last executing test programs:

2m39.666807681s ago: executing program 1 (id=18):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`'], 0x60}, 0x1, 0x0, 0x0, 0x24000485}, 0x4048084)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xa4d1d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_config_ext={0x7, 0x100}, 0x3054, 0x3, 0x43a1bd76, 0x7, 0xd, 0x6, 0x40, 0x0, 0x2000000, 0x0, 0x2008}, 0x0, 0x2003ffffffffc, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fff1f00006000540001c020008000640"], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x24008000)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0x28}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004004)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
inotify_rm_watch(0xffffffffffffffff, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, 0x0)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x30000001)
setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000400)=0xffffffff, 0x4)
sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

2m37.511186694s ago: executing program 1 (id=29):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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")
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x6}, 0x8)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000, 0xe}, 0x104b18, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x40001, 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002880))
syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4002011, 0xffffffffffffffff, 0x3aba8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300))
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x7fff, 0x9, 0x7fff, 0x7fff, 0xff, 0x4, 0x9, 0x60a4]}, 0x14)

2m37.173288446s ago: executing program 1 (id=34):
r0 = socket(0x840000000002, 0x3, 0x100)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x42cd, 0x3, 0x7, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a3100000000080002400000000304000600140000001100", @ANYRES64=r1], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a010100"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x60, 0x2, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc63}}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1003}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40095)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfffffffffffffe1a}}, 0x4)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x57})

2m37.019267271s ago: executing program 1 (id=36):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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")
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40044591, 0x0)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0100, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x6d499, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r7=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000680)={0x1d, r7}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040))
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x18040880)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x44, r11, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008840)

2m35.894280589s ago: executing program 1 (id=44):
r0 = socket$packet(0x11, 0x3, 0x300)
io_setup(0x4, &(0x7f00000014c0)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}])
r3 = fcntl$dupfd(r0, 0x406, r0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000080)="05031600d3fc140000004788031c", 0xe, 0x84, &(0x7f0000000480)={0x11, 0x4, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x82)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r8=>r0, {0x4}}, './file0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x23, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x4c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xf, 0x62, &(0x7f0000000240)=""/98, 0x41000, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x8, 0x5c9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r7, r8], 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f0000000140)={[{@grpid}, {@jqfmt_vfsv1}, {@grpid}]}, 0x0, 0x504, &(0x7f0000000bc0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHaX3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5ILhxKQekAhGoQeJgNONJ6iZ2EzWJHcW/nzSa92am/t6zO+/Vn2u/AIbWuxGxGxFjEXEnIqaz47lsi0/bW3Lds70HS/t7D5Zy0Wp9/s9cej45Fh1/JnEte8xiRPzoexE/zR2P29jeWVusViubWX22WduYbWzv3FytLa5UVirr5fLC/MLcx7c+Kp9bX9+pjWWlrz754+63fp40ayo70tmP89TueuEwTmI0In5wEcEGYCTrz9igG8IryUfEmxHxXnr/T8dI+moCAFdZqzUdrenOOgBw1eXTHFguX8pyAVORz5dK7RzeWzGZr9YbzRt361vry+1c2UwU8ndXq5W5LFc4E4VcUp9Py8/r5SP1WxHxRkT8cnwirZeW6tXlQf7DBwCG2LUj8/9/xtvzPwBwxRUH3QAAoO/M/wAwfMz/ADB8zP8AMHza8//EoJsBAPSR9/8AMHzM/wAwVH742WfJ1trPfv96+d721lr93s3lSmOtVNtaKi3VNzdKK/X6SvqbPbWTHq9ar2/Mfxhb92e+vdFozja2d27X6lvrzdvp73rfrhTSq3b70DMAoJc33nn8l1wyI38ykW7RsZZDYaAtAy5aftANAAZmZNANAAbGal8wvM7wHl96AK6ILkv0vqDY7QtCrVardXFNAi7Y9S/J/8Ow6sj/+1/AMGTk/2F4yf/D8Gq1cqdd8z9OeyEAcLnJ8QM9Pv9/M9v/Lvtw4CfLR694dJGtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtYP3fUrYW+FTk86VSxGsRMROF3N3VamUuIl6PiD+PF8aT+vyA2wwAnFX+77ls/a/r0x9MvXDq7WuHxbGI+NmvP//V/cVmc/NPEWO5f40fHG8+yo6X+996AOBkB/N0uu94I/9s78HSwdbP9jz9bkQU2/H398Zi/zD+aIym+2IUImLy37ms3pbryF2cxe7DiPhit/7nYirNgbRXPj0aP4n9Wl/j51+In0/PtffJc/GFc2gLDJvHyfjzabf7Lx/vpvvu938xHaHOLhv/koda2k/HwOfxD8a/kR7jX9q+iVPE+PAP32+Xjl/89GHEl0cjDmLvd4w/B/FzPeJ/cMo+/vUrb7/X61zrNxHXo3v81G57N9usbcw2tndurtYWVyorlfVyeWF+Ye7jWx+VZ9Mc9Wzv2eAfn9x4vde5pP+TPeIXT+j/10/Z/9/+786Pv/aS+N98v1v8fLz1kvjJnPiNU8ZfnPx9sde5JP5yj/6f9PrfOGX8J3/bObZsOAAwOI3tnbXFarWyqaDwyoWZ7G/ThcdKglyOLh8vfKdfscZ6PM+/eL/9Khw51Wq9UqxeI8Z5ZN2Ay+Dwpo+I/w66MQAAAAAAAAAAAAAAQFf9+MbSoPsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA1fX/AAAA//9KusxG")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000001c0)={0x4, 0x746, 0x1000006, 0x5, 0x3, 0x6, 0x20000000ffe, 0x5, 0xfffff3e4})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffb, 0x2000001, {0x0, 0x0, 0x0, r9, {0x9, 0xe}, {0xfff2, 0x10}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m34.69133828s ago: executing program 1 (id=50):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x600, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m19.652405649s ago: executing program 32 (id=50):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x600, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

1m34.76628798s ago: executing program 0 (id=576):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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")
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
r0 = epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2b, 0x5, 0x2, 0x0, 0x8, 0x3, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x89ff]}})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000"], 0x48)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10)
write(r6, &(0x7f0000000480)="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", 0x121)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

1m33.796020453s ago: executing program 0 (id=582):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x17, 0xcec, 0xffec, 0x4, 0x0})

1m33.439251945s ago: executing program 0 (id=583):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020400)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040)
r4 = dup3(r2, r3, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, 0x0, 0x4044000)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="0005000000200010000000000000000000100000", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28, @ANYRES16=r4], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)

1m32.719819029s ago: executing program 0 (id=588):
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfff7fffffffffffb, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, 0x0)
ioctl$sock_netdev_private(r0, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
write(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80)
r4 = getpid()
syz_pidfd_open(r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents(r6, &(0x7f0000000000)=""/34, 0x22)
getdents(r6, 0xffffffffffffffff, 0x5a)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)

1m32.306271213s ago: executing program 0 (id=595):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fb010000000000000000001000000001ac1414bb0000000000000000000000000000040010000000020020"], 0xb8}}, 0x0)

1m31.885311747s ago: executing program 0 (id=607):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a)
pipe2$9p(&(0x7f0000000140), 0x800)
open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES64=r6], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m31.758758152s ago: executing program 33 (id=607):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a)
pipe2$9p(&(0x7f0000000140), 0x800)
open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES64=r6], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

13.200139453s ago: executing program 5 (id=1300):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000380)={[], [{@seclabel}]}, 0x11, 0x565, &(0x7f00000025c0)="$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")

12.407090659s ago: executing program 5 (id=1307):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0xb2}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.155335578s ago: executing program 5 (id=1308):
timer_create(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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")
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r5 = fspick(r4, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000000000000090000000000000007"])
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r9, &(0x7f0000000280)="59ae23f9e6521aa15d707d4a25447b598664162874fb34d4b1fc62e082141e6834dff6d5a6dbb046732e9f89a7501822658d3dfa06c7ae8a6e88bd1cc7bb4049d4524d59b1f509cec4fbb765a138e554e68293784d7afecaa0a8a3ac8877458052d996cf27bf5a75c3fd2e0a63fde417088755627644", &(0x7f00000003c0)=""/86}, 0x13)
r10 = timerfd_create(0x4, 0x1000)
timerfd_gettime(r10, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)

9.4457283s ago: executing program 5 (id=1316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x10)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000000c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x18, r1, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x1000000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x1234, &(0x7f0000003440)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x124)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, 0x0, 0xffffffffffffff9c, 0x0, 0x274)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r9 = open(&(0x7f0000000540)='./bus\x00', 0x28000, 0x0)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0xa82, 0x0)
write$cgroup_int(r10, &(0x7f0000000000)=0x922, 0x12)
preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)

8.526367911s ago: executing program 5 (id=1319):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r3, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x188c42, 0x160)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r6)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r8, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffc01}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffff81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)
r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1000, 0x0, 0x398})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce)
io_uring_enter(r9, 0x8ae, 0x6931, 0x17, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x300, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x140}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f0000001a00)=""/4106, 0x41100, 0x24}, 0x94)

7.901130842s ago: executing program 5 (id=1323):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x8c}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.865039224s ago: executing program 34 (id=1323):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x8c}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.823234425s ago: executing program 2 (id=1325):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c7, &(0x7f0000001080)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x10000, 0x2, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r5, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7040fcdbdf251b00000008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x138, r4, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "112789c977a60cb3480371c61b"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x11, 0x4, "7230cf792dbff2705e8ddc704e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "6c93d9a4fe6c9ca3710ad2d017"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x70, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "eb498975c5a11d6b009d73bd0c"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bfefe1950d57ed4d1db61fc6aa"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x20008015)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8000001}, 0x1c)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x10001)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "addf7ccffd914d4f51b57b3f80ff847f", '\x00', "0100d2b730030004"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
close(r1)
dup(r0)

4.001042224s ago: executing program 2 (id=1338):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc844}, 0x4000)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0xc9e, &(0x7f0000000040)={0x0, 0x40dd, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x8000, 0x80, 0xffffff93, 0x200, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @local}}}})
r1 = getpgrp(0x0)
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x34020000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.971910305s ago: executing program 6 (id=1339):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_emit_ethernet(0x47, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x11, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x11, 0x0, @opaque="0300000070e185af60"}}}}}}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
sendfile(r3, r2, 0x0, 0xa)
read$hidraw(r3, &(0x7f0000000180)=""/21, 0x15)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x174, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@multicast1, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x174}}, 0x0)
mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "88f6a5d8624af314bc"}, @NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0xd88c28f77a942d61}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "1070dffe1a7f8cf4a596c45502d29a976f7e33ddd8ba1eab33d8a406b0dd099ec1f19cb36d75ab4870d16a561366df452dc394ea34fecbab0a17f54abfc611f54a08854d38dd92ec9b3820141490474fa4c4e317a613a204bf206c202c1302f96469ba9ae311"}, @NFTA_CHAIN_USERDATA={0x6b, 0xc, "b7d088692114b18403296cc5d68425fededf2bb9af1a7c309d4590c4d03b0ff7d01ffe4bbd5a9b5d311ed499b5e0cfe45156634e7522b5739d3f00a7542708a1db0e8e3fc694a58f01c1d8b6effad952fd51d22a9d4cdda940b00ba8525c0cf0c241737ba7a20b"}]}, @NFT_MSG_NEWTABLE={0x148, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9c, 0x6, "344e2cecacb68c3673dd89d26851f2334cbd226263f6376e1524f6266317c621b6424477fdcc6a7daeb350bd717e8c744ef908b477cd73ea46fb87be7db5b1c05ae13fe038d6607d0aa92b01ce4fbafa5b1e1f7124374d50634bd5a34adb6d535986ddac57fdf3242fc6ec76db3a6461d364bc4a2e1dd3d85152638ba30fd8cfb3407ba5a9655fc1dbd9bdf1145778eb74b06321e7b80fe9"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x68, 0x6, "be332022623fea2df38c3c4cc2e05d8c3c30e11c7001209aa2dab6913a7a0fc13536a592603518e6e82eb246ee7bfc0c65531cbbc36a42c21c7e72cc9ab9c95ee49e4af94c1bf8e8d2b9c074d0f395557bb5b6c7f354f5e037fc55fd282a3840c0b82919"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x404}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)

