1772564853.759:512): avc:  denied  { getopt } for  pid=5477 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   84.886023][   T28] audit: type=1400 audit(1772564853.789:513): avc:  denied  { ioctl } for  pid=5477 comm="syz.6.489" path="socket:[12565]" dev="sockfs" ino=12565 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   85.252958][ T5504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.497'.
[   85.277800][ T3915] Bluetooth: hci2: Frame reassembly failed (-84)
[   85.497602][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'.
[   85.507083][ T5511] netlink: 75 bytes leftover after parsing attributes in process `syz.4.500'.
[   85.518011][   T28] audit: type=1400 audit(1772564854.469:514): avc:  denied  { bind } for  pid=5510 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.518806][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'.
[   85.546293][ T5511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.500'.
[   85.559744][   T28] audit: type=1400 audit(1772564854.469:515): avc:  denied  { write } for  pid=5510 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.620302][ T5515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.502'.
[   85.654474][   T28] audit: type=1400 audit(1772564854.609:516): avc:  denied  { connect } for  pid=5516 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   85.811325][ T5556] loop4: detected capacity change from 0 to 128
[   85.870030][ T5558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'.
[   85.879865][ T4620] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   85.909664][   T28] audit: type=1400 audit(1772564854.859:517): avc:  denied  { cpu } for  pid=5559 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   85.962007][ T3751] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   86.065272][ T5566] batadv_slave_1: entered promiscuous mode
[   86.074534][ T5566] pimreg: entered allmulticast mode
[   86.094024][ T5566] pimreg: left allmulticast mode
[   86.102519][ T5556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=5556 comm=syz.4.507
[   86.130306][ T5556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=5556 comm=syz.4.507
[   86.181603][ T5563] batadv_slave_1: left promiscuous mode
[   86.224572][ T5573] loop0: detected capacity change from 0 to 128
[   86.233378][ T5573] FAT-fs (loop0): bogus sectors per cluster 0
[   86.239468][ T5573] FAT-fs (loop0): Can't find a valid FAT filesystem
[   87.195349][ T5601] loop5: detected capacity change from 0 to 2048
[   87.253133][ T3301] Alternate GPT is invalid, using primary GPT.
[   87.264705][ T3301]  loop5: p2 p3 p7
[   87.281433][ T5601] Alternate GPT is invalid, using primary GPT.
[   87.287794][ T5601]  loop5: p2 p3 p7
[   87.321221][ T3751] Bluetooth: hci2: command 0x1003 tx timeout
[   87.327393][   T43] Bluetooth: hci2: Opcode 0x1003 failed: -110
[   87.450437][ T5607] x_tables: unsorted entry at hook 2
[   87.499225][ T5609] bond_slave_0: entered promiscuous mode
[   87.504926][ T5609] bond_slave_1: entered promiscuous mode
[   87.510629][ T5609] syz_tun: entered promiscuous mode
[   87.523551][ T5607] loop5: detected capacity change from 0 to 697
[   87.551803][   T28] audit: type=1400 audit(1772564856.509:518): avc:  denied  { connect } for  pid=5613 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   87.570069][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   87.582149][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   87.587023][ T5023] udevd[5023]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[   87.610804][   T28] audit: type=1326 audit(1772564856.569:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5617 comm="syz.5.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd81c799 code=0x7ffc0000
[   87.619875][ T5609] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   87.683530][   T28] audit: type=1326 audit(1772564856.569:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5617 comm="syz.5.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd81c799 code=0x7ffc0000
[   87.702364][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   87.710398][ T5023] udevd[5023]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[   87.723370][ T5609] bond1: (slave macvlan3): unknown ethtool speed (30000) for port 1 (set it to 0)
[   87.736825][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   87.757252][   T28] audit: type=1326 audit(1772564856.589:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5617 comm="syz.5.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdcfd81c799 code=0x7ffc0000
[   87.780769][ T5609] bond1: (slave macvlan3): speed changed to 0 on port 1
[   87.788882][ T5609] bond1: (slave macvlan3): Enslaving as a backup interface with an up link
[   87.929805][ T5626] __nla_validate_parse: 5 callbacks suppressed
[   87.929820][ T5626] netlink: 176 bytes leftover after parsing attributes in process `syz.4.529'.
[   87.963658][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[   88.027684][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.528'.
[   88.037889][ T5627] loop6: detected capacity change from 0 to 128
[   88.048016][ T5627] FAT-fs (loop6): bogus sectors per cluster 0
[   88.054143][ T5627] FAT-fs (loop6): Can't find a valid FAT filesystem
[   88.090671][ T5629] capability: warning: `syz.5.530' uses 32-bit capabilities (legacy support in use)
[   88.388914][ T5635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.531'.
[   88.485571][ T5637] loop5: detected capacity change from 0 to 128
[   89.239667][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.743040][ T5655] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   89.824255][ T5659] loop2: detected capacity change from 0 to 1024
[   89.831385][ T5659] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   89.922484][ T5659] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.538: Invalid block bitmap block 0 in block_group 0
[   89.969653][ T5659] fserror_report: 11 callbacks suppressed
[   89.969675][ T5659] loop2: lost filesystem error report for type 5 error -117
[   89.979698][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   89.993949][    C0] EXT4-fs (loop2): initial error at time 1772564858: ext4_read_block_bitmap_nowait:483
[   90.003907][    C0] EXT4-fs (loop2): last error at time 1772564858: ext4_read_block_bitmap_nowait:483
[   90.029732][ T5659] __quota_error: 14 callbacks suppressed
[   90.029746][ T5659] Quota error (device loop2): write_blk: dquota write failed
[   90.058389][ T5659] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   90.068591][ T5659] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.538: Failed to acquire dquot type 0
[   90.081772][ T5659] loop2: lost filesystem error report for type 5 error -117
[   90.082022][ T5659] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.538: Freeing blocks not in datazone - block = 0, count = 4096
[   90.163943][ T5674] loop4: detected capacity change from 0 to 128
[   90.231753][ T5674] FAT-fs (loop4): bogus sectors per cluster 0
[   90.237854][ T5674] FAT-fs (loop4): Can't find a valid FAT filesystem
[   90.267426][ T5659] loop2: lost filesystem error report for type 5 error -117
[   90.276512][ T5659] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.538: Invalid inode bitmap blk 0 in block_group 0
[   90.405047][ T5659] loop2: lost filesystem error report for type 5 error -117
[   90.406181][ T5659] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   90.496486][ T5543] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[   90.497040][ T5659] loop2: lost filesystem error report for type 5 error -117
[   90.505739][ T5543] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:29: Failed to release dquot type 0
[   90.505739][ T5659] EXT4-fs (loop2): 1 orphan inode deleted
[   90.526920][ T5543] loop2: lost filesystem error report for type 5 error -117
[   90.531269][ T5659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.553529][ T5659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.818176][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'.
[   91.111368][   T28] audit: type=1400 audit(1772564860.069:536): avc:  denied  { bind } for  pid=5690 comm="syz.6.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   91.425689][ T5698] loop6: detected capacity change from 0 to 512
[   91.487949][ T5698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.509000][ T5698] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.550261][   T28] audit: type=1400 audit(1772564860.509:537): avc:  denied  { remount } for  pid=5697 comm="syz.6.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   91.619243][ T5698] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   91.635258][ T5708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'.
[   91.764368][ T5699] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   91.796792][   T28] audit: type=1400 audit(1772564860.749:538): avc:  denied  { bind } for  pid=5697 comm="syz.6.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   92.458662][ T3751] Bluetooth: hci0: command 0x1003 tx timeout
[   92.471540][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   92.668402][ T5718] loop2: detected capacity change from 0 to 1024
[   92.682012][ T5718] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   92.729736][   T28] audit: type=1400 audit(1772564861.679:539): avc:  denied  { setattr } for  pid=5731 comm="syz.0.560" name="L2CAP" dev="sockfs" ino=11950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.755629][ T5718] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.555: Invalid block bitmap block 0 in block_group 0
[   92.803833][ T5718] loop2: lost filesystem error report for type 5 error -117
[   92.804025][ T5718] Quota error (device loop2): write_blk: dquota write failed
[   92.811375][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   92.811397][    C1] EXT4-fs (loop2): initial error at time 1772564861: ext4_read_block_bitmap_nowait:483
[   92.811420][    C1] EXT4-fs (loop2): last error at time 1772564861: ext4_read_block_bitmap_nowait:483
[   92.829929][   T28] audit: type=1400 audit(1772564861.749:540): avc:  denied  { write } for  pid=5697 comm="syz.6.550" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   92.866029][ T5718] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   92.877875][ T5718] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.555: Failed to acquire dquot type 0
[   92.918413][ T5718] loop2: lost filesystem error report for type 5 error -117
[   92.918588][ T5718] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.555: Freeing blocks not in datazone - block = 0, count = 4096
[   92.951076][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.983950][ T5718] loop2: lost filesystem error report for type 5 error -117
[   92.989831][ T5718] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.555: Invalid inode bitmap blk 0 in block_group 0
[   93.016446][ T5542] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 0
[   93.028129][ T5718] loop2: lost filesystem error report for type 5 error -117
[   93.028980][ T5718] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   93.085407][ T5718] EXT4-fs (loop2): 1 orphan inode deleted
[   93.311151][ T5718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.338991][ T5718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.412379][ T5775] loop6: detected capacity change from 0 to 4096
[   94.435174][ T5779] loop4: detected capacity change from 0 to 1024
[   94.453358][ T5779] /dev/loop4: Can't open blockdev
[   94.492363][ T5779] FAULT_INJECTION: forcing a failure.
