last executing test programs:

9m44.632471159s ago: executing program 32 (id=342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a0500000000000000000001000008090001007379"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

8m57.490501881s ago: executing program 33 (id=951):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xb2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

7m32.365373143s ago: executing program 34 (id=1886):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x89, 0x0, 0x7, 0x3, 0x86a1, 0xcba7, "d0540c3d0b3a87094881f60ee6294510acef8283cae122e49ca30da6647116ed6fa6dc6460efcf7b0bf895c03700d317e2beb3a427e87d076c4db384ec0fae82760d50053f54fc5097531a77b2682049740e781536097e33c4a606882a66d44bba449045c1bf9355f878dd75387e28e70fcf593878a974b0cfaab6d4a9de862b8aaceda56b2e1d8813"}}, 0x1a1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0xd72, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0xffffd000)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)

6m13.155493467s ago: executing program 35 (id=2959):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0xc040)

6m5.341519614s ago: executing program 36 (id=3240):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x24}, 0x94)

5m3.025377513s ago: executing program 37 (id=3830):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x20080, 0x0)
pread64(r1, &(0x7f0000000a40)=""/23, 0x17, 0x6) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', <r5=>0x0, 0x8, 0x8000, 0x1, 0x4, {{0xa, 0x4, 0x3, 0x11, 0x28, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_prespec={0x44, 0x14, 0xed, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, {@remote}]}]}}}}})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, 0x0, 0x108, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x90)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280050009000400000014000300"/50], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
socket(0x40000000015, 0x5, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async)
ioctl$FS_IOC_RESVSP(r8, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x401, 0x2000000})
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f00000005c0)={0x5, 0x0, [{0x3, 0x3, 0x15c, [0x8, 0x8000, 0x3ff, 0x8, 0x6, 0x11d, 0x9, 0x8]}, {0x40, 0x1dd1, 0x80a, [0x0, 0x2, 0xed, 0x401, 0x2, 0x4, 0x8778, 0x1]}, {0x4, 0x90c, 0x8, [0x3d6, 0x8, 0x3bc, 0xff, 0x7, 0xc, 0x9, 0x3]}, {0x1, 0x4, 0x4, [0x6, 0x79, 0x9, 0x6, 0x4, 0xf, 0x200, 0x5d05576]}, {0x7, 0x80000001, 0xbb, [0x4, 0x0, 0x2, 0x100, 0x6, 0x5, 0xe]}]}) (async)
syz_open_procfs(0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000080), 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a00000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

4m3.583357168s ago: executing program 38 (id=4511):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x301)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000002000010027bd7000fddbdf250a108080000000031600000014000200fc0200000000000000000000000000201400010020010000000000fffffffa0000000000080018004e224e24140003006c6f"], 0x60}}, 0x40080)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

4m2.167850349s ago: executing program 39 (id=4528):
io_setup(0x239f, &(0x7f0000000380)=<r0=>0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x300000000000, 0x0, 0x0, r1}])
r2 = open(0x0, 0xc8ac2, 0x2)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffc)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e93f39192beb2555000000000000000000000001aca510f82f0203d7db57418b0517c0befe74e76d6d08e24e92b1e321e9a051b24222bf99e706c8868fe28af243b50bce2240790ea6123029e0eb02b41a3415071fbc45b550afd008252e92"], 0x66)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syncfs(r4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x86, 0xfffffffffffffffe, 0x5, 0x4, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0x200b, 0x7ffffffffffffd, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0x5, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6})
mlock(&(0x7f0000325000/0x3000)=nil, 0x3000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r5}, 0x38)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
statx(r6, 0x0, 0x1000, 0x100, &(0x7f00000003c0))
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01003a0000000000000000612e00"], 0x0, 0x1d, 0x0, 0x8}, 0x28)

3m43.517263354s ago: executing program 40 (id=4838):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast2, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x401, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x67a01bcf906970c1, 0x81, 0x7}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f0000000300), 0x0, 0x8015)

3m35.010353789s ago: executing program 41 (id=4954):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0)
close(r6)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

2m27.806471758s ago: executing program 8 (id=6145):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x43, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0xfdff, 0x0, 0x8, 0x6, r0, 0x0, 0x0, 0x2000000000000}])

2m27.647874247s ago: executing program 8 (id=6151):
getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x60001, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xfffe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000000)
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x4800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9)
syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz82JwkAABeA3+5MNe0oJu6Vkr+vVk01YQsBaImhjViEjxiDoXUT4vsvjMW8GJjxVmWOYomb7fXP4fje/9v/jukmGn99s+rekTUqbpO8y/k01q/NsUbLrm5Tu82u+eBhrrZe3PrLcP/Z3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAaTgEAAP//LuQOEw==")
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
close_range(r0, 0xffffffffffffffff, 0x0)

2m27.202465773s ago: executing program 8 (id=6164):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=0x0], 0x30}}, 0x40020)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882)
ioctl$EVIOCSABS20(r3, 0x40044591, 0x0)
ppoll(&(0x7f0000000040)=[{r3, 0x162}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "011100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(r4, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc)
sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b473", 0x9}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010102}}}], 0x20}, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r0})

2m27.092832129s ago: executing program 8 (id=6166):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x4, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x4b, 0x100000, 0x3, 0x3}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r3, 0x80000001, 0x4)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x11}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x18}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020400090a00000000000000fcdbdf25030006000000000002004e23ac1414bb0000000000020000020001000000000008009e02010000a0030005000000000002"], 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x0, 0x8001, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x32, 0x2, 0x0, 0x0, "cbc12d1f1066686288b610276c7496c6fdea47d5a0d3912cf109cccf8d2f12099a369a2d057fca9ce2d3cd2c15258aa8abba6bec1f8c29ce9d1cba1240bd8512"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0)

2m25.743397106s ago: executing program 8 (id=6176):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
close(0xffffffffffffffff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000009000000020000000900000042000000", @ANYRES32, @ANYBLOB="0000d2615f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010067656e657665300000000000000000000c000540000000000000000114000000110001"], 0x8c}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x80)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
getsockname$tipc(r3, 0x0, 0x0)
close(r2)
write$nci(0xffffffffffffffff, 0x0, 0xf9)

2m25.278588483s ago: executing program 8 (id=6182):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x82)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9ddd62", 0x28, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0xe, 0x9b, 0x4, 0x4e24, 0x4e24, 0x1, 0x4, 0x0, 0x0, 0x1}}}}}}}, 0x0)

2m24.995364659s ago: executing program 42 (id=6182):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x82)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9ddd62", 0x28, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0xe, 0x9b, 0x4, 0x4e24, 0x4e24, 0x1, 0x4, 0x0, 0x0, 0x1}}}}}}}, 0x0)

2m22.439951125s ago: executing program 7 (id=6210):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xf, 0x68, &(0x7f0000000000)="7abfa9004257a54edb93670036669c", &(0x7f00000001c0)=""/104, 0x10001, 0x0, 0x8e, 0x8a, &(0x7f0000000240)="2ba15c8d0cfa0a5d3e37619a4329cf2d9f473d4f0882d4d00cfe553b1b364e08afae1588d33504b7e718a5d9c4a9ee87b64b317a8b5914b49dc20e203cc7ee7b6e4bab63ecd6f5abcbcfe0fe5a25b99454d8cb4505978f421d94b8752c3ce302e70814477b9e6b37c947c99f6e2735d5feb7e4cfc438454c3dce078f4cc4ce7bdc52396f91ebadd9bdecee7bbc84", &(0x7f0000000300)="67442d7a6cac3c8f3bbd7d2dcf8536746bff52008ba3e10ada9a05e3b57e45950aa2c7a9214347ceee8aaac17eb541a5ffa66cc3e7da7afcde4e8274d5237959b2ae5901fc48de57029b43822f55513e3d87474673ac5f892f4f4eb548ac2c6919eeb59319f991dd022ced20a46ab84b660ba489700618dcf09138aec930bdeb7a31a7b2ef2a63e4f33e", 0x4, 0x0, 0x7fffffff}, 0x50)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x82}}}}}}}, 0x0)

2m22.300126022s ago: executing program 7 (id=6214):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000280)='batadv0\x00')

2m21.947978882s ago: executing program 7 (id=6218):
r0 = gettid()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0)
renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x3})
timer_create(0x2, 0x0, &(0x7f0000044000))
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/fib_triestat\x00')
getdents(r2, &(0x7f0000001740)=""/4096, 0x1000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x8000)

2m21.825125849s ago: executing program 7 (id=6222):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r0, 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
rt_sigqueueinfo(r1, 0x36, &(0x7f0000000ac0)={0x1f, 0xc4, 0xff7ffffe})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000002c0)=0x1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000300)={0x0, 0x1, 0x1}, &(0x7f00000001c0)=[{}])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0xffffffffffffff00)

2m21.671394389s ago: executing program 7 (id=6227):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10)

2m20.93006843s ago: executing program 7 (id=6243):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)}}, 0x0)

2m20.865228485s ago: executing program 43 (id=6243):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)}}, 0x0)

1m42.615363209s ago: executing program 9 (id=6745):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000940)=[{0x0}, {&(0x7f00000007c0)=""/192, 0xc0}], 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r1)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x263}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x24048040)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x44, r4, 0x1, 0xfffffff5, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x70}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="94002f8008000100400000000800010000000000180003800c0005000700000000000c0002000203aaaaaaaaaaaa100003800c00050001000000000000000c0002000200aaaaaaaaaaaa08000100010400002c0003800500020001000000080004000000ff070800010001000000080004000800000008000100030000000c0002000201aa"], 0xb0}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
inotify_init1(0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r9=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r9, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x1, 0x0, 0x0, 0x0)

1m41.566624789s ago: executing program 9 (id=6758):
r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000400)='ns\x00')
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES64], 0x1, 0x2c6, &(0x7f0000000fc0)="$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")
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000006)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200898, 0x0, 0x0, 0x0, &(0x7f0000000600))
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x28c, 0xd, 0x8, 0x101, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x8}, [@generic="dc5f2237fd6cd572fda13f16d9b352490d256f98637bc8f4b091a922301c808e3b231f464e17ee698e8401ffb78337a5893d765efb29f265e3c99a5579ad62e3211371f320c1fe6f7be92bff3fdacf39ad896dd25ee87538e5cf0657bcc8feb4c34a46fa12a6d931c50f8094b2b3f706260f2d4c45358306ad977203a0", @nested={0x1f7, 0x85, 0x0, 0x1, [@nested={0x4, 0x14a}, @generic="7b0aa9271e3dc4d1a7d9e563e83e2c0e656888b4de299e10fc41fd61131b6b529a6bcf561211ab4058507eb9569303a29e63ec73d760416bb3ba369b984c9ab090eca7c5beace710fd0c34fcabbdf4f41048a227d198975a9a091a3a98504c0f8d1d9fca9ab0eae89ea15e65013539b4b05d8a65be08b21a972de28ce83da7bb4a7d22b841d61444ea3c6bceed7ed62b765a18d72061864839ce1616f082e5335ca973d5ca13198e3e472a80c668581c4b0da082086989c31e5119fbb43ce88c8a57dc0ad8b2bed7ec2fff70793f0211c68f72ac17208e3ece2d67930f1cdf8118d27833564a18de2b", @generic="d00e62736dc7", @typed={0xd, 0xa4, 0x0, 0x0, @str='\\-)(::-,\x00'}, @generic="c14aff4ac717d73e8595323a6f28e0dbdd865a6829883b2b86486a891b3a00813d5015f7230be2e2b4b24625e9badde95bdb5020e2bcad3af5c5909e7ab8116b174905624538a195b0def8e29e4eaf5aac5e078b216dc72a27d51a248513ba53ff7ebfaf1598970c18d03abefd4c1b48b3e478c046aa2c3df3539a33a36aba5ca4409dcb61e2b4bf3ee9b024ee7775080443329f3986c71e3fa88d0fd5946466f3557bbe6559ddc10ad47d5340fab13c32b1a9bdff87f91b20b1651120fa546f08dcbacb0577201bcf483d0fcd095187d95e33cdeba75779", @nested={0x4}, @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x50}, @typed={0x8, 0x142, 0x0, 0x0, @pid=r0}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x10}, 0x880)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x4})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="0800de15", 0x4}], 0x1, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0x18, 0x801}, 0x40800)

1m40.603366964s ago: executing program 9 (id=6771):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x488, 0x2, [@TCA_CGROUP_EMATCHES={0x484, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x289}, {0x800}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x1, 0x8, 0x7, 0x4106}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xff, 0x2, 0x4}, {0xffff, 0x7, 0x3, "d3578c077e7668"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x9e48, 0x2, 0x5}, {0x81, 0xa, 0x2, "341c3d50eac0f3740a66"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xb65, 0x1, 0x9}, {0x0, 0x8, 0x40, 0x5, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0xd}, {0xa668, 0xad, 0x7, 0x5}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffb, 0x8, 0xfff}, {0x1, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="9b26eb872941d1306b", @TCF_META_TYPE_VAR="7b844f312f4f04", @TCF_META_TYPE_VAR="190fde2b8665546dbae1", @TCF_META_TYPE_VAR="2b2cfce91e87cb1b5c", @TCF_META_TYPE_VAR="ce", @TCF_META_TYPE_VAR="f48f1c01fd3be3ff", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="53fe2fcda6", @TCF_META_TYPE_VAR="3e1fa045060e7a961c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x9, 0x2}, {0x7, 0x81}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xee, 0xdb}, {0x7ff, 0x10}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x7, 0x1}, {0x6, 0x57}}}]}}, @TCF_EM_CONTAINER={0x80, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x820}, "2b4c0bdd5026362c7106c5895cee6bfa2e973df9bf7ddf88a2bdd547500c520746d0dfefa447dcce62db356c20966a7056275796b8faabb9e46ddb3985ca0cce49809da082b103629ffd30127d0d09ee2f58df4c095865a57407709de9e8db54d81433e6a6d32edc84b55748ae15b279e24aee94"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff, 0x1, 0x7f}, {0x10001, 0x4, 0x3, 0x0, 0x8, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xd2d7, 0x2, 0x1}, {0x0, 0x1, 0x0, "f7"}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd5a, 0x8, 0x9}, {0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x260, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x2}, {0xd46, 0x8}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x3, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x2, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x0, 0x9, 0x1, "7e0d0273749a4761ff"}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x7f}, "45d63adc44b974c8c33ef762abb71cffa36431188837c04065f6cb0b09520fb29d4f7afbaf2a08703c6a86e2183ee67d821bf9012e787cb858a4ada950adc740025b85d2763c7125a8e110c537d06016edeef3e578ac93bdd62d4d2d4e00a73a59591f8fddcf82efc1110b7064cb177d75562eaafde19c9b34bae75f30056f81791a789d8183952002844435d7e9f795be661d1ea327ae235901dad614a191b117e8c8d54da84e5416d8e214f243ac64e0ea35bcbf3d75522d717721ac9c87905f69f074bc902510cc983e4075"}}, @TCF_EM_CONTAINER={0xf4, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x8000}, "7aabd921f1f976c8c1e1a9799584907853c4ab96f0ace6197736d254ef0849039d3fd7610605267f54ba314fd6b36245ec21018e09d06181d0de141f34afe94f7f02bea7a3a3be6766f1f093448daeef45f61d7135a49df0d23f783982d1100e4513a4dfec110b550d6bf1d852ec580615414e0ba2f04f4d2bd2f1d22ac64b4540ed37073b37d96f210f67c8236f8f4199e4a494c32997886be2b7012798255e70fb43347bbf811c282c42718d0d8c13d485056fa1e978b0c38da7050599ff97ede4fe21a60466b96f0ef8d3923aeecbec9f58fc83270272a25d253866f1093514f6bb74ff270f95"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3000}}]}]}}]}, 0x4b8}}, 0x40000c4)
accept4$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xe00, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, r9, 0x0)
r10 = getpid()
r11 = syz_pidfd_open(r10, 0x0)
process_madvise(r11, 0x0, 0x0, 0x8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)

1m37.730034368s ago: executing program 9 (id=6808):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000000})
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r2, 0x0)
r3 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x7437, 0x80})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000280)={0x0})
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e)
r6 = getpid()
sched_setscheduler(r6, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={<r7=>0x0, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0x5, 0xdc4, 0x2, 0xe3, 0x1, 0xffffffff, 0xc5}, &(0x7f00000000c0)=0x9c)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r10=>0x0}, &(0x7f0000000080)=0x8)
socket$inet6(0xa, 0x2, 0x3a)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x40, 0x4000, 0x6, 0x1000, r10}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r7, 0x2b95, 0x10}, &(0x7f00000002c0)=0xc)
openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x28102, 0x0)