3.907497408s ago: executing program 2 (id=1341):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x140}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f0000001a00)=""/4106, 0x41100, 0x24}, 0x94)

3.894595338s ago: executing program 2 (id=1342):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x140}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f0000001a00)=""/4106, 0x41100, 0x24}, 0x94) (fail_nth: 2)

3.027429897s ago: executing program 3 (id=1345):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x7c}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.026738338s ago: executing program 4 (id=1346):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000640)={@val={0xa, 0x10}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x5, 0x1c, 0x65, 0x0, 0x4, 0x6, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xb7}, {[@lsrr={0x83, 0x3, 0xf1}]}}}}}}}, 0x2e)

3.019025228s ago: executing program 3 (id=1347):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000740), 0x0, 0x40000040, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x20000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x4, 0x1, 0x9bd, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x5, 0xfffffffd, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PBURST={0x8, 0x7, 0x921}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x8}}]}}]}, 0x464}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
getcwd(&(0x7f00000003c0)=""/257, 0x101)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)

2.937041931s ago: executing program 4 (id=1348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002ec0)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x80000001, 0x7, 0xf, 0x1}, 0x2, 0x2}, [{0x77dd, 0xfffffff1, 0x6f1, 0x1, 0x0, 0xfffffffc}, {0x3, 0x5, 0x3, 0x800, 0x6, 0x8}, {0xc5, 0x80, 0x3fd8, 0x15, 0xd138c75, 0x1}, {0x4, 0x83a, 0x6, 0x4, 0x6fd, 0x800}, {0x500000, 0x9, 0x8, 0x9, 0x1, 0x2}, {0x0, 0x3, 0xce1, 0xc, 0x4, 0xfff}, {0xfffffffb, 0x7ff, 0x6, 0xc, 0x4, 0x7}, {0x3, 0x2, 0x2, 0x5, 0x6ab}, {0x10, 0x4, 0xfffffffa, 0x1, 0xffffffff, 0x1}, {0x3, 0x8, 0x7d2, 0xfffffffc, 0x0, 0x6}, {0x1, 0x2, 0x7, 0x2, 0xffff4d21, 0x4}, {0x400, 0x7, 0x2, 0x40000000, 0x5, 0x3}, {0x4, 0x4, 0x1, 0x4, 0x6, 0x3}, {0x80000001, 0x34, 0x6, 0x80, 0x7f, 0xfffffffc}, {0x4c, 0x3, 0x9, 0xdc, 0x5}, {0x5, 0x8, 0x1, 0x8c35, 0xe, 0x7}, {0x3, 0x2, 0x80000000, 0x5}, {0xfffffffd, 0xa, 0x8, 0x1ff, 0xffffffff, 0x1000}, {0x0, 0x7, 0x0, 0x7, 0x9, 0x5}, {0x1, 0x1, 0x8, 0x2, 0x81, 0x1}, {0x2969, 0x1, 0x40, 0x8, 0x100, 0x4}, {0x4, 0x7, 0x5, 0x3, 0x0, 0x5f}, {0x1, 0x101, 0x9, 0xc, 0x9, 0x4}, {0x8, 0x6, 0x3, 0x8, 0x6, 0x7}, {0x1f1, 0x4, 0xe, 0xc4, 0x9, 0x401}, {0x8000, 0x5, 0x0, 0x81, 0x80000000}, {0x6, 0x40, 0x8, 0x0, 0xa, 0xa}, {0xcffb, 0x74, 0x2, 0xffff2ba7, 0x7ff, 0x98}, {0x63, 0x5, 0x3, 0x9, 0x0, 0xfffffff7}, {0xf, 0x8000, 0x5, 0x559b9466, 0x80000000, 0x2289}, {0x400, 0x90, 0x0, 0xd9, 0x9, 0x10001}, {0xc8, 0x1, 0xba8, 0x7fffffff, 0x7fffffff, 0x1ff}, {0x385d, 0x7, 0x81, 0x0, 0xbae}, {0xfffffff8, 0x60c8d747, 0x7, 0x1, 0x9, 0x9}, {0x6, 0xa2, 0x6, 0x49, 0x8, 0x1}, {0x25a, 0x33d, 0x9, 0xe, 0x0, 0xfa93}, {0xff, 0x2, 0x10001, 0x40, 0x2, 0x9}, {0x7, 0x1ff, 0x8, 0x5, 0x1, 0x9}, {0x0, 0x86, 0x7, 0x8000, 0xc, 0x800}, {0xfffff807, 0x6, 0x8, 0x1, 0x3, 0x4}, {0xfffffffe, 0x7, 0x1, 0x0, 0xa}, {0xd3, 0x1, 0x6, 0x2, 0x5, 0x5}, {0x4, 0x8, 0x400, 0x27cd, 0x800, 0x5}, {0x9, 0x0, 0x8, 0x7, 0x6, 0x3}, {0xfffff891, 0xf26, 0x2, 0x1000000, 0x4, 0x89}, {0x8001, 0x3ff, 0x4, 0x7, 0x7, 0x5}, {0x8, 0x800, 0x1, 0x200, 0x3, 0x3}, {0x10, 0x2, 0x6, 0x170, 0x2, 0x1}, {0x3, 0xfff, 0x5, 0xd, 0x0, 0x7}, {0x81, 0x3, 0x8, 0x1, 0x8001}, {0xff, 0x7, 0x0, 0x9cf, 0xfffffffa, 0x8}, {0x8, 0x4, 0x4, 0x7, 0x91, 0x3}, {0x9, 0xf, 0x9, 0x3, 0x2, 0x1}, {0x5, 0x4, 0x3398, 0x0, 0x3, 0x4}, {0x2, 0x9, 0x3ff, 0x5, 0xfffffffa, 0xfff}, {0x3, 0x0, 0x80000000, 0x7, 0x2fba, 0x6}, {0x1, 0x9, 0x4, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x1, 0x3, 0x3, 0x8}, {0x0, 0x80, 0x200, 0x10001, 0x5, 0xec4d}, {0xc, 0x0, 0xffff7fff, 0x1000, 0xfff, 0x5}, {0x1c, 0x5, 0x4, 0x42bb, 0x1, 0x9}, {0x2, 0x80000000, 0x7, 0xd8, 0x4, 0x2}, {0xfffffffb, 0xbf7, 0x7, 0x6, 0x1, 0xd}, {0x1, 0x200, 0x64, 0xfdc, 0x7, 0x2}, {0x100, 0x7, 0x6, 0x2, 0x0, 0xffff}, {0x7, 0xc, 0x3, 0x0, 0x76, 0x7}, {0x8001, 0xffffffbd, 0x9, 0x1, 0x98, 0x3dd000}, {0x3, 0xa0, 0x9, 0x4, 0x50, 0x31}, {0x80000000, 0x0, 0x400, 0xd34, 0x9, 0x80000000}, {0x9, 0x7, 0x5, 0x6, 0x4, 0xfffffffa}, {0x76535f7c, 0x100, 0x1, 0x6, 0x1, 0x400}, {0x8, 0x7, 0x4, 0x123, 0x9, 0x1e8}, {0x6, 0x9, 0xfffffff8, 0x3800000, 0x1ff, 0x9600000}, {0x4, 0x1, 0xfffffffb, 0xfff, 0x0, 0xfffffff9}, {0x3, 0x3, 0x7, 0x7, 0xb21}, {0x2, 0x2, 0x101, 0x8, 0x2, 0x6}, {0x0, 0x6, 0xfff, 0x8, 0x9, 0xd370}, {0xffff, 0xfffffff9, 0x1, 0xcb74, 0x79, 0x400}, {0x6, 0x4, 0x100, 0x970, 0x1d49, 0x81}, {0x8, 0xfffffff6, 0x7b, 0x9, 0x512, 0x2}, {0x100, 0xfa, 0x800, 0xdfc7, 0x8001, 0x5000000}, {0x0, 0x0, 0xffffffff, 0x16d, 0x6, 0x3}, {0xffff, 0x2, 0x4, 0x748, 0x666, 0x1}, {0x3, 0x7ff, 0x0, 0x0, 0x6, 0x8}, {0x4, 0x629, 0x9, 0x8001, 0x4, 0x80a6}, {0xfffffff7, 0x8, 0x5, 0x5, 0x6, 0x9}, {0x7, 0x7, 0x2, 0x6, 0x8, 0xb4d7}, {0x6, 0x2, 0x382, 0x6f275d9d, 0x1, 0x81}, {0xe, 0x4a40, 0x193, 0x3, 0x9, 0x4}, {0x6, 0xe000, 0x7fffffff, 0x6, 0x8, 0xcf}, {0x2, 0xa1, 0x9, 0x4, 0x5, 0x1}, {0x58bf, 0x8, 0x6, 0xb74, 0x7f, 0x401}, {0x6, 0x277527ef, 0x1ff, 0xc, 0x5, 0x6}, {0x2, 0x96, 0x8, 0x6, 0x5, 0x2b81ecd9}, {0x3, 0xd0, 0x8, 0x101, 0x80000001, 0x1}, {0xffff, 0x5, 0x5, 0x400, 0xa71, 0x4}, {0x0, 0xd, 0x7fff, 0xfffffffd, 0xf, 0xc}, {0x0, 0x81, 0x9, 0x9017, 0x5, 0x3}, {0x7, 0x4, 0x5, 0x6, 0x40, 0x9}, {0x3, 0x57de32e5, 0x3, 0x7, 0x1ff, 0xffffffea}, {0x4, 0x1, 0x4, 0x8, 0xfffffffd, 0x4}, {0x9, 0x5, 0xc7e, 0x4, 0x3, 0x6}, {0x3, 0x2, 0x3, 0xa, 0x7, 0x1a48}, {0x9, 0x5, 0xa, 0x8, 0x1, 0x20}, {0x7, 0x10, 0xffffffaf, 0x80, 0x2, 0xba}, {0x6, 0x3fff80, 0x0, 0x1, 0x8001, 0x7}, {0xff, 0x3, 0x1, 0x2, 0x0, 0x101}, {0x1ce6, 0x1000, 0x4, 0x0, 0x800, 0xc}, {0x3, 0x2, 0x7, 0x3, 0x6, 0x30e9}, {0x9, 0x620, 0x10, 0xdf, 0x2}, {0x0, 0x0, 0x2f, 0x7, 0x1, 0x80000001}, {0xccf4, 0x2, 0x3, 0x8, 0x4, 0x5}, {0x4, 0x8bb9, 0x2, 0x0, 0x1, 0x32}, {0x4, 0x40, 0x8, 0x4, 0x80, 0x5}, {0x6, 0x65, 0xa, 0x2, 0x7, 0x80000001}, {0x6, 0x8, 0x3, 0x68e, 0x1000000, 0x80000000}, {0x5, 0xa, 0x7cc3b72a, 0x3, 0xfff, 0x2}, {0x7, 0x2, 0x3, 0x6, 0x7ff, 0x9}, {0x2, 0x5, 0x9, 0xff, 0x81, 0x9}, {0x0, 0x3, 0x15b, 0x7fff, 0xb, 0x3}, {0x97a, 0x7, 0x7, 0x7ff, 0x2, 0x9}, {0xfff, 0x7ff, 0x1000, 0x7, 0x8726, 0x47}, {0xc, 0x8001, 0x400, 0x4, 0x4, 0x6}, {0x1, 0x9, 0x0, 0x2, 0x9, 0x80}, {0x8, 0x8, 0x669, 0x0, 0x2, 0x7ff}, {0x3, 0xfffffffe, 0x0, 0x0, 0x1a9}, {0xfffffffe, 0x0, 0x6, 0x1, 0x11fdab2a, 0x6}, {0x7, 0x5, 0xdb, 0xa4, 0x8, 0x10000000}], [{0x5, 0x1}, {0x3, 0x1}, {0x651b961298e239dc}, {0x5}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {}, {0x3}, {0x3, 0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x2}, {0x4}, {0x3}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x36edcfb9ec8df1ee}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {}, {0x2}, {0x5}, {0x3}, {0x4}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0)