[   94.492363][ T5779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.521219][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.4.571 Not tainted syzkaller #0 PREEMPT(full) 
[   94.521322][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   94.521334][ T5779] Call Trace:
[   94.521341][ T5779]  <TASK>
[   94.521350][ T5779]  __dump_stack+0x1d/0x30
[   94.521387][ T5779]  dump_stack_lvl+0x95/0xd0
[   94.521409][ T5779]  dump_stack+0x15/0x1b
[   94.521473][ T5779]  should_fail_ex+0x263/0x280
[   94.521494][ T5779]  should_fail+0xb/0x20
[   94.521585][ T5779]  should_fail_usercopy+0x1a/0x20
[   94.521604][ T5779]  _copy_to_user+0x20/0xa0
[   94.521625][ T5779]  simple_read_from_buffer+0xb5/0x130
[   94.521646][ T5779]  proc_fail_nth_read+0x10e/0x150
[   94.521744][ T5779]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.521767][ T5779]  vfs_read+0x1ab/0x7f0
[   94.521790][ T5779]  ? __rcu_read_unlock+0x4e/0x70
[   94.521850][ T5779]  ? __fget_files+0x184/0x1c0
[   94.521873][ T5779]  ? mutex_lock+0x57/0x90
[   94.521896][ T5779]  ksys_read+0xdc/0x1a0
[   94.521928][ T5779]  __x64_sys_read+0x40/0x50
[   94.522007][ T5779]  x64_sys_call+0x2886/0x3020
[   94.522109][ T5779]  do_syscall_64+0x12c/0x370
[   94.522205][ T5779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.522228][ T5779] RIP: 0033:0x7fd892c2cfce
[   94.522245][ T5779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   94.522304][ T5779] RSP: 002b:00007fd8916befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.522322][ T5779] RAX: ffffffffffffffda RBX: 00007fd8916bf6c0 RCX: 00007fd892c2cfce
[   94.522333][ T5779] RDX: 000000000000000f RSI: 00007fd8916bf0a0 RDI: 0000000000000005
[   94.522344][ T5779] RBP: 00007fd8916bf090 R08: 0000000000000000 R09: 0000000000000000
[   94.522355][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.522366][ T5779] R13: 00007fd892ee6038 R14: 00007fd892ee5fa0 R15: 00007ffc838d00a8
[   94.522411][ T5779]  </TASK>
[   94.559559][ T5775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.921939][ T5799] netlink: 96 bytes leftover after parsing attributes in process `syz.0.576'.
[   94.921976][ T5798] netlink: 27 bytes leftover after parsing attributes in process `syz.4.578'.
[   94.941352][ T1108] IPVS: starting estimator thread 0...
[   95.029753][ T5800] IPVS: using max 2448 ests per chain, 122400 per kthread
[   95.379167][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.583'.
[   95.522409][ T5820] netlink: 176 bytes leftover after parsing attributes in process `syz.0.585'.
[   95.559296][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.637264][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.753374][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'.
[   95.763492][ T5827] loop2: detected capacity change from 0 to 128
[   95.772892][ T5827] FAT-fs (loop2): bogus sectors per cluster 0
[   95.779007][ T5827] FAT-fs (loop2): Can't find a valid FAT filesystem
[   95.956881][ T5831] netlink: 'syz.4.587': attribute type 10 has an invalid length.
[   96.279684][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   96.312926][ T5817] netlink: 76 bytes leftover after parsing attributes in process `syz.5.583'.
[   96.325830][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.370915][ T5831] FAULT_INJECTION: forcing a failure.
[   96.370915][ T5831] name failslab, interval 1, probability 0, space 0, times 0
[   96.387778][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz.4.587 Not tainted syzkaller #0 PREEMPT(full) 
[   96.387824][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   96.387860][ T5831] Call Trace:
[   96.387867][ T5831]  <TASK>
[   96.387875][ T5831]  __dump_stack+0x1d/0x30
[   96.387899][ T5831]  dump_stack_lvl+0x95/0xd0
[   96.387921][ T5831]  dump_stack+0x15/0x1b
[   96.387946][ T5831]  should_fail_ex+0x263/0x280
[   96.387986][ T5831]  should_failslab+0x8c/0xb0
[   96.388007][ T5831]  kmem_cache_alloc_node_noprof+0x6d/0x460
[   96.388027][ T5831]  ? __alloc_skb+0x2d6/0x690
[   96.388051][ T5831]  __alloc_skb+0x2d6/0x690
[   96.388109][ T5831]  ? __alloc_skb+0x200/0x690
[   96.388129][ T5831]  inet_ifmcaddr_notify+0x64/0x120
[   96.388172][ T5831]  ____ip_mc_inc_group+0x487/0x580
[   96.388197][ T5831]  ip_mc_up+0xa1/0x120
[   96.388219][ T5831]  inetdev_event+0x9bd/0xba0
[   96.388257][ T5831]  ? ib_netdevice_event+0x20b/0x350
[   96.388337][ T5831]  ? __pfx_inetdev_event+0x10/0x10
[   96.388356][ T5831]  raw_notifier_call_chain+0x83/0x1c0
[   96.388374][ T5831]  ? rtmsg_ifinfo+0xef/0x110
[   96.388461][ T5831]  netif_open+0x123/0x180
[   96.388486][ T5831]  dev_open+0xc0/0x170
[   96.388502][ T5831]  team_add_slave+0x476/0x17d0
[   96.388652][ T5831]  ? ip6_route_dev_notify+0x60/0x580
[   96.388680][ T5831]  ? __pfx_ip6_route_dev_notify+0x10/0x10
[   96.388703][ T5831]  ? raw_notifier_call_chain+0x1a9/0x1c0
[   96.388720][ T5831]  ? rtmsg_ifinfo+0xef/0x110
[   96.388790][ T5831]  ? __pfx_team_add_slave+0x10/0x10
[   96.388817][ T5831]  do_set_master+0x390/0x460
[   96.388834][ T5831]  do_setlink+0x97b/0x2940
[   96.388852][ T5831]  ? _raw_spin_lock_irqsave+0x57/0xb0
[   96.388882][ T5831]  ? __list_del_entry_valid_or_report+0x65/0x130
[   96.388912][ T5831]  ? __mutex_lock+0xa4c/0xed0
[   96.389011][ T5831]  ? __mutex_lock_slowpath+0xa/0x10
[   96.389081][ T5831]  rtnl_newlink+0xfd9/0x1330
[   96.389181][ T5831]  ? __memcg_slab_free_hook+0x154/0x250
[   96.389204][ T5831]  ? __rcu_read_unlock+0x4e/0x70
[   96.389221][ T5831]  ? avc_has_perm_noaudit+0xab/0x130
[   96.389285][ T5831]  ? cred_has_capability+0x224/0x2a0
[   96.389388][ T5831]  ? selinux_capable+0x31/0x40
[   96.389448][ T5831]  ? security_capable+0x7b/0x90
[   96.389468][ T5831]  ? ns_capable+0x7c/0xb0
[   96.389527][ T5831]  ? __pfx_rtnl_newlink+0x10/0x10
[   96.389549][ T5831]  rtnetlink_rcv_msg+0x64b/0x720
[   96.389576][ T5831]  netlink_rcv_skb+0x123/0x220
[   96.389599][ T5831]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   96.389647][ T5831]  rtnetlink_rcv+0x1c/0x30
[   96.389669][ T5831]  netlink_unicast+0x5c0/0x690
[   96.389691][ T5831]  netlink_sendmsg+0x5c8/0x6f0
[   96.389721][ T5831]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.389744][ T5831]  ____sys_sendmsg+0x5af/0x600
[   96.389830][ T5831]  ___sys_sendmsg+0x195/0x1e0
[   96.389864][ T5831]  __x64_sys_sendmsg+0xd4/0x160
[   96.389962][ T5831]  x64_sys_call+0x194c/0x3020
[   96.389982][ T5831]  do_syscall_64+0x12c/0x370
[   96.390016][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.390035][ T5831] RIP: 0033:0x7fd892c6c799
[   96.390048][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.390192][ T5831] RSP: 002b:00007fd8916bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.390212][ T5831] RAX: ffffffffffffffda RBX: 00007fd892ee5fa0 RCX: 00007fd892c6c799
[   96.390259][ T5831] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000004
[   96.390270][ T5831] RBP: 00007fd8916bf090 R08: 0000000000000000 R09: 0000000000000000
[   96.390283][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   96.390296][ T5831] R13: 00007fd892ee6038 R14: 00007fd892ee5fa0 R15: 00007ffc838d00a8
[   96.390316][ T5831]  </TASK>
[   96.763470][ T5839] netlink: 'syz.6.588': attribute type 4 has an invalid length.
[   96.781086][ T5831] team0: Port device vxcan1 added
[   96.807309][ T5839] netlink: 'syz.6.588': attribute type 4 has an invalid length.
[   97.435616][ T5865] syzkaller0: entered promiscuous mode
[   97.452378][ T5865] syzkaller0: entered allmulticast mode
[   97.494278][ T5865] tipc: Started in network mode
[   97.519171][ T5865] tipc: Node identity 5ad9608208a9, cluster identity 4711
[   97.564745][ T5865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.577707][ T5864] tipc: Resetting bearer <eth:syzkaller0>
[   97.587625][ T5864] tipc: Disabling bearer <eth:syzkaller0>
[   97.647383][ T5878] netlink: 'syz.0.601': attribute type 13 has an invalid length.
[   97.760607][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'.
[   97.770356][ T5881] loop4: detected capacity change from 0 to 128
[   97.789839][ T5881] FAT-fs (loop4): bogus sectors per cluster 0
[   97.795916][ T5881] FAT-fs (loop4): Can't find a valid FAT filesystem
[   97.880145][ T3376] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.248774][ T3517] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.537773][ T5888] loop6: detected capacity change from 0 to 128
[   98.650090][ T5888] FAT-fs (loop6): bogus sectors per cluster 0
[   98.656326][ T5888] FAT-fs (loop6): Can't find a valid FAT filesystem
[   98.710733][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   98.710746][   T28] audit: type=1400 audit(1772564867.659:550): avc:  denied  { create } for  pid=5897 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   99.035973][ T5899] loop4: detected capacity change from 0 to 1024
[   99.057018][   T28] audit: type=1400 audit(1772564868.009:551): avc:  denied  { create } for  pid=5904 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   99.077180][ T5899] EXT4-fs: Ignoring removed orlov option
[   99.103018][ T5908] process 'syz.6.609' launched '/dev/fd/4' with NULL argv: empty string added
[   99.123769][   T28] audit: type=1400 audit(1772564868.009:552): avc:  denied  { setopt } for  pid=5904 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   99.124397][ T5899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.143212][   T28] audit: type=1400 audit(1772564868.059:553): avc:  denied  { read } for  pid=5906 comm="syz.6.609" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   99.178542][   T28] audit: type=1400 audit(1772564868.059:554): avc:  denied  { open } for  pid=5906 comm="syz.6.609" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   99.202063][   T28] audit: type=1400 audit(1772564868.059:555): avc:  denied  { execute } for  pid=5906 comm="syz.6.609" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.229874][   T28] audit: type=1400 audit(1772564868.189:556): avc:  denied  { execute_no_trans } for  pid=5906 comm="syz.6.609" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.315461][ T5917] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   99.332110][ T5917] bond0 (unregistering): Released all slaves
[   99.390016][   T28] audit: type=1400 audit(1772564868.339:557): avc:  denied  { write } for  pid=5897 comm="syz.4.606" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   99.483454][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.603711][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.624128][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.642285][   T28] audit: type=1400 audit(1772564868.339:558): avc:  denied  { open } for  pid=5897 comm="syz.4.606" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   99.844844][   T28] audit: type=1400 audit(1772564868.389:559): avc:  denied  { ioctl } for  pid=5912 comm="syz.0.611" path="socket:[13362]" dev="sockfs" ino=13362 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  100.814121][ T5908] autofs4:pid:5908:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b)
[  101.512672][ T5952] loop4: detected capacity change from 0 to 128
[  101.529489][ T5952] FAT-fs (loop4): bogus sectors per cluster 0
[  101.535623][ T5952] FAT-fs (loop4): Can't find a valid FAT filesystem
[  101.971650][ T5963] loop6: detected capacity change from 0 to 512
[  101.993964][ T5963] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  102.002271][ T5963] System zones: 0-2, 18-18, 34-34
[  102.008580][ T5963] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.624: bg 0: block 248: padding at end of block bitmap is not set
[  102.042103][ T5963] fserror_report: 2 callbacks suppressed
[  102.042230][ T5963] loop6: lost filesystem error report for type 5 error -117
[  102.049607][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  102.063377][    C1] EXT4-fs (loop6): last error at time 1772564870: ext4_validate_block_bitmap:441
[  102.121921][ T5963] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.624: Failed to acquire dquot type 1
[  102.133074][ T5963] loop6: lost filesystem error report for type 5 error -117
[  102.141125][ T5963] EXT4-fs (loop6): 1 truncate cleaned up
[  102.147136][ T5963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.169192][ T5963] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.208568][ T5972] FAULT_INJECTION: forcing a failure.