1m36.803624281s ago: executing program 9 (id=6818):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x488, 0x2, [@TCA_CGROUP_EMATCHES={0x484, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x289}, {0x800}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x1, 0x8, 0x7, 0x4106}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xff, 0x2, 0x4}, {0xffff, 0x7, 0x3, "d3578c077e7668"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x9e48, 0x2, 0x5}, {0x81, 0xa, 0x2, "341c3d50eac0f3740a66"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xb65, 0x1, 0x9}, {0x0, 0x8, 0x40, 0x5, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0xd}, {0xa668, 0xad, 0x7, 0x5}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffb, 0x8, 0xfff}, {0x1, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="9b26eb872941d1306b", @TCF_META_TYPE_VAR="7b844f312f4f04", @TCF_META_TYPE_VAR="190fde2b8665546dbae1", @TCF_META_TYPE_VAR="2b2cfce91e87cb1b5c", @TCF_META_TYPE_VAR="ce", @TCF_META_TYPE_VAR="f48f1c01fd3be3ff", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="53fe2fcda6", @TCF_META_TYPE_VAR="3e1fa045060e7a961c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x9, 0x2}, {0x7, 0x81}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xee, 0xdb}, {0x7ff, 0x10}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x7, 0x1}, {0x6, 0x57}}}]}}, @TCF_EM_CONTAINER={0x80, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x820}, "2b4c0bdd5026362c7106c5895cee6bfa2e973df9bf7ddf88a2bdd547500c520746d0dfefa447dcce62db356c20966a7056275796b8faabb9e46ddb3985ca0cce49809da082b103629ffd30127d0d09ee2f58df4c095865a57407709de9e8db54d81433e6a6d32edc84b55748ae15b279e24aee94"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff, 0x1, 0x7f}, {0x10001, 0x4, 0x3, 0x0, 0x8, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xd2d7, 0x2, 0x1}, {0x0, 0x1, 0x0, "f7"}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd5a, 0x8, 0x9}, {0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x260, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x2}, {0xd46, 0x8}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x3, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x2, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x0, 0x9, 0x1, "7e0d0273749a4761ff"}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x7f}, "45d63adc44b974c8c33ef762abb71cffa36431188837c04065f6cb0b09520fb29d4f7afbaf2a08703c6a86e2183ee67d821bf9012e787cb858a4ada950adc740025b85d2763c7125a8e110c537d06016edeef3e578ac93bdd62d4d2d4e00a73a59591f8fddcf82efc1110b7064cb177d75562eaafde19c9b34bae75f30056f81791a789d8183952002844435d7e9f795be661d1ea327ae235901dad614a191b117e8c8d54da84e5416d8e214f243ac64e0ea35bcbf3d75522d717721ac9c87905f69f074bc902510cc983e4075"}}, @TCF_EM_CONTAINER={0xf4, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x8000}, "7aabd921f1f976c8c1e1a9799584907853c4ab96f0ace6197736d254ef0849039d3fd7610605267f54ba314fd6b36245ec21018e09d06181d0de141f34afe94f7f02bea7a3a3be6766f1f093448daeef45f61d7135a49df0d23f783982d1100e4513a4dfec110b550d6bf1d852ec580615414e0ba2f04f4d2bd2f1d22ac64b4540ed37073b37d96f210f67c8236f8f4199e4a494c32997886be2b7012798255e70fb43347bbf811c282c42718d0d8c13d485056fa1e978b0c38da7050599ff97ede4fe21a60466b96f0ef8d3923aeecbec9f58fc83270272a25d253866f1093514f6bb74ff270f95"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3000}}]}]}}]}, 0x4b8}}, 0x40000c4)
accept4$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xe00, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, r9, 0x0)
r10 = getpid()
r11 = syz_pidfd_open(r10, 0x0)
process_madvise(r11, 0x0, 0x0, 0x8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)

1m36.468078471s ago: executing program 9 (id=6822):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
close(r0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x2000000}, 0x0)

1m36.467555701s ago: executing program 44 (id=6822):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
close(r0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x2000000}, 0x0)

35.916285419s ago: executing program 4 (id=7914):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x490, 0x2, [@TCA_CGROUP_EMATCHES={0x48c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x289}, {0x800}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x1, 0x8, 0x7, 0x4106}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xff, 0x2, 0x4}, {0xffff, 0x7, 0x3, "d3578c077e7668"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x9e48, 0x2, 0x5}, {0x81, 0xa, 0x2, "341c3d50eac0f3740a66"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xb65, 0x1, 0x9}, {0x0, 0x8, 0x40, 0x5, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0xd}, {0xa668, 0xad, 0x7, 0x5}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffb, 0x8, 0xfff}, {0x1, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="9b26eb872941d1306b", @TCF_META_TYPE_VAR="7b844f312f4f04", @TCF_META_TYPE_VAR="190fde2b8665546dbae1", @TCF_META_TYPE_VAR="2b2cfce91e87cb1b5c", @TCF_META_TYPE_VAR="ce", @TCF_META_TYPE_VAR="f48f1c01fd3be3ff", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="53fe2fcda6", @TCF_META_TYPE_VAR="3e1fa045060e7a961c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xee, 0xdb}, {0x7ff, 0x10}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x7, 0x1}, {0x6, 0x57}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x5}, {0xfaeb, 0x3, 0x2, "eab881"}}}, @TCF_EM_CONTAINER={0x80, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x820}, "2b4c0bdd5026362c7106c5895cee6bfa2e973df9bf7ddf88a2bdd547500c520746d0dfefa447dcce62db356c20966a7056275796b8faabb9e46ddb3985ca0cce49809da082b103629ffd30127d0d09ee2f58df4c095865a57407709de9e8db54d81433e6a6d32edc84b55748ae15b279e24aee94"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff, 0x1, 0x7f}, {0x10001, 0x4, 0x3, 0x0, 0x8, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xd2d7, 0x2, 0x1}, {0x0, 0x1, 0x0, "f7"}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd5a, 0x8, 0x9}, {0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x260, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x2}, {0xd46, 0x8}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x3, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x2, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x0, 0x9, 0x1, "7e0d0273749a4761ff"}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x7f}, "45d63adc44b974c8c33ef762abb71cffa36431188837c04065f6cb0b09520fb29d4f7afbaf2a08703c6a86e2183ee67d821bf9012e787cb858a4ada950adc740025b85d2763c7125a8e110c537d06016edeef3e578ac93bdd62d4d2d4e00a73a59591f8fddcf82efc1110b7064cb177d75562eaafde19c9b34bae75f30056f81791a789d8183952002844435d7e9f795be661d1ea327ae235901dad614a191b117e8c8d54da84e5416d8e214f243ac64e0ea35bcbf3d75522d717721ac9c87905f69f074bc902510cc983e4075"}}, @TCF_EM_CONTAINER={0xf4, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x8000}, "7aabd921f1f976c8c1e1a9799584907853c4ab96f0ace6197736d254ef0849039d3fd7610605267f54ba314fd6b36245ec21018e09d06181d0de141f34afe94f7f02bea7a3a3be6766f1f093448daeef45f61d7135a49df0d23f783982d1100e4513a4dfec110b550d6bf1d852ec580615414e0ba2f04f4d2bd2f1d22ac64b4540ed37073b37d96f210f67c8236f8f4199e4a494c32997886be2b7012798255e70fb43347bbf811c282c42718d0d8c13d485056fa1e978b0c38da7050599ff97ede4fe21a60466b96f0ef8d3923aeecbec9f58fc83270272a25d253866f1093514f6bb74ff270f95"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3000}}]}]}}]}, 0x4c0}}, 0x40000c4)
accept4$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xe00, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, r9, 0x0)
r10 = getpid()
r11 = syz_pidfd_open(r10, 0x0)
process_madvise(r11, 0x0, 0x0, 0x8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)

32.856933363s ago: executing program 4 (id=7957):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000810)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200850, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@mblk_io_submit}, {@quota}, {@barrier}, {@init_itable}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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")

32.650902395s ago: executing program 4 (id=7962):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x41, 0x0, 0x5, 0x0})
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
write(0xffffffffffffffff, &(0x7f0000000100)="1214d9dd1dc302c34acefa8e90fb84866e891ecd55449c6b42160eab5b316cd647a01befc087214b97e6a7eeb2a5803bb66f8b3a71c764d38c359aa47f27eeaba5f40bf3bafb574ea100f3b9657485142669000dad4358b962bef3c9ec7d69d3c9098a403b161bc62b23b7d8eebad7de6eca2d8aa6365f81e43da672dbd5557bc4a252fb5ccb849f50d10e67dff811f85efe6dfbbbf8c5f8bcee165944bb9f9f5148e597163e970aa9c6b40c6709d73c959e21b9fa2ed099b8c4e98d96b406ab6b52ada30af67d5a37270a888dd9a40fa024c5b40f92e65b4553fbc91dfc73c08e94424f7377368d906cdadc1dad88409b76", 0xf2)
unshare(0x10000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

32.446195407s ago: executing program 4 (id=7966):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200088c1)
r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
process_madvise(r5, &(0x7f0000000040)=[{&(0x7f00000008c0)="b4bcdbf2", 0x4}], 0x1, 0xd, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv0}, {@nodelalloc}, {@max_batch_time}, {@nomblk_io_submit}], [{@flag='nomand'}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000001c0), 0x5b, 0x44002)
ptrace(0x10, r7)
ptrace$getregs(0xc, r7, 0x800005, &(0x7f0000000100)=""/62)
ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000180)=r7)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = syz_io_uring_setup(0x4e0, &(0x7f00000003c0)={0x0, 0x79af, 0x3180, 0x8001, 0x1ac}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000340)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x60}, 0x0, {0x0, r11}})
io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0)

32.072417768s ago: executing program 4 (id=7975):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x53, &(0x7f0000000000), 0x4)
r1 = epoll_create1(0x80000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10)
getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0xa0028000})
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x210884, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}})

31.191572649s ago: executing program 4 (id=8001):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000380)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_mpls={0x88, 0x1, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf8}, @TCA_MPLS_LABEL={0x4, 0x5, 0x199d2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x6, 0x88, 0x9c7}, 0x2}}, @TCA_MPLS_TTL={0x0, 0x7, 0x81}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x10)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
open_by_handle_at(r2, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ppoll(&(0x7f0000000040)=[{r3, 0x2008}], 0x1, &(0x7f00000000c0), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

31.189353739s ago: executing program 45 (id=8001):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000380)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_mpls={0x88, 0x1, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf8}, @TCA_MPLS_LABEL={0x4, 0x5, 0x199d2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x6, 0x88, 0x9c7}, 0x2}}, @TCA_MPLS_TTL={0x0, 0x7, 0x81}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x10)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
open_by_handle_at(r2, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ppoll(&(0x7f0000000040)=[{r3, 0x2008}], 0x1, &(0x7f00000000c0), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

18.075875897s ago: executing program 5 (id=8189):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6000000000000000, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x5437, 0x0)

17.955457955s ago: executing program 5 (id=8191):
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006a0000d5f7f959b26078946fc77200427d0827bd7000fedbdf250a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000845)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x5, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x40, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x14, 0xb65, 0x5, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x200, 0x9, 0x14d}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0xc, 0x80000001, 0xffff13d9}}]}]}}}]}, 0xb0}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)

17.897030588s ago: executing program 5 (id=8194):
r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x14) (async)
r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") (async)
r2 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0xd12}, 0x101000, 0x7, 0x8, 0x0, 0x4000000004001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000380)) (async)
r3 = socket$caif_stream(0x25, 0x1, 0x3)
poll(&(0x7f0000000100)=[{r3, 0x103a}], 0x1, 0x5) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ptrace$setregs(0xd, r0, 0x3ff, &(0x7f0000000200)="4d82c1c49c965f1a37f96d5462646c2bf4a795a276c1f1a9de047b3a2f2e7edb23164505bf4e47664c72fd15cd133f02111fe3ee81cc3a591e4a57d95ef8021cd5088c1618238ef8ffffffffffffff04bc6f28cce7105460e96317f1a129fb8e5ef69c82572442be")
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_VENDOR(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000fddbdf251d00000008001d00010000002b001f003be17d4a39fb5d74e278edb9cbc072a3ad27935bac5fb1b076274bc643ee6115673f23c13e1f8f0008001d0004000000"], 0x50}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) (async)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x3}, 0x20) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc456}}, {@nobh}]}, 0x0, 0x43d, &(0x7f0000000700)="$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") (async)
r8 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20)
ftruncate(r8, 0x2007ffc)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendfile(r8, r8, 0x0, 0x800000009) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r9=>0x0})
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x208000, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) (async)
r10 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r10, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) (async)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
close_range(r2, r11, 0x2)

17.767225995s ago: executing program 5 (id=8197):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
shutdown(r1, 0x1)
openat(r1, &(0x7f0000000080)='./file1\x00', 0x44a342, 0x5649043eff28d387)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100006000000000020"], 0x54, 0x1)
r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r2, &(0x7f0000000100)='map_files\x00')
fstat(r1, &(0x7f0000000bc0))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40), &(0x7f0000000c80)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00), 0x6000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e00))
getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', &(0x7f0000000e80), 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000080), 0xfe41)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002840))
statx(r0, &(0x7f00000028c0)='./file1\x00', 0x800, 0x100, &(0x7f0000002900))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002a00))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000340)='./file2\x00', 0xffffffffffffffff, r5)

17.447887884s ago: executing program 5 (id=8203):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

16.148037677s ago: executing program 5 (id=8217):
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.147904418s ago: executing program 46 (id=8217):
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.324922927s ago: executing program 3 (id=8405):
r0 = dup(0xffffffffffffffff)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x10, 0x2, 0x3b5}, &(0x7f0000000000), &(0x7f0000000280)) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000280), 0x5, 0x519, &(0x7f0000000ac0)="$eJzs3c1vG2UaAPDXdpImbbptd1ertittK3Wl7oIa50OoCSAhTsChEqISF5BKSNwQ4tRR7JQm6iGFWw8cEAgkxIE7fwEXeqKqhDiDuHJCraAECVBBRjP2tE5ip26V2I39+0lu5sP187xxntcz78x4AtC1jkf/pEIYDCF8HUI4UJld/4TjlR9rty9PRY9UKJfP/piKnxfNJ09N/t++EMJqCKE/hPDScyG8ntoct7i8MjeZz+cWq/PZ0vxCtri8cmp2fnImN5O7MDJ+emJifHhsdGLb2nr13Tevnvn8hb7Pfn3n5vX3vvwiSmuwuq62Hdup0vTecKhmWU8I4emdCNYGmWp7BtqdCA8lev/+EUI4Edf/gZCJ383m3NnRzICdVi6Xy3+U9zRavVoGOlY63gZOpYdCCJXpdHpoqLIN/8+wN50vFEuPny8sXZiubCsfDL3p87P53HB1X+Fg6E1F8yPx9L350Q3zYyHE28DvZwbi+aGpQn66tV0dsMG+DfX/S6ZS/83o3+nkgJ3X3C5/470EYPdaX/99TT4P6ATqGrqX+ofupf6he6l/6F4PW/+925wH0Ho+/6F7qX/oXvXqf38b8gBab6vP/8ZnAwG73ItnzkSPcnL9+/TF5aW5wsVT07ni3ND80tTQVGFxYWimUJiJr9mZv9/r5QuFhZEnwtKlbClXLGWLyyvn5gtLF0rn4uv6z+UMGcKj49Cxa9+mQgirTw7Ej1Dzka9WobOVy6lQcznwbBsvRQZaLNPuDghoG4f+oHs9wD6+y/+hQ9X5it67+vc1XPVMWNiRdIAWSG+18s6N1iUCtNzJI47/Qbcy/g/dy/g/dC/b+MBW4/9hq+/6N/4Pu9aW4/9ARxtscP+v/TX37hoOIfwthPBNpndPcq8voBOkf0hVt/9PHvjv4Ma1fanfMslhgrc+PvvhpclSaXEkWv5TvKwvhFD6qLp8tB35A42tH+FL6jSpYwCge63dvjyVPNavGdjRuLeerZyEsDl+T3Vssj/egtm7llp3rkJqm85dWL0SQjhcL36qer/zypGPvWuZTfH/Xv2ZqrxEnG9PfN/01sQ/UhP/PzXxjzYT9wFyhE51Lep/huvVXzqu6XC3/tb3P4PbdO5E0v8l51zXxk/6v0yD/u9YkzHe+OTteod344791pUQjtbtf5N4/XGsjfGj3E42Gf/mqy//q9G68qeV16kXPxFNZUvzC9ni8sqp2SSL8dMTE+PDY6MT2XiMOpuMVG/21OGvrjeKH7W/qkH7v9vU/oFqTv9vsv2///vGK8e3iP+/E/X//v4sl8ubfv/RomoOjzUZ/+fR719rtC6KPx19ztT5/Sd/f/Xe/2jZWJPxix8879phAHiEFJdX5ibz+dyiiQeZSL4zsfFzQnVnvO2pmuiYiZ7QwqD36zmMIMFud6/o250JAAAAAAAAAAAA0KxGZ/9e28bTidvdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATvBXAAAA//9tUdS+")
rmdir(&(0x7f0000000000)='./file0\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r2, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async, rerun: 64)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) (rerun: 64)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) (async, rerun: 64)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) (rerun: 64)
io_uring_enter(r3, 0x3f3c, 0x5c19, 0x0, 0x0, 0xffffffffffffff06)
io_uring_enter(r0, 0x3704, 0xf697, 0x14, &(0x7f0000000100)={[0x3]}, 0x3e1743ca9738d8ed) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @multicast2}}, 0x6, 0x6}, 0x90) (async, rerun: 32)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) (async)
r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0xd, 0x200)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x7}, 0x8) (async)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54)

2.324517217s ago: executing program 0 (id=8406):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x12, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x200b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1f41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x20}, 0x80866)

2.064350352s ago: executing program 0 (id=8407):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
nanosleep(0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500480601fe8000000000000000000000000000aafe8000000000000000000000000000aa2c03000000000000010900000000000000000007080000000000f80800050200060000000000000000034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020043907800101e0c160e021f0ac35dfa8da400000000000000"], 0x0)

1.967729508s ago: executing program 3 (id=8411):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
ioctl$sock_bt_hci(r0, 0x400448dc, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000240), 0x10000, 0x40000)
signalfd(r2, &(0x7f0000000340)={[0xbab]}, 0x8)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
recvmmsg(r3, &(0x7f00000009c0), 0x0, 0x60000042, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94)
socket(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r5)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x44011}, 0x4000000)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c)
syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xa, 0x7, 0x20, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x10, 0x5, 0xfffffff7}})

1.967172967s ago: executing program 1 (id=8412):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020b06050e020909430012000a00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

1.964070067s ago: executing program 0 (id=8413):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.914912681s ago: executing program 6 (id=8414):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a0000000300000008000000", @ANYRES32=r1], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYBLOB="a2545c46dedce509b11079f2025f61fe4e48a4a0e3bfeffcb02d8a2a11585fb1365dce03fb4284f495ee715a4ebaf1e441d20b1b09c7ff82b817315aba52308fd51586972f", @ANYBLOB="db51e729616c4738e3970dd99c86d3abe4c947b9479d3a8cd5052acf65ebbac5636b057b1cc44c17469a21c755732d1c98d852a170eae705b21f68d4f34a4bfcfc6c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8}, 0x94)
syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d)