2.863435373s ago: executing program 4 (id=1349):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1d1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
pipe2$9p(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
write$cgroup_devices(r2, 0x0, 0x26c7)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
listen(r0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1d1842, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
pipe2$9p(&(0x7f0000000040), 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async)
write$cgroup_devices(r2, 0x0, 0x26c7) (async)

2.848427574s ago: executing program 7 (id=1324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
setuid(0xee00)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe41)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000200000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)

2.799311865s ago: executing program 4 (id=1350):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1f, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7}, 0x3c)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
vmsplice(r3, &(0x7f0000000640), 0x0, 0x8)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x4042, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x1010, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x18810, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002, 0x0, 0x95ecffc9c46470a0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)

2.752053207s ago: executing program 6 (id=1351):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207bf7f7ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', <r4=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@initdev, @empty, <r5=>0x0}, &(0x7f0000000400)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40040c0)

2.539374424s ago: executing program 6 (id=1352):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/32, 0x20}], 0x1}, 0x8}], 0x1, 0x21, 0x0)
shutdown(r1, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x7, 0x9]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40080}, 0x40880)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

2.538608314s ago: executing program 2 (id=1353):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r1, 0x90, 0x7)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x342}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x0, r2, 0x0, 0x80000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b4ed6bdf048e9463cd504000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726964676500001400028005002b0002000000080004"], 0x44}, 0x1, 0x0, 0xff7f}, 0x24)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe7d, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x7, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

2.119793038s ago: executing program 6 (id=1354):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8, 0x400000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = gettid()
tkill(r6, 0x12)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x40030002, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)

2.05960693s ago: executing program 3 (id=1355):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

1.935417805s ago: executing program 3 (id=1356):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
fallocate(r0, 0x8, 0x4000, 0x10000)

1.829195658s ago: executing program 4 (id=1357):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x6, 0xfd, 0x9, 0x2}, 0x10}}, 0x4)
setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)="ff9f641238ce122f3ca4a4e382cefb43b74fcffd57fabfd4e59b8fe6e0f084bc23124389faf060e90eb5e31447cbe225a43ef2d37eec0f5e35e68864235c3fd650bdbbd619ccce9cf12f38357af91e019bc043a498b0687e4298911c4d2902110327acadf41064310d58500867df07da09174f41d5103bc16d5ace4a30", 0x7d, 0x1)
fcntl$setlease(r0, 0x400, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r4 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000400)={0xb32afcd75fe9b214})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68)
r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0xe0942)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78ec979fd1e00d96072000001ea89de2b7fbce5f564580b8785d960001000000000000000000007efff100004000000600000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
fallocate(r5, 0x11, 0x0, 0x5345)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x88}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.583225567s ago: executing program 3 (id=1358):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r3)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8)
r4 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6)
fallocate(r4, 0x0, 0x0, 0x400001)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x200, 0x0, 0xfc, 0x3, 0x5, 0x2}, 0x20)
ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000380))
fcntl$addseals(r4, 0x409, 0xe)
r6 = dup(r4)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f5, 0x800, 0x70bd26, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8090}, 0x8051)
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_OWNER_UID(r10, 0x8004b706, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r7], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
socket$inet6_udp(0xa, 0x2, 0x0)
gettid()