[  102.208568][ T5972] name failslab, interval 1, probability 0, space 0, times 0
[  102.224472][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.4.626 Not tainted syzkaller #0 PREEMPT(full) 
[  102.224500][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  102.224525][ T5972] Call Trace:
[  102.224532][ T5972]  <TASK>
[  102.224540][ T5972]  __dump_stack+0x1d/0x30
[  102.224640][ T5972]  dump_stack_lvl+0x95/0xd0
[  102.224700][ T5972]  dump_stack+0x15/0x1b
[  102.224720][ T5972]  should_fail_ex+0x263/0x280
[  102.224743][ T5972]  should_failslab+0x8c/0xb0
[  102.224764][ T5972]  kmem_cache_alloc_noprof+0x66/0x400
[  102.224786][ T5972]  ? skb_clone+0x151/0x1f0
[  102.224819][ T5972]  skb_clone+0x151/0x1f0
[  102.224844][ T5972]  __netlink_deliver_tap+0x2c9/0x500
[  102.224874][ T5972]  netlink_unicast+0x66b/0x690
[  102.224951][ T5972]  netlink_sendmsg+0x5c8/0x6f0
[  102.224978][ T5972]  ? __pfx_netlink_sendmsg+0x10/0x10
[  102.225005][ T5972]  ____sys_sendmsg+0x5af/0x600
[  102.225049][ T5972]  ___sys_sendmsg+0x195/0x1e0
[  102.225085][ T5972]  __x64_sys_sendmsg+0xd4/0x160
[  102.225294][ T5972]  x64_sys_call+0x194c/0x3020
[  102.225319][ T5972]  do_syscall_64+0x12c/0x370
[  102.225338][ T5972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.225356][ T5972] RIP: 0033:0x7fd892c6c799
[  102.225373][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.225399][ T5972] RSP: 002b:00007fd8916bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.225420][ T5972] RAX: ffffffffffffffda RBX: 00007fd892ee5fa0 RCX: 00007fd892c6c799
[  102.225435][ T5972] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003
[  102.225506][ T5972] RBP: 00007fd8916bf090 R08: 0000000000000000 R09: 0000000000000000
[  102.225517][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.225530][ T5972] R13: 00007fd892ee6038 R14: 00007fd892ee5fa0 R15: 00007ffc838d00a8
[  102.225550][ T5972]  </TASK>
[  102.428101][ T5963] netlink: 80 bytes leftover after parsing attributes in process `syz.6.624'.
[  102.734982][ T5987] loop4: detected capacity change from 0 to 2048
[  103.006148][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.023062][ T3301]  loop4: p1 < > p4
[  103.036730][ T3301] loop4: p4 size 8388608 extends beyond EOD, truncated
[  103.205700][   T30] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1
[  103.227476][ T5987]  loop4: p1 < > p4
[  103.232508][ T5987] loop4: p4 size 8388608 extends beyond EOD, truncated
[  103.239446][   T30] loop6: lost filesystem error report for type 5 error -117
[  103.355435][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  103.355760][ T6002] bridge0: entered promiscuous mode
[  103.382263][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  103.407222][ T6002] bridge0: port 1(macsec1) entered blocking state
[  103.414106][ T6002] bridge0: port 1(macsec1) entered disabled state
[  103.420822][ T6002] macsec1: entered allmulticast mode
[  103.429564][ T6002] bridge0: entered allmulticast mode
[  103.437794][ T6002] macsec1: left allmulticast mode
[  103.443055][ T6002] bridge0: left allmulticast mode
[  103.448687][ T6002] bridge0: left promiscuous mode
[  103.864658][ T6036] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  103.901437][ T3398] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  104.268687][ T6047] tipc: Started in network mode
[  104.281717][ T6047] tipc: Node identity 86988e24d0e8, cluster identity 195
[  104.295877][ T6047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.306207][ T6047] syzkaller0: entered promiscuous mode
[  104.319560][ T6047] syzkaller0: entered allmulticast mode
[  104.332097][ T6047] tipc: Resetting bearer <eth:syzkaller0>
[  104.347553][ T6046] tipc: Resetting bearer <eth:syzkaller0>
[  104.367734][ T6046] tipc: Disabling bearer <eth:syzkaller0>
[  104.371197][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  104.398935][ T5531] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  104.456951][ T6056] loop5: detected capacity change from 0 to 1024
[  104.463781][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  104.463795][   T28] audit: type=1400 audit(1772564873.419:570): avc:  denied  { mounton } for  pid=6054 comm="syz.5.654" path="/92/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  104.497686][ T6056] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  104.502503][ T6059] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125
[  104.545756][ T6056] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.654: Invalid block bitmap block 0 in block_group 0
[  104.564012][ T6056] loop5: lost filesystem error report for type 5 error -117
[  104.569604][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  104.583340][    C0] EXT4-fs (loop5): initial error at time 1772564873: ext4_read_block_bitmap_nowait:483
[  104.593016][    C0] EXT4-fs (loop5): last error at time 1772564873: ext4_read_block_bitmap_nowait:483
[  104.632593][ T6056] Quota error (device loop5): write_blk: dquota write failed
[  104.662072][ T6056] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  104.694034][ T6056] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.654: Failed to acquire dquot type 0
[  104.760979][ T6077] loop6: detected capacity change from 0 to 128
[  104.774943][ T6077] FAT-fs (loop6): bogus sectors per cluster 0
[  104.781076][ T6077] FAT-fs (loop6): Can't find a valid FAT filesystem
[  104.808311][ T6056] loop5: lost filesystem error report for type 5 error -117
[  104.812271][ T6056] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.654: Freeing blocks not in datazone - block = 0, count = 4096
[  104.851349][ T6065] loop2: detected capacity change from 0 to 512
[  104.930288][ T6065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.025581][ T6056] loop5: lost filesystem error report for type 5 error -117
[  105.026345][ T6056] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.654: Invalid inode bitmap blk 0 in block_group 0
[  105.097892][ T6065] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.658: bad orphan inode 11
[  105.102926][ T6056] loop5: lost filesystem error report for type 5 error -117
[  105.113487][ T5542] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7
[  105.129919][ T6065] loop2: lost filesystem error report for type 5 error -117
[  105.130686][ T5542] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 0
[  105.149534][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  105.149556][    C1] EXT4-fs (loop2): initial error at time 1772564874: ext4_orphan_get:1417
[  105.149596][    C1] EXT4-fs (loop2): last error at time 1772564874: ext4_orphan_get:1417
[  105.172795][ T5542] loop5: lost filesystem error report for type 5 error -117
[  105.179623][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.182823][ T6056] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  105.268582][ T6056] loop5: lost filesystem error report for type 5 error -117
[  105.268718][ T6056] EXT4-fs (loop5): 1 orphan inode deleted
[  105.282767][ T6056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.296352][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.296658][ T6056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.420251][ T5553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  105.448335][ T5553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  105.469825][ T3398] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  105.659912][ T6090] loop6: detected capacity change from 0 to 1024
[  105.671286][ T6090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.686121][ T6102] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.696159][ T6102] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[  105.718780][ T6090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.728345][ T6090] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.663: bit already cleared for inode 13
[  105.765487][ T6110] FAULT_INJECTION: forcing a failure.
[  105.765487][ T6110] name failslab, interval 1, probability 0, space 0, times 0
[  105.778202][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.5.670 Not tainted syzkaller #0 PREEMPT(full) 
[  105.778227][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  105.778289][ T6110] Call Trace:
[  105.778294][ T6110]  <TASK>
[  105.778298][ T6110]  __dump_stack+0x1d/0x30
[  105.778314][ T6110]  dump_stack_lvl+0x95/0xd0
[  105.778336][ T6110]  dump_stack+0x15/0x1b
[  105.778379][ T6110]  should_fail_ex+0x263/0x280
[  105.778464][ T6110]  ? sctp_auth_asoc_copy_shkeys+0xfa/0x330
[  105.778515][ T6110]  should_failslab+0x8c/0xb0
[  105.778527][ T6110]  __kmalloc_cache_noprof+0x5f/0x410
[  105.778548][ T6110]  ? sctp_stream_interleave_init+0x47/0x60
[  105.778622][ T6110]  sctp_auth_asoc_copy_shkeys+0xfa/0x330
[  105.778639][ T6110]  sctp_association_new+0xde5/0x1190
[  105.778652][ T6110]  sctp_connect_new_asoc+0x1a8/0x3a0
[  105.778665][ T6110]  sctp_sendmsg+0xfff/0x1d60
[  105.778735][ T6110]  ? selinux_socket_sendmsg+0x192/0x1c0
[  105.778752][ T6110]  ? __pfx_sctp_sendmsg+0x10/0x10
[  105.778818][ T6110]  inet_sendmsg+0xc5/0xd0
[  105.778840][ T6110]  ____sys_sendmsg+0x53a/0x600
[  105.778895][ T6110]  ___sys_sendmsg+0x195/0x1e0
[  105.778916][ T6110]  ? path_openat+0x1b01/0x2050
[  105.778938][ T6110]  __sys_sendmmsg+0x185/0x320
[  105.778958][ T6110]  __x64_sys_sendmmsg+0x57/0x70
[  105.779050][ T6110]  x64_sys_call+0x27aa/0x3020
[  105.779071][ T6110]  do_syscall_64+0x12c/0x370
[  105.779083][ T6110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.779095][ T6110] RIP: 0033:0x7fdcfd81c799
[  105.779106][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.779116][ T6110] RSP: 002b:00007fdcfc26f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  105.779142][ T6110] RAX: ffffffffffffffda RBX: 00007fdcfda95fa0 RCX: 00007fdcfd81c799
[  105.779157][ T6110] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  105.779169][ T6110] RBP: 00007fdcfc26f090 R08: 0000000000000000 R09: 0000000000000000
[  105.779181][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.779188][ T6110] R13: 00007fdcfda96038 R14: 00007fdcfda95fa0 R15: 00007ffd60bcec88
[  105.779240][ T6110]  </TASK>
[  106.010481][ T6112] loop5: detected capacity change from 0 to 512
[  106.016984][ T6112] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  106.030569][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6112 comm=syz.5.671
[  106.335838][ T6129] loop5: detected capacity change from 0 to 128
[  106.384929][ T6129] FAT-fs (loop5): bogus sectors per cluster 0
[  106.391228][ T6129] FAT-fs (loop5): Can't find a valid FAT filesystem
[  106.401353][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.418501][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'.