1.895176492s ago: executing program 1 (id=8415):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)="dbf2e389a0a1f17c573360733f75d9f7fc4afec3f47647c66f970440170e0000009bd42715acc9c14649063df584f2722e1520878df47d3b0c5d90d64e34157da97f87593d8e327f1c34437541da4b833be7421f37598ac81f8c0ae67a1b20efe1611900"/112, 0x78}, {&(0x7f0000000180)="b1d933f157efe8c7a549bd5b795fdd41358317f805fb11c3e64ca5ad5bcdbc66cb4a1b9160e880a3c54e477358222ca576c24c65ca20c66607dc51ff859c8a4a1f56f8e71ff8cdfab1fbab0bc2af445dcac245c61115f29c3bc3e9dd56e9a5d10a42e390cf24c124", 0x68}, {&(0x7f0000000200)="14f3c9e48a2f5d75ae678aa6029c88101eff1fbcdf", 0x15}, {&(0x7f0000000240)="d4d207e771db306760248fe917d18492e430da68c235a44a491a999819548dfa7c9dbd09cf93f1cfeb01ded49822ee4f5ceac98e91778837efec0551ccf2682c615070039d7517f00395bd3d575ae8368cd3769175df7dc778274cd72cd3", 0x5e}, {&(0x7f00000002c0)="8f0804f820a3b763b135669d548fcfc67ddc585350c3e8e1ac17ba115d46ba6b1164df32298616e62967c4d0e58c2e9c94ebd39ad4001091709f333e532e9a6273f1670ed571ebbaa86e136e994656869494e4562b6c773a5cd0dd8e6d8327ba1b5ce71ad99bdb721cb0f9264e8162b833ed6f5af49ab8addb3bb58e6e45525de100756772440a6f855c3f7eb1c3b81cf9dada5185ce9ea874c99b92c7db89cf039ceccb06337ca479b34e9964de8f4ab65dce300bc60ccb9904ebc69d41052f21116e4816adfdf37009c89ae5dd4c5d4c60941b4de6bc60b4fb2d8cd049cc6b1d5df5c1b6aed5fabf7cd9c67aea8d1680", 0xf1}, {&(0x7f00000003c0)="6310b796e6b0a9fb10cd2ba3df2e2ea779f6943753193060cd748af149c2687738967cae60fc332a91cad7963514e0986a7efbf5766aece1260a0f7bb25b6a1c28ad7989153e874c5eda0969a9f17caae809158d3af0278c7be1611a7fa734dd4fb0bc6ef690b033a5f3d01ea6219fd29741979ee6a13dca45182583a06f222daae0c96dbf0619abff8272baa71cb538a3b1f5310db87dea11853e5859f3c45cb318f1663c42c20ac8cd541805797e9f9fcc41f7cba16f1154144153f0c902f3a85733014004fd6df05cc5af4384587f2cb7d1cf7bde62b688e308174513ada90b008b53dc15db", 0xe7}, {&(0x7f00000004c0)="6e1c810d85238662fbb02a99865cea45f733f6c35f924ac7cdd51a7c5b7a000000601e672e5c18ca71db25d0c77b7fa3b15b7e48f1644bc440aed0eb3284eec7f127ae5392fc6807817e8c34945618e027c160c3a55720a26ee7fac737df4a536b5fecb5f9e03418b10f465395e2349466dde03b675c27af813dda111cfb25f1d3f02283a0558107136da35d2d05c375b94dfbfe74f095802243b6a0b29a10ff8437e77fa24cb4c1c6f3d484d6ff382d1f06a67bb68a38b44266d140f6d019abe8b149c10299cd9fd3", 0xc9}, {&(0x7f00000005c0)="b15c501f53e8ade9d0a90c17079ec7a930dc947bce355bfd84005cfbf44fb23a2a4cee5214f99db3de4c1ae464ac0a306cd0fbdb41ea18bb7b20ed166f11af1b938c9596e567f75c5f0af1240b707ac6", 0x50}, {&(0x7f0000000640)="7314facfe28e65c5c66b47896815c04b292475beec983a2224950ae0119765bd85d2d36cec90071249b8b0b8988618623a243d88436fdfe3", 0x38}, {&(0x7f00000007c0)="7abac164a0e54c441f56855c06f69d2e63d48db2c9d76aeb1c6d9c5cf0ebaf97bff04ea6af603788bfd09a0bee61db96de450c0ee2e153bbe6b0e12669b356cce629cf610dbc1552ec", 0x3a}], 0xa}, 0x4c080)
r2 = accept(r1, &(0x7f0000000900)=@rc, &(0x7f0000000980)=0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r5, @ANYBLOB="080004006401010208000100e000000208000200ac14143d080002007fecae845f365d578d0000050800090600000000000000f7dded72f45986278db964e2838526b1f8e2857110d05f2c46051b9add1e80b039d269dc99a5ef85a9"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
connect$can_bcm(r2, &(0x7f00000009c0)={0x1d, r5}, 0x10)
r6 = memfd_secret(0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x72}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008881}, 0x40000)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

1.885469482s ago: executing program 0 (id=8416):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x28, 0x5, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05000000000000000000220000009cd88811e193b9f89bea0725025bca16eaeb3c37a8406e5cceef7ea0ce90235bdf8e50b8e5f40c31a81bc866df0926b3f621cd7076facefb34b10add02d4d198db529f154a5b5e9c788f912530fd86aa02e3de775d4e5183abc0c4f367e5829aa7fd4b2555b1916e11b9404a6178cbe906e7281ea200"], 0x14}}, 0x4000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203010000000000000003603a00d4180057825a6dd0146ddaae4ae0fd83527e602648e18da74a9c57"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
close(r5)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d400000000020103000000000000000007000002900003801400018008000100ac1414aa08000200ac1414aa0c000280050001002f000000060003400001000006000340000100002c000180140003000000000000000000000000000000000014000400fc00000000000000000000000000000014000180080001007f00000108000200ac1414bb060003400004000014000180080001006401010108000200ffffffff0e0006007369702d3230303ef30000000e000600736e6d705f747261700000000e0006007369702d3230303030000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300000000010000002046d04760db3843003e4126d2d9ff8526ba1bdcf89e000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, 0x0, 0x15, 0x0, @void}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r9 = dup(r8)
setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000340), 0x4)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000480)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0x16, 0x4303, 0x0, 0x0, 0x6e7, 0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)

1.776115529s ago: executing program 6 (id=8417):
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4040)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140040001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0x110}}, 0x0)

1.775645329s ago: executing program 1 (id=8418):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000700)={r0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000b80)={0x80000001, 0x1, 'client1\x00', 0x2, "2f5c6466adbd97ab", "3fa76afdac7c8f4fa8d8fb18e1af8d6d9cab2b12b512f17de4f03bbdf49798c0", 0x7, 0xfff})
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000240)=0x14)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_pidfd_open(0x0, 0x0)
ppoll(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
lstat(0x0, 0x0)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x2010, 0xffffffffffffffff, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x400d0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x8)
stat(&(0x7f0000000440)='./file0/file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xdffffffffffffffe, 0xffffffffffffffff, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r4], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8)
sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/445, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="ffffffffffffff7f04000000000000000180000000000000ff07000000000000bf00000000000000020000000000000009000000000000004f0000000000000001000100000000000000000000000000ffffffffffffff7f0700000000000000de9d0000be6b6e000101030200000000200017000100000028bd70002bbd70002dbd70002bbd7000ff01000006000000"], 0x25c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40)
openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0\x00', 0x81100, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000238d29e8b7045d64ca31aabd9f694392dbd7000ffdbdf250100000000000200000000000014001800"], 0x30}, 0x1, 0x0, 0x0, 0x8806}, 0x40)
r9 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r9, 0x1000006)

1.719364512s ago: executing program 6 (id=8420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100000000008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x26d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00')
exit(0x9)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/175, 0xaf}], 0x1, 0x1, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000)

1.671502585s ago: executing program 3 (id=8421):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140))

1.533872392s ago: executing program 3 (id=8422):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
getpid()
r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000000)=0x970)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x106, 0xfffffffd, 0x2b)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
pwrite64(r5, 0x0, 0x0, 0x1ffffffff000)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x38, 0x6a})

1.427959429s ago: executing program 2 (id=8423):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
nanosleep(0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500480601fe8000000000000000000000000000aafe8000000000000000000000000000aa2c03000000000000010900000000000000000007080000000000f80800050200060000000000000000034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020043907800101e0c160e021f0ac35dfa8da400000000000000"], 0x0)

1.384047241s ago: executing program 2 (id=8424):
socketpair(0x1, 0x1, 0x1, &(0x7f0000000640)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000140)='lo:\x96\xf3?o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x98\x15 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\xc60\xc3t\xc9\xe3-\xb2h\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\x12\xc4\x8fYT\"\xc1\xbd\xc7\xe3\x84i+9\x85\xd9%\x8a\x98\x92\x04\x9aU\x10\xaa=\"7\xce^V\xb2\xb7wr\x16d]Y\x9a\x18\x89\xc4\xac\xe2\xf8\xea\xc1))c#\\\x16\xdc\xe0Z)P\x834\xa4\f?\x00\xfc\xd9%\x8f\xd9\xcc\xaf\xe4\xdf\xce\x8d^\xb4\x8d\r`\xc2\xf6\xa1\xef\xc1nd\xb9\xc7\x02\xcf\xd8\x17%\x10\xd4\x06\xaf\xbe\x9cMY\x14\'B\xb2\x8f|?\xd4\x9c\x19Y\xce\xdaT\n\x7f\x0f \x84v\x8b=\x19E\xb1\xda7\xd2y:E\xc4\xd2j\xce\xaf\xdc\x81\b\xdf\"\x993e\x9d\x9d\x04\xec|')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
write$cgroup_int(r2, &(0x7f0000000080)=0xfffffffffffffb2f, 0x12)
r3 = signalfd4(r1, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000080)={0x40002, 0x0, 0x1}, 0x18)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x5, 0x8, 0x3ff, 0x24, @private0, @private2, 0x20, 0x1, 0x0, 0x9}})
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24000051)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x5}, 0x94)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000530404"], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x1, &(0x7f0000000640)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000140)='lo:\x96\xf3?o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x98\x15 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\xc60\xc3t\xc9\xe3-\xb2h\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\x12\xc4\x8fYT\"\xc1\xbd\xc7\xe3\x84i+9\x85\xd9%\x8a\x98\x92\x04\x9aU\x10\xaa=\"7\xce^V\xb2\xb7wr\x16d]Y\x9a\x18\x89\xc4\xac\xe2\xf8\xea\xc1))c#\\\x16\xdc\xe0Z)P\x834\xa4\f?\x00\xfc\xd9%\x8f\xd9\xcc\xaf\xe4\xdf\xce\x8d^\xb4\x8d\r`\xc2\xf6\xa1\xef\xc1nd\xb9\xc7\x02\xcf\xd8\x17%\x10\xd4\x06\xaf\xbe\x9cMY\x14\'B\xb2\x8f|?\xd4\x9c\x19Y\xce\xdaT\n\x7f\x0f \x84v\x8b=\x19E\xb1\xda7\xd2y:E\xc4\xd2j\xce\xaf\xdc\x81\b\xdf\"\x993e\x9d\x9d\x04\xec|') (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') (async)
write$cgroup_int(r2, &(0x7f0000000080)=0xfffffffffffffb2f, 0x12) (async)
signalfd4(r1, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000080)={0x40002, 0x0, 0x1}, 0x18) (async)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x8, 0x3ff, 0x24, @private0, @private2, 0x20, 0x1, 0x0, 0x9}}) (async)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24000051) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000530404"], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async)

1.306419965s ago: executing program 2 (id=8425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
set_mempolicy(0x3, 0x0, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0, 0x50, 0x1})
r1 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1})
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001880)={{r0}, "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"})
io_uring_enter(r1, 0x66ae, 0x4, 0x2, 0x0, 0x0)

1.199036722s ago: executing program 3 (id=8426):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.129465195s ago: executing program 3 (id=8427):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffbfc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/114, 0x72}], 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x190)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
shutdown(r1, 0xfffffffffffffffe)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x5}}, {0xe, 0x1b, [0x0, 0x0, 0x3, 0x9c28, 0x8]}}]}]}, 0x5c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
lsm_list_modules(0x0, 0x0, 0x0)

896.188819ms ago: executing program 2 (id=8428):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mount$cgroup(0x2000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f00000000c0)={[{}, {@subsystem='pids'}]})

831.852372ms ago: executing program 0 (id=8429):
syz_io_uring_setup(0xa, &(0x7f0000000140)={0x0, 0xdcba, 0x2, 0x5, 0x2089}, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000100)={[{@nombcache}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x80000001}}, {@nomblk_io_submit}, {@noblock_validity}, {@discard}]}, 0x3, 0x44f, &(0x7f0000000980)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x4, 0x8001, 0x9})
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002b00), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}]}, 0x34}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
r6 = socket$pppoe(0x18, 0x1, 0x0)
unshare(0x22020400)
connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000000)=0x1)
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1, 0x9450)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r5, 0xb1d, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x48840)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x801)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0x0, 0x4000)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4)

831.441593ms ago: executing program 2 (id=8430):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80, 0x0, 0x0, 0x0, r0}])
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f00, 0x3f00, 0x0, 0x0})
readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x3)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000280))
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0xb, 0x4})

831.070383ms ago: executing program 1 (id=8431):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x6}}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x80000000}, {0x8, 0x7ff}, {0xe, 0x7}, {0x2, 0x8}, {}]}, @enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x6, [{0xe, 0x2, 0x1}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x5f, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x3e]}}, &(0x7f0000000340)=""/162, 0x9e, 0xa2, 0x1, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x11, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41c400, 0x8)

639.395153ms ago: executing program 6 (id=8432):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6000000000000000, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCGPGRP(r2, 0x5437, 0x0)

342.491141ms ago: executing program 6 (id=8433):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400)
write$P9_RLERRORu(r0, &(0x7f00000001c0)=ANY=[], 0x15)

103.630254ms ago: executing program 1 (id=8434):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
nanosleep(0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500480601fe8000000000000000000000000000aafe8000000000000000000000000000aa2c03000000000000010900000000000000000007080000000000f80800050200060000000000000000034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020043907800101e0c160e021f0ac35dfa8da400000000000000"], 0x0)

102.677834ms ago: executing program 2 (id=8435):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040))
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x5c3, 0x4)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10120, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010121, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r4 = memfd_create(&(0x7f0000001e40)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97x\xdb\x8a\xc8\x8b\x9c\xffr\xeb\xf1\xac\xfb\'@\xeb\xeb\xbfwOK\ae\xd5}\xea\xf7#b\a\x9b\xea\xe0\xfa\xb5T\xe98\x80eR)X\xce\xeaW\x11h\x9f.\x8e\x10U\xc2,t\x82\xe0\x1c\xd7\x02\xc0UY\xce\xd9.\xeb\xa8\xbe\xfe\x02]\xb2\xa8\x84`&\xf4o\xabLY\x01#O\xa6&v<\xb5\x94\xb3\xda\xb2!w\xedF\xe3\xe1fz/\x10\xb3\xed\xdcZ\xb7\xd4\x8bob\x91W>~\x8b\xd3I\xe8 Fn\x02\x910\xef\xda\xae\xf8\xf3\xef\x9cUe\xebj\xe7\xa6\x14\xedl\xd8q\x83\x84\xa7Y\\\f/!\xeb\xebI\xf0\xbe\xa6\x9cK\x99U\x8e\x12F[\x87\x17\x93\x8c\x86\xfe]\xf7\x02\xf5\x86XA\xcd\xc3\xcd2\xc8\xd3\x82\xcfU\x05\xaf', 0x3)
write$binfmt_misc(r4, &(0x7f0000000740), 0xff67)
lseek(r4, 0x0, 0x3)
sigaltstack(&(0x7f0000000080)={0x0, 0x80000002}, 0x0)
sigaltstack(&(0x7f0000000080)={0x0, 0x80000000}, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000200), 0x5000000000000, 0x8540)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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")
socket$l2tp(0x2, 0x2, 0x73)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

45.530248ms ago: executing program 6 (id=8436):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e0000001000", 0x6}], 0x1}, 0x40)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffe85, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x88}}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0xfff, 0x9, 0x0, 0x89d, 0x64, "4415c2cb4653530680eb7810ba3100168c0826", 0x800, 0x43})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x2, "42341f9b1000007e4f00"})
syz_open_pts(r1, 0x103100)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0)

10.205489ms ago: executing program 1 (id=8437):
r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa)

0s ago: executing program 0 (id=8438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
set_mempolicy(0x3, 0x0, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0, 0x50, 0x1})
r1 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1})
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001880)={{r0}, "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"})
io_uring_enter(r1, 0x66ae, 0x4, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