1.287627336s ago: executing program 7 (id=1359):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x8, 0x9, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x90, 0x750, 0x28000000, 0xfffffffe}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x200000000000005b, &(0x7f0000000040)=ANY=[@ANYBLOB="180000010000004100000000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', r2, 0x24}, 0x94)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xc6bb, 0x400, 0x3, 0x40288}, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008600)=@deltfilter={0xe90, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xbf, 0x2, 0x10000000, 0x4, 0x81}, 0x8, 0x6}, [{0x2, 0x6, 0x2400000, 0x3, 0x0, 0x7fffffff}, {0x66d, 0x8, 0x6, 0x9, 0x5a8ab92c, 0x2e}, {0x4, 0x1, 0xa, 0x2, 0x8, 0x7ff}, {0xc, 0x3, 0x9f51, 0x2, 0xffff, 0xffffffff}, {0x2, 0x9, 0x0, 0x7, 0xe, 0x4}, {0x4, 0x9, 0xfffffffe, 0x2, 0x4, 0x7}, {0x61, 0x5, 0x800, 0x5, 0x6, 0x8}, {0x8, 0x0, 0x4, 0x4, 0x1, 0xfffffffc}, {0xc6b8, 0x0, 0x5, 0x9, 0x6, 0x5}, {0xc, 0x18a6, 0x4, 0x92b3, 0x8, 0x9f94}, {0x3, 0x7, 0xc5ff, 0x4, 0x9, 0x3}, {0x800, 0x5, 0x7, 0x1, 0x0, 0x1}, {0xa, 0x1, 0x7fff, 0x6, 0x9, 0x2}, {0x6, 0x0, 0x200, 0xac4, 0xfffeffff, 0x6}, {0x3d4, 0x8000, 0x4, 0x9, 0x36f, 0x9}, {0xfff, 0x10001, 0x6, 0x5, 0x2, 0x4}, {0x7fff, 0x8, 0x66f, 0x10001, 0x7}, {0x6, 0x1, 0x8, 0x0, 0x4, 0x8}, {0x3, 0x1ff, 0x3, 0x0, 0x96b, 0x2}, {0x5, 0x40, 0x3ff, 0x2, 0x0, 0x92f8}, {0x6, 0xfffffff7, 0x8, 0x2, 0xfffffff9, 0x7f}, {0x2, 0xfffffff7, 0x4, 0x8, 0x5a7d5c34, 0x2}, {0xd, 0x10001, 0x7, 0x9, 0x9, 0x7}, {0xfffffffc, 0x3, 0x6, 0x80000000, 0xfff, 0xc63}, {0xa, 0x2, 0xc737, 0x7676, 0x2, 0x5}, {0x9d, 0x9, 0x0, 0x7, 0x800, 0x5}, {0x0, 0x0, 0xfffff801, 0x7, 0x3, 0xffffffff}, {0x800, 0x3, 0x58, 0x6, 0x9, 0x6}, {0x9, 0xa3, 0x1, 0x3, 0xe56, 0x4}, {0x2, 0x208a, 0x8, 0x401, 0x7, 0x9}, {0xa, 0x1, 0x80000000, 0x7, 0x7fff, 0xfff}, {0x1, 0x0, 0x9, 0x11, 0x5, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x7, 0x9}, {0x84, 0x1e, 0xfffffffd, 0x80, 0x515b, 0x900c}, {0x1, 0x4, 0xef2c, 0x7fffffff, 0xfffffffa, 0x1}, {0x8, 0xc, 0x47, 0x9, 0x985d, 0x101}, {0x7fffffff, 0xfffff83d, 0x7, 0x1000, 0x9, 0x2}, {0xd6b, 0x3, 0x6, 0x9, 0x8, 0x1}, {0x5, 0xfff, 0x95, 0x9, 0x728, 0x10001}, {0xe97, 0xfffffff9, 0x8ea, 0xee6f, 0x800, 0x5}, {0x5, 0x5, 0xfffffffb, 0x2, 0x87, 0xfffffeff}, {0x200, 0xfffffffc, 0xb15, 0xfffffffc, 0x80000001, 0x8216}, {0x100, 0x0, 0x8, 0x8, 0x3, 0x1}, {0xbd, 0x9, 0x7, 0x5b55, 0x8, 0x92}, {0x2, 0x6, 0x631, 0x8, 0x200, 0x9}, {0x0, 0x0, 0x2, 0xd0f, 0x1000, 0x1}, {0x8, 0x9, 0x8, 0x2, 0x0, 0x749d}, {0x2, 0x5, 0x3, 0x3, 0x9, 0x5}, {0x8, 0x3, 0x21e, 0x80000001, 0x5e8, 0x2a}, {0x8, 0xce0c, 0x8, 0x10, 0x10000000}, {0x8, 0x2, 0x1ff, 0x6, 0x9, 0x9}, {0x81, 0x5, 0x8, 0x10, 0x5, 0xfffffffe}, {0x1, 0x7, 0xbfd, 0x2, 0x9, 0xb}, {0x5, 0x80000000, 0x5, 0xb572, 0x4, 0x4}, {0x7ff, 0x1, 0x80000001, 0xb6, 0xa, 0x43}, {0x5, 0x7fff, 0xbb31, 0x8, 0xfffffff7, 0x8}, {0xa2, 0x100, 0x3, 0x0, 0xb5, 0xb}, {0x2, 0x0, 0x1cf4, 0xfffffffa, 0x4, 0x7}, {0x8001, 0x0, 0x9, 0x8, 0x1, 0x2}, {0x2, 0x0, 0xfa40, 0x3, 0x7}, {0x6, 0x4, 0x0, 0x6, 0x2946, 0x7}, {0x6, 0x3, 0x0, 0x2, 0x5, 0x1}, {0x5, 0x6, 0x88, 0x4, 0x1, 0x4df2}, {0x1, 0x1, 0x4, 0x1, 0x0, 0x6}, {0xfffff001, 0x1, 0x2, 0x79, 0x6, 0xbd15}, {0x1, 0x3, 0x800, 0xc1ab, 0xffff04e2, 0x6a}, {0xffff, 0x4, 0xec4, 0x0, 0x62, 0x9}, {0x0, 0x1, 0x100, 0xfffffff4, 0x7, 0x6}, {0x132, 0x6bfd, 0x5, 0x7, 0x7fff, 0x6}, {0x80, 0x1, 0x2, 0xeff, 0x401, 0x1}, {0x0, 0x7, 0x1, 0x1, 0x9, 0x600000}, {0x3, 0x0, 0x1, 0x94, 0x80000001}, {0x1ff, 0x7f, 0xfffffffd, 0x7, 0x2c6e4479, 0xfffffffa}, {0x7, 0x0, 0x592, 0x5, 0xe0000000, 0x3}, {0x5, 0x2, 0xfffffffd, 0x5, 0x9, 0x7}, {0x1000, 0xde, 0x8, 0x4, 0x8, 0x4}, {0xfff, 0x10000, 0x7fff, 0x99, 0x52, 0xb}, {0x200, 0x5, 0x3, 0x8, 0x6, 0x3}, {0x8, 0x5, 0xcd2, 0x3, 0xaa, 0x9}, {0xb1bb, 0x4, 0x4, 0x80000001, 0x5, 0x5}, {0x1ff, 0xffffffff, 0x5, 0x1000, 0x2, 0x7}, {0x0, 0xffff, 0x0, 0x6, 0x8, 0xe641}, {0x7, 0x329, 0x1, 0x0, 0x3, 0x3}, {0xfffffff9, 0x1, 0x4, 0x7, 0xc, 0x1ff}, {0x3, 0x4dd, 0x0, 0xcbf51f7, 0x200, 0x33}, {0x2, 0x7, 0xffffffff, 0x259, 0x2, 0x7}, {0x5, 0x6, 0x6, 0x2, 0xfffffffe, 0x6}, {0x6, 0x6, 0xfffffff9, 0x6, 0x8, 0x3d8}, {0xec78, 0x101, 0x5, 0xffffffff, 0xffff, 0x10000}, {0xffffffff, 0x3, 0x5c54, 0xfffffc00, 0x3ec1}, {0x0, 0x40, 0x4, 0x1, 0x0, 0xc308}, {0x1, 0x1, 0xb, 0x9, 0x3, 0x9}, {0x10000, 0x6, 0x7, 0xb, 0x8, 0x5}, {0x8, 0x3, 0x7fff, 0x4, 0x6, 0x7}, {0x3, 0x10001, 0x9, 0x5, 0x5d18, 0xc}, {0x4, 0x4, 0x5, 0xbcc, 0x1, 0x3}, {0x78, 0xff, 0xfffffff1, 0x3, 0x4, 0x2}, {0xac, 0x7, 0x81, 0x2, 0x8, 0xffffab7d}, {0x10, 0x0, 0x2, 0x32aa, 0xe, 0x400}, {0x7fffffff, 0x2da, 0x8, 0x40, 0x9, 0x3}, {0xffffaf44, 0x0, 0x80000000, 0x1, 0x6, 0xffff}, {0x5, 0x7, 0x2, 0x80000000, 0x9, 0x6}, {0x8, 0x4508, 0x1ff, 0x1bf86c9e, 0x4, 0x4}, {0x0, 0x5, 0xc97, 0x1e72, 0x2000000, 0x1}, {0x8, 0x100, 0x1, 0x8, 0xff, 0x7}, {0x80, 0x7fffffff, 0x8, 0x2, 0x3ff, 0x7}, {0x3d, 0x2, 0x5, 0x7fffffff, 0xc41b, 0x4879}, {0x0, 0x3, 0xb, 0x7, 0x0, 0xffffffff}, {0xbcc6, 0x0, 0x6, 0x9, 0x80000001, 0x8}, {0x7, 0x5, 0x40, 0x7, 0xffffff7f, 0x7be}, {0x9, 0x5, 0x3, 0x80, 0x8, 0x81}, {0x1, 0x9, 0xfffffffe, 0x5, 0x100, 0xffff}, {0x565, 0x7fff, 0x10, 0x4, 0x3, 0x1}, {0x80000000, 0x4, 0x8, 0x4, 0x0, 0xc7b}, {0x0, 0x0, 0x0, 0x10001, 0xfffff82f, 0x39f}, {0xc8d, 0x11ab2bb0, 0xc, 0x1, 0x8, 0x6}, {0x2, 0xffff, 0x4, 0xffffffff, 0x2, 0x7}, {0x4, 0x3, 0x8, 0x1, 0x3, 0xfffff545}, {0x0, 0x9c3, 0xf, 0x9, 0xcdb, 0x2}, {0x8, 0x7fffffff, 0xcbd, 0x7, 0x8, 0xc}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x1000}, {0x0, 0x68a4, 0x7, 0xffffffff, 0x2, 0xd013}, {0x7fffffff, 0x5, 0x2, 0x80000001, 0x6, 0xf}, {0x8001, 0x8001, 0x1ff, 0xf, 0x5, 0x2}, {0x2, 0x1d, 0x35ed, 0x2, 0x0, 0x81}, {0x8, 0x2, 0x10000, 0x81, 0x5, 0xfffffff0}, {0x4, 0x4, 0x157, 0xc2, 0xbe, 0xb}, {0xa0, 0x2, 0x0, 0x2, 0xc, 0x6}], [{0x4}, {0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x4}, {0x6c2f732ea13eee75}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0xea5db7aed335d0ad, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0xef0f5e633bc4e1b8}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x2}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1286, &(0x7f0000002440)="$eJzs3U1rY1UcB+B/2nT6MrapOo7OgHjQjSLEaReu3BSZAbGgVDugru7YVEPTF5pQyCBOXbkS/BiiLt0J4hfoxo1rQRDpxuUsxCttUm2StpPapgV5nk0O557fOef23AZuuIe7+9qXqyvL9fJy1oihQiGKGyNRfJgixVAMR8t2vHT351+efee999+cm5+/vZDSnbl3Z15NKU0998MHn3z7/I+Nq3e/m/p+NHamh3b/mP115/rOjd2/volqPVXraW29kbJ0b329kd2rVdJStb5STuntWiWrV1J1rV7Z7Di+XFvf2GimbG1pcmJjs1Kvp2ytmVYqzdQopMZmM2UfZdW1VC6X0+REcBaLXz/M8zwiz0fiSuR5no/HRFyNx2IypqIU0/F4PBFPxrV4Kq7H0/FM3NhvddnzBgAAAAAAAAAAAAAAAAAAgP+XR+z/L9j/DwAAAAAAAAAAAAAAAAAAAIPXvf+/GOH9/wAAAAAAAAAAAAAAAAAAAHDBHvH+/679/y/b/w8AAAAAAAAAAAAAAAAAAACDMNb6WEhpLGL1863FrcXWZ6t+bjmqUYtK3IpS/Bn7u/9bWuU7b8zfvpX2Tccrqw/a+Qdbi8Od+ZmRUkwXjszPjEdESqkzPxoTh/OzUYprR48/2xq/Kz8WL76wl/+slS9HKX76MNajFksRhfbZ7+c/nUnp9bfmxzvzN/faHWt4wMsCAAAA56mc/tF7/77dbnTk8dah9v15arcsnPD7QNf9eTFuFi/rrDlQb95fyWq1yuZ/LFw5vp8rZ+u5p1CIiCwO10xN/LawN3if/Rxcbuc0n0OF4fPu8MTCyMltzrCmUez7j9nnVPtfnfbkt7tr8lLEaUf//atDNWOnjp+tMNS+zLLadt8XW2zn+UAn1vPPON68vzJ6Uur474zCgL+TuDj/LvplzwQAAAAAAAAAAIDTOPLpv/GI6Hke8OOemoPHwzvjvT0fP/oXF3CGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dc7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KsAAAD//1IOydo=")
syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
listen(r4, 0x8)
listen(0xffffffffffffffff, 0xfffffffd)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
memfd_create(0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4)
socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000000340)={0x1f, 0x0, 0x2, 0xc9b, 0x0, 0x0, 0x0, 0x65}, 0x0, 0x0, 0x0)
socket$inet(0xa, 0x801, 0x84)

1.258504118s ago: executing program 2 (id=1360):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x223a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bind$inet(r0, 0x0, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.142809681s ago: executing program 6 (id=1361):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_emit_ethernet(0x47, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x11, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x11, 0x0, @opaque="0300000070e185af60"}}}}}}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
sendfile(r3, r2, 0x0, 0xa)
read$hidraw(r3, &(0x7f0000000180)=""/21, 0x15)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x174, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@multicast1, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x174}}, 0x0)
mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "88f6a5d8624af314bc"}, @NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0xd88c28f77a942d61}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "1070dffe1a7f8cf4a596c45502d29a976f7e33ddd8ba1eab33d8a406b0dd099ec1f19cb36d75ab4870d16a561366df452dc394ea34fecbab0a17f54abfc611f54a08854d38dd92ec9b3820141490474fa4c4e317a613a204bf206c202c1302f96469ba9ae311"}, @NFTA_CHAIN_USERDATA={0x6b, 0xc, "b7d088692114b18403296cc5d68425fededf2bb9af1a7c309d4590c4d03b0ff7d01ffe4bbd5a9b5d311ed499b5e0cfe45156634e7522b5739d3f00a7542708a1db0e8e3fc694a58f01c1d8b6effad952fd51d22a9d4cdda940b00ba8525c0cf0c241737ba7a20b"}]}, @NFT_MSG_NEWTABLE={0x148, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9c, 0x6, "344e2cecacb68c3673dd89d26851f2334cbd226263f6376e1524f6266317c621b6424477fdcc6a7daeb350bd717e8c744ef908b477cd73ea46fb87be7db5b1c05ae13fe038d6607d0aa92b01ce4fbafa5b1e1f7124374d50634bd5a34adb6d535986ddac57fdf3242fc6ec76db3a6461d364bc4a2e1dd3d85152638ba30fd8cfb3407ba5a9655fc1dbd9bdf1145778eb74b06321e7b80fe9"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x68, 0x6, "be332022623fea2df38c3c4cc2e05d8c3c30e11c7001209aa2dab6913a7a0fc13536a592603518e6e82eb246ee7bfc0c65531cbbc36a42c21c7e72cc9ab9c95ee49e4af94c1bf8e8d2b9c074d0f395557bb5b6c7f354f5e037fc55fd282a3840c0b82919"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x404}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)

423.300465ms ago: executing program 3 (id=1362):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10022, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_read_part_table(0x1045, &(0x7f0000000000)="$eJzsz82pwkAUBeAzeXkTLdB6jAubsQUrc+MIk4HYgIjwfYv5uQcO3PBV91aSlGQZg/8kz9b1+Z5cSjKP97o3HLar9vMvy3F6q18fW1Wr4z/X63QeYcnp9sHVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBnvAIAAP//1yMU+g==")
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001080)={'some', 0x20, 0x6, 0x20, 0x9}, 0x2f)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x2, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)

99.951227ms ago: executing program 4 (id=1363):
socket(0x10, 0x803, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000002000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

39.855359ms ago: executing program 7 (id=1364):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000740), 0x0, 0x40000040, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x20000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x4, 0x1, 0x9bd, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x5, 0xfffffffd, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PBURST={0x8, 0x7, 0x921}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x8}}]}}]}, 0x464}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
getcwd(&(0x7f00000003c0)=""/257, 0x101)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)

0s ago: executing program 6 (id=1365):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008510000063000000851000000100000095000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

kernel console output (not intermixed with test programs):