[  106.519675][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  106.748654][ T6143] loop6: detected capacity change from 0 to 1024
[  106.756766][ T6143] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  106.800652][ T6143] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.677: Invalid block bitmap block 0 in block_group 0
[  106.814355][ T6143] Quota error (device loop6): write_blk: dquota write failed
[  106.821802][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  106.821821][    C1] EXT4-fs (loop6): initial error at time 1772564875: ext4_read_block_bitmap_nowait:483
[  106.821846][    C1] EXT4-fs (loop6): last error at time 1772564875: ext4_read_block_bitmap_nowait:483
[  106.852135][ T6143] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  106.862317][ T6143] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.677: Failed to acquire dquot type 0
[  106.874080][ T6143] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.677: Freeing blocks not in datazone - block = 0, count = 4096
[  106.887820][ T6143] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.677: Invalid inode bitmap blk 0 in block_group 0
[  106.900891][ T6143] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  106.908877][ T5553] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7
[  106.914263][ T6143] EXT4-fs (loop6): 1 orphan inode deleted
[  106.924790][ T6143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.970187][ T5553] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:38: Failed to release dquot type 0
[  107.015144][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.338362][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  107.697741][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.6.689'.
[  108.056877][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.694'.
[  108.129571][ T6192] loop5: detected capacity change from 0 to 512
[  108.146502][ T6192] EXT4-fs (loop5): orphan cleanup on readonly fs
[  108.159977][ T6192] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.694: ea_inode file size=4 entry size=6
[  108.196272][ T6192] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  108.224857][ T6192] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.694: corrupted inode contents
[  108.252135][ T6192] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  108.252290][ T6192] EXT4-fs (loop5): Remounting filesystem read-only
[  108.261491][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  108.261527][    C1] EXT4-fs (loop5): initial error at time 1772564877: ext4_do_update_inode:5569: inode 15
[  108.261553][    C1] EXT4-fs (loop5): last error at time 1772564877: ext4_do_update_inode:5569: inode 15
[  108.312953][ T6192] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -30)
[  108.326059][ T6192] EXT4-fs (loop5): 1 orphan inode deleted
[  108.338526][ T6192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  108.469610][   T28] audit: type=1400 audit(1772564877.419:571): avc:  denied  { create } for  pid=6196 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  108.492783][ T6199] 9p: Bad value for 'rfdno'
[  108.513869][   T28] audit: type=1400 audit(1772564877.429:572): avc:  denied  { read } for  pid=6196 comm="syz.0.696" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  108.543126][   T28] audit: type=1400 audit(1772564877.429:573): avc:  denied  { ioctl } for  pid=6196 comm="syz.0.696" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  109.161617][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.527448][ T6219] loop5: detected capacity change from 0 to 4096
[  109.548367][ T6219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.696393][ T6242] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  109.719721][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  109.809675][   T28] kauditd_printk_skb: 144 callbacks suppressed
[  109.809723][   T28] audit: type=1400 audit(1772564878.759:718): avc:  denied  { setattr } for  pid=6218 comm="syz.5.704" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.087044][   T28] audit: type=1326 audit(1772564879.039:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6246 comm="syz.4.711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd892c6c799 code=0x0
[  110.127185][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.150163][ T6249] lo: entered allmulticast mode
[  110.156372][ T6249] tunl0: entered allmulticast mode
[  110.162808][ T6249] gre0: entered allmulticast mode
[  110.168721][ T6249] gretap0: entered allmulticast mode
[  110.175446][ T6249] erspan0: entered allmulticast mode
[  110.181943][ T6249] ip_vti0: entered allmulticast mode
[  110.189373][ T6249] ip6_vti0: entered allmulticast mode
[  110.196175][ T6249] sit0: entered allmulticast mode
[  110.205560][ T6249] ip6tnl0: entered allmulticast mode
[  110.212480][ T6249] ip6gre0: entered allmulticast mode
[  110.218667][ T6249] syz_tun: entered allmulticast mode
[  110.270685][ T6249] ip6gretap0: entered allmulticast mode
[  110.309296][ T6249] bridge0: entered allmulticast mode
[  110.324249][ T6249] vcan0: entered allmulticast mode
[  110.343809][ T6249] bond0: entered allmulticast mode
[  110.381134][ T6249] bond_slave_0: entered allmulticast mode
[  110.405300][ T6262] loop2: detected capacity change from 0 to 1024
[  110.408596][ T6249] bond_slave_1: entered allmulticast mode
[  110.418218][ T6262] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  110.421722][ T6249] team0: entered allmulticast mode
[  110.433998][ T6249] team_slave_0: entered allmulticast mode
[  110.440126][ T6249] team_slave_1: entered allmulticast mode
[  110.511568][ T6249] dummy0: entered allmulticast mode
[  110.517741][ T6249] nlmon0: entered allmulticast mode
[  110.556812][ T6262] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.715: Invalid block bitmap block 0 in block_group 0
[  110.572142][ T6249] caif0: entered allmulticast mode
[  110.577392][ T6262] fserror_report: 5 callbacks suppressed
[  110.577407][ T6262] loop2: lost filesystem error report for type 5 error -117
[  110.583680][ T6249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.610893][ T6262] Quota error (device loop2): write_blk: dquota write failed
[  110.619598][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  110.626026][    C0] EXT4-fs (loop2): initial error at time 1772564879: ext4_read_block_bitmap_nowait:483
[  110.635677][    C0] EXT4-fs (loop2): last error at time 1772564879: ext4_read_block_bitmap_nowait:483
[  110.645608][ T6262] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  110.655883][ T6262] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.715: Failed to acquire dquot type 0
[  110.677262][ T6262] loop2: lost filesystem error report for type 5 error -117
[  110.677508][ T6262] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.715: Freeing blocks not in datazone - block = 0, count = 4096
[  110.706725][ T6262] loop2: lost filesystem error report for type 5 error -117
[  110.706956][ T6262] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.715: Invalid inode bitmap blk 0 in block_group 0
[  110.728605][ T5537] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  110.738021][ T5537] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 0
[  110.779783][ T6262] loop2: lost filesystem error report for type 5 error -117
[  110.779855][ T5537] loop2: lost filesystem error report for type 5 error -117
[  110.787378][ T6262] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  110.787399][ T6262] loop2: lost filesystem error report for type 5 error -117
[  110.787500][ T6262] EXT4-fs (loop2): 1 orphan inode deleted
[  110.803381][   T28] audit: type=1400 audit(1772564879.749:720): avc:  denied  { ioctl } for  pid=6271 comm="syz.5.717" path="socket:[14871]" dev="sockfs" ino=14871 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.811767][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.842143][ T6272] 9p: Bad value for 'wfdno'
[  110.856698][ T6262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.858771][   T28] audit: type=1400 audit(1772564879.799:721): avc:  denied  { read } for  pid=6271 comm="syz.5.717" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  111.209641][ T6293] netlink: 340 bytes leftover after parsing attributes in process `syz.5.722'.
[  111.465761][   T28] audit: type=1400 audit(1772564880.419:722): avc:  denied  { getopt } for  pid=6286 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  112.729470][ T6306] loop6: detected capacity change from 0 to 128
[  112.795593][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.6.726'.
[  112.927550][   T28] audit: type=1400 audit(1772564881.879:723): avc:  denied  { getopt } for  pid=6307 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  112.980741][ T6311] loop5: detected capacity change from 0 to 512
[  113.050023][ T6311] EXT4-fs: inline encryption not supported
[  113.055943][ T6311] EXT4-fs: Ignoring removed i_version option
[  113.079665][   T28] audit: type=1400 audit(1772564881.909:724): avc:  denied  { getopt } for  pid=6307 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  113.107345][ T6311] ext4: Unknown parameter 'smackfsfloor'
[  113.130862][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  113.139885][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'.
[  113.159205][ T5553] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.216920][ T5553] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.227224][ T5553] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.237850][ T5553] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.396116][ T6319] team0: Device gtp0 is of different type
[  113.587804][ T6332] loop6: detected capacity change from 0 to 1024
[  113.601891][ T6336] netlink: 'syz.4.736': attribute type 33 has an invalid length.
[  113.609916][ T6336] netlink: 152 bytes leftover after parsing attributes in process `syz.4.736'.
[  113.620801][ T6332] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  113.637801][ T6336] netlink: 14 bytes leftover after parsing attributes in process `syz.4.736'.
[  113.650909][ T6332] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.734: Invalid block bitmap block 0 in block_group 0
[  113.687359][ T6332] loop6: lost filesystem error report for type 5 error -117
[  113.687971][ T6332] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.734: Failed to acquire dquot type 0
[  113.695463][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  113.695476][    C1] EXT4-fs (loop6): initial error at time 1772564882: ext4_read_block_bitmap_nowait:483
[  113.695509][    C1] EXT4-fs (loop6): last error at time 1772564882: ext4_read_block_bitmap_nowait:483
[  113.763113][ T6332] loop6: lost filesystem error report for type 5 error -117
[  113.763298][ T6332] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.734: Freeing blocks not in datazone - block = 0, count = 4096
[  113.809637][ T6332] loop6: lost filesystem error report for type 5 error -117
[  113.809870][ T6332] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.734: Invalid inode bitmap blk 0 in block_group 0
[  113.836455][   T30] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0
[  113.868582][   T30] loop6: lost filesystem error report for type 5 error -117
[  113.868916][ T6332] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  113.905301][ T6332] EXT4-fs (loop6): 1 orphan inode deleted
[  113.914200][ T6332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.928901][ T6332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.009522][ T6354] FAULT_INJECTION: forcing a failure.