_64_after_hwframe+0x77/0x7f
[  596.588776][T29388] RIP: 0033:0x7fbcbd76acb9
[  596.588793][T29388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.588816][T29388] RSP: 002b:00007fbcbc1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  596.588845][T29388] RAX: ffffffffffffffda RBX: 00007fbcbd9e5fa0 RCX: 00007fbcbd76acb9
[  596.588897][T29388] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003
[  596.588911][T29388] RBP: 00007fbcbc1c7090 R08: 0000000000000000 R09: 0000000000000000
[  596.588924][T29388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  596.588951][T29388] R13: 00007fbcbd9e6038 R14: 00007fbcbd9e5fa0 R15: 00007ffc2f47b868
[  596.588979][T29388]  </TASK>
[  596.834651][T29390] netlink: 'syz.3.7641': attribute type 1 has an invalid length.
[  596.843259][T29390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7641'.
[  596.923726][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.995622][T29398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7644'.
[  597.061310][T29401] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7645'.
[  597.099110][   T29] audit: type=1326 audit(589.513:92377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29396 comm="syz.4.7644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x0
[  597.196413][T29399] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  597.370423][T29413] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.7650'.
[  597.381880][T29413] netlink: zone id is out of range
[  597.387578][T29413] netlink: zone id is out of range
[  597.404004][T29413] netlink: zone id is out of range
[  597.409662][T29413] netlink: zone id is out of range
[  597.475652][T29420] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.7652'.
[  597.537842][T29423] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.7653'.
[  597.755767][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7656'.
[  597.865926][T29435] 9pnet_fd: Insufficient options for proto=fd
[  597.965754][T29443] netlink: 'syz.3.7662': attribute type 33 has an invalid length.
[  597.973763][T29443] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7662'.
[  598.040337][   T29] audit: type=1400 audit(590.392:92378): avc:  denied  { getopt } for  pid=29444 comm="syz.5.7663" lport=57048 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  598.152273][T29449] loop5: detected capacity change from 0 to 1024
[  598.180953][T29449] EXT4-fs: Ignoring removed bh option
[  598.219992][T29454] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.7664'.
[  598.261450][T29449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.286221][T29459] loop4: detected capacity change from 0 to 128
[  598.300245][T29465] FAULT_INJECTION: forcing a failure.
[  598.300245][T29465] name failslab, interval 1, probability 0, space 0, times 0
[  598.313044][T29465] CPU: 0 UID: 0 PID: 29465 Comm: syz.0.7669 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  598.313101][T29465] Tainted: [W]=WARN
[  598.313127][T29465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  598.313167][T29465] Call Trace:
[  598.313176][T29465]  <TASK>
[  598.313186][T29465]  __dump_stack+0x1d/0x30
[  598.313215][T29465]  dump_stack_lvl+0x95/0xd0
[  598.313240][T29465]  dump_stack+0x15/0x1b
[  598.313263][T29465]  should_fail_ex+0x263/0x280
[  598.313342][T29465]  should_failslab+0x8c/0xb0
[  598.313367][T29465]  kmem_cache_alloc_noprof+0x68/0x490
[  598.313391][T29465]  ? __kernfs_new_node+0x70/0x3c0
[  598.313420][T29465]  ? __rcu_read_unlock+0x4e/0x70
[  598.313449][T29465]  __kernfs_new_node+0x70/0x3c0
[  598.313479][T29465]  ? up_write+0x18/0x60
[  598.313499][T29465]  ? kernfs_activate+0x90/0xa0
[  598.313596][T29465]  ? kernfs_add_one+0x212/0x280
[  598.313646][T29465]  kernfs_new_node+0xd0/0x140
[  598.313678][T29465]  kernfs_create_link+0x70/0x130
[  598.313717][T29465]  sysfs_do_create_link_sd+0x6a/0x100
[  598.313791][T29465]  sysfs_create_link+0x51/0x70
[  598.313817][T29465]  device_add_class_symlinks+0x8e/0x1d0
[  598.313848][T29465]  device_add+0x359/0x770
[  598.313874][T29465]  netdev_register_kobject+0x109/0x230
[  598.313950][T29465]  ? register_netdevice+0x8b7/0xdd0
[  598.314078][T29465]  register_netdevice+0x8cf/0xdd0
[  598.314162][T29465]  ipvlan_link_new+0x298/0x5d0
[  598.314188][T29465]  ? __pfx_ipvlan_link_new+0x10/0x10
[  598.314264][T29465]  rtnl_newlink_create+0x1e4/0x650
[  598.314352][T29465]  ? security_capable+0x7b/0x90
[  598.314392][T29465]  ? netlink_ns_capable+0x86/0xa0
[  598.314452][T29465]  rtnl_newlink+0xf5b/0x1370
[  598.314498][T29465]  ? skb_network_protocol+0x329/0x420
[  598.314525][T29465]  ? __rcu_read_unlock+0x4e/0x70
[  598.314547][T29465]  ? avc_has_perm_noaudit+0xab/0x130
[  598.314747][T29465]  ? cred_has_capability+0x224/0x290
[  598.314811][T29465]  ? selinux_capable+0x31/0x40
[  598.314835][T29465]  ? security_capable+0x7b/0x90
[  598.314955][T29465]  ? ns_capable+0x7c/0xb0
[  598.314990][T29465]  ? __pfx_rtnl_newlink+0x10/0x10
[  598.315045][T29465]  rtnetlink_rcv_msg+0x64b/0x720
[  598.315112][T29465]  netlink_rcv_skb+0x123/0x220
[  598.315140][T29465]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  598.315207][T29465]  rtnetlink_rcv+0x1c/0x30
[  598.315236][T29465]  netlink_unicast+0x5c0/0x690
[  598.315264][T29465]  netlink_sendmsg+0x5c8/0x6f0
[  598.315296][T29465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  598.315401][T29465]  __sock_sendmsg+0x145/0x170
[  598.315444][T29465]  ____sys_sendmsg+0x31e/0x4a0
[  598.315545][T29465]  ___sys_sendmsg+0x195/0x1e0
[  598.315588][T29465]  __x64_sys_sendmsg+0xd4/0x160
[  598.315619][T29465]  x64_sys_call+0x17ba/0x3000
[  598.315647][T29465]  do_syscall_64+0xc0/0x2a0
[  598.315733][T29465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.315824][T29465] RIP: 0033:0x7effb6ffacb9
[  598.315844][T29465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.315864][T29465] RSP: 002b:00007effb5a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.315885][T29465] RAX: ffffffffffffffda RBX: 00007effb7275fa0 RCX: 00007effb6ffacb9
[  598.315951][T29465] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003
[  598.315967][T29465] RBP: 00007effb5a57090 R08: 0000000000000000 R09: 0000000000000000
[  598.316027][T29465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  598.316041][T29465] R13: 00007effb7276038 R14: 00007effb7275fa0 R15: 00007ffcd451ce08
[  598.316064][T29465]  </TASK>
[  598.683702][T29468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.700446][T29459] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  598.723719][T29468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.775914][T26271] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  598.809112][T29449] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.7665: Allocating blocks 497-513 which overlap fs metadata
[  598.836315][T29468] EXT4-fs (loop5): pa ffff8881079dcee0: logic 48, phys. 177, len 21
[  598.844557][T29468] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  598.902055][   T29] audit: type=1400 audit(591.206:92379): avc:  denied  { mounton } for  pid=29448 comm="syz.5.7665" path="/241/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  598.925832][T29449] cgroup: No subsys list or none specified
[  598.938369][ T3433] Bluetooth: hci0: Frame reassembly failed (-84)
[  599.085392][   T29] audit: type=1400 audit(591.375:92380): avc:  denied  { bind } for  pid=29496 comm="syz.3.7682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  599.209454][T29503] erspan0: entered promiscuous mode
[  599.225919][T29501] net_ratelimit: 19 callbacks suppressed
[  599.225998][T29501] netlink: zone id is out of range
[  599.237897][T29501] netlink: zone id is out of range
[  599.262222][T29501] netlink: zone id is out of range
[  599.272738][T29501] netlink: del zone limit has 8 unknown bytes
[  599.306259][T29508] siw: device registration error -23
[  599.343459][T29512] lo speed is unknown, defaulting to 1000
[  599.497525][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.551640][T29517] netlink: 'syz.3.7691': attribute type 12 has an invalid length.
[  599.696907][T29540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  599.704310][T29540] IPv6: NLM_F_CREATE should be set when creating new route
[  599.711563][T29540] IPv6: NLM_F_CREATE should be set when creating new route
[  599.724288][   T29] audit: type=1326 audit(591.964:92381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29539 comm="syz.5.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f68bacb9 code=0x7ffc0000
[  599.730019][T29544] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  599.760846][T29546] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  599.781254][   T29] audit: type=1326 audit(592.001:92382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29539 comm="syz.5.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f68bacb9 code=0x7ffc0000
[  599.804661][   T29] audit: type=1326 audit(592.001:92383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29539 comm="syz.5.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f68bacb9 code=0x7ffc0000
[  599.827859][   T29] audit: type=1326 audit(592.001:92384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29539 comm="syz.5.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f68bacb9 code=0x7ffc0000
[  600.168792][T29571] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29571 comm=syz.0.7709
[  600.367555][   T29] kauditd_printk_skb: 52 callbacks suppressed
[  600.367586][   T29] audit: type=1400 audit(592.572:92437): avc:  denied  { map } for  pid=29580 comm="syz.0.7713" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  600.410512][T29581] netem: incorrect gi model size
[  600.415601][T29581] netem: change failed
[  600.693664][T29590] batman_adv: batadv0: Adding interface: dummy0
[  600.700066][T29590] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.768335][T29590] batman_adv: batadv0: Interface activated: dummy0
[  600.781869][T29593] batadv0: mtu less than device minimum
[  600.788778][T29593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  600.799847][T29593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  600.810804][T29593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  600.821740][T29593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  600.832916][T29593] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  601.126396][T29604] lo speed is unknown, defaulting to 1000
[  601.146662][ T3560] Bluetooth: hci0: command 0x1003 tx timeout
[  601.152734][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  601.205415][T29608] bond1: entered allmulticast mode
[  601.222559][T29608] 8021q: adding VLAN 0 to HW filter on device bond1
[  601.273150][T29613] lo speed is unknown, defaulting to 1000
[  601.456780][T29622] FAULT_INJECTION: forcing a failure.
[  601.456780][T29622] name failslab, interval 1, probability 0, space 0, times 0
[  601.469677][T29622] CPU: 1 UID: 0 PID: 29622 Comm: syz.5.7729 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  601.469738][T29622] Tainted: [W]=WARN
[  601.469747][T29622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  601.469847][T29622] Call Trace:
[  601.469856][T29622]  <TASK>
[  601.469866][T29622]  __dump_stack+0x1d/0x30
[  601.469929][T29622]  dump_stack_lvl+0x95/0xd0
[  601.469960][T29622]  dump_stack+0x15/0x1b
[  601.470017][T29622]  should_fail_ex+0x263/0x280
[  601.470047][T29622]  should_failslab+0x8c/0xb0
[  601.470077][T29622]  __kmalloc_noprof+0xb8/0x580
[  601.470149][T29622]  ? security_prepare_creds+0x52/0x120
[  601.470193][T29622]  security_prepare_creds+0x52/0x120
[  601.470289][T29622]  prepare_creds+0x37e/0x550
[  601.470319][T29622]  copy_creds+0x8f/0x340
[  601.470344][T29622]  ? dup_task_struct+0x60b/0x940
[  601.470481][T29622]  copy_process+0x639/0x1f10
[  601.470511][T29622]  ? 0xffffffff81000000
[  601.470537][T29622]  kernel_clone+0x16b/0x5b0
[  601.470565][T29622]  ? vfs_write+0x86e/0x9f0
[  601.470630][T29622]  __x64_sys_clone+0x143/0x180
[  601.470670][T29622]  x64_sys_call+0x12d0/0x3000
[  601.470722][T29622]  do_syscall_64+0xc0/0x2a0
[  601.470759][T29622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.470789][T29622] RIP: 0033:0x7f23f68bacb9
[  601.470810][T29622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.470850][T29622] RSP: 002b:00007f23f52f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  601.470890][T29622] RAX: ffffffffffffffda RBX: 00007f23f6b36090 RCX: 00007f23f68bacb9
[  601.470909][T29622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000
[  601.470927][T29622] RBP: 00007f23f52f6090 R08: 0000000000000000 R09: 0000000000000000
[  601.470944][T29622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  601.470962][T29622] R13: 00007f23f6b36128 R14: 00007f23f6b36090 R15: 00007ffe398b6048
[  601.471033][T29622]  </TASK>
[  601.711154][T29626] loop5: detected capacity change from 0 to 128
[  601.727843][T29626] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  601.777519][T29631] __nla_validate_parse: 11 callbacks suppressed
[  601.777620][T29631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7733'.
[  601.817316][T25234] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  601.871381][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7735'.
[  601.955673][T29644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7739'.
[  601.964683][T29644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7739'.
[  602.036563][T29654] FAULT_INJECTION: forcing a failure.
[  602.036563][T29654] name failslab, interval 1, probability 0, space 0, times 0
[  602.049334][T29654] CPU: 0 UID: 0 PID: 29654 Comm: syz.5.7742 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  602.049397][T29654] Tainted: [W]=WARN
[  602.049405][T29654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  602.049419][T29654] Call Trace:
[  602.049425][T29654]  <TASK>
[  602.049435][T29654]  __dump_stack+0x1d/0x30
[  602.049520][T29654]  dump_stack_lvl+0x95/0xd0
[  602.049558][T29654]  dump_stack+0x15/0x1b
[  602.049581][T29654]  should_fail_ex+0x263/0x280
[  602.049609][T29654]  should_failslab+0x8c/0xb0
[  602.049723][T29654]  __kvmalloc_node_noprof+0x148/0x680
[  602.049758][T29654]  ? file_tty_write+0x1a3/0x690
[  602.049802][T29654]  ? mutex_trylock+0x81/0xc0
[  602.049908][T29654]  file_tty_write+0x1a3/0x690
[  602.050018][T29654]  tty_write+0x25/0x30
[  602.050050][T29654]  do_iter_readv_writev+0x4fd/0x5a0
[  602.050077][T29654]  vfs_writev+0x2e1/0x900
[  602.050164][T29654]  do_writev+0xe9/0x210
[  602.050199][T29654]  __x64_sys_writev+0x45/0x50
[  602.050272][T29654]  x64_sys_call+0x1ba5/0x3000
[  602.050305][T29654]  do_syscall_64+0xc0/0x2a0
[  602.050335][T29654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.050361][T29654] RIP: 0033:0x7f23f68bacb9
[  602.050415][T29654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.050511][T29654] RSP: 002b:00007f23f5317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  602.050533][T29654] RAX: ffffffffffffffda RBX: 00007f23f6b35fa0 RCX: 00007f23f68bacb9
[  602.050569][T29654] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  602.050582][T29654] RBP: 00007f23f5317090 R08: 0000000000000000 R09: 0000000000000000
[  602.050597][T29654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.050614][T29654] R13: 00007f23f6b36038 R14: 00007f23f6b35fa0 R15: 00007ffe398b6048
[  602.050660][T29654]  </TASK>
[  602.364202][   T29] audit: type=1326 audit(594.433:92438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.428939][   T29] audit: type=1326 audit(594.471:92439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.452737][   T29] audit: type=1326 audit(594.471:92440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.476238][   T29] audit: type=1326 audit(594.471:92441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.499944][   T29] audit: type=1326 audit(594.471:92442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.523158][   T29] audit: type=1326 audit(594.471:92443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.546879][   T29] audit: type=1326 audit(594.471:92444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.570748][   T29] audit: type=1326 audit(594.471:92445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcbd72b58e code=0x7ffc0000
[  602.596025][   T29] audit: type=1326 audit(594.471:92446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.4.7746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbd76acb9 code=0x7ffc0000
[  602.672425][T29676] syzkaller0: entered promiscuous mode
[  602.678210][T29676] syzkaller0: entered allmulticast mode
[  602.692760][T29683] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7753'.
[  602.702142][T10638] Bluetooth: hci0: Frame reassembly failed (-84)
[  602.795190][T29692] 9p: Bad value for 'rfdno'
[  602.805584][T29686] loop4: detected capacity change from 0 to 8192
[  602.824789][T23850]  loop4: p1 p2 p3 p4
[  602.829773][T23850] loop4: p1 start 2130708480 is beyond EOD, truncated
[  602.838054][T23850] loop4: p2 size 8388608 extends beyond EOD, truncated
[  602.846836][T23850] loop4: p3 start 134217728 is beyond EOD, truncated
[  602.853651][T23850] loop4: p4 size 262144 extends beyond EOD, truncated
[  602.880672][T29686]  loop4: p1 p2 p3 p4
[  602.884919][T29686] loop4: p1 start 2130708480 is beyond EOD, truncated
[  602.891885][T29686] loop4: p2 size 8388608 extends beyond EOD, truncated
[  602.905132][T29686] loop4: p3 start 134217728 is beyond EOD, truncated
[  602.912962][T29686] loop4: p4 size 262144 extends beyond EOD, truncated
[  602.962537][T29690] loop5: detected capacity change from 0 to 512
[  603.083904][T29690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7755'.
[  603.457611][T29715] loop5: detected capacity change from 0 to 128
[  603.472290][T29715] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  603.498487][T29715] FAT-fs (loop5): error, clusters badly computed (0 != 1)
[  603.505782][T29715] FAT-fs (loop5): Filesystem has been set read-only
[  603.523007][T29717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.534644][T29717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.539056][T29715] FAT-fs (loop5): error, clusters badly computed (1 != 2)
[  603.590052][T29715] FAT-fs (loop5): error, clusters badly computed (2 != 3)
[  603.601414][T29715] FAT-fs (loop5): error, clusters badly computed (3 != 4)
[  603.609034][T29715] FAT-fs (loop5): error, clusters badly computed (4 != 5)
[  603.619293][T29721] loop4: detected capacity change from 0 to 512
[  603.625935][T29715] FAT-fs (loop5): error, clusters badly computed (5 != 6)
[  603.641808][T29715] FAT-fs (loop5): error, clusters badly computed (6 != 7)
[  603.649214][T29715] FAT-fs (loop5): error, clusters badly computed (7 != 8)
[  603.657311][T29715] FAT-fs (loop5): error, clusters badly computed (8 != 9)
[  603.665782][T29715] FAT-fs (loop5): error, clusters badly computed (9 != 10)
[  603.676422][T29721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.716058][T25234] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  603.727493][T26271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.758288][T29726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7768'.
[  603.878596][T29736] 9p: Unknown Cache mode or invalid value fÏ�·]ˆŽ÷J­§¶Ö3|TxÉÆ&‡ˆ|²³¦LCª4x&¶ˆ¨ï
ý�'–ÉÛ¨3ª—Éd4¾JT½ŽòÝ»oW‹ÕCÄÀ¯ó9Å…¥
[  603.878596][T29736] ÝÝüPÌF
[  604.160397][T29742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.180838][T29742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.264674][T29755] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.7779'.
[  604.309415][T29753] vhci_hcd vhci_hcd.4: default hub control req: 8016 v4303 i0000 l0
[  604.334290][T29753] FAULT_INJECTION: forcing a failure.
[  604.334290][T29753] name failslab, interval 1, probability 0, space 0, times 0
[  604.351328][T29753] CPU: 1 UID: 0 PID: 29753 Comm: syz.3.7778 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  604.351382][T29753] Tainted: [W]=WARN
[  604.351443][T29753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  604.351460][T29753] Call Trace:
[  604.351469][T29753]  <TASK>
[  604.351479][T29753]  __dump_stack+0x1d/0x30
[  604.351507][T29753]  dump_stack_lvl+0x95/0xd0
[  604.351571][T29753]  dump_stack+0x15/0x1b
[  604.351592][T29753]  should_fail_ex+0x263/0x280
[  604.351614][T29753]  should_failslab+0x8c/0xb0
[  604.351640][T29753]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  604.351678][T29753]  ? __alloc_skb+0x2f0/0x4b0
[  604.351701][T29753]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  604.351801][T29753]  __alloc_skb+0x2f0/0x4b0
[  604.351825][T29753]  ? __alloc_skb+0x219/0x4b0
[  604.351851][T29753]  netlink_alloc_large_skb+0xbf/0xf0
[  604.351878][T29753]  netlink_sendmsg+0x40c/0x6f0
[  604.351954][T29753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  604.352040][T29753]  __sock_sendmsg+0x145/0x170
[  604.352105][T29753]  ____sys_sendmsg+0x31e/0x4a0
[  604.352148][T29753]  ___sys_sendmsg+0x195/0x1e0
[  604.352198][T29753]  __x64_sys_sendmsg+0xd4/0x160
[  604.352232][T29753]  x64_sys_call+0x17ba/0x3000
[  604.352278][T29753]  do_syscall_64+0xc0/0x2a0
[  604.352311][T29753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.352396][T29753] RIP: 0033:0x7f3bd9c1acb9
[  604.352413][T29753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.352481][T29753] RSP: 002b:00007f3bd8677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.352508][T29753] RAX: ffffffffffffffda RBX: 00007f3bd9e95fa0 RCX: 00007f3bd9c1acb9