) failed
[  142.889184][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.925'.
[  142.907699][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'.
[  142.969420][ T6797] ip6tnl1: entered allmulticast mode
[  142.998842][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.067908][ T6809] netlink: 'syz.5.933': attribute type 27 has an invalid length.
[  143.129069][ T6812] loop4: detected capacity change from 0 to 512
[  143.233147][ T6812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.279797][ T6812] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.320377][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.440379][ T6815] FAT-fs (loop3): Directory bread(block 199916) failed
[  143.440811][ T6815] FAT-fs (loop3): Directory bread(block 199917) failed
[  144.695458][ T6832] loop4: detected capacity change from 0 to 512
[  144.762477][ T6832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.479335][ T6843] loop2: detected capacity change from 0 to 512
[  145.491905][ T6848] FAULT_INJECTION: forcing a failure.
[  145.491905][ T6848] name failslab, interval 1, probability 0, space 0, times 0
[  145.512066][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.5.949 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  145.512100][ T6848] Tainted: [W]=WARN
[  145.512131][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  145.512146][ T6848] Call Trace:
[  145.512154][ T6848]  <TASK>
[  145.512164][ T6848]  __dump_stack+0x1d/0x30
[  145.512193][ T6848]  dump_stack_lvl+0x95/0xd0
[  145.512216][ T6848]  dump_stack+0x15/0x1b
[  145.512273][ T6848]  should_fail_ex+0x263/0x280
[  145.512350][ T6848]  ? rtnl_newlink+0x5c/0x1330
[  145.512420][ T6848]  should_failslab+0x8c/0xb0
[  145.512456][ T6848]  __kmalloc_cache_noprof+0x5f/0x410
[  145.512482][ T6848]  ? __pfx_rtnl_newlink+0x10/0x10
[  145.512585][ T6848]  rtnl_newlink+0x5c/0x1330
[  145.512616][ T6848]  ? __memcg_slab_free_hook+0x14b/0x240
[  145.512723][ T6848]  ? __rcu_read_unlock+0x4e/0x70
[  145.512804][ T6848]  ? avc_has_perm_noaudit+0xab/0x130
[  145.512913][ T6848]  ? cred_has_capability+0x224/0x2a0
[  145.513014][ T6848]  ? selinux_capable+0x31/0x40
[  145.513092][ T6848]  ? security_capable+0x7b/0x90
[  145.513119][ T6848]  ? ns_capable+0x7c/0xb0
[  145.513218][ T6848]  ? __pfx_rtnl_newlink+0x10/0x10
[  145.513244][ T6848]  rtnetlink_rcv_msg+0x64b/0x720
[  145.513275][ T6848]  netlink_rcv_skb+0x123/0x220
[  145.513491][ T6848]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  145.513522][ T6848]  rtnetlink_rcv+0x1c/0x30
[  145.513586][ T6848]  netlink_unicast+0x5c0/0x690
[  145.513622][ T6848]  netlink_sendmsg+0x5c8/0x6f0
[  145.513647][ T6848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.513668][ T6848]  ____sys_sendmsg+0x563/0x5b0
[  145.513733][ T6848]  ___sys_sendmsg+0x195/0x1e0
[  145.513754][ T6848]  ? path_openat+0x1b01/0x2050
[  145.513787][ T6848]  __sys_sendmmsg+0x185/0x320
[  145.513849][ T6848]  __x64_sys_sendmmsg+0x57/0x70
[  145.513869][ T6848]  x64_sys_call+0x27aa/0x3020
[  145.513897][ T6848]  do_syscall_64+0x12c/0x370
[  145.513930][ T6848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.513975][ T6848] RIP: 0033:0x7fba14b6c819
[  145.513994][ T6848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.514047][ T6848] RSP: 002b:00007fba135c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  145.514086][ T6848] RAX: ffffffffffffffda RBX: 00007fba14de5fa0 RCX: 00007fba14b6c819
[  145.514101][ T6848] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008
[  145.514118][ T6848] RBP: 00007fba135c7090 R08: 0000000000000000 R09: 0000000000000000
[  145.514132][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.514146][ T6848] R13: 00007fba14de6038 R14: 00007fba14de5fa0 R15: 00007ffca1f64ad8
[  145.514228][ T6848]  </TASK>
[  145.788876][ T6843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  145.801756][ T6843] EXT4-fs (loop2): orphan cleanup on readonly fs
[  145.808398][ T6843] EXT4-fs error (device loop2): __ext4_iget:5393: inode #11: block 2: comm syz.2.947: invalid block
[  145.820102][ T6843] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  145.828683][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  145.844847][    C1] EXT4-fs (loop2): initial error at time 1775149125: __ext4_iget:5393: inode 11: block 2
[  145.854978][    C1] EXT4-fs (loop2): last error at time 1775149125: __ext4_iget:5393: inode 11: block 2
[  145.865636][ T6843] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.947: couldn't read orphan inode 11 (err -117)
[  145.877944][ T6843] loop2: lost filesystem error report for type 5 error -117
[  145.882684][ T6843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  145.883335][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.911788][ T6858] loop5: detected capacity change from 0 to 512
[  145.928274][   T28] audit: type=1326 audit(1775149125.132:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  145.953119][ T6858] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.953: EA inode hash validation failed
[  145.962349][ T6863] loop6: detected capacity change from 0 to 512
[  145.966601][   T28] audit: type=1326 audit(1775149125.132:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  145.982771][ T6858] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.953: corrupted inode contents
[  146.008440][ T6858] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  146.008694][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  146.008712][    C1] EXT4-fs (loop5): initial error at time 1775149125: ext4_do_update_inode:5602: inode 15
[  146.008743][    C1] EXT4-fs (loop5): last error at time 1775149125: ext4_do_update_inode:5602: inode 15
[  146.008821][   T28] audit: type=1326 audit(1775149125.132:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  146.008855][   T28] audit: type=1326 audit(1775149125.132:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  146.008950][   T28] audit: type=1326 audit(1775149125.132:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  146.008977][   T28] audit: type=1326 audit(1775149125.132:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  146.021462][ T6863] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.956: bg 0: block 4: invalid block bitmap
[  146.038406][ T6858] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.953: mark_inode_dirty error
[  146.047380][ T6863] loop6: lost filesystem error report for type 5 error -117
[  146.059695][ T6863] EXT4-fs (loop6): Remounting filesystem read-only
[  146.094355][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  146.094379][    C1] EXT4-fs (loop6): initial error at time 1775149125: ext4_validate_block_bitmap:432
[  146.094406][    C1] EXT4-fs (loop6): last error at time 1775149125: ext4_validate_block_bitmap:432
[  146.146750][ T6858] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  146.153726][ T6863] EXT4-fs (loop6): 1 truncate cleaned up
[  146.183352][ T6858] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.953: corrupted inode contents
[  146.185637][ T6863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.212824][ T6858] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  146.277795][ T6858] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.953: mark_inode_dirty error
[  146.301780][ T6858] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  146.301942][ T6858] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.953: mark inode dirty (error -117)
[  146.324208][ T6858] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  146.324434][ T6858] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117)
[  146.343531][ T6858] EXT4-fs (loop5): 1 orphan inode deleted
[  146.350151][ T6858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.391044][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.956'.
[  146.402739][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.414068][   T28] kauditd_printk_skb: 80 callbacks suppressed
[  146.414083][   T28] audit: type=1326 audit(1775149125.632:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe1b227c819 code=0x7ffc0000
[  146.458491][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.475106][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.528276][ T6882] loop6: detected capacity change from 0 to 1024
[  146.541036][ T6882] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  146.561042][ T6882] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #3: block 1: comm syz.6.962: lblock 1 mapped to illegal pblock 1 (length 1)
[  146.575206][ T6882] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  146.575346][ T6882] Quota error (device loop6): write_blk: dquota write failed
[  146.584426][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  146.584450][    C1] EXT4-fs (loop6): initial error at time 1775149125: ext4_map_blocks:828: inode 3: block 1
[  146.584492][    C1] EXT4-fs (loop6): last error at time 1775149125: ext4_map_blocks:828: inode 3: block 1
[  146.618587][ T6882] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  146.628592][ T6882] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.962: Failed to acquire dquot type 0
[  146.641285][ T6882] loop6: lost filesystem error report for type 5 error -117
[  146.641804][ T6882] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.962: Freeing blocks not in datazone - block = 0, count = 4096
[  146.649261][ T6888] sch_tbf: burst 545 is lower than device lo mtu (65550) !
[  146.649745][ T6882] loop6: lost filesystem error report for type 5 error -117
[  146.672468][ T6882] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.962: Invalid inode bitmap blk 0 in block_group 0
[  146.692706][ T6882] loop6: lost filesystem error report for type 5 error -117
[  146.692740][  T309] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  146.716940][ T6894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1014 sclass=netlink_tcpdiag_socket pid=6894 comm=syz.5.966
[  146.729744][ T6882] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  146.738520][ T6882] loop6: lost filesystem error report for type 5 error -117
[  146.738992][ T6882] EXT4-fs (loop6): 1 orphan inode deleted
[  146.750130][  T309] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  146.752371][  T309] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  146.761710][ T6895] loop2: detected capacity change from 0 to 512
[  146.770317][  T309] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 0
[  146.788551][ T6882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.809567][   T28] audit: type=1400 audit(1775149126.032:4324): avc:  denied  { create } for  pid=6896 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  146.842389][  T309] loop6: lost filesystem error report for type 5 error -117
[  146.859335][ T6895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.911065][   T28] audit: type=1400 audit(1775149126.122:4325): avc:  denied  { bind } for  pid=6909 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  147.011263][ T6924] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82
[  147.079952][   T28] audit: type=1326 audit(1775149126.302:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  147.104275][   T28] audit: type=1326 audit(1775149126.302:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  147.128258][   T28] audit: type=1326 audit(1775149126.302:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  147.128288][   T28] audit: type=1326 audit(1775149126.302:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  147.217044][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.981'.
[  147.225996][ T6936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.981'.
[  147.240377][ T6936] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  147.250237][ T6936] bond1 (unregistering): Released all slaves
[  147.370678][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.405023][ T6948] loop6: detected capacity change from 0 to 1024
[  147.412957][ T6948] EXT4-fs: Ignoring removed orlov option
[  147.420422][ T6948] EXT4-fs: inline encryption not supported
[  147.430312][ T6948] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  147.442868][ T6948] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  147.456665][ T6948] EXT4-fs (loop6): invalid journal inode
[  147.464180][ T6948] EXT4-fs (loop6): can't get journal size
[  147.470994][ T6948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  147.513282][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.543033][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.575760][ T6956] loop5: detected capacity change from 0 to 164
[  147.602481][ T6958] syzkaller0: entered promiscuous mode
[  147.608367][ T6958] syzkaller0: entered allmulticast mode