[  114.009522][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.023111][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.0.741 Not tainted syzkaller #0 PREEMPT(full) 
[  114.023154][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  114.023165][ T6354] Call Trace:
[  114.023172][ T6354]  <TASK>
[  114.023180][ T6354]  __dump_stack+0x1d/0x30
[  114.023222][ T6354]  dump_stack_lvl+0x95/0xd0
[  114.023240][ T6354]  dump_stack+0x15/0x1b
[  114.023257][ T6354]  should_fail_ex+0x263/0x280
[  114.023278][ T6354]  should_fail+0xb/0x20
[  114.023293][ T6354]  should_fail_usercopy+0x1a/0x20
[  114.023344][ T6354]  _copy_from_user+0x1c/0xb0
[  114.023366][ T6354]  snd_seq_write+0x1d5/0x560
[  114.023439][ T6354]  ? __pfx_snd_seq_write+0x10/0x10
[  114.023463][ T6354]  vfs_write+0x269/0x9f0
[  114.023489][ T6354]  ? __rcu_read_unlock+0x4e/0x70
[  114.023550][ T6354]  ? __fget_files+0x184/0x1c0
[  114.023571][ T6354]  ksys_write+0xdc/0x1a0
[  114.023600][ T6354]  __x64_sys_write+0x40/0x50
[  114.023617][ T6354]  x64_sys_call+0x27e1/0x3020
[  114.023696][ T6354]  do_syscall_64+0x12c/0x370
[  114.023717][ T6354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.023737][ T6354] RIP: 0033:0x7fbcd1c8c799
[  114.023827][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.023881][ T6354] RSP: 002b:00007fbcd06df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  114.023899][ T6354] RAX: ffffffffffffffda RBX: 00007fbcd1f05fa0 RCX: 00007fbcd1c8c799
[  114.023912][ T6354] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  114.023945][ T6354] RBP: 00007fbcd06df090 R08: 0000000000000000 R09: 0000000000000000
[  114.024023][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.024034][ T6354] R13: 00007fbcd1f06038 R14: 00007fbcd1f05fa0 R15: 00007fff7f998508
[  114.024050][ T6354]  </TASK>
[  114.424965][ T6381] loop6: detected capacity change from 0 to 512
[  114.450468][ T6381] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  114.459049][ T6381] EXT4-fs (loop6): too many log groups per flexible block group
[  114.467002][ T6381] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  114.473977][ T6381] EXT4-fs (loop6): mount failed
[  114.524947][ T6390] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0107 with DS=0x85
[  114.537945][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.751'.
[  114.548588][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'.
[  114.558150][ T6390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=6390 comm=syz.6.751
[  114.710104][ T6398] support for cryptoloop has been removed.  Use dm-crypt instead.
[  114.742294][ T6398] loop4: detected capacity change from 0 to 512
[  114.749015][ T6398] msdos: Unknown parameter 'dot‰'
[  114.758096][ T6398] loop4: detected capacity change from 0 to 512
[  114.799434][ T6398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.873408][   T28] kauditd_printk_skb: 51 callbacks suppressed
[  114.873492][   T28] audit: type=1400 audit(1772564883.829:773): avc:  denied  { accept } for  pid=6397 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  114.939324][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.988374][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'.
[  115.201757][ T6416] loop2: detected capacity change from 0 to 164
[  115.223341][ T6416] ISOFS: unable to read i-node block
[  115.228885][ T6416] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  115.246763][ T6420] netlink: 'syz.4.759': attribute type 16 has an invalid length.
[  115.254873][ T6420] netlink: 'syz.4.759': attribute type 17 has an invalid length.
[  115.263514][ T6416] ISOFS: unable to read i-node block
[  115.267089][ T6420] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  115.286916][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'.
[  115.313903][   T28] audit: type=1400 audit(1772564884.269:774): avc:  denied  { ioctl } for  pid=6415 comm="syz.2.758" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  115.560450][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'.
[  115.561667][ T6436] loop2: detected capacity change from 0 to 512
[  115.589442][ T6436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c118, mo2=0002]
[  115.602678][ T6436] System zones: 1-12
[  115.608959][ T6436] EXT4-fs (loop2): orphan cleanup on readonly fs
[  115.629045][ T6436] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.766: corrupted inode contents
[  115.641364][ T6436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  115.649642][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  115.665208][    C0] EXT4-fs (loop2): initial error at time 1772564884: ext4_do_update_inode:5569: inode 15
[  115.675041][    C0] EXT4-fs (loop2): last error at time 1772564884: ext4_do_update_inode:5569: inode 15
[  115.693110][ T6436] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.766: mark_inode_dirty error
[  115.704824][ T6436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  115.705311][ T6436] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.766: corrupted inode contents
[  115.729830][ T6436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  115.730067][ T6436] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.766: mark_inode_dirty error
[  115.751246][ T6436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  115.751470][ T6436] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.766: mark inode dirty (error -117)
[  115.819369][ T6436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  115.819565][ T6436] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117)
[  115.869232][ T6433] loop4: detected capacity change from 0 to 8192
[  115.879036][ T6455] loop5: detected capacity change from 0 to 256
[  115.887354][ T6436] EXT4-fs (loop2): 1 orphan inode deleted
[  115.894049][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  115.933637][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.947929][ T6433]  loop4: p1 < > p2 p4 < p5 >
[  115.961152][ T6433] loop4: partition table partially beyond EOD, truncated
[  115.996120][ T6433] loop4: p1 start 134217728 is beyond EOD, truncated
[  116.011779][ T6433] loop4: p2 size 591360 extends beyond EOD, truncated
[  116.022357][ T6455] FAT-fs (loop5): Directory bread(block 64) failed
[  116.028921][ T6455] FAT-fs (loop5): Directory bread(block 65) failed
[  116.035483][ T6455] FAT-fs (loop5): Directory bread(block 66) failed
[  116.042269][ T6455] FAT-fs (loop5): Directory bread(block 67) failed
[  116.048815][ T6455] FAT-fs (loop5): Directory bread(block 68) failed
[  116.055455][ T6455] FAT-fs (loop5): Directory bread(block 69) failed
[  116.062024][ T6455] FAT-fs (loop5): Directory bread(block 70) failed
[  116.068520][ T6455] FAT-fs (loop5): Directory bread(block 71) failed
[  116.075038][ T6455] FAT-fs (loop5): Directory bread(block 72) failed
[  116.081556][ T6455] FAT-fs (loop5): Directory bread(block 73) failed
[  116.142303][ T6433] loop4: p5 size 591360 extends beyond EOD, truncated
[  117.715086][   T28] audit: type=1400 audit(1772564886.659:775): avc:  denied  { bind } for  pid=6477 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  117.779033][ T6483] loop2: detected capacity change from 0 to 1024
[  117.817878][ T6483] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  117.860512][ T6483] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.778: Invalid block bitmap block 0 in block_group 0
[  117.874224][ T6483] fserror_report: 2 callbacks suppressed
[  117.874236][ T6483] loop2: lost filesystem error report for type 5 error -117
[  117.881642][ T6483] Quota error (device loop2): write_blk: dquota write failed
[  117.896363][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  117.896379][    C1] EXT4-fs (loop2): initial error at time 1772564886: ext4_read_block_bitmap_nowait:483
[  117.896399][    C1] EXT4-fs (loop2): last error at time 1772564886: ext4_read_block_bitmap_nowait:483
[  117.921898][ T6483] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  117.932063][ T6483] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.778: Failed to acquire dquot type 0
[  117.943345][ T6483] loop2: lost filesystem error report for type 5 error -117
[  117.944584][ T6483] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.778: Freeing blocks not in datazone - block = 0, count = 4096
[  117.965288][ T6483] loop2: lost filesystem error report for type 5 error -117
[  117.965461][ T6483] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.778: Invalid inode bitmap blk 0 in block_group 0
[  117.985398][ T6483] loop2: lost filesystem error report for type 5 error -117
[  117.989207][ T5531] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  117.991444][ T6483] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  117.996559][ T5531] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 0
[  118.025700][ T5531] loop2: lost filesystem error report for type 5 error -117
[  118.039894][ T6483] loop2: lost filesystem error report for type 5 error -117
[  118.049681][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  118.069727][ T6483] EXT4-fs (loop2): 1 orphan inode deleted
[  118.075824][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.118556][ T6483] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.561332][ T6502] loop6: detected capacity change from 0 to 128
[  118.569193][ T6502] FAT-fs (loop6): bogus sectors per cluster 0
[  118.575347][ T6502] FAT-fs (loop6): Can't find a valid FAT filesystem
[  118.652169][ T6512] loop5: detected capacity change from 0 to 128
[  118.658720][ T6512] vfat: Unknown parameter ''
[  118.665292][   T28] audit: type=1326 audit(1772564887.619:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.5.786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcfd81c799 code=0x0
[  118.716909][   T28] audit: type=1400 audit(1772564887.669:777): avc:  denied  { read } for  pid=6510 comm="syz.5.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  118.921384][   T28] audit: type=1400 audit(1772564887.879:778): avc:  denied  { getopt } for  pid=6518 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  118.942052][   T28] audit: type=1400 audit(1772564887.899:779): avc:  denied  { ioctl } for  pid=6518 comm="syz.0.788" path="socket:[15315]" dev="sockfs" ino=15315 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  119.149673][ T5537] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.292994][ T6537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  119.350374][ T3376] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  119.415518][ T6545] macvtap0: entered promiscuous mode
[  119.433998][ T6545] macvtap0: left promiscuous mode
[  119.569857][ T5531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  119.712048][ T3376] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  119.732770][ T5531] Bluetooth: hci1: Frame reassembly failed (-84)
[  120.126316][   T28] audit: type=1400 audit(1772564888.979:780): avc:  denied  { mounton } for  pid=6550 comm="syz.5.800" path="/115/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  120.341842][   T28] audit: type=1400 audit(1772564889.299:781): avc:  denied  { listen } for  pid=6567 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  120.361169][   T28] audit: type=1400 audit(1772564889.299:782): avc:  denied  { accept } for  pid=6567 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  120.392933][   T28] audit: type=1400 audit(1772564889.349:783): avc:  denied  { shutdown } for  pid=6567 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  120.507590][ T6574] __nla_validate_parse: 10 callbacks suppressed
[  120.507601][ T6574] netlink: 56 bytes leftover after parsing attributes in process `syz.2.807'.