[  604.352523][T29753] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000b
[  604.352536][T29753] RBP: 00007f3bd8677090 R08: 0000000000000000 R09: 0000000000000000
[  604.352549][T29753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.352635][T29753] R13: 00007f3bd9e96038 R14: 00007f3bd9e95fa0 R15: 00007ffecd0cd008
[  604.352657][T29753]  </TASK>
[  604.574612][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7782'.
[  604.755806][T29763] vhci_hcd vhci_hcd.4: default hub control req: 8016 v4303 i0000 l0
[  604.815446][T29774] net_ratelimit: 22 callbacks suppressed
[  604.815468][T29774] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  604.908997][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  605.166651][T29798] loop4: detected capacity change from 0 to 1024
[  605.188390][T29798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.270804][T29798] bond2: entered allmulticast mode
[  605.286441][T29798] 8021q: adding VLAN 0 to HW filter on device bond2
[  605.332530][T26271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.367784][T29807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7799'.
[  605.581180][T29827] siw: device registration error -23
[  605.639572][T29831] loop4: detected capacity change from 0 to 256
[  605.698477][T29835] sctp: [Deprecated]: syz.1.7810 (pid 29835) Use of struct sctp_assoc_value in delayed_ack socket option.
[  605.698477][T29835] Use struct sctp_sack_info instead
[  605.723748][   T29] kauditd_printk_skb: 211 callbacks suppressed
[  605.723772][   T29] audit: type=1326 audit(597.586:92658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29832 comm="syz.1.7810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  605.777482][T29842] loop5: detected capacity change from 0 to 136
[  605.808486][T29842] iso9660: Unknown parameter 'checkmap'
[  605.818418][   T29] audit: type=1326 audit(597.586:92659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29832 comm="syz.1.7810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  605.841552][   T29] audit: type=1400 audit(597.642:92660): avc:  denied  { map } for  pid=29841 comm="syz.4.7816" path="socket:[103205]" dev="sockfs" ino=103205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  605.957391][   T29] audit: type=1400 audit(597.754:92661): avc:  denied  { bind } for  pid=29851 comm="syz.3.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  605.976720][   T29] audit: type=1400 audit(597.754:92662): avc:  denied  { name_bind } for  pid=29851 comm="syz.3.7821" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  605.978425][T10630] Bluetooth: hci0: Frame reassembly failed (-84)
[  605.999793][   T29] audit: type=1400 audit(597.754:92663): avc:  denied  { node_bind } for  pid=29851 comm="syz.3.7821" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  606.064064][T29860] FAULT_INJECTION: forcing a failure.
[  606.064064][T29860] name failslab, interval 1, probability 0, space 0, times 0
[  606.076821][T29860] CPU: 0 UID: 0 PID: 29860 Comm: syz.5.7823 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  606.076929][T29860] Tainted: [W]=WARN
[  606.076939][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  606.076956][T29860] Call Trace:
[  606.076974][T29860]  <TASK>
[  606.076984][T29860]  __dump_stack+0x1d/0x30
[  606.077018][T29860]  dump_stack_lvl+0x95/0xd0
[  606.077099][T29860]  dump_stack+0x15/0x1b
[  606.077142][T29860]  should_fail_ex+0x263/0x280
[  606.077171][T29860]  should_failslab+0x8c/0xb0
[  606.077201][T29860]  kmem_cache_alloc_noprof+0x68/0x490
[  606.077232][T29860]  ? skb_clone+0x151/0x1f0
[  606.077278][T29860]  skb_clone+0x151/0x1f0
[  606.077305][T29860]  dev_queue_xmit_nit+0x13e/0x510
[  606.077364][T29860]  ? validate_xmit_xfrm+0x43/0x7a0
[  606.077416][T29860]  dev_hard_start_xmit+0xd3/0x3e0
[  606.077449][T29860]  __dev_queue_xmit+0xdb1/0x1f20
[  606.077557][T29860]  ? __dev_queue_xmit+0x148/0x1f20
[  606.077591][T29860]  ? skb_release_data+0x34a/0x370
[  606.077675][T29860]  __bpf_redirect+0x67f/0x990
[  606.077712][T29860]  bpf_clone_redirect+0x20c/0x290
[  606.077751][T29860]  bpf_prog_3e1cbbed0c4acd81+0x5f/0x68
[  606.077777][T29860]  ? count_memcg_events+0x11f/0x200
[  606.077832][T29860]  ? __rcu_read_unlock+0x4e/0x70
[  606.077858][T29860]  ? handle_mm_fault+0x26be/0x3030
[  606.077899][T29860]  ? mt_find+0x291/0x3b0
[  606.077940][T29860]  ? __rcu_read_unlock+0x4e/0x70
[  606.077991][T29860]  ? is_bpf_text_address+0x141/0x160
[  606.078022][T29860]  ? kernel_text_address+0x94/0xb0
[  606.078045][T29860]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  606.078083][T29860]  ? __kernel_text_address+0xd/0x30
[  606.078140][T29860]  ? unwind_get_return_address+0x16/0x40
[  606.078167][T29860]  ? find_stack+0xda/0x1d0
[  606.078284][T29860]  ? read_tsc+0x9/0x20
[  606.078314][T29860]  ? ktime_get+0x1eb/0x210
[  606.078350][T29860]  bpf_test_run+0x29d/0x620
[  606.078384][T29860]  ? _raw_spin_lock_irqsave+0x57/0xb0
[  606.078487][T29860]  ? bpf_test_run+0x19b/0x620
[  606.078530][T29860]  bpf_prog_test_run_skb+0x9ce/0xf50
[  606.078608][T29860]  ? __fget_files+0x184/0x1c0
[  606.078640][T29860]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  606.078674][T29860]  bpf_prog_test_run+0x204/0x340
[  606.078705][T29860]  __sys_bpf+0x4c0/0x7b0
[  606.078742][T29860]  __x64_sys_bpf+0x41/0x50
[  606.078808][T29860]  x64_sys_call+0x28e1/0x3000
[  606.078921][T29860]  do_syscall_64+0xc0/0x2a0
[  606.078989][T29860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.079020][T29860] RIP: 0033:0x7f23f68bacb9
[  606.079042][T29860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.079094][T29860] RSP: 002b:00007f23f5317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  606.079120][T29860] RAX: ffffffffffffffda RBX: 00007f23f6b35fa0 RCX: 00007f23f68bacb9
[  606.079136][T29860] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  606.079227][T29860] RBP: 00007f23f5317090 R08: 0000000000000000 R09: 0000000000000000
[  606.079245][T29860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.079262][T29860] R13: 00007f23f6b36038 R14: 00007f23f6b35fa0 R15: 00007ffe398b6048
[  606.079341][T29860]  </TASK>
[  606.521114][T29870] siw: device registration error -23
[  606.598937][T29879] ip6t_srh: unknown srh match flags  D9A1
[  607.175746][T29912] block device autoloading is deprecated and will be removed.
[  607.187254][T29912] SELinux:  Context : is not valid (left unmapped).
[  607.194193][   T29] audit: type=1400 audit(598.951:92664): avc:  denied  { relabelto } for  pid=29911 comm="syz.1.7842" name="rdma.current" dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  607.199532][T29912] __nla_validate_parse: 6 callbacks suppressed
[  607.199596][T29912] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7842'.
[  607.220408][   T29] audit: type=1400 audit(598.951:92665): avc:  denied  { associate } for  pid=29911 comm="syz.1.7842" name="rdma.current" dev="tmpfs" ino=1079 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":"
[  607.268804][   T29] audit: type=1400 audit(599.026:92666): avc:  denied  { unlink } for  pid=26849 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  607.308123][T29914] bond2: entered allmulticast mode
[  607.313686][T29914] 8021q: adding VLAN 0 to HW filter on device bond2
[  607.341519][T29917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7844'.
[  607.548187][T29919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7845'.
[  607.558449][T29919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  607.614141][T29927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7847'.
[  607.884991][T29936] loop3: detected capacity change from 0 to 1024
[  607.907336][T29936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  607.922740][T29936] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7852: bg 0: block 112: padding at end of block bitmap is not set
[  607.940780][T29936] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 6)
[  607.954599][T29936] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.7852: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  607.974645][T29936] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 1)
[  607.988489][T29936] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 1)
[  608.008093][T29936] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.7852: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  608.029915][   T29] audit: type=1400 audit(599.737:92667): avc:  denied  { map } for  pid=29935 comm="syz.3.7852" path="/292/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  608.053343][T29942] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 1)
[  608.069077][T29942] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 1)
[  608.084476][T29942] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 1)
[  608.098900][T29936] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.7852: lblock 0 mapped to illegal pblock 0 (length 1)
[  608.121240][T29945] loop5: detected capacity change from 0 to 1024
[  608.137236][T29945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  608.158847][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  608.181485][T29945] bond4: entered allmulticast mode
[  608.187068][T29945] 8021q: adding VLAN 0 to HW filter on device bond4
[  608.209340][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.243276][T29949] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7855'.
[  608.395216][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  608.443414][T29951] lo speed is unknown, defaulting to 1000
[  608.584264][T29954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7857'.
[  608.604940][T29954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.782623][T29958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7858'.
[  608.791799][T29958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7858'.
[  609.015447][T29967] bond3: option ad_select: invalid value (4)
[  609.022798][T29967] bond3 (unregistering): Released all slaves
[  609.552150][T29975] lo speed is unknown, defaulting to 1000
[  610.051450][T29985] loop4: detected capacity change from 0 to 660
[  610.085074][T29985] msdos: Unknown parameter 'dflush'
[  610.273483][T30002] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  610.475747][T30013] loop5: detected capacity change from 0 to 512
[  610.500796][T30013] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  610.530292][T30018] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7880'.
[  610.771695][T30031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7886'.
[  611.127926][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  611.127946][   T29] audit: type=1400 audit(602.637:92670): avc:  denied  { write } for  pid=30058 comm="syz.3.7897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  611.197960][ T3433] Bluetooth: hci0: Frame reassembly failed (-84)
[  611.329169][T30072] loop5: detected capacity change from 0 to 512
[  611.352138][T30072] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.7903: inode has both inline data and extents flags
[  611.383227][T30072] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7903: couldn't read orphan inode 15 (err -117)
[  611.432267][T30072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.467400][   T29] audit: type=1400 audit(602.955:92671): avc:  denied  { setattr } for  pid=30071 comm="syz.5.7903" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  611.532346][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.832816][   T29] audit: type=1400 audit(603.292:92672): avc:  denied  { kexec_image_load } for  pid=30089 comm="syz.5.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  611.968293][T30092] loop4: detected capacity change from 0 to 8192
[  612.029967][T30092]  loop4: p4 < >
[  612.039299][T30096] smc: net device bond0 applied user defined pnetid SYZ0
[  612.047490][T30096] smc: net device bond0 erased user defined pnetid SYZ0
[  612.113945][T30102] netlink: zone id is out of range
[  612.122691][T30102] netlink: zone id is out of range
[  612.135095][T30102] netlink: del zone limit has 8 unknown bytes
[  612.158036][T23850] udevd[23850]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  612.191448][T10636] Bluetooth: hci1: Frame reassembly failed (-84)
[  612.211601][T30109] FAULT_INJECTION: forcing a failure.
[  612.211601][T30109] name failslab, interval 1, probability 0, space 0, times 0
[  612.224651][T30109] CPU: 0 UID: 0 PID: 30109 Comm: syz.5.7915 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  612.224688][T30109] Tainted: [W]=WARN
[  612.224696][T30109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  612.224751][T30109] Call Trace:
[  612.224761][T30109]  <TASK>
[  612.224772][T30109]  __dump_stack+0x1d/0x30
[  612.224806][T30109]  dump_stack_lvl+0x95/0xd0
[  612.224830][T30109]  dump_stack+0x15/0x1b
[  612.224906][T30109]  should_fail_ex+0x263/0x280
[  612.224931][T30109]  should_failslab+0x8c/0xb0
[  612.224958][T30109]  __kmalloc_node_track_caller_noprof+0xb8/0x590
[  612.225047][T30109]  ? kstrdup_const+0x3e/0x50
[  612.225088][T30109]  ? __xa_alloc+0x291/0x300
[  612.225128][T30109]  kstrdup+0x3e/0xd0
[  612.225234][T30109]  kstrdup_const+0x3e/0x50
[  612.225267][T30109]  alloc_vfsmnt+0xe7/0x300
[  612.225303][T30109]  clone_mnt+0x30/0x5d0
[  612.225340][T30109]  copy_tree+0x2cd/0x8c0
[  612.225433][T30109]  copy_mnt_ns+0x136/0x6e0
[  612.225454][T30109]  ? kmem_cache_alloc_noprof+0x2b4/0x490
[  612.225479][T30109]  ? create_new_namespaces+0x3c/0x400
[  612.225539][T30109]  create_new_namespaces+0x83/0x400
[  612.225612][T30109]  unshare_nsproxy_namespaces+0xe6/0x120
[  612.225675][T30109]  ksys_unshare+0x3cd/0x6d0
[  612.225706][T30109]  ? ksys_write+0x194/0x1a0
[  612.225804][T30109]  __x64_sys_unshare+0x1f/0x30
[  612.225836][T30109]  x64_sys_call+0x2ae6/0x3000
[  612.225901][T30109]  do_syscall_64+0xc0/0x2a0
[  612.225937][T30109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.225967][T30109] RIP: 0033:0x7f23f68bacb9
[  612.225985][T30109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.226043][T30109] RSP: 002b:00007f23f5317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  612.226068][T30109] RAX: ffffffffffffffda RBX: 00007f23f6b35fa0 RCX: 00007f23f68bacb9
[  612.226084][T30109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002060280
[  612.226097][T30109] RBP: 00007f23f5317090 R08: 0000000000000000 R09: 0000000000000000
[  612.226112][T30109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.226129][T30109] R13: 00007f23f6b36038 R14: 00007f23f6b35fa0 R15: 00007ffe398b6048
[  612.226172][T30109]  </TASK>
[  612.508039][T30115] siw: device registration error -23
[  613.162996][T30132] FAULT_INJECTION: forcing a failure.
[  613.162996][T30132] name failslab, interval 1, probability 0, space 0, times 0
[  613.190973][T30132] CPU: 1 UID: 0 PID: 30132 Comm: syz.5.7924 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  613.191017][T30132] Tainted: [W]=WARN
[  613.191030][T30132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  613.191048][T30132] Call Trace:
[  613.191058][T30132]  <TASK>
[  613.191068][T30132]  __dump_stack+0x1d/0x30
[  613.191173][T30132]  dump_stack_lvl+0x95/0xd0
[  613.191202][T30132]  dump_stack+0x15/0x1b
[  613.191226][T30132]  should_fail_ex+0x263/0x280
[  613.191283][T30132]  should_failslab+0x8c/0xb0
[  613.191311][T30132]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  613.191342][T30132]  ? __alloc_skb+0x2f0/0x4b0
[  613.191382][T30132]  __alloc_skb+0x2f0/0x4b0
[  613.191408][T30132]  ? __alloc_skb+0x219/0x4b0
[  613.191502][T30132]  netlink_alloc_large_skb+0xbf/0xf0
[  613.191532][T30132]  netlink_sendmsg+0x40c/0x6f0
[  613.191564][T30132]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.191600][T30132]  __sock_sendmsg+0x145/0x170
[  613.191653][T30132]  ____sys_sendmsg+0x31e/0x4a0
[  613.191690][T30132]  ___sys_sendmsg+0x195/0x1e0
[  613.191732][T30132]  __x64_sys_sendmsg+0xd4/0x160
[  613.191850][T30132]  x64_sys_call+0x17ba/0x3000
[  613.191887][T30132]  do_syscall_64+0xc0/0x2a0
[  613.191926][T30132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.192026][T30132] RIP: 0033:0x7f23f68bacb9
[  613.192050][T30132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.192119][T30132] RSP: 002b:00007f23f5317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  613.192143][T30132] RAX: ffffffffffffffda RBX: 00007f23f6b35fa0 RCX: 00007f23f68bacb9
[  613.192158][T30132] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  613.192173][T30132] RBP: 00007f23f5317090 R08: 0000000000000000 R09: 0000000000000000
[  613.192192][T30132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.192206][T30132] R13: 00007f23f6b36038 R14: 00007f23f6b35fa0 R15: 00007ffe398b6048
[  613.192232][T30132]  </TASK>
[  613.397703][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  613.631040][T30151] siw: device registration error -23
[  613.980983][T30163] netlink: 'syz.1.7936': attribute type 1 has an invalid length.
[  613.989495][T30163] __nla_validate_parse: 2 callbacks suppressed
[  613.989514][T30163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7936'.
[  614.276392][T30174] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  614.321386][T30176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7942'.
[  614.348187][   T29] audit: type=1400 audit(605.649:92673): avc:  denied  { mounton } for  pid=30177 comm="syz.1.7943" path="/230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  614.392610][T30178] nfs4: Unknown parameter ''$\'
[  614.417936][ T3560] Bluetooth: hci1: command 0x1003 tx timeout
[  614.420091][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  614.494066][T30184] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7946'.
[  614.629318][T30191] 9p: Bad value for 'rfdno'
[  614.670424][T30195] loop5: detected capacity change from 0 to 8192
[  614.679971][T30195] vfat: Unknown parameter 'XüÐàmÓùa/¤бåšY#�oˆµ9‡­ç+§¥O3Ó�'
[  614.711827][T30195] loop5: detected capacity change from 0 to 512
[  614.729646][T30195] EXT4-fs: test_dummy_encryption option not supported
[  614.806975][T30206] netlink: 'syz.5.7953': attribute type 3 has an invalid length.
[  614.852823][T30206] netlink: 'syz.5.7953': attribute type 4 has an invalid length.
[  614.860728][T30206] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7953'.
[  614.888752][T30206] .`: renamed from bond0 (while UP)
[  615.133128][T30213] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7956'.
[  615.158465][T30215] loop4: detected capacity change from 0 to 512
[  615.167701][T30215] EXT4-fs: Ignoring removed mblk_io_submit option
[  615.208498][T30215] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7957: invalid indirect mapped block 4294967295 (level 1)
[  615.234679][T30215] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7957: invalid indirect mapped block 4294967295 (level 1)
[  615.268766][T30215] EXT4-fs (loop4): 2 truncates cleaned up
[  615.290048][T30215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.342614][T26271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.357607][T30224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7961'.
[  615.405174][T30224] bridge0: entered promiscuous mode
[  615.415157][T30224] bridge0: port 2(macsec1) entered blocking state
[  615.422774][T30224] bridge0: port 2(macsec1) entered disabled state
[  615.430890][T30224] macsec1: entered allmulticast mode
[  615.436363][T30224] bridge0: entered allmulticast mode
[  615.449965][T30224] macsec1: left allmulticast mode
[  615.455179][T30224] bridge0: left allmulticast mode
[  615.484378][T30224] bridge0: left promiscuous mode
[  615.595464][   T29] audit: type=1400 audit(606.818:92674): avc:  denied  { setopt } for  pid=30233 comm="syz.3.7963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  615.616838][T30234] tipc: Failed to obtain node identity
[  615.622858][T30234] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  615.645780][T30242] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7967'.
[  615.678824][T30247] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  615.688852][T30247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.702506][T30246] siw: device registration error -23
[  615.711670][T30241] loop4: detected capacity change from 0 to 1024
[  615.723318][T30242] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7967'.
[  615.731738][T30241] EXT4-fs: Ignoring removed nomblk_io_submit option
[  615.752557][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7967'.
[  615.769205][T30241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.782776][T30247] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  615.793619][T30247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.815291][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7967'.
[  615.875011][T30247] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  615.884969][T30247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.935911][   T29] audit: type=1400 audit(607.136:92675): avc:  denied  { rmdir } for  pid=26271 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  615.964306][T26271] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256)
[  615.986266][T30247] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  615.997099][T30247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.999348][   T29] audit: type=1400 audit(607.164:92676): avc:  denied  { unlink } for  pid=26271 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  616.030329][T26271] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256)