[  147.615611][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'.
[  148.143979][ T6976] loop4: detected capacity change from 0 to 256
[  148.171155][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.208632][ T6976] FAT-fs (loop4): Directory bread(block 64) failed
[  148.215453][ T6976] FAT-fs (loop4): Directory bread(block 65) failed
[  148.221148][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.222113][ T6976] FAT-fs (loop4): Directory bread(block 66) failed
[  148.236321][ T6976] FAT-fs (loop4): Directory bread(block 67) failed
[  148.242968][ T6976] FAT-fs (loop4): Directory bread(block 68) failed
[  148.249850][ T6976] FAT-fs (loop4): Directory bread(block 69) failed
[  148.256645][ T6976] FAT-fs (loop4): Directory bread(block 70) failed
[  148.263235][ T6976] FAT-fs (loop4): Directory bread(block 71) failed
[  148.269809][ T6976] FAT-fs (loop4): Directory bread(block 72) failed
[  148.276491][ T6976] FAT-fs (loop4): Directory bread(block 73) failed
[  148.294899][ T6972] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1
[  148.317973][ T6972] ref_ctr increment failed for inode: 0x1a2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812a338d80
[  148.331868][ T6971] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1
[  148.340719][ T6971] ref_ctr decrement failed for inode: 0x1a2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812a338d80
[  148.351981][ T6971] uprobe: syz.6.993:6971 failed to unregister, leaking uprobe
[  148.365505][ T6988] loop3: detected capacity change from 0 to 128
[  148.374591][ T6988] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.387003][ T6988] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.462250][ T6992] netlink: 'syz.3.998': attribute type 8 has an invalid length.
[  148.561400][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.575659][ T6998] netlink: 'syz.2.1002': attribute type 1 has an invalid length.
[  148.590029][ T6998] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.611102][ T6998] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.622230][ T6998] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  148.634411][ T6998] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  148.649323][ T7000] loop5: detected capacity change from 0 to 128
[  148.762400][ T6996] syz.5.1001: attempt to access beyond end of device
[  148.762400][ T6996] loop5: rw=8390657, sector=138, nr_sectors = 2 limit=128
[  148.776361][ T6996] Buffer I/O error on dev loop5, logical block 69, lost async page write
[  148.785116][ T6996] syz.5.1001: attempt to access beyond end of device
[  148.785116][ T6996] loop5: rw=8390657, sector=140, nr_sectors = 2 limit=128
[  148.798812][ T6996] Buffer I/O error on dev loop5, logical block 70, lost async page write
[  148.807589][ T6996] syz.5.1001: attempt to access beyond end of device
[  148.807589][ T6996] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  148.821329][ T6996] Buffer I/O error on dev loop5, logical block 71, lost async page write
[  148.830153][ T6996] syz.5.1001: attempt to access beyond end of device
[  148.830153][ T6996] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  148.844061][ T6996] Buffer I/O error on dev loop5, logical block 71, lost async page write
[  149.426332][ T7000] syz.5.1001: attempt to access beyond end of device
[  149.426332][ T7000] loop5: rw=8390657, sector=138, nr_sectors = 2 limit=128
[  149.444019][ T7000] Buffer I/O error on dev loop5, logical block 69, lost async page write
[  149.452892][ T7000] syz.5.1001: attempt to access beyond end of device
[  149.452892][ T7000] loop5: rw=8390657, sector=140, nr_sectors = 2 limit=128
[  149.467341][ T7000] Buffer I/O error on dev loop5, logical block 70, lost async page write
[  149.518699][ T7000] syz.5.1001: attempt to access beyond end of device
[  149.518699][ T7000] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128
[  149.540958][ T7000] Buffer I/O error on dev loop5, logical block 71, lost async page write
[  149.720942][ T7051] loop6: detected capacity change from 0 to 512
[  149.736173][ T7042] loop7: detected capacity change from 0 to 7
[  149.758743][ T7051] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  149.776706][ T7051] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  149.790666][ T7059] loop3: detected capacity change from 0 to 512
[  149.800664][ T7051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  149.809411][ T7051] System zones: 0-2, 18-18, 34-34
[  149.825500][ T7057] netlink: 'syz.5.1021': attribute type 2 has an invalid length.
[  149.836609][ T7051] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1019: bad orphan inode 15
[  149.849729][ T7051] loop6: lost filesystem error report for type 5 error -117
[  149.849916][ T7051] ext4_test_bit(bit=14, block=18) = 1
[  149.850522][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1020'.
[  149.857643][ T7051] is_bad_inode(inode)=0
[  149.863046][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  149.863083][    C0] EXT4-fs (loop6): initial error at time 1775149129: ext4_orphan_get:1423
[  149.863107][    C0] EXT4-fs (loop6): last error at time 1775149129: ext4_orphan_get:1423
[  149.900331][ T7051] NEXT_ORPHAN(inode)=2264924160
[  149.905232][ T7051] max_ino=32
[  149.908439][ T7051] i_nlink=0
[  149.911819][ T7051] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.1019: corrupted inode contents
[  149.926102][ T7051] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  149.926698][ T7051] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #15: comm syz.6.1019: mark_inode_dirty error
[  149.947356][ T7059] FAT-fs (loop3): Directory bread(block 199916) failed
[  149.969035][ T7059] FAT-fs (loop3): Directory bread(block 199917) failed
[  149.988728][ T7051] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  149.989042][ T7051] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.1019: corrupted inode contents
[  150.017301][ T7059] FAT-fs (loop3): Directory bread(block 199918) failed
[  150.024489][ T7059] FAT-fs (loop3): Directory bread(block 199919) failed
[  150.031509][ T7059] FAT-fs (loop3): Directory bread(block 199920) failed
[  150.038458][ T7059] FAT-fs (loop3): Directory bread(block 199921) failed
[  150.047362][ T7059] FAT-fs (loop3): Directory bread(block 199922) failed
[  150.055263][ T7059] FAT-fs (loop3): Directory bread(block 199923) failed
[  150.063310][ T7051] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.1019: mark_inode_dirty error
[  150.077673][ T7051] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.1019: mark inode dirty (error -117)
[  150.090864][ T7051] EXT4-fs warning (device loop6): ext4_evict_inode:285: xattr delete (err -117)
[  150.100845][ T7051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.139355][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.250496][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1037'.
[  150.273747][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1037'.
[  150.282865][ T7075] loop6: detected capacity change from 0 to 128
[  150.324125][ T7075] vfat: Unknown parameter 'ò�€*‹w�bó�ôWØë�c•¾€2âÛfÛ\YÚ„ð¬AŸG}Õg”F0Àj4:â‰ÆºsIÈw€Z	æ|¨«‰þº¶ºìÖg5	o'—‘°où‹iBÖ|£]ÃÙXë'â�x©-
[  150.324125][ T7075] —LÑÊ]ZÌ
[  150.324125][ T7075] ºÖo‚²ÌGšÈ£¬(ù7›S!‚°3þÞׯ]u£âÜ›QÊlõó+î“/²§s‰“[_ïl®Ø18446744073709551615ÿÿ0x0000000000000000þ.Ï ©'
[  150.402425][ T7083] loop2: detected capacity change from 0 to 1024
[  150.412260][ T7083] EXT4-fs: Ignoring removed bh option
[  150.446463][ T7081] vfat: Deprecated parameter 'posix'
[  150.454882][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.465029][ T7081] FAT-fs: "posix" option is obsolete, not supported now
[  150.477495][ T7081] FAT-fs (loop5): unable to read boot sector
[  150.594071][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.626817][ T7090] netlink: 'syz.3.1032': attribute type 2 has an invalid length.
[  150.761679][ T7098] Cannot find del_set index 0 as target
[  150.821851][ T7096] can: request_module (can-proto-0) failed.
[  150.822620][ T7106] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1038'.
[  150.914066][ T7115] Ÿë
: port 1(gretap0) entered blocking state
[  150.922683][ T7115] Ÿë
: port 1(gretap0) entered disabled state
[  150.929244][ T7115] gretap0: entered allmulticast mode
[  150.936043][ T7115] gretap0: entered promiscuous mode
[  150.954568][ T7115] Ÿë
: port 2(veth0_to_team) entered blocking state
[  150.973610][ T7115] Ÿë
: port 2(veth0_to_team) entered disabled state
[  150.980999][ T7115] veth0_to_team: entered allmulticast mode
[  150.987682][ T7115] veth0_to_team: entered promiscuous mode
[  151.020461][ T7120] EXT4-fs (loop2): fragment/cluster size (4096) != block size (1024)
[  151.106219][ T7123] netlink: 'syz.3.1046': attribute type 2 has an invalid length.
[  151.200380][ T7139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.219108][ T7139] ext4 filesystem being mounted at /241/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.587019][ T7169] FAULT_INJECTION: forcing a failure.
[  151.587019][ T7169] name failslab, interval 1, probability 0, space 0, times 0
[  151.619849][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.5.1050 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  151.619939][ T7169] Tainted: [W]=WARN
[  151.619947][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  151.619961][ T7169] Call Trace:
[  151.619967][ T7169]  <TASK>
[  151.620017][ T7169]  __dump_stack+0x1d/0x30
[  151.620110][ T7169]  dump_stack_lvl+0x95/0xd0
[  151.620136][ T7169]  dump_stack+0x15/0x1b
[  151.620162][ T7169]  should_fail_ex+0x263/0x280
[  151.620247][ T7169]  should_failslab+0x8c/0xb0
[  151.620274][ T7169]  __kmalloc_noprof+0xb8/0x4e0
[  151.620377][ T7169]  ? nf_tables_newrule+0xd77/0x16e0
[  151.620406][ T7169]  nf_tables_newrule+0xd77/0x16e0
[  151.620438][ T7169]  nfnetlink_rcv+0xc1e/0x1720
[  151.620505][ T7169]  netlink_unicast+0x5c0/0x690
[  151.620610][ T7169]  netlink_sendmsg+0x5c8/0x6f0
[  151.620687][ T7169]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.620708][ T7169]  ____sys_sendmsg+0x563/0x5b0
[  151.620735][ T7169]  ___sys_sendmsg+0x195/0x1e0
[  151.620786][ T7169]  __x64_sys_sendmsg+0xd4/0x160
[  151.620807][ T7169]  x64_sys_call+0x194c/0x3020
[  151.620893][ T7169]  do_syscall_64+0x12c/0x370
[  151.620921][ T7169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.620945][ T7169] RIP: 0033:0x7fba14b6c819
[  151.620987][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.621075][ T7169] RSP: 002b:00007fba135c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.621095][ T7169] RAX: ffffffffffffffda RBX: 00007fba14de5fa0 RCX: 00007fba14b6c819
[  151.621109][ T7169] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000001a
[  151.621178][ T7169] RBP: 00007fba135c7090 R08: 0000000000000000 R09: 0000000000000000
[  151.621196][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  151.621211][ T7169] R13: 00007fba14de6038 R14: 00007fba14de5fa0 R15: 00007ffca1f64ad8
[  151.621233][ T7169]  </TASK>
[  151.943861][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1054'.
[  152.123609][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.199184][ T7227] netlink: 'syz.5.1058': attribute type 2 has an invalid length.
[  152.233041][ T7231] netlink: 'syz.2.1057': attribute type 27 has an invalid length.
[  152.332108][ T7244] FAULT_INJECTION: forcing a failure.
[  152.332108][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.380491][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.5.1061 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  152.380533][ T7244] Tainted: [W]=WARN
[  152.380541][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  152.380554][ T7244] Call Trace:
[  152.380560][ T7244]  <TASK>
[  152.380568][ T7244]  __dump_stack+0x1d/0x30
[  152.380594][ T7244]  dump_stack_lvl+0x95/0xd0
[  152.380622][ T7244]  dump_stack+0x15/0x1b
[  152.380706][ T7244]  should_fail_ex+0x263/0x280
[  152.380740][ T7244]  should_fail+0xb/0x20
[  152.380850][ T7244]  should_fail_usercopy+0x1a/0x20
[  152.380885][ T7244]  _copy_to_user+0x20/0xa0
[  152.380922][ T7244]  rng_dev_read+0x375/0x670
[  152.380989][ T7244]  ? __pfx_rng_dev_read+0x10/0x10
[  152.381034][ T7244]  vfs_readv+0x432/0x6e0
[  152.381147][ T7244]  __x64_sys_preadv+0xfd/0x1c0
[  152.381230][ T7244]  x64_sys_call+0x2915/0x3020
[  152.381254][ T7244]  do_syscall_64+0x12c/0x370
[  152.381288][ T7244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.381315][ T7244] RIP: 0033:0x7fba14b6c819
[  152.381373][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.381391][ T7244] RSP: 002b:00007fba135c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  152.381411][ T7244] RAX: ffffffffffffffda RBX: 00007fba14de5fa0 RCX: 00007fba14b6c819