[  120.575485][ T6576] loop2: detected capacity change from 0 to 2048
[  120.599780][ T6576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.599992][ T5537] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  120.621368][ T5537] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  120.629275][ T6576] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.808: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  120.680879][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.835782][ T6585] FAULT_INJECTION: forcing a failure.
[  120.835782][ T6585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.849120][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: syz.2.810 Not tainted syzkaller #0 PREEMPT(full) 
[  120.849137][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  120.849147][ T6585] Call Trace:
[  120.849153][ T6585]  <TASK>
[  120.849158][ T6585]  __dump_stack+0x1d/0x30
[  120.849224][ T6585]  dump_stack_lvl+0x95/0xd0
[  120.849237][ T6585]  dump_stack+0x15/0x1b
[  120.849249][ T6585]  should_fail_ex+0x263/0x280
[  120.849263][ T6585]  should_fail+0xb/0x20
[  120.849376][ T6585]  should_fail_usercopy+0x1a/0x20
[  120.849390][ T6585]  _copy_to_user+0x20/0xa0
[  120.849405][ T6585]  rng_dev_read+0x375/0x670
[  120.849421][ T6585]  ? __pfx_rng_dev_read+0x10/0x10
[  120.849491][ T6585]  vfs_readv+0x432/0x6e0
[  120.849509][ T6585]  __x64_sys_preadv+0xfd/0x1c0
[  120.849521][ T6585]  x64_sys_call+0x2915/0x3020
[  120.849535][ T6585]  do_syscall_64+0x12c/0x370
[  120.849554][ T6585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.849566][ T6585] RIP: 0033:0x7fb0a7e5c799
[  120.849674][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.849757][ T6585] RSP: 002b:00007fb0a68af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  120.849786][ T6585] RAX: ffffffffffffffda RBX: 00007fb0a80d5fa0 RCX: 00007fb0a7e5c799
[  120.849799][ T6585] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006
[  120.849875][ T6585] RBP: 00007fb0a68af090 R08: 0000000000000000 R09: 0000000000000000
[  120.849887][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.849900][ T6585] R13: 00007fb0a80d6038 R14: 00007fb0a80d5fa0 R15: 00007ffd7687a278
[  120.850075][ T6585]  </TASK>
[  121.038139][ T6586] loop2: detected capacity change from 0 to 8192
[  121.089926][ T3301]  loop2: p1 < > p2 p4 < p5 >
[  121.094630][ T3301] loop2: partition table partially beyond EOD, truncated
[  121.101817][ T3301] loop2: p1 start 134217728 is beyond EOD, truncated
[  121.108680][ T3301] loop2: p2 size 591360 extends beyond EOD, truncated
[  121.116379][ T3301] loop2: p5 size 591360 extends beyond EOD, truncated
[  121.125478][ T6586]  loop2: p1 < > p2 p4 < p5 >
[  121.130248][ T6586] loop2: partition table partially beyond EOD, truncated
[  121.137656][ T6586] loop2: p1 start 134217728 is beyond EOD, truncated
[  121.144735][ T6586] loop2: p2 size 591360 extends beyond EOD, truncated
[  121.156123][ T6586] loop2: p5 size 591360 extends beyond EOD, truncated
[  121.163068][ T1108] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  121.170948][ T5505] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  121.394336][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6598 comm=syz.0.814
[  121.579995][   T28] audit: type=1400 audit(1772564890.529:784): avc:  denied  { setopt } for  pid=6606 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  121.619972][   T28] audit: type=1400 audit(1772564890.559:785): avc:  denied  { getopt } for  pid=6606 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  121.639951][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.817'.
[  121.701470][ T6611] loop5: detected capacity change from 0 to 1024
[  121.708336][   T28] audit: type=1400 audit(1772564890.659:786): avc:  denied  { remount } for  pid=6610 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  121.809651][ T3751] Bluetooth: hci1: command 0x1003 tx timeout
[  121.816821][   T43] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  121.970494][   T28] audit: type=1400 audit(1772564890.889:787): avc:  denied  { create } for  pid=6610 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  122.027838][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  122.172699][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  122.201904][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.820'.
[  122.292441][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  122.393807][   T28] audit: type=1400 audit(1772564891.349:788): avc:  denied  { unmount } for  pid=4153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  122.646613][ T3376] IPVS: starting estimator thread 0...
[  122.759706][ T6636] IPVS: using max 2304 ests per chain, 115200 per kthread
[  122.809718][ T3751] Bluetooth: hci0: sending frame failed (-49)
[  122.815988][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  123.493597][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.833'.
[  123.543132][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.834'.
[  123.581684][   T28] audit: type=1400 audit(1772564892.539:789): avc:  denied  { getopt } for  pid=6657 comm="syz.6.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  124.331481][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.838'.
[  124.359651][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  124.383885][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'.
[  124.400656][ T6675] loop5: detected capacity change from 0 to 128
[  124.413857][ T6675] FAT-fs (loop5): bogus sectors per cluster 0
[  124.545155][ T6675] FAT-fs (loop5): Can't find a valid FAT filesystem
[  124.583231][ T6689] syzkaller0: entered promiscuous mode
[  124.599993][ T6689] syzkaller0: entered allmulticast mode
[  126.159489][ T6720] loop4: detected capacity change from 0 to 1024
[  126.189732][ T6720] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  127.065940][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.6.857'.
[  127.173349][ T6736] syzkaller0: entered promiscuous mode
[  127.219623][ T6736] syzkaller0: entered allmulticast mode
[  127.253011][ T6741] loop4: detected capacity change from 0 to 512
[  127.266548][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  127.266561][   T28] audit: type=1400 audit(1772564896.219:792): avc:  denied  { accept } for  pid=6742 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  127.293449][ T6743] tipc: Can't bind to reserved service type 3
[  127.314744][ T6741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  127.319682][ T6743] loop2: detected capacity change from 0 to 1024
[  127.344451][ T6741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.391246][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  127.409712][ T6743] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.434918][ T6743] EXT4-fs (loop2): shut down requested (0)
[  127.480956][   T28] audit: type=1400 audit(1772564896.439:793): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  127.517819][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  127.517882][   T28] audit: type=1400 audit(1772564896.439:794): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.533748][   T28] audit: type=1400 audit(1772564896.439:795): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.569893][   T28] audit: type=1400 audit(1772564896.439:796): avc:  denied  { add_name } for  pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.591252][   T28] audit: type=1400 audit(1772564896.439:797): avc:  denied  { create } for  pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  127.612064][   T28] audit: type=1400 audit(1772564896.439:798): avc:  denied  { append open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  127.765954][   T28] audit: type=1400 audit(1772564896.439:799): avc:  denied  { getattr } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  127.923959][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.570311][ T6766] loop4: detected capacity change from 0 to 1024
[  128.604512][ T6766] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  128.652694][ T6766] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.866: Invalid block bitmap block 0 in block_group 0
[  128.694077][ T6766] loop4: lost filesystem error report for type 5 error -117
[  128.694258][ T6766] Quota error (device loop4): write_blk: dquota write failed
[  128.701668][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  128.701688][    C0] EXT4-fs (loop4): initial error at time 1772564897: ext4_read_block_bitmap_nowait:483
[  128.701711][    C0] EXT4-fs (loop4): last error at time 1772564897: ext4_read_block_bitmap_nowait:483
[  128.819645][ T6766] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  128.852348][ T6766] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.866: Failed to acquire dquot type 0
[  128.886299][ T6766] loop4: lost filesystem error report for type 5 error -117
[  128.886448][ T6766] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.866: Freeing blocks not in datazone - block = 0, count = 4096
[  128.961805][ T6766] loop4: lost filesystem error report for type 5 error -117
[  128.962006][ T6766] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.866: Invalid inode bitmap blk 0 in block_group 0
[  128.982007][   T30] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0
[  128.993741][   T30] loop4: lost filesystem error report for type 5 error -117
[  129.042050][ T6766] loop4: lost filesystem error report for type 5 error -117
[  129.060035][ T6766] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  129.076162][ T6766] loop4: lost filesystem error report for type 5 error -117
[  129.076265][ T6766] EXT4-fs (loop4): 1 orphan inode deleted
[  129.096115][ T6766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.341340][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.6.870'.
[  129.433357][ T6766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.559675][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  129.702012][ T6794] syzkaller0: entered promiscuous mode
[  129.707732][ T6794] syzkaller0: entered allmulticast mode
[  129.829296][ T6802] loop6: detected capacity change from 0 to 512
[  129.921465][ T6802] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.876: bg 0: block 248: padding at end of block bitmap is not set
[  129.970964][ T6802] loop6: lost filesystem error report for type 5 error -117
[  129.971217][ T6802] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.876: Failed to acquire dquot type 1
[  129.989658][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  129.989678][    C0] EXT4-fs (loop6): last error at time 1772564898: ext4_validate_block_bitmap:441
[  130.052357][ T6802] loop6: lost filesystem error report for type 5 error -117
[  130.053643][ T6802] EXT4-fs (loop6): 1 truncate cleaned up
[  130.080798][ T6802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.107011][ T6802] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.128519][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.142298][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.378529][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.6.876'.
[  131.237653][ T6830] loop2: detected capacity change from 0 to 512
[  131.280109][ T6830] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  131.298733][ T6830] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  131.309180][ T6830] EXT4-fs (loop2): 1 truncate cleaned up
[  131.323270][ T6830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.352667][ T6833] syzkaller0: entered promiscuous mode
[  131.365213][ T6833] syzkaller0: entered allmulticast mode
[  131.378691][ T6830] tipc: Started in network mode
[  131.393737][ T6830] tipc: Node identity aaaaaaaaaa33, cluster identity 4711
[  131.414924][ T6830] tipc: Enabled bearer <eth:vlan1>, priority 10
[  131.430397][ T6835] loop5: detected capacity change from 0 to 512
[  131.470962][ T6835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.484587][ T6835] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.510482][ T6830] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  131.527604][ T6840] loop4: detected capacity change from 0 to 512
[  131.534932][ T6840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  131.541606][ T6830] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6830 comm=syz.2.885
[  131.556311][ T6840] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.566117][ T6835] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.887: corrupted inode contents
[  131.578263][ T6835] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.887: mark_inode_dirty error
[  131.578419][ T6840] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  131.606330][ T6835] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.887: corrupted inode contents
[  131.620000][ T6835] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.887: mark_inode_dirty error
[  131.623701][ T6840] EXT4-fs (loop4): orphan cleanup on readonly fs
[  131.650307][ T6840] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  131.659685][ T6842] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.887: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  131.659685][ T6842] 
[  131.665353][ T6840] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  131.692552][ T6840] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  131.707538][ T6840] EXT4-fs (loop4): Remounting filesystem read-only
[  131.714056][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  131.714072][    C0] EXT4-fs (loop4): initial error at time 1772564900: mb_free_blocks:2047: inode 12: block 14
[  131.714104][    C0] EXT4-fs (loop4): last error at time 1772564900: mb_free_blocks:2047: inode 12: block 14
[  131.740138][ T6835] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #18: comm syz.5.887: directory missing '.'