[  616.033988][T30268] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  616.088565][ T3433] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  616.096939][ T3433] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.135041][T10638] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  616.143405][T10638] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.170356][T10630] smc: removing ib device syz1
[  616.170405][T11820] syz1: Port: 1 Link DOWN
[  616.201153][T30254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.230770][T30282] netlink: zone id is out of range
[  616.230929][T30282] netlink: zone id is out of range
[  616.231740][T30282] netlink: del zone limit has 8 unknown bytes
[  616.251769][T10638] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  616.251810][T10638] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.251877][T10638] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  616.251908][T10638] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.253238][   T29] audit: type=1400 audit(607.435:92677): avc:  denied  { connect } for  pid=30275 comm="syz.1.7980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  616.394199][T30289] lo speed is unknown, defaulting to 1000
[  616.526560][T30305] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  616.680907][T30312] netlink: zone id is out of range
[  616.686735][T30312] netlink: zone id is out of range
[  616.715994][T30312] netlink: del zone limit has 8 unknown bytes
[  616.826760][T30298] program syz.3.7988 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  616.848503][T30328] ªªªªªª: renamed from hsr0 (while UP)
[  616.943405][T30347] lo speed is unknown, defaulting to 1000
[  616.996295][T30355] loop5: detected capacity change from 0 to 1024
[  617.006825][T30355] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  617.019399][   T29] audit: type=1400 audit(608.146:92678): avc:  denied  { bind } for  pid=30346 comm="syz.1.8004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  617.046644][T30355] EXT4-fs (loop5): orphan cleanup on readonly fs
[  617.053433][T30355] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  617.068230][T30355] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  617.076614][T30355] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.8006: Freeing blocks not in datazone - block = 0, count = 4096
[  617.090299][T30355] EXT4-fs (loop5): 1 orphan inode deleted
[  617.098151][T30338] lo speed is unknown, defaulting to 1000
[  617.108223][T30355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  617.156731][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.253743][T30373] siw: device registration error -23
[  617.309467][T30338] chnl_net:caif_netlink_parms(): no params data found
[  617.385472][T30382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.398935][T30382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.410749][   T29] audit: type=1400 audit(608.511:92679): avc:  denied  { ioctl } for  pid=30381 comm="syz.5.8013" path="socket:[104306]" dev="sockfs" ino=104306 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  617.446698][T30338] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.454023][T30338] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.461895][T30338] bridge_slave_0: entered allmulticast mode
[  617.469844][T30338] bridge_slave_0: entered promiscuous mode
[  617.480404][T30338] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.487743][T30338] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.495443][T30338] bridge_slave_1: entered allmulticast mode
[  617.502358][T30338] bridge_slave_1: entered promiscuous mode
[  617.512219][T30387] loop3: detected capacity change from 0 to 128
[  617.542948][T30338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.564902][T30338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.617397][T30338] team0: Port device team_slave_0 added
[  617.631285][T30338] team0: Port device team_slave_1 added
[  617.661627][T30338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.668772][T30338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.695395][T30338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.708085][T30338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.715098][T30338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.741185][T30338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.791819][T30338] hsr_slave_0: entered promiscuous mode
[  617.798122][T30338] hsr_slave_1: entered promiscuous mode
[  617.849618][T30390] lo speed is unknown, defaulting to 1000
[  618.116167][T30412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  618.314199][T30338] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  618.331979][T30338] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  618.357691][   T29] audit: type=1326 audit(609.390:92680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.381492][   T29] audit: type=1326 audit(609.390:92681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.404586][   T29] audit: type=1326 audit(609.390:92682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.428621][   T29] audit: type=1326 audit(609.390:92683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.452329][   T29] audit: type=1326 audit(609.390:92684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.476122][   T29] audit: type=1326 audit(609.390:92685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.499242][   T29] audit: type=1326 audit(609.390:92686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.552566][   T29] audit: type=1326 audit(609.503:92687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30427 comm="syz.1.8024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c167aacb9 code=0x7ffc0000
[  618.593743][T30338] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  618.610591][T30338] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  618.657355][T30445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=30445 comm=syz.1.8029
[  618.787665][T30338] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.840219][T30338] 8021q: adding VLAN 0 to HW filter on device team0
[  618.868557][T10630] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.875850][T10630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.958568][T10630] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.965827][T10630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.993326][T30477] loop3: detected capacity change from 0 to 256
[  619.015112][T30477] msdos: Unknown parameter 'nodotsdots'
[  619.231783][T30496] netlink: 'syz.0.8039': attribute type 1 has an invalid length.
[  619.269566][T30338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.504739][T30338] veth0_vlan: entered promiscuous mode
[  619.535114][T30338] veth1_vlan: entered promiscuous mode
[  619.609628][T30338] veth0_macvtap: entered promiscuous mode
[  619.633382][T30338] veth1_macvtap: entered promiscuous mode
[  619.656626][T30546] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  619.686659][T30338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  619.721775][T30338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  619.755129][T10636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.792610][T10636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.855205][T10636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.909936][T30565] usb usb7: usbfs: process 30565 (syz.3.8056) did not claim interface 0 before use
[  619.928236][T10636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.995729][T30574] loop5: detected capacity change from 0 to 1024
[  620.060042][T30574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  620.178918][T30574] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8058: bg 0: block 112: padding at end of block bitmap is not set
[  620.210277][T30593] netlink: 'syz.1.8062': attribute type 4 has an invalid length.
[  620.219823][T30591] loop3: detected capacity change from 0 to 128
[  620.262770][T30574] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.8058: lblock 0 mapped to illegal pblock 0 (length 1)
[  620.310004][T30601] bio_check_eod: 49 callbacks suppressed
[  620.310023][T30601] syz.3.8063: attempt to access beyond end of device
[  620.310023][T30601] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  620.341784][T30574] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.8058: lblock 0 mapped to illegal pblock 0 (length 1)
[  620.385667][T30604] __nla_validate_parse: 10 callbacks suppressed
[  620.385690][T30604] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8066'.
[  620.401886][T30574] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.8058: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  620.433150][T30601] syz.3.8063: attempt to access beyond end of device
[  620.433150][T30601] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  620.484758][T30601] syz.3.8063: attempt to access beyond end of device
[  620.484758][T30601] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  620.556389][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  620.570647][T30601] syz.3.8063: attempt to access beyond end of device
[  620.570647][T30601] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  620.607197][T30601] syz.3.8063: attempt to access beyond end of device
[  620.607197][T30601] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  620.668448][T30601] syz.3.8063: attempt to access beyond end of device
[  620.668448][T30601] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  620.694621][T30616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8069'.
[  620.704476][T30616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8069'.
[  620.724402][T30601] syz.3.8063: attempt to access beyond end of device
[  620.724402][T30601] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  620.747451][T30619] syzkaller1: entered promiscuous mode
[  620.753034][T30619] syzkaller1: entered allmulticast mode
[  620.806924][T30601] syz.3.8063: attempt to access beyond end of device
[  620.806924][T30601] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  620.827455][T30601] syz.3.8063: attempt to access beyond end of device
[  620.827455][T30601] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  620.871550][T30624] loop5: detected capacity change from 0 to 512
[  620.899659][T30601] syz.3.8063: attempt to access beyond end of device
[  620.899659][T30601] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  620.978660][T30624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  621.050966][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8072'.
[  621.138078][T25234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.299926][T30652] loop2: detected capacity change from 0 to 128
[  621.345802][T30652] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  621.431551][T30660] loop3: detected capacity change from 0 to 1024
[  621.486910][T30660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  621.576732][T30338] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  621.589083][T30660] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8078: bg 0: block 112: padding at end of block bitmap is not set
[  621.651161][T30660] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.8078: lblock 0 mapped to illegal pblock 0 (length 1)
[  621.681928][T30681] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.8081'.
[  621.706470][T30660] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.8078: lblock 0 mapped to illegal pblock 0 (length 1)
[  621.717601][T30681] netlink: zone id is out of range
[  621.725806][T30681] netlink: zone id is out of range
[  621.749794][T30660] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.8078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  621.796017][T30681] netlink: zone id is out of range
[  621.819540][T30681] netlink: del zone limit has 8 unknown bytes
[  621.880849][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  622.006206][T30703] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8084'.
[  622.141587][T30708] siw: device registration error -23
[  622.354344][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8088'.
[  622.378323][T30697] netlink: 764 bytes leftover after parsing attributes in process `syz.1.8065'.
[  622.425664][   T29] kauditd_printk_skb: 124 callbacks suppressed
[  622.425682][   T29] audit: type=1326 audit(613.207:92812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7effb6ffaae7 code=0x7ffc0000
[  622.552388][   T29] audit: type=1326 audit(613.207:92813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effb6fbb58e code=0x7ffc0000
[  622.576933][   T29] audit: type=1326 audit(613.207:92814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7effb6fbb58e code=0x7ffc0000
[  622.600040][   T29] audit: type=1326 audit(613.216:92815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  622.624069][   T29] audit: type=1326 audit(613.216:92816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  622.647125][   T29] audit: type=1326 audit(613.216:92817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  622.671478][   T29] audit: type=1326 audit(613.216:92818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  622.694672][   T29] audit: type=1326 audit(613.216:92819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effb6fbb58e code=0x7ffc0000
[  622.718541][   T29] audit: type=1326 audit(613.216:92820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  622.742387][   T29] audit: type=1326 audit(613.216:92821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  622.774760][T30599] lo speed is unknown, defaulting to 1000
[  623.112153][T30759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8094'.
[  623.122981][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8095'.
[  623.188723][T30767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  623.363221][T30779] lo speed is unknown, defaulting to 1000
[  623.414057][T30779] lo speed is unknown, defaulting to 1000
[  623.423958][T30779] lo speed is unknown, defaulting to 1000
[  623.520147][T30779] infiniband syz1: set active
[  623.524970][T30779] infiniband syz1: added lo
[  623.543294][T11843] lo speed is unknown, defaulting to 1000
[  623.579860][T30779] RDS/IB: syz1: added
[  623.605419][T30779] smc: adding ib device syz1 with port count 1
[  623.627216][T30779] smc:    ib device syz1 port 1 has no pnetid
[  623.633554][T11843] lo speed is unknown, defaulting to 1000
[  623.646768][T30779] lo speed is unknown, defaulting to 1000
[  623.670571][T30796] geneve2: entered promiscuous mode
[  623.685080][T30802] netlink: 'syz.0.8105': attribute type 6 has an invalid length.
[  623.695611][T10630] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 51716 - 0
[  623.717391][T10630] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 51716 - 0
[  623.717528][T30802] netlink: 'syz.0.8105': attribute type 6 has an invalid length.
[  623.738636][T10630] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 51716 - 0
[  623.759071][T10630] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 51716 - 0
[  623.791310][T30779] lo speed is unknown, defaulting to 1000
[  623.812622][T30807] bond0: entered promiscuous mode
[  623.817776][T30807] bond_slave_0: entered promiscuous mode
[  623.823598][T30807] bond_slave_1: entered promiscuous mode
[  623.849510][T30807] bond0: left promiscuous mode
[  623.854447][T30807] bond_slave_0: left promiscuous mode
[  623.860119][T30807] bond_slave_1: left promiscuous mode
[  623.887468][T30779] lo speed is unknown, defaulting to 1000
[  623.985735][T30779] lo speed is unknown, defaulting to 1000
[  624.039232][T30821] loop2: detected capacity change from 0 to 1024
[  624.067692][T30821] EXT4-fs: dax option not supported
[  624.264381][T30834] loop2: detected capacity change from 0 to 512
[  624.292764][T30779] lo speed is unknown, defaulting to 1000
[  624.437047][T30849] netlink: 'syz.0.8117': attribute type 4 has an invalid length.
[  624.453155][T30779] lo speed is unknown, defaulting to 1000
[  624.514002][T30779] lo speed is unknown, defaulting to 1000
[  624.582140][T30779] lo speed is unknown, defaulting to 1000
[  624.590359][T30862] netlink: 'syz.1.8123': attribute type 1 has an invalid length.
[  624.598151][T30862] netlink: 'syz.1.8123': attribute type 2 has an invalid length.
[  624.756250][T30871] loop2: detected capacity change from 0 to 256
[  624.765914][T30859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.779834][T30871] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  624.790030][T30871] FAT-fs (loop2): Filesystem has been set read-only
[  624.831671][T30859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.904521][T30859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.075450][T30859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.268043][ T3433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.334982][ T3433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.400673][ T3433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.555159][ T3433] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.604899][T30896] loop5: detected capacity change from 0 to 128
[  625.660666][T30896] vfat: Unknown parameter '00000000000000000000003ÿÿÿÿÿÿÿÿ'
[  625.966075][T30904] __nla_validate_parse: 3 callbacks suppressed
[  625.966097][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8138'.
[  625.983886][T30904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  626.043657][T30900] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8136'.
[  626.100560][T30924] loop3: detected capacity change from 0 to 131
[  626.260045][T30942] netlink: 'syz.3.8145': attribute type 12 has an invalid length.
[  626.283705][T30942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8145'.
[  626.302757][   T10] hid_parser_main: 6 callbacks suppressed
[  626.302782][   T10] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4
[  626.316340][   T10] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2
[  626.348824][   T10] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3
[  626.373145][   T10] hid-generic 0000:3000000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  626.397756][T30949] pimreg: entered allmulticast mode
[  626.413728][T30942] pimreg: left allmulticast mode
[  626.481789][T30948] fido_id[30948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  626.624001][T30964] loop3: detected capacity change from 0 to 256
[  626.694420][T30964] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  626.702506][T30964] FAT-fs (loop3): Filesystem has been set read-only
[  626.934755][T30995] loop3: detected capacity change from 0 to 1024
[  626.971369][T30995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.016328][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.303688][T31023] loop5: detected capacity change from 0 to 256
[  627.342113][T31023] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[  627.350472][T31023] FAT-fs (loop5): Filesystem has been set read-only
[  627.392876][T31023] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  627.925822][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  627.925844][   T29] audit: type=1400 audit(618.342:92939): avc:  denied  { recv } for  pid=31025 comm="syz.2.8159" saddr=10.128.0.163 src=36720 daddr=10.128.0.12 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  628.245635][   T29] audit: type=1400 audit(618.641:92940): avc:  denied  { create } for  pid=31046 comm="syz.1.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  628.290398][   T29] audit: type=1400 audit(618.698:92941): avc:  denied  { read append } for  pid=31046 comm="syz.1.8162" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  628.314223][   T29] audit: type=1400 audit(618.698:92942): avc:  denied  { open } for  pid=31046 comm="syz.1.8162" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  628.401501][   T29] audit: type=1400 audit(618.744:92943): avc:  denied  { setopt } for  pid=31046 comm="syz.1.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  628.497440][T31062] FAULT_INJECTION: forcing a failure.
[  628.497440][T31062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.510945][T31062] CPU: 1 UID: 0 PID: 31062 Comm: syz.5.8168 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  628.510985][T31062] Tainted: [W]=WARN
[  628.511019][T31062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  628.511033][T31062] Call Trace:
[  628.511041][T31062]  <TASK>
[  628.511050][T31062]  __dump_stack+0x1d/0x30
[  628.511080][T31062]  dump_stack_lvl+0x95/0xd0
[  628.511108][T31062]  dump_stack+0x15/0x1b
[  628.511171][T31062]  should_fail_ex+0x263/0x280
[  628.511194][T31062]  should_fail+0xb/0x20
[  628.511239][T31062]  should_fail_usercopy+0x1a/0x20
[  628.511284][T31062]  _copy_from_user+0x1c/0xb0
[  628.511310][T31062]  ___sys_sendmsg+0xc1/0x1e0
[  628.511347][T31062]  __x64_sys_sendmsg+0xd4/0x160
[  628.511374][T31062]  x64_sys_call+0x17ba/0x3000
[  628.511496][T31062]  do_syscall_64+0xc0/0x2a0
[  628.511524][T31062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.511546][T31062] RIP: 0033:0x7f23f68bacb9
[  628.511561][T31062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.511658][T31062] RSP: 002b:00007f23f5317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.511705][T31062] RAX: ffffffffffffffda RBX: 00007f23f6b35fa0 RCX: 00007f23f68bacb9
[  628.511719][T31062] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003