[  152.381480][ T7244] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[  152.381496][ T7244] RBP: 00007fba135c7090 R08: 0000000000000007 R09: 0000000000000000
[  152.381510][ T7244] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[  152.381524][ T7244] R13: 00007fba14de6038 R14: 00007fba14de5fa0 R15: 00007ffca1f64ad8
[  152.381597][ T7244]  </TASK>
[  152.572784][   T28] kauditd_printk_skb: 48 callbacks suppressed
[  152.572802][   T28] audit: type=1400 audit(1775149131.792:4378): avc:  denied  { getopt } for  pid=7247 comm="syz.6.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  152.621007][ T7246] set_capacity_and_notify: 4 callbacks suppressed
[  152.621028][ T7246] loop2: detected capacity change from 0 to 1024
[  152.680801][ T7246] EXT4-fs: Ignoring removed orlov option
[  152.835665][ T7260] loop6: detected capacity change from 0 to 512
[  152.962874][ T7260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.024170][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.066357][ T7260] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.255540][   T28] audit: type=1400 audit(1775149132.462:4379): avc:  denied  { ioctl } for  pid=7266 comm="syz.5.1069" path="socket:[17236]" dev="sockfs" ino=17236 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  153.319235][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.708407][ T7273] netlink: 'syz.6.1071': attribute type 2 has an invalid length.
[  153.791750][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.869541][ T7279] loop5: detected capacity change from 0 to 512
[  153.899769][ T7279] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1075: invalid indirect mapped block 256 (level 2)
[  153.927065][ T7281] loop2: detected capacity change from 0 to 128
[  153.945203][ T7279] fserror_report: 3 callbacks suppressed
[  153.945233][ T7279] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  153.955550][ T7284] loop6: detected capacity change from 0 to 128
[  153.973128][ T7279] EXT4-fs (loop5): 2 truncates cleaned up
[  153.978941][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  153.978962][    C0] EXT4-fs (loop5): initial error at time 1775149133: ext4_free_branches:1023: inode 11
[  153.978992][    C0] EXT4-fs (loop5): last error at time 1775149133: ext4_free_branches:1023: inode 11
[  154.023992][ T7284] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.057166][ T7284] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.073969][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.224338][ T7287] loop4: detected capacity change from 0 to 512
[  154.314468][ T7287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.337551][ T7287] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.914115][ T7301] loop3: detected capacity change from 0 to 128
[  154.930336][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.950885][ T7301] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.991917][ T7301] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.060190][   T28] audit: type=1400 audit(1775149134.282:4380): avc:  denied  { create } for  pid=7300 comm="syz.3.1080" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  155.106550][ T7301] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.1080: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  155.148708][ T7301] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem
[  155.169218][ T7303] xt_time: invalid argument - start or stop time greater than 23:59:59
[  155.187869][   T28] audit: type=1400 audit(1775149134.322:4381): avc:  denied  { rename } for  pid=7300 comm="syz.3.1080" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  155.269841][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.298944][   T28] audit: type=1400 audit(1775149134.382:4382): avc:  denied  { unlink } for  pid=7300 comm="syz.3.1080" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  155.409289][ T7310] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1083'.
[  155.429269][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'.
[  155.448404][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.478501][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.504110][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.532471][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.558792][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.588468][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.614154][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7310 comm=syz.4.1083
[  155.725218][ T7317] netlink: 'syz.4.1085': attribute type 2 has an invalid length.
[  155.998224][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.023630][ T7322] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  156.065941][ T5649] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.119926][ T7324] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1089'.
[  156.252436][ T7334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7334 comm=syz.5.1091
[  156.313889][   T28] audit: type=1326 audit(1775149135.532:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  156.330902][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1088'.
[  156.341408][   T28] audit: type=1326 audit(1775149135.532:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  156.371006][   T28] audit: type=1326 audit(1775149135.532:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  156.376220][ T7343] loop4: detected capacity change from 0 to 1024
[  156.402071][ T7336] loop3: detected capacity change from 0 to 164
[  156.447299][ T7343] EXT4-fs: Ignoring removed bh option
[  156.472630][   T28] audit: type=1326 audit(1775149135.532:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  156.473600][ T7343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.498864][   T28] audit: type=1326 audit(1775149135.532:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba14b6c819 code=0x7ffc0000
[  156.557134][ T7346] loop5: detected capacity change from 0 to 128
[  156.647410][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.695330][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'.
[  156.710351][ T7348] vlan2: entered promiscuous mode
[  156.738398][ T7350] netlink: 'syz.5.1096': attribute type 2 has an invalid length.
[  156.804397][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'.
[  156.821341][ T7354] vlan3: entered promiscuous mode
[  156.826674][ T7354] bridge0: entered promiscuous mode
[  156.888324][ T7354] netem: incorrect ge model size
[  156.893420][ T7354] netem: change failed
[  157.007674][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.030178][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.146545][ T7352] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1
[  157.167924][ T7352] ref_ctr increment failed for inode: 0x3ff offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812a33e540
[  157.209535][ T7351] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1
[  157.218511][ T7351] ref_ctr decrement failed for inode: 0x3ff offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812a33e540
[  157.258703][ T7351] uprobe: syz.5.1098:7351 failed to unregister, leaking uprobe
[  157.302858][ T7373] EXT4-fs: Ignoring removed bh option
[  157.357456][ T7373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.403841][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.470190][ T7377] tipc: Started in network mode
[  157.475161][ T7377] tipc: Node identity , cluster identity 4711
[  157.498735][ T7377] tipc: Failed to obtain node identity
[  157.504249][ T7377] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.593470][ T7379] netlink: 'syz.3.1109': attribute type 2 has an invalid length.
[  157.680872][ T7381] vhci_hcd vhci_hcd.4: default hub control req: 2016 v0100 i0004 l1
[  157.956072][ T7401] set_capacity_and_notify: 1 callbacks suppressed
[  157.956093][ T7401] loop6: detected capacity change from 0 to 512
[  157.971939][   T28] kauditd_printk_skb: 123 callbacks suppressed
[  157.971958][   T28] audit: type=1400 audit(1775149137.192:4511): avc:  denied  { read } for  pid=7388 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  158.020778][ T7401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.134586][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.148567][ T7408] loop7: detected capacity change from 0 to 7
[  158.202020][ T7412] loop5: detected capacity change from 0 to 512
[  158.209756][ T7412] FAT-fs (loop5): Directory bread(block 199916) failed
[  158.217378][ T7412] FAT-fs (loop5): Directory bread(block 199917) failed
[  158.226198][ T7412] FAT-fs (loop5): Directory bread(block 199918) failed
[  158.233514][ T7412] FAT-fs (loop5): Directory bread(block 199919) failed
[  158.241086][ T7412] FAT-fs (loop5): Directory bread(block 199920) failed
[  158.248056][ T7412] FAT-fs (loop5): Directory bread(block 199921) failed
[  158.255419][ T7412] FAT-fs (loop5): Directory bread(block 199922) failed
[  158.262843][ T7412] FAT-fs (loop5): Directory bread(block 199923) failed
[  158.420670][ T7412] FAT-fs (loop5): FAT read failed (blocknr 128)
[  158.527066][   T28] audit: type=1400 audit(1775149137.732:4512): avc:  denied  { bind } for  pid=7420 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  158.580997][ T7408] FAT-fs (loop5): Directory bread(block 199916) failed
[  158.641995][ T7408] syz.5.1121 (7408) used greatest stack depth: 9032 bytes left
[  158.852710][ T7423] lo speed is unknown, defaulting to 1000
[  158.885279][ T7417] loop4: detected capacity change from 0 to 512
[  158.905723][ T7424] lo speed is unknown, defaulting to 1000
[  159.020283][ T7417] FAT-fs (loop4): Directory bread(block 199916) failed
[  159.031947][ T7417] FAT-fs (loop4): Directory bread(block 199917) failed
[  159.039764][ T7417] FAT-fs (loop4): Directory bread(block 199918) failed
[  159.047575][ T7417] FAT-fs (loop4): Directory bread(block 199919) failed
[  159.055641][ T7417] FAT-fs (loop4): Directory bread(block 199920) failed
[  159.063874][ T7417] FAT-fs (loop4): Directory bread(block 199921) failed
[  159.089412][ T7417] FAT-fs (loop4): Directory bread(block 199922) failed
[  159.097686][ T7417] FAT-fs (loop4): Directory bread(block 199923) failed
[  159.222790][ T7440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.314113][ T7445] sch_tbf: burst 545 is lower than device lo mtu (32783) !
[  159.325256][ T7446] loop6: detected capacity change from 0 to 128
[  159.402272][ T7446] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.425570][ T7446] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.430533][ T7442] FAT-fs (loop4): Directory bread(block 199916) failed
[  159.477404][ T7455] xt_l2tp: missing protocol rule (udp|l2tpip)
[  159.517524][ T7458] xt_CT: No such helper "snmp_trap"
[  159.524780][ T7455] loop2: detected capacity change from 0 to 256
[  159.541668][ T7442] FAT-fs (loop4): Directory bread(block 199917) failed
[  159.552912][ T7455] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.598765][ T7464] FAULT_INJECTION: forcing a failure.
[  159.598765][ T7464] name failslab, interval 1, probability 0, space 0, times 0
[  159.613451][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.6.1132 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  159.613548][ T7464] Tainted: [W]=WARN
[  159.613556][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  159.613567][ T7464] Call Trace:
[  159.613602][ T7464]  <TASK>
[  159.613612][ T7464]  __dump_stack+0x1d/0x30
[  159.613644][ T7464]  dump_stack_lvl+0x95/0xd0
[  159.613670][ T7464]  dump_stack+0x15/0x1b
[  159.613694][ T7464]  should_fail_ex+0x263/0x280
[  159.613753][ T7464]  should_failslab+0x8c/0xb0
[  159.613852][ T7464]  kmem_cache_alloc_noprof+0x66/0x400
[  159.613950][ T7464]  ? skb_clone+0x151/0x1f0
[  159.613972][ T7464]  skb_clone+0x151/0x1f0
[  159.613992][ T7464]  __netlink_deliver_tap+0x2c9/0x500
[  159.614019][ T7464]  netlink_unicast+0x66b/0x690
[  159.614105][ T7464]  netlink_sendmsg+0x5c8/0x6f0
[  159.614132][ T7464]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.614155][ T7464]  ____sys_sendmsg+0x563/0x5b0
[  159.614200][ T7464]  ___sys_sendmsg+0x195/0x1e0
[  159.614236][ T7464]  __x64_sys_sendmsg+0xd4/0x160
[  159.614263][ T7464]  x64_sys_call+0x194c/0x3020
[  159.614294][ T7464]  do_syscall_64+0x12c/0x370
[  159.614342][ T7464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.614367][ T7464] RIP: 0033:0x7f58f6d6c819
[  159.614387][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.614467][ T7464] RSP: 002b:00007f58f5785028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.614492][ T7464] RAX: ffffffffffffffda RBX: 00007f58f6fe6180 RCX: 00007f58f6d6c819