[  131.740821][ T6840] EXT4-fs (loop4): 1 truncate cleaned up
[  131.753079][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.757753][ T6840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.796412][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.830321][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.063531][ T6846] loop2: detected capacity change from 0 to 512
[  132.120260][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  132.177105][ T6846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  132.264141][ T6846] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.890: bad orphan inode 11
[  132.287948][ T6846] loop2: lost filesystem error report for type 5 error -117
[  132.289620][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  132.303560][    C0] EXT4-fs (loop2): initial error at time 1772564901: ext4_orphan_get:1417
[  132.312289][    C0] EXT4-fs (loop2): last error at time 1772564901: ext4_orphan_get:1417
[  132.328748][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.449153][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.484160][ T6863] loop2: detected capacity change from 0 to 512
[  132.499622][ T6863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  132.510706][ T6863] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.894: bad orphan inode 131083
[  132.521413][ T6863] loop2: lost filesystem error report for type 5 error -117
[  132.522066][ T6863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.541464][ T3376] tipc: Node number set to 10070698
[  132.547999][ T6863] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.894: path /169/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0
[  132.611096][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.655520][ T6869] loop2: detected capacity change from 0 to 512
[  132.669918][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  132.669932][   T28] audit: type=1400 audit(1772564901.629:806): avc:  denied  { append } for  pid=6868 comm="syz.2.896" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  132.784731][ T6875] syzkaller0: entered promiscuous mode
[  132.790534][ T6875] syzkaller0: entered allmulticast mode
[  132.843335][   T28] audit: type=1400 audit(1772564901.799:807): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  132.908800][ T6880] loop2: detected capacity change from 0 to 2048
[  132.949782][ T3301] Alternate GPT is invalid, using primary GPT.
[  132.956166][ T3301]  loop2: p2 p3 p7
[  132.962496][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.972061][ T5537] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5
[  133.038732][ T5537] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 1
[  133.952496][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  133.952980][ T5023] udevd[5023]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  133.963587][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  134.679661][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  134.918744][   T28] audit: type=1400 audit(1772564903.869:808): avc:  denied  { setopt } for  pid=6899 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  134.942032][ T6890] loop6: detected capacity change from 0 to 512
[  135.026073][ T6890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.061168][ T6890] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.481903][ T6921] syzkaller0: entered promiscuous mode
[  135.487707][ T6921] syzkaller0: entered allmulticast mode
[  135.496267][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.508696][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.519284][ T6921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.528552][ T6919] tipc: Resetting bearer <eth:syzkaller0>
[  135.538341][ T6919] tipc: Disabling bearer <eth:syzkaller0>
[  135.696495][ T4153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.732933][ T6926] syzkaller0: entered promiscuous mode
[  135.738809][ T6926] syzkaller0: entered allmulticast mode
[  135.767900][ T6930] netlink: 'syz.0.914': attribute type 10 has an invalid length.
[  135.786103][ T6930] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  135.807464][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'.
[  135.824609][ T6930] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.829142][ T6932] FAULT_INJECTION: forcing a failure.
[  135.829142][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.887168][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.5.917 Not tainted syzkaller #0 PREEMPT(full) 
[  135.887196][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  135.887214][ T6932] Call Trace:
[  135.887220][ T6932]  <TASK>
[  135.887228][ T6932]  __dump_stack+0x1d/0x30
[  135.887252][ T6932]  dump_stack_lvl+0x95/0xd0
[  135.887290][ T6932]  dump_stack+0x15/0x1b
[  135.887310][ T6932]  should_fail_ex+0x263/0x280
[  135.887400][ T6932]  should_fail+0xb/0x20
[  135.887419][ T6932]  should_fail_usercopy+0x1a/0x20
[  135.887498][ T6932]  _copy_from_user+0x1c/0xb0
[  135.887536][ T6932]  ___sys_sendmsg+0xc1/0x1e0
[  135.887574][ T6932]  __x64_sys_sendmsg+0xd4/0x160
[  135.887892][ T6932]  x64_sys_call+0x194c/0x3020
[  135.887916][ T6932]  do_syscall_64+0x12c/0x370
[  135.887937][ T6932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.887999][ T6932] RIP: 0033:0x7fdcfd81c799
[  135.888014][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.888032][ T6932] RSP: 002b:00007fdcfc26f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.888129][ T6932] RAX: ffffffffffffffda RBX: 00007fdcfda95fa0 RCX: 00007fdcfd81c799
[  135.888223][ T6932] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003
[  135.888235][ T6932] RBP: 00007fdcfc26f090 R08: 0000000000000000 R09: 0000000000000000
[  135.888247][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.888258][ T6932] R13: 00007fdcfda96038 R14: 00007fdcfda95fa0 R15: 00007ffd60bcec88
[  135.888284][ T6932]  </TASK>
[  135.906108][ T6930] bond_slave_0: entered promiscuous mode
[  136.036014][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'.
[  136.043467][ T6930] bond_slave_1: entered promiscuous mode
[  136.043488][ T6930] syz_tun: entered promiscuous mode
[  136.055304][ T6930] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  136.079085][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'.
[  136.090241][ T6930] bond1: (slave macvlan0): speed changed to 0 on port 1
[  136.099013][ T6930] bond1: (slave macvlan0): Enslaving as a backup interface with an up link
[  136.144918][ T6950] lo: left allmulticast mode
[  136.200886][ T6950] tunl0: left allmulticast mode
[  136.209321][ T6950] gre0: left allmulticast mode
[  136.215926][ T6950] gretap0: left allmulticast mode
[  136.222430][ T6950] erspan0: left allmulticast mode
[  136.239074][ T6950] ip_vti0: left allmulticast mode
[  136.258570][ T6950] ip6_vti0: left allmulticast mode
[  136.288960][ T6950] sit0: left allmulticast mode
[  136.294523][ T6959] loop4: detected capacity change from 0 to 8192
[  136.301092][ T6950] ip6tnl0: left allmulticast mode
[  136.307824][ T6950] ip6gre0: left allmulticast mode
[  136.314718][ T6950] syz_tun: left allmulticast mode
[  136.321707][ T6950] ip6gretap0: left allmulticast mode
[  136.329136][ T6950] bridge0: left allmulticast mode
[  136.372894][ T6950] vcan0: left allmulticast mode
[  136.401805][ T6950] bond0: left allmulticast mode
[  136.415188][ T6950] bond_slave_0: left allmulticast mode
[  136.473933][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'.
[  136.483236][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'.
[  136.555080][ T6950] bond_slave_1: left allmulticast mode
[  136.568650][ T6959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.927'.
[  136.581043][ T6950] team0: left allmulticast mode
[  136.586234][ T6950] team_slave_0: left allmulticast mode
[  136.594725][ T6968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.927'.
[  136.605543][ T6950] team_slave_1: left allmulticast mode
[  136.623693][ T6950] dummy0: left allmulticast mode
[  136.645718][ T6950] nlmon0: left allmulticast mode
[  136.696692][ T6950] caif0: left allmulticast mode
[  136.717919][ T6976] netlink: 72 bytes leftover after parsing attributes in process `syz.4.930'.
[  136.727880][ T6950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.766980][ T6973] syzkaller0: entered promiscuous mode
[  136.780926][ T6973] syzkaller0: entered allmulticast mode
[  136.836977][ T6976] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.846315][ T6976] netlink: 64 bytes leftover after parsing attributes in process `syz.4.930'.
[  136.860095][ T6976] loop4: detected capacity change from 0 to 1024
[  136.866859][ T6976] EXT4-fs: inline encryption not supported
[  137.057545][ T7003] 9p: Could not find request transport: xen
[  137.912257][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'.
[  137.922154][ T6976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.943011][   T28] audit: type=1400 audit(1772564906.899:809): avc:  denied  { map } for  pid=7001 comm="syz.6.935" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  137.969718][   T28] audit: type=1400 audit(1772564906.899:810): avc:  denied  { execute } for  pid=7001 comm="syz.6.935" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  138.113734][ T7017] FAULT_INJECTION: forcing a failure.