[  628.511732][T31062] RBP: 00007f23f5317090 R08: 0000000000000000 R09: 0000000000000000
[  628.511761][T31062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.511774][T31062] R13: 00007f23f6b36038 R14: 00007f23f6b35fa0 R15: 00007ffe398b6048
[  628.511794][T31062]  </TASK>
[  628.535598][T31058] loop3: detected capacity change from 0 to 4096
[  628.733525][   T29] audit: type=1400 audit(619.109:92944): avc:  denied  { read } for  pid=31067 comm="syz.5.8172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  628.754332][T31069] siw: device registration error -23
[  628.765724][T31070] netlink: 'syz.1.8169': attribute type 21 has an invalid length.
[  628.791499][   T29] audit: type=1400 audit(619.128:92945): avc:  denied  { create } for  pid=31067 comm="syz.5.8172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  628.811586][   T29] audit: type=1400 audit(619.128:92946): avc:  denied  { write } for  pid=31067 comm="syz.5.8172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  628.838829][T31058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.876897][   T29] audit: type=1400 audit(619.231:92947): avc:  denied  { remove_name } for  pid=31055 comm="syz.3.8164" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  628.882155][T31058] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #12: block 80: comm syz.3.8164: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  628.930452][   T29] audit: type=1400 audit(619.231:92948): avc:  denied  { rmdir } for  pid=31055 comm="syz.3.8164" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  629.029074][T31076] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.8173'.
[  629.054436][T31076] netlink: zone id is out of range
[  629.060292][T31076] netlink: zone id is out of range
[  629.062930][T31058] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.8164: directory missing '..'
[  629.083961][T31076] netlink: zone id is out of range
[  629.099064][T31076] netlink: del zone limit has 8 unknown bytes
[  629.163869][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.912597][T31065] IPVS: starting estimator thread 0...
[  629.951224][T31111] bond1: option min_links: invalid value (18446744073709551601)
[  629.958982][T31111] bond1: option min_links: allowed values 0 - 2147483647
[  629.994772][T31111] bond1 (unregistering): Released all slaves
[  630.022938][T31115] IPVS: using max 2400 ests per chain, 120000 per kthread
[  630.212436][T31132] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.8196'.
[  630.258445][T31132] netlink: zone id is out of range
[  630.264592][T31132] netlink: zone id is out of range
[  630.271818][T31138] loop5: detected capacity change from 0 to 1024
[  630.291754][T31143] macvlan2: entered promiscuous mode
[  630.294081][T31132] netlink: zone id is out of range
[  630.325658][T31132] netlink: del zone limit has 8 unknown bytes
[  630.353099][T31138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  630.414723][T31138] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8197: bg 0: block 112: padding at end of block bitmap is not set
[  630.435075][T31150] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.454598][T31158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=31158 comm=syz.0.8200
[  630.474972][T31150] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.534059][T25234] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /357/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  630.599933][T25234] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /357/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  630.673185][T31143] macvlan3: entered promiscuous mode
[  630.688638][T25234] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  630.791706][T25234] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /357/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  630.852146][T25234] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  630.872768][T31154] batman_adv: batadv0: Interface deactivated: dummy0
[  630.898488][T31166] netlink: 'syz.2.8202': attribute type 13 has an invalid length.
[  630.917733][T31098] loop3: detected capacity change from 0 to 512
[  630.934290][T25234] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /357/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  630.973858][T31098] EXT4-fs: Ignoring removed i_version option
[  630.989131][T31098] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  631.023310][T25234] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  631.080674][T25234] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /357/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0
[  631.106443][T25234] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0
[  631.127123][T31154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.142763][T31154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.199646][T31162] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  631.278769][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8207'.
[  631.292137][T31166] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.299420][T31166] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.407171][T31166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.417574][T31166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.484342][T10630] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.494709][T10630] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.511438][T10630] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.520680][T10630] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.531180][T10630] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.556130][T10630] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.573944][T10630] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.588470][T10630] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  631.726908][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8215'.
[  631.796585][T30083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  632.000086][T31205] lo speed is unknown, defaulting to 1000
[  632.006210][T31205] lo speed is unknown, defaulting to 1000
[  632.086860][T31226] FAULT_INJECTION: forcing a failure.
[  632.086860][T31226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.100822][T31226] CPU: 1 UID: 0 PID: 31226 Comm: syz.2.8224 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  632.100854][T31226] Tainted: [W]=WARN
[  632.100862][T31226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  632.100875][T31226] Call Trace:
[  632.100882][T31226]  <TASK>
[  632.100889][T31226]  __dump_stack+0x1d/0x30
[  632.100923][T31226]  dump_stack_lvl+0x95/0xd0
[  632.100946][T31226]  dump_stack+0x15/0x1b
[  632.101019][T31226]  should_fail_ex+0x263/0x280
[  632.101042][T31226]  should_fail+0xb/0x20
[  632.101062][T31226]  should_fail_usercopy+0x1a/0x20
[  632.101140][T31226]  _copy_from_user+0x1c/0xb0
[  632.101174][T31226]  ____sys_sendmsg+0x1c5/0x4a0
[  632.101268][T31226]  ___sys_sendmsg+0x195/0x1e0
[  632.101315][T31226]  __x64_sys_sendmsg+0xd4/0x160
[  632.101379][T31226]  x64_sys_call+0x17ba/0x3000
[  632.101414][T31226]  do_syscall_64+0xc0/0x2a0
[  632.101462][T31226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.101493][T31226] RIP: 0033:0x7f764f4bacb9
[  632.101523][T31226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.101546][T31226] RSP: 002b:00007f764df17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  632.101598][T31226] RAX: ffffffffffffffda RBX: 00007f764f735fa0 RCX: 00007f764f4bacb9
[  632.101613][T31226] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000004
[  632.101627][T31226] RBP: 00007f764df17090 R08: 0000000000000000 R09: 0000000000000000
[  632.101640][T31226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.101694][T31226] R13: 00007f764f736038 R14: 00007f764f735fa0 R15: 00007ffce2493cb8
[  632.101719][T31226]  </TASK>
[  632.197965][T31205] chnl_net:caif_netlink_parms(): no params data found
[  632.297295][T31230] pim6reg: entered allmulticast mode
[  632.310772][T31230] pim6reg: left allmulticast mode
[  632.341343][T31205] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.348486][T31205] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.362786][T31205] bridge_slave_0: entered allmulticast mode
[  632.369563][T31205] bridge_slave_0: entered promiscuous mode
[  632.376927][T31205] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.384834][T31205] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.392156][T31205] bridge_slave_1: entered allmulticast mode
[  632.399503][T31205] bridge_slave_1: entered promiscuous mode
[  632.427939][T31205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.439295][T31205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  632.471596][T31205] team0: Port device team_slave_0 added
[  632.479341][T31205] team0: Port device team_slave_1 added
[  632.500481][T31205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.507584][T31205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.533668][T31205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.546421][T31205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.553436][T31205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.579560][T31205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.615557][T31205] hsr_slave_0: entered promiscuous mode
[  632.624421][T31205] hsr_slave_1: entered promiscuous mode
[  632.630877][T31249] loop2: detected capacity change from 0 to 8192
[  632.631870][T31205] debugfs: 'hsr0' already exists in 'hsr'
[  632.643249][T31205] Cannot create hsr debugfs directory
[  632.673491][T23850]  loop2: p4 < >
[  632.682181][T31249]  loop2: p4 < >
[  632.720834][T23850] udevd[23850]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  632.753600][T23850] udevd[23850]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  632.767719][T31260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8234'.
[  632.781209][T31260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8234'.
[  632.799056][T23850] udevd[23850]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  633.339954][T31205] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  633.406045][T31205] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  633.472518][T31205] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  633.570925][T31205] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  633.633201][T31299] siw: device registration error -23
[  633.844585][T31310] loop3: detected capacity change from 0 to 512
[  633.844969][   T29] kauditd_printk_skb: 561 callbacks suppressed
[  633.844984][   T29] audit: type=1400 audit(623.889:93510): avc:  denied  { mounton } for  pid=31309 comm="syz.3.8243" path="/374/file2" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  633.852949][T31310] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  633.864999][T31310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  633.865019][T31310] block device autoloading is deprecated and will be removed.
[  633.865219][T31310] EXT4-fs (loop3): couldn't read superblock of external journal
[  633.880777][T31310] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8243'.
[  633.904494][T31205] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.951033][T31205] 8021q: adding VLAN 0 to HW filter on device team0
[  633.953837][   T29] audit: type=1400 audit(623.983:93511): avc:  denied  { create } for  pid=31296 comm="syz.1.8241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  633.954924][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.967438][   T29] audit: type=1400 audit(624.001:93512): avc:  denied  { setopt } for  pid=31311 comm="syz.2.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  633.971077][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  634.002347][   T29] audit: type=1400 audit(624.039:93513): avc:  denied  { write } for  pid=31296 comm="syz.1.8241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  634.078460][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.078563][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.102495][T31297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8241'.
[  634.114757][T31318] lo speed is unknown, defaulting to 1000
[  634.120991][   T29] audit: type=1400 audit(624.104:93514): avc:  denied  { connect } for  pid=31296 comm="syz.1.8241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  634.169404][   T29] audit: type=1400 audit(624.198:93515): avc:  denied  { setopt } for  pid=31322 comm="syz.2.8246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  634.192120][   T29] audit: type=1400 audit(624.216:93516): avc:  denied  { write } for  pid=31322 comm="syz.2.8246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  634.201372][T31318] lo speed is unknown, defaulting to 1000
[  634.284518][T31337] batman_adv: batadv0: Adding interface: ipvlan3
[  634.291880][T31337] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.317614][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  634.322140][   T29] audit: type=1400 audit(624.338:93517): avc:  denied  { listen } for  pid=31317 comm="syz.0.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  634.329897][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.359068][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  634.359092][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  634.359106][T31337] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  634.470880][   T29] audit: type=1326 audit(624.385:93518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31333 comm="syz.2.8248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764f4bacb9 code=0x7ffc0000
[  634.470970][   T29] audit: type=1326 audit(624.385:93519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31333 comm="syz.2.8248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764f4bacb9 code=0x7ffc0000
[  634.633639][T31205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.708511][T31352] loop3: detected capacity change from 0 to 512
[  634.905087][T31352] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.8252: inode has both inline data and extents flags
[  634.932503][T31352] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8252: couldn't read orphan inode 15 (err -117)
[  634.962406][T31352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.141022][T31352] can: request_module (can-proto-0) failed.
[  635.430666][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.654653][T31401] loop3: detected capacity change from 0 to 8192
[  635.761686][T31415] loop2: detected capacity change from 0 to 1024
[  635.787153][T31205] veth0_vlan: entered promiscuous mode
[  635.795883][T31415] EXT4-fs: Ignoring removed orlov option
[  635.827424][T31205] veth1_vlan: entered promiscuous mode
[  635.839719][T31415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.885090][T31205] veth0_macvtap: entered promiscuous mode
[  635.903369][T31205] veth1_macvtap: entered promiscuous mode
[  635.928304][T31205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.951662][T31205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.014648][T10621] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.049407][T30338] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.071138][T10621] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.108461][T10621] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.144134][T10621] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.236849][T31452] FAULT_INJECTION: forcing a failure.
[  636.236849][T31452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.250152][T31452] CPU: 1 UID: 0 PID: 31452 Comm: syz.2.8269 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  636.250195][T31452] Tainted: [W]=WARN
[  636.250205][T31452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  636.250223][T31452] Call Trace:
[  636.250232][T31452]  <TASK>
[  636.250242][T31452]  __dump_stack+0x1d/0x30
[  636.250268][T31452]  dump_stack_lvl+0x95/0xd0
[  636.250309][T31452]  dump_stack+0x15/0x1b
[  636.250355][T31452]  should_fail_ex+0x263/0x280
[  636.250456][T31452]  should_fail+0xb/0x20
[  636.250490][T31452]  should_fail_usercopy+0x1a/0x20
[  636.250521][T31452]  _copy_to_user+0x20/0xa0
[  636.250556][T31452]  simple_read_from_buffer+0xb5/0x130
[  636.250659][T31452]  proc_fail_nth_read+0x10e/0x150
[  636.250699][T31452]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  636.250747][T31452]  vfs_read+0x1ab/0x7f0
[  636.250823][T31452]  ? __rcu_read_unlock+0x4e/0x70
[  636.250850][T31452]  ? __fget_files+0x184/0x1c0
[  636.250878][T31452]  ? mutex_lock+0x57/0x90
[  636.250900][T31452]  ksys_read+0xdc/0x1a0
[  636.250964][T31452]  __x64_sys_read+0x40/0x50
[  636.251058][T31452]  x64_sys_call+0x2889/0x3000
[  636.251093][T31452]  do_syscall_64+0xc0/0x2a0
[  636.251132][T31452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.251236][T31452] RIP: 0033:0x7f764f47b58e
[  636.251260][T31452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  636.251332][T31452] RSP: 002b:00007f764df16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  636.251396][T31452] RAX: ffffffffffffffda RBX: 00007f764df176c0 RCX: 00007f764f47b58e
[  636.251411][T31452] RDX: 000000000000000f RSI: 00007f764df170a0 RDI: 0000000000000008
[  636.251428][T31452] RBP: 00007f764df17090 R08: 0000000000000000 R09: 0000000000000000
[  636.251445][T31452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.251491][T31452] R13: 00007f764f736038 R14: 00007f764f735fa0 R15: 00007ffce2493cb8
[  636.251514][T31452]  </TASK>
[  636.610359][T31466] xt_hashlimit: size too large, truncated to 1048576
[  636.617115][T31466] xt_hashlimit: max too large, truncated to 1048576
[  636.643088][T31466] loop2: detected capacity change from 0 to 1024
[  636.742887][T31466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.857066][T31480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8273'.
[  636.920535][T31486] loop3: detected capacity change from 0 to 512
[  636.977036][T31486] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  637.116847][T31503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8278'.
[  637.157792][T31503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8278'.
[  637.182900][T31506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8279'.
[  637.214327][T24548] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  637.227139][T31503] vlan2: entered promiscuous mode
[  637.232399][T31503] ip6gretap0: entered promiscuous mode
[  637.238127][T31503] vlan2: entered allmulticast mode
[  637.243278][T31503] ip6gretap0: entered allmulticast mode
[  637.288953][T31511] usb usb7: usbfs: process 31511 (syz.3.8280) did not claim interface 0 before use
[  637.509324][T31524] loop3: detected capacity change from 0 to 8192
[  637.518900][T30338] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.558401][T31531] loop6: detected capacity change from 0 to 256
[  637.567067][T31531] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  637.577725][T31531] FAT-fs (loop6): Filesystem has been set read-only
[  637.599553][T31524] netlink: 'syz.3.8283': attribute type 21 has an invalid length.
[  637.601181][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8284'.
[  637.618621][T31524] netlink: 'syz.3.8283': attribute type 1 has an invalid length.
[  637.626489][T31524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8283'.
[  637.743187][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8284'.
[  637.822827][T31545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8286'.
[  637.863437][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8284'.
[  637.885314][T31545] 8021q: adding VLAN 0 to HW filter on device bond1
[  637.986331][T31562] loop3: detected capacity change from 0 to 128
[  638.010946][T31562] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  638.026349][T31560] loop2: detected capacity change from 0 to 1024
[  638.308274][T24548] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  638.389465][T31576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8291'.
[  638.604996][T31610] loop6: detected capacity change from 0 to 256
[  638.650954][T31610] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  638.661647][T31610] FAT-fs (loop6): Filesystem has been set read-only
[  638.673230][T31616] FAULT_INJECTION: forcing a failure.
[  638.673230][T31616] name failslab, interval 1, probability 0, space 0, times 0
[  638.685926][T31616] CPU: 0 UID: 0 PID: 31616 Comm: syz.2.8298 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  638.686094][T31616] Tainted: [W]=WARN
[  638.686104][T31616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  638.686118][T31616] Call Trace:
[  638.686126][T31616]  <TASK>
[  638.686134][T31616]  __dump_stack+0x1d/0x30
[  638.686161][T31616]  dump_stack_lvl+0x95/0xd0
[  638.686203][T31616]  dump_stack+0x15/0x1b
[  638.686231][T31616]  should_fail_ex+0x263/0x280
[  638.686270][T31616]  should_failslab+0x8c/0xb0
[  638.686293][T31616]  __kmalloc_cache_noprof+0x64/0x4a0
[  638.686317][T31616]  ? v9fs_get_tree+0x49/0x5e0
[  638.686341][T31616]  v9fs_get_tree+0x49/0x5e0
[  638.686421][T31616]  ? security_capable+0x7b/0x90
[  638.686458][T31616]  vfs_get_tree+0x57/0x1d0
[  638.686503][T31616]  do_new_mount+0x288/0x700
[  638.686528][T31616]  ? security_capable+0x7b/0x90
[  638.686575][T31616]  path_mount+0x4c0/0xb90
[  638.686595][T31616]  ? user_path_at+0xbf/0x130
[  638.686650][T31616]  __se_sys_mount+0x28c/0x2e0
[  638.686677][T31616]  ? fput+0x8f/0xc0
[  638.686711][T31616]  __x64_sys_mount+0x67/0x80
[  638.686734][T31616]  x64_sys_call+0x2cca/0x3000