[  159.614508][ T7464] RDX: 0000000018040880 RSI: 00002000000001c0 RDI: 0000000000000004
[  159.614530][ T7464] RBP: 00007f58f5785090 R08: 0000000000000000 R09: 0000000000000000
[  159.614544][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.614634][ T7464] R13: 00007f58f6fe6218 R14: 00007f58f6fe6180 R15: 00007ffe8de97818
[  159.614656][ T7464]  </TASK>
[  159.653461][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'.
[  159.686690][ T7461] 9p: Bad value for 'rfdno'
[  159.690644][ T7471] rtc_cmos 00:00: Alarms can be up to one day in the future
[  159.697518][ T7473] loop3: detected capacity change from 0 to 512
[  159.701769][ T7473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1141: invalid indirect mapped block 256 (level 2)
[  159.701816][ T7473] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  159.702133][ T7473] EXT4-fs (loop3): 2 truncates cleaned up
[  159.716313][ T7473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.845460][   T28] audit: type=1400 audit(1775149139.062:4513): avc:  denied  { write } for  pid=7479 comm="syz.4.1143" path="socket:[18280]" dev="sockfs" ino=18280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  160.106519][ T7481] loop5: detected capacity change from 0 to 256
[  160.129990][ T5649] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.223402][   T28] audit: type=1400 audit(1775149139.442:4514): avc:  denied  { create } for  pid=7489 comm="syz.2.1146" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  161.141201][ T7481] FAT-fs (loop5): Directory bread(block 64) failed
[  161.148718][ T7481] FAT-fs (loop5): Directory bread(block 65) failed
[  161.155460][ T7481] FAT-fs (loop5): Directory bread(block 66) failed
[  161.162383][ T7481] FAT-fs (loop5): Directory bread(block 67) failed
[  161.168952][ T7481] FAT-fs (loop5): Directory bread(block 68) failed
[  161.175556][ T7481] FAT-fs (loop5): Directory bread(block 69) failed
[  161.182334][ T7481] FAT-fs (loop5): Directory bread(block 70) failed
[  161.188932][ T7481] FAT-fs (loop5): Directory bread(block 71) failed
[  161.196102][ T7481] FAT-fs (loop5): Directory bread(block 72) failed
[  161.203646][ T7481] FAT-fs (loop5): Directory bread(block 73) failed
[  161.223274][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1147'.
[  161.302298][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'.
[  161.326269][ T7499] batadv2: entered promiscuous mode
[  161.336353][ T7499] batadv2: entered allmulticast mode
[  161.427950][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv2
[  161.439891][   T28] audit: type=1400 audit(1775149140.452:4515): avc:  denied  { unlink } for  pid=3311 comm="syz-executor" name="file2" dev="tmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  161.451242][ T7505] loop2: detected capacity change from 0 to 512
[  161.508916][   T28] audit: type=1400 audit(1775149140.732:4516): avc:  denied  { mount } for  pid=7506 comm="syz.6.1145" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  161.570383][ T7499] bridge0: port 4(batadv2) entered blocking state
[  161.581059][ T7509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7509 comm=syz.5.1152
[  161.609218][   T28] audit: type=1400 audit(1775149140.732:4517): avc:  denied  { search } for  pid=7506 comm="syz.6.1145" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  161.656855][ T7499] bridge0: port 4(batadv2) entered disabled state
[  161.705970][ T7511] loop7: detected capacity change from 0 to 7
[  161.727258][ T7499] bridge0: port 4(batadv2) entered blocking state
[  161.736091][ T7499] bridge0: port 4(batadv2) entered forwarding state
[  161.763312][ T7505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.828821][   T70] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  161.840448][   T70] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  161.936737][ T7515] FAT-fs (loop6): Directory bread(block 199916) failed
[  162.005095][ T7515] FAT-fs (loop6): Directory bread(block 199917) failed
[  162.048803][    C1] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  162.061291][ T7519] netlink: 'syz.4.1155': attribute type 16 has an invalid length.
[  162.081224][ T7515] FAT-fs (loop6): Directory bread(block 199918) failed
[  162.117425][ T7519] netlink: 'syz.4.1155': attribute type 17 has an invalid length.
[  162.129726][ T7403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  162.147703][ T7515] FAT-fs (loop6): Directory bread(block 199919) failed
[  162.163529][ T7515] FAT-fs (loop6): Directory bread(block 199920) failed
[  162.174064][ T7515] FAT-fs (loop6): Directory bread(block 199921) failed
[  162.179556][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.185083][ T7515] FAT-fs (loop6): Directory bread(block 199922) failed
[  162.208826][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.231728][ T7515] FAT-fs (loop6): Directory bread(block 199923) failed
[  162.242179][ T7522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  162.259875][ T7522] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.283019][   T28] audit: type=1400 audit(1775149141.502:4518): avc:  denied  { map } for  pid=7521 comm="syz.5.1156" path="/209/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  162.356373][ T7522] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 3: comm syz.5.1156: lblock 3 mapped to illegal pblock 3 (length 3)
[  162.371870][ T7522] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  162.385660][ T7522] EXT4-fs (loop5): This should not happen!! Data will be lost
[  162.385660][ T7522] 
[  162.397782][ T7519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.415069][ T1031] lo speed is unknown, defaulting to 1000
[  162.424949][ T7523] team_slave_0: left promiscuous mode
[  162.444725][ T7523] team0 (unregistering): Port device team_slave_0 removed
[  162.459111][ T7523] team_slave_1: left promiscuous mode
[  162.465908][ T7515] FAT-fs (loop6): Directory bread(block 199916) failed
[  162.476303][ T7523] team0 (unregistering): Port device team_slave_1 removed
[  162.485548][ T7515] FAT-fs (loop6): Directory bread(block 199917) failed
[  162.515354][ T3875] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm kworker/u8:11: lblock 0 mapped to illegal pblock 0 (length 3)
[  162.534306][ T3875] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  162.570166][ T3875] EXT4-fs (loop5): This should not happen!! Data will be lost
[  162.570166][ T3875] 
[  162.583097][ T3875] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 4: comm kworker/u8:11: lblock 4 mapped to illegal pblock 4 (length 2)
[  162.618580][ T3875] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  162.689251][ T3875] EXT4-fs (loop5): This should not happen!! Data will be lost
[  162.689251][ T3875] 
[  162.708788][ T4184] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  162.735234][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.773807][ T7553] FAT-fs (loop3): Directory bread(block 199916) failed
[  162.782232][ T7553] FAT-fs (loop3): Directory bread(block 199917) failed
[  162.792820][ T7553] FAT-fs (loop3): Directory bread(block 199918) failed
[  162.803289][ T7553] FAT-fs (loop3): Directory bread(block 199919) failed
[  162.825981][ T7553] FAT-fs (loop3): Directory bread(block 199920) failed
[  162.833821][ T7553] FAT-fs (loop3): Directory bread(block 199921) failed
[  162.842238][ T7553] FAT-fs (loop3): Directory bread(block 199922) failed
[  162.870614][ T7561] Cannot find del_set index 0 as target
[  162.890453][ T7553] FAT-fs (loop3): Directory bread(block 199923) failed
[  162.892461][ T7562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.929878][   T28] audit: type=1400 audit(1775149142.152:4519): avc:  denied  { listen } for  pid=7563 comm="syz.6.1170" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  162.989832][ T7569] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1171'.
[  163.076476][ T7577] FAT-fs (loop3): Directory bread(block 199916) failed
[  163.086321][ T7577] FAT-fs (loop3): Directory bread(block 199917) failed
[  163.518841][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'.
[  163.943647][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.944826][ T7590] set_capacity_and_notify: 5 callbacks suppressed
[  163.944921][ T7590] loop5: detected capacity change from 0 to 512
[  164.040742][ T7590] FAT-fs (loop5): Directory bread(block 199916) failed
[  164.058022][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'.
[  164.068535][ T7590] FAT-fs (loop5): Directory bread(block 199917) failed
[  164.077216][ T7590] FAT-fs (loop5): Directory bread(block 199918) failed
[  164.097003][ T7590] FAT-fs (loop5): Directory bread(block 199919) failed
[  164.120338][ T7590] FAT-fs (loop5): Directory bread(block 199920) failed
[  164.162703][ T7590] FAT-fs (loop5): Directory bread(block 199921) failed
[  164.188814][ T7590] FAT-fs (loop5): Directory bread(block 199922) failed
[  164.213675][ T7590] FAT-fs (loop5): Directory bread(block 199923) failed
[  164.236996][ T7605] loop6: detected capacity change from 0 to 256
[  164.312296][ T7622] loop4: detected capacity change from 0 to 512
[  164.337445][ T7622] EXT4-fs (loop4): 1 truncate cleaned up
[  164.344608][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.423578][   T28] audit: type=1400 audit(1775149143.642:4520): avc:  denied  { ioctl } for  pid=7621 comm="syz.4.1189" path="/211/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  164.453765][ T7622] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1189'.
[  164.502155][ T7623] FAT-fs (loop5): Directory bread(block 199916) failed
[  164.512266][ T7622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7622 comm=syz.4.1189
[  164.545836][ T7623] FAT-fs (loop5): Directory bread(block 199917) failed
[  164.605387][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.750631][ T7632] netlink: 'syz.2.1194': attribute type 27 has an invalid length.
[  164.765662][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'.
[  164.777097][ T7633] bond0: entered promiscuous mode
[  164.782744][ T7633] bond_slave_0: entered promiscuous mode
[  164.798884][ T7633] bond_slave_1: entered promiscuous mode
[  164.808591][ T7638] FAULT_INJECTION: forcing a failure.
[  164.808591][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.810683][ T7633] gretap0: entered promiscuous mode
[  164.839452][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: syz.2.1195 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  164.839573][ T7638] Tainted: [W]=WARN
[  164.839582][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  164.839596][ T7638] Call Trace:
[  164.839672][ T7638]  <TASK>
[  164.839681][ T7638]  __dump_stack+0x1d/0x30
[  164.839712][ T7638]  dump_stack_lvl+0x95/0xd0
[  164.839820][ T7638]  dump_stack+0x15/0x1b
[  164.839861][ T7638]  should_fail_ex+0x263/0x280
[  164.839894][ T7638]  should_fail+0xb/0x20
[  164.839950][ T7638]  should_fail_usercopy+0x1a/0x20
[  164.839984][ T7638]  _copy_to_user+0x20/0xa0
[  164.840064][ T7638]  rng_dev_read+0x375/0x670
[  164.840130][ T7638]  ? __pfx_rng_dev_read+0x10/0x10
[  164.840187][ T7638]  vfs_readv+0x432/0x6e0
[  164.840225][ T7638]  __x64_sys_preadv+0xfd/0x1c0
[  164.840252][ T7638]  x64_sys_call+0x2915/0x3020
[  164.840337][ T7638]  do_syscall_64+0x12c/0x370
[  164.840369][ T7638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.840463][ T7638] RIP: 0033:0x7fe1b227c819
[  164.840496][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.840548][ T7638] RSP: 002b:00007fe1b0cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  164.840573][ T7638] RAX: ffffffffffffffda RBX: 00007fe1b24f5fa0 RCX: 00007fe1b227c819
[  164.840590][ T7638] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[  164.840605][ T7638] RBP: 00007fe1b0cd7090 R08: 0000000000000007 R09: 0000000000000000
[  164.840620][ T7638] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[  164.840634][ T7638] R13: 00007fe1b24f6038 R14: 00007fe1b24f5fa0 R15: 00007ffc938cd098
[  164.840719][ T7638]  </TASK>
[  164.853284][ T7633] hsr1: entered promiscuous mode
[  164.928830][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'.
[  164.934043][ T7643] loop5: detected capacity change from 0 to 512
[  165.059350][ T7642] loop2: detected capacity change from 0 to 512
[  165.059641][ T7642] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  165.061466][ T7642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1196'.
[  165.062118][ T7643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.181167][ T7605] syz.6.1183: attempt to access beyond end of device
[  165.181167][ T7605] loop6: rw=2049, sector=256, nr_sectors = 4 limit=256
[  165.215824][ T7649] loop4: detected capacity change from 0 to 128
[  165.242548][ T7605] syz.