[  138.113734][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.128160][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.6.937 Not tainted syzkaller #0 PREEMPT(full) 
[  138.128262][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  138.128273][ T7017] Call Trace:
[  138.128279][ T7017]  <TASK>
[  138.128288][ T7017]  __dump_stack+0x1d/0x30
[  138.128345][ T7017]  dump_stack_lvl+0x95/0xd0
[  138.128364][ T7017]  dump_stack+0x15/0x1b
[  138.128380][ T7017]  should_fail_ex+0x263/0x280
[  138.128411][ T7017]  should_fail+0xb/0x20
[  138.128476][ T7017]  should_fail_usercopy+0x1a/0x20
[  138.128500][ T7017]  _copy_to_user+0x20/0xa0
[  138.128545][ T7017]  simple_read_from_buffer+0xb5/0x130
[  138.128563][ T7017]  proc_fail_nth_read+0x10e/0x150
[  138.128588][ T7017]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.128656][ T7017]  vfs_read+0x1ab/0x7f0
[  138.128745][ T7017]  ? __rcu_read_unlock+0x4e/0x70
[  138.128833][ T7017]  ? __fget_files+0x184/0x1c0
[  138.128851][ T7017]  ? mutex_lock+0x57/0x90
[  138.128873][ T7017]  ksys_read+0xdc/0x1a0
[  138.128951][ T7017]  __x64_sys_read+0x40/0x50
[  138.129018][ T7017]  x64_sys_call+0x2886/0x3020
[  138.129043][ T7017]  do_syscall_64+0x12c/0x370
[  138.129065][ T7017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.129086][ T7017] RIP: 0033:0x7f4e46f1cfce
[  138.129163][ T7017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  138.129181][ T7017] RSP: 002b:00007f4e459b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.129201][ T7017] RAX: ffffffffffffffda RBX: 00007f4e459b76c0 RCX: 00007f4e46f1cfce
[  138.129217][ T7017] RDX: 000000000000000f RSI: 00007f4e459b70a0 RDI: 0000000000000004
[  138.129299][ T7017] RBP: 00007f4e459b7090 R08: 0000000000000000 R09: 0000000000000000
[  138.129311][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.129325][ T7017] R13: 00007f4e471d6038 R14: 00007f4e471d5fa0 R15: 00007ffed39e4c48
[  138.129345][ T7017]  </TASK>
[  138.875701][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.915755][ T7032] loop2: detected capacity change from 0 to 512
[  138.928850][ T7032] EXT4-fs: Ignoring removed bh option
[  138.939950][ T7032] EXT4-fs: Ignoring removed mblk_io_submit option
[  138.948007][ T7032] EXT4-fs (loop2): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE
[  139.132874][ T5531] Bluetooth: hci0: Frame reassembly failed (-84)
[  139.618776][ T7053] loop6: detected capacity change from 0 to 8192
[  139.624659][ T7054] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  139.778537][ T5531] Bluetooth: hci1: Frame reassembly failed (-84)
[  139.799704][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  141.159626][ T5505] Bluetooth: hci0: command 0x1003 tx timeout
[  141.165688][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  141.817101][   T43] Bluetooth: hci1: command 0x1003 tx timeout
[  141.820703][ T3751] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  142.512826][ T7098] loop6: detected capacity change from 0 to 128
[  142.529383][ T7098] FAT-fs (loop6): bogus sectors per cluster 0
[  142.584338][ T7098] FAT-fs (loop6): Can't find a valid FAT filesystem
[  142.653101][ T7103] __nla_validate_parse: 1 callbacks suppressed
[  142.653115][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'.
[  142.671012][ T7103] loop4: detected capacity change from 0 to 128
[  142.678730][ T7103] FAT-fs (loop4): bogus sectors per cluster 0
[  142.684946][ T7103] FAT-fs (loop4): Can't find a valid FAT filesystem
[  143.070388][ T7107] 9pnet_fd: Insufficient options for proto=fd
[  143.138057][ T7114] bond0: (slave syz_tun): Releasing backup interface
[  143.148517][ T7114] syz_tun: left promiscuous mode
[  143.155398][ T7116] loop5: detected capacity change from 0 to 2048
[  143.185228][ T7116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.234209][ T7122] netlink: 'syz.0.968': attribute type 1 has an invalid length.
[  143.261816][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.293733][ T7114] bridge_slave_0: left allmulticast mode
[  143.299378][ T7114] bridge_slave_0: left promiscuous mode
[  143.319668][ T7122] netlink: 'syz.0.968': attribute type 4 has an invalid length.
[  143.327848][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.356418][ T7122] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.968'.
[  143.370514][ T7114] bridge_slave_1: left allmulticast mode
[  143.370571][ T7114] bridge_slave_1: left promiscuous mode
[  143.370725][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.371071][ T7131] loop5: detected capacity change from 0 to 128
[  143.391640][ T7114] bond0: (slave bond_slave_0): Releasing backup interface
[  143.392355][ T7114] bond_slave_0: left promiscuous mode
[  143.395826][ T7114] bond0: (slave bond_slave_1): Releasing backup interface
[  143.443967][ T7114] bond_slave_1: left promiscuous mode
[  143.454155][ T7114] team0: Port device team_slave_0 removed
[  143.462523][ T7114] team0: Port device team_slave_1 removed
[  143.469393][ T7114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.477298][ T7114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.477783][ T7131] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.497842][ T7114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.505748][ T7114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.505769][ T7131] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.525321][ T7114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.643892][ T7123] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  143.655403][ T7123] bond0 (unregistering): Released all slaves
[  143.675066][ T7127] team0: Mode changed to "roundrobin"
[  143.712076][ T5553] bond1: (slave macvlan0): speed changed to 0 on port 1
[  143.794471][ T5543] bond1: (slave macvlan0): link status definitely down, disabling slave
[  145.097443][   T28] audit: type=1400 audit(1772564914.049:811): avc:  denied  { create } for  pid=7150 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  145.203112][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'.
[  145.212652][   T28] audit: type=1400 audit(1772564914.049:812): avc:  denied  { write } for  pid=7150 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  145.263503][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.980'.
[  145.442241][ T7165] loop2: detected capacity change from 0 to 1024
[  145.469078][   T28] audit: type=1400 audit(1772564914.419:813): avc:  denied  { create } for  pid=7162 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  145.509766][ T7165] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  145.570925][ T7165] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.982: Invalid block bitmap block 0 in block_group 0
[  145.589758][ T7169] loop6: detected capacity change from 0 to 1024
[  145.619169][ T7169] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  145.639115][ T7165] fserror_report: 1 callbacks suppressed
[  145.639130][ T7165] loop2: lost filesystem error report for type 5 error -117
[  145.645833][ T7165] Quota error (device loop2): write_blk: dquota write failed
[  145.653224][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  145.653240][    C1] EXT4-fs (loop2): initial error at time 1772564914: ext4_read_block_bitmap_nowait:483
[  145.653288][    C1] EXT4-fs (loop2): last error at time 1772564914: ext4_read_block_bitmap_nowait:483
[  145.679671][ T7169] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  145.697469][ T3848] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.714694][ T7169] EXT4-fs error (device loop6): ext4_get_journal_inode:5863: inode #8: comm syz.6.983: inode has both inline data and extents flags
[  145.733045][ T7165] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  145.743282][ T7169] loop6: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117
[  145.743389][ T7169] EXT4-fs (loop6): no journal found
[  145.752435][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  145.752452][    C1] EXT4-fs (loop6): initial error at time 1772564914: ext4_get_journal_inode:5863: inode 8
[  145.752487][    C1] EXT4-fs (loop6): last error at time 1772564914: ext4_get_journal_inode:5863: inode 8
[  145.758093][ T7179] loop5: detected capacity change from 0 to 164
[  145.764631][ T5537] Bluetooth: hci0: Frame reassembly failed (-84)
[  145.780118][ T7165] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.982: Failed to acquire dquot type 0
[  145.807661][ T3401] ==================================================================
[  145.812044][ T7179] rock: directory entry would overflow storage
[  145.815730][ T3401] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages
[  145.829730][ T3401] 
[  145.830786][ T7179] rock: sig=0x4f50, size=4, remaining=3
[  145.832044][ T3401] read-write to 0xffff88810048a4b8 of 8 bytes by task 7179 on cpu 1:
[  145.832061][ T3401]  __filemap_add_folio+0x671/0x8b0
[  145.840866][ T7179] iso9660: Corrupted directory entry in block 4 of inode 1792
[  145.845625][ T3401]  filemap_add_folio+0x1d3/0x350
[  145.845649][ T3401]  __filemap_get_folio_mpol+0x326/0x680
[  145.868622][ T3401]  bdev_getblk+0x173/0x3f0
[  145.873043][ T3401]  __bread_gfp+0x51/0x240
[  145.877374][ T3401]  __isofs_iget+0x1b9/0x1110
[  145.881960][ T3401]  isofs_fill_super+0xde6/0x12f0
[  145.886895][ T3401]  get_tree_bdev_flags+0x291/0x300
[  145.892021][ T3401]  get_tree_bdev+0x1f/0x30
[  145.896444][ T3401]  isofs_get_tree+0x1c/0x30
[  145.900949][ T3401]  vfs_get_tree+0x57/0x1d0
[  145.905372][ T3401]  do_new_mount+0x288/0x8d0
[  145.909879][ T3401]  path_mount+0x4d0/0xbc0
[  145.914211][ T3401]  __se_sys_mount+0x28c/0x2e0
[  145.918890][ T3401]  __x64_sys_mount+0x67/0x80
[  145.923481][ T3401]  x64_sys_call+0x2d61/0x3020
[  145.928162][ T3401]  do_syscall_64+0x12c/0x370
[  145.932751][ T3401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.938637][ T3401] 
[  145.940948][ T3401] read to 0xffff88810048a4b8 of 8 bytes by task 3401 on cpu 0:
[  145.948481][ T3401]  nr_blockdev_pages+0x7e/0xd0
[  145.953240][ T3401]  si_meminfo+0x87/0xd0
[  145.957392][ T3401]  update_defense_level+0x47/0x5d0
[  145.962516][ T3401]  defense_work_handler+0x1f/0x80
[  145.967593][ T3401]  process_scheduled_works+0x4de/0x9e0
[  145.973061][ T3401]  worker_thread+0x581/0x770
[  145.977652][ T3401]  kthread+0x22a/0x280
[  145.981719][ T3401]  ret_from_fork+0x150/0x360
[  145.986308][ T3401]  ret_from_fork_asm+0x1a/0x30
[  145.991082][ T3401] 
[  145.993396][ T3401] value changed: 0x0000000000000000 -> 0x0000000000000001
[  146.000492][ T3401] 
[  146.002813][ T3401] Reported by Kernel Concurrency Sanitizer on:
[  146.008953][ T3401] CPU: 0 UID: 0 PID: 3401 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  146.018347][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.028406][ T3401] Workqueue: events_long defense_work_handler
[  146.034495][ T3401] ==================================================================
[  146.048004][ T7165] loop2: lost filesystem error report for type 5 error -117
[  146.056217][ T7165] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.982: Freeing blocks not in datazone - block = 0, count = 4096
[  146.079641][ T7165] loop2: lost filesystem error report for type 5 error -117
[  146.081652][ T7165] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.982: Invalid inode bitmap blk 0 in block_group 0
[  146.101582][ T5543] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  146.110637][ T5543] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:29: Failed to release dquot type 0
[  146.123383][ T7165] loop2: lost filesystem error report for type 5 error -117
[  146.123521][ T7165] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  146.130952][ T5543] loop2: lost filesystem error report for type 5 error -117
[  146.165073][ T7165] loop2: lost filesystem error report for type 5 error -117
[  146.187435][ T7165] EXT4-fs (loop2): 1 orphan inode deleted
[  146.213435][ T7165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.247027][ T7165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.248244][   T28] audit: type=1400 audit(1772564915.199:814): avc:  denied  { validate_trans } for  pid=7166 comm="syz.6.983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  146.321075][   T28] audit: type=1400 audit(1772564915.279:815): avc:  denied  { unlink } for  pid=3315 comm="syz-executor" name="file1" dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  147.799604][ T3751] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.799672][   T43] Bluetooth: hci0: command 0x1003 tx timeout
[  148.119677][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!