[  638.686771][T31616]  do_syscall_64+0xc0/0x2a0
[  638.686802][T31616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.686831][T31616] RIP: 0033:0x7f764f4bacb9
[  638.686849][T31616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.686902][T31616] RSP: 002b:00007f764def6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  638.686927][T31616] RAX: ffffffffffffffda RBX: 00007f764f736090 RCX: 00007f764f4bacb9
[  638.686961][T31616] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000
[  638.686979][T31616] RBP: 00007f764def6090 R08: 0000200000000740 R09: 0000000000000000
[  638.686998][T31616] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000002
[  638.687011][T31616] R13: 00007f764f736128 R14: 00007f764f736090 R15: 00007ffce2493cb8
[  638.687051][T31616]  </TASK>
[  638.959614][T31621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8300'.
[  639.194259][   T29] kauditd_printk_skb: 257 callbacks suppressed
[  639.194345][   T29] audit: type=1400 audit(628.893:93777): avc:  denied  { setopt } for  pid=31630 comm="syz.6.8301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  639.234341][   T29] audit: type=1400 audit(628.893:93778): avc:  denied  { connect } for  pid=31630 comm="syz.6.8301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  639.253649][   T29] audit: type=1400 audit(628.893:93779): avc:  denied  { read } for  pid=31630 comm="syz.6.8301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  639.342577][   T29] audit: type=1400 audit(629.024:93780): avc:  denied  { name_connect } for  pid=31655 comm="syz.6.8305" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  639.374399][   T29] audit: type=1400 audit(629.052:93781): avc:  denied  { shutdown } for  pid=31655 comm="syz.6.8305" lport=44365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  639.395252][   T29] audit: type=1400 audit(629.052:93782): avc:  denied  { getopt } for  pid=31655 comm="syz.6.8305" lport=44365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  639.533571][   T29] audit: type=1326 audit(629.202:93783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.8310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  639.570577][T31673] loop2: detected capacity change from 0 to 256
[  639.599326][T31673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  639.610303][T31673] FAT-fs (loop2): Filesystem has been set read-only
[  639.633005][   T29] audit: type=1326 audit(629.230:93784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.8310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  639.656191][   T29] audit: type=1326 audit(629.230:93785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.8310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  639.679259][   T29] audit: type=1326 audit(629.230:93786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.8310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7effb6ffacb9 code=0x7ffc0000
[  639.972688][T31702] loop3: detected capacity change from 0 to 1024
[  639.982436][T31702] EXT4-fs: Ignoring removed orlov option
[  640.001653][T31702] EXT4-fs: Ignoring removed nobh option
[  640.007399][T31702] EXT4-fs: Ignoring removed nomblk_io_submit option
[  640.046342][T31702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.116655][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.296410][T31731] lo speed is unknown, defaulting to 1000
[  640.302598][T31731] lo speed is unknown, defaulting to 1000
[  640.343585][T31737] loop3: detected capacity change from 0 to 512
[  640.361846][T31737] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  640.371808][T31737] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  640.397404][T31737] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  640.415521][T31737] System zones: 0-2, 18-18, 34-35
[  640.437612][T31737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  640.488229][T31737] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  640.525969][T31737] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  640.554063][T31737] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  640.577559][T31748] lo speed is unknown, defaulting to 1000
[  640.606305][T31748] lo speed is unknown, defaulting to 1000
[  640.659662][T31757] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.3.8329: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  640.783849][T31757] EXT4-fs error (device loop3) in ext4_delete_entry:2737: Corrupt filesystem
[  640.938926][T31765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  641.103874][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.504769][T31791] loop6: detected capacity change from 0 to 128
[  641.533696][T31785] loop3: detected capacity change from 0 to 4096
[  641.581253][T31785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.597804][T31794] loop2: detected capacity change from 0 to 128
[  641.642690][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.998118][T31814] hsr_slave_0: left promiscuous mode
[  642.019247][T31814] hsr_slave_1: left promiscuous mode
[  642.052841][T31816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  642.060231][T31816] IPv6: NLM_F_CREATE should be set when creating new route
[  642.067552][T31816] IPv6: NLM_F_CREATE should be set when creating new route
[  642.614413][T31844] __nla_validate_parse: 18 callbacks suppressed
[  642.614438][T31844] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.8361'.
[  642.652812][T31844] netlink: zone id is out of range
[  642.658104][T31844] netlink: zone id is out of range
[  642.667541][T31844] netlink: zone id is out of range
[  642.686660][T31844] netlink: del zone limit has 8 unknown bytes
[  643.278205][T31862] veth0: entered promiscuous mode
[  643.328895][T31861] netlink: 'syz.3.8362': attribute type 13 has an invalid length.
[  643.365544][T31859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8364'.
[  643.430956][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8367'.
[  643.485394][T31873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.670349][T31861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.690690][T31861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.711364][T31882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8368'.
[  643.782951][   T23] lo speed is unknown, defaulting to 1000
[  643.788868][   T23] syz1: Port: 1 Link DOWN
[  643.793437][T31870] veth0: left promiscuous mode
[  643.799039][T28554] lo speed is unknown, defaulting to 1000
[  643.843985][T10630] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.852591][T10630] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.863747][T31886] loop6: detected capacity change from 0 to 164
[  643.948590][T10630] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.958163][T10630] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.010527][T10630] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  644.019156][T10630] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.028322][T10630] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  644.034263][T31897] loop3: detected capacity change from 0 to 512
[  644.037203][T10630] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.060375][T31895] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.8373'.
[  644.076468][T31901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8375'.
[  644.092643][T31895] netlink: zone id is out of range
[  644.098561][T31895] netlink: zone id is out of range
[  644.129599][T31897] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  644.144220][T31895] netlink: zone id is out of range
[  644.161121][T31895] netlink: del zone limit has 8 unknown bytes
[  644.176997][T31897] EXT4-fs (loop3): couldn't read superblock of external journal
[  644.242060][T31910] netlink: 'syz.3.8379': attribute type 13 has an invalid length.
[  644.451225][T31929] netlink: 'syz.0.8384': attribute type 13 has an invalid length.
[  644.600630][T31932] lo speed is unknown, defaulting to 1000
[  644.616419][T31932] lo speed is unknown, defaulting to 1000
[  644.730388][T31936] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  644.780862][   T29] kauditd_printk_skb: 243 callbacks suppressed
[  644.780883][   T29] audit: type=1400 audit(634.113:94030): avc:  denied  { create } for  pid=31938 comm="syz.1.8387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  644.828166][   T29] audit: type=1400 audit(634.113:94031): avc:  denied  { connect } for  pid=31938 comm="syz.1.8387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  644.847763][   T29] audit: type=1400 audit(634.113:94032): avc:  denied  { ioctl } for  pid=31938 comm="syz.1.8387" path="socket:[109844]" dev="sockfs" ino=109844 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  644.887903][   T29] audit: type=1400 audit(634.206:94033): avc:  denied  { getopt } for  pid=31940 comm="syz.1.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  644.992603][   T29] audit: type=1400 audit(634.319:94034): avc:  denied  { setopt } for  pid=31951 comm="syz.1.8393" lport=42460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  645.033163][   T29] audit: type=1400 audit(634.356:94035): avc:  denied  { getopt } for  pid=31956 comm="syz.6.8394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  645.102104][T31962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31962 comm=syz.3.8397
[  645.118104][T31964] 9p: Bad value for 'rfdno'
[  645.118793][T31962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31962 comm=syz.3.8397
[  645.165462][T31962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31962 comm=syz.3.8397
[  645.192254][T31960] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  645.212108][   T29] audit: type=1400 audit(634.515:94036): avc:  denied  { bind } for  pid=31968 comm="syz.3.8400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  645.232244][   T29] audit: type=1400 audit(634.515:94037): avc:  denied  { name_bind } for  pid=31968 comm="syz.3.8400" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  645.232284][   T29] audit: type=1400 audit(634.515:94038): avc:  denied  { node_bind } for  pid=31968 comm="syz.3.8400" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  645.259196][T31969] FAULT_INJECTION: forcing a failure.
[  645.259196][T31969] name failslab, interval 1, probability 0, space 0, times 0
[  645.288708][T31969] CPU: 0 UID: 0 PID: 31969 Comm: syz.3.8400 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  645.288749][T31969] Tainted: [W]=WARN
[  645.288759][T31969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  645.288777][T31969] Call Trace:
[  645.288787][T31969]  <TASK>
[  645.288799][T31969]  __dump_stack+0x1d/0x30
[  645.288917][T31969]  dump_stack_lvl+0x95/0xd0
[  645.288980][T31969]  dump_stack+0x15/0x1b
[  645.289071][T31969]  should_fail_ex+0x263/0x280
[  645.289100][T31969]  should_failslab+0x8c/0xb0
[  645.289130][T31969]  kmem_cache_alloc_noprof+0x68/0x490
[  645.289156][T31969]  ? sctp_get_port_local+0x438/0xae0
[  645.289217][T31969]  sctp_get_port_local+0x438/0xae0
[  645.289315][T31969]  sctp_do_bind+0x398/0x4b0
[  645.289405][T31969]  sctp_connect_new_asoc+0x153/0x3a0
[  645.289437][T31969]  sctp_sendmsg+0xff4/0x1a40
[  645.289535][T31969]  ? selinux_socket_sendmsg+0x101/0x1c0
[  645.289573][T31969]  ? __pfx_sctp_sendmsg+0x10/0x10
[  645.289601][T31969]  inet_sendmsg+0xc5/0xd0
[  645.289677][T31969]  __sock_sendmsg+0x102/0x170
[  645.289709][T31969]  __sys_sendto+0x2b2/0x380
[  645.289744][T31969]  __x64_sys_sendto+0x76/0x90
[  645.289791][T31969]  x64_sys_call+0x29a7/0x3000
[  645.289944][T31969]  do_syscall_64+0xc0/0x2a0
[  645.289988][T31969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.290085][T31969] RIP: 0033:0x7f3bd9c1acb9
[  645.290108][T31969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.290272][T31969] RSP: 002b:00007f3bd8677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  645.290298][T31969] RAX: ffffffffffffffda RBX: 00007f3bd9e95fa0 RCX: 00007f3bd9c1acb9
[  645.290316][T31969] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  645.290332][T31969] RBP: 00007f3bd8677090 R08: 000020000005ffe4 R09: 000000000000001c
[  645.290350][T31969] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[  645.290441][T31969] R13: 00007f3bd9e96038 R14: 00007f3bd9e95fa0 R15: 00007ffecd0cd008
[  645.290465][T31969]  </TASK>
[  645.297309][T31970] netlink: 'syz.1.8396': attribute type 13 has an invalid length.
[  645.559237][   T29] audit: type=1400 audit(634.843:94039): avc:  denied  { setopt } for  pid=31975 comm="syz.6.8402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  645.584357][T31970] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.591716][T31970] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.607722][T31970] batman_adv: batadv0: Interface deactivated: dummy0
[  645.654363][T31984] loop3: detected capacity change from 0 to 512
[  645.682063][T31970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  645.692401][T31984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.696496][T31970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  645.771916][T31993] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.8405: corrupted xattr block 32: invalid ea_ino
[  645.785568][T31993] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  645.795245][T31993] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.8405: corrupted xattr block 32: invalid ea_ino
[  645.809441][T31993] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  645.819716][T31993] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.8405: corrupted xattr block 32: invalid ea_ino
[  645.836177][T10622] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.845195][T10622] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 51716 - 0
[  645.855096][T31993] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  645.892208][T10622] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.901376][T10622] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 51716 - 0
[  645.929006][T10622] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.938741][T10622] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 51716 - 0
[  645.964432][T32001] loop2: detected capacity change from 0 to 1024
[  645.970920][T10622] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.980162][T10622] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 51716 - 0
[  645.995133][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.009954][T32001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  646.039413][T32010] netlink: 'syz.1.8412': attribute type 4 has an invalid length.
[  646.053702][T32011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8412'.
[  646.072290][T32016] veth0: entered promiscuous mode
[  646.079000][T32016] veth0: left promiscuous mode
[  646.103408][T32015] loop3: detected capacity change from 0 to 512
[  646.128550][T32018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8415'.
[  646.140728][T32015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  646.174527][T32015] EXT4-fs (loop3): 1 orphan inode deleted
[  646.181266][T32015] EXT4-fs (loop3): 1 truncate cleaned up
[  646.194086][T32001] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  646.199305][T32015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  646.237505][T31878] IPVS: starting estimator thread 0...
[  646.243982][T32020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8416'.
[  646.290867][T30338] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.331631][T24548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.341572][T32025] IPVS: using max 2064 ests per chain, 103200 per kthread
[  646.353498][T32034] vhci_hcd vhci_hcd.4: default hub control req: 8016 v4303 i0000 l0
[  646.356321][T32033] loop2: detected capacity change from 0 to 1024
[  646.387885][T32033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  646.411415][T32033] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8419: bg 0: block 112: padding at end of block bitmap is not set
[  646.429636][T32033] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.8419: lblock 0 mapped to illegal pblock 0 (length 6)
[  646.454308][T32035] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  646.471092][T32033] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.8419: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  646.545051][T30338] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  646.643361][T32047] tQ±6ã×\b‹¡Y­4: renamed from lo
[  646.663702][T32041] netlink: 'syz.3.8422': attribute type 13 has an invalid length.
[  646.828025][T32055] veth0: entered promiscuous mode
[  646.840351][T32055] veth0: left promiscuous mode
[  646.980863][T32057] netlink: 'syz.3.8427': attribute type 27 has an invalid length.
[  647.084972][T32057] ip6tnl1: left allmulticast mode
[  647.101086][T32058] netlink: 'syz.3.8427': attribute type 27 has an invalid length.
[  647.161391][T32062] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8429'.
[  647.179750][T32058] 8021q: adding VLAN 0 to HW filter on device bond0
[  647.200547][T32058] 8021q: adding VLAN 0 to HW filter on device team0
[  647.220971][T32058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  647.236825][    T9] lo speed is unknown, defaulting to 1000
[  647.242584][    T9] syz1: Port: 1 Link ACTIVE
[  647.251055][T32067] loop2: detected capacity change from 0 to 1024
[  647.259995][T32067] EXT4-fs: inline encryption not supported
[  647.635713][T32067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.662148][T32076] loop6: detected capacity change from 0 to 1024
[  647.686499][T32067] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  647.709834][T32057] bridge_slave_0: left allmulticast mode
[  647.716878][T32057] bridge_slave_0: left promiscuous mode
[  647.720828][T32067] EXT4-fs (loop2): Remounting filesystem read-only
[  647.725133][T32057] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.742632][T32076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  647.761248][T32057] bridge_slave_1: left allmulticast mode
[  647.761624][T32067] usb usb1: usbfs: process 32067 (syz.2.8430) did not claim interface 0 before use
[  647.770557][T32076] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8433: bg 0: block 112: padding at end of block bitmap is not set
[  647.777627][T32057] bridge_slave_1: left promiscuous mode
[  647.799448][T32057] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.808463][T32057] bond0: (slave bond_slave_0): Releasing backup interface
[  647.817512][T32076] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.8433: lblock 0 mapped to illegal pblock 0 (length 6)
[  647.832591][T32076] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.8433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  647.832619][T32057] bond0: (slave bond_slave_1): Releasing backup interface
[  647.867397][T32057] team0: Port device team_slave_0 removed
[  647.876715][T32057] team0: Port device team_slave_1 removed
[  647.883480][T32057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  647.891269][T32057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  647.900756][T30338] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.912178][T32057] batman_adv: batadv0: Removing interface: ipvlan2
[  647.913000][T31205] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  647.931285][T32057] batman_adv: batadv0: Removing interface: ipvlan3
[  647.951207][T31880] lo speed is unknown, defaulting to 1000
[  647.962307][T32082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8436'.
[  648.013185][ T3433] ==================================================================
[  648.021367][ T3433] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  648.030034][ T3433] 
[  648.032396][ T3433] write to 0xffff88810d92ed08 of 44 bytes by task 32082 on cpu 1:
[  648.040240][ T3433]  tty_set_termios+0xc0/0x910
[  648.044984][ T3433]  set_termios+0x373/0x4f0
[  648.049445][ T3433]  tty_mode_ioctl+0x37f/0x5b0
[  648.054262][ T3433]  n_tty_ioctl_helper+0x91/0x210
[  648.059254][ T3433]  n_tty_ioctl+0x101/0x230
[  648.063714][ T3433]  tty_ioctl+0x83e/0xb80
[  648.067996][ T3433]  __se_sys_ioctl+0xce/0x140
[  648.072638][ T3433]  __x64_sys_ioctl+0x43/0x50
[  648.077272][ T3433]  x64_sys_call+0x14b0/0x3000
[  648.081995][ T3433]  do_syscall_64+0xc0/0x2a0
[  648.086536][ T3433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.092557][ T3433] 
[  648.094904][ T3433] read to 0xffff88810d92ed22 of 1 bytes by task 3433 on cpu 0:
[  648.102558][ T3433]  n_tty_receive_char_flow_ctrl+0x59/0x1d0
[  648.108512][ T3433]  n_tty_lookahead_flow_ctrl+0xed/0x130
[  648.114098][ T3433]  tty_port_default_lookahead_buf+0x91/0xc0
[  648.120227][ T3433]  flush_to_ldisc+0x288/0x340
[  648.124943][ T3433]  process_scheduled_works+0x4cd/0x9d0
[  648.130439][ T3433]  worker_thread+0x581/0x770
[  648.135066][ T3433]  kthread+0x488/0x510
[  648.139606][ T3433]  ret_from_fork+0x148/0x280
[  648.144276][ T3433]  ret_from_fork_asm+0x1a/0x30
[  648.149090][ T3433] 
[  648.151519][ T3433] value changed: 0x13 -> 0xeb
[  648.156392][ T3433] 
[  648.158741][ T3433] Reported by Kernel Concurrency Sanitizer on:
[  648.165088][ T3433] CPU: 0 UID: 0 PID: 3433 Comm: kworker/u8:9 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  648.177125][ T3433] Tainted: [W]=WARN
[  648.180949][ T3433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  648.191200][ T3433] Workqueue: events_unbound flush_to_ldisc
[  648.197044][ T3433] ==================================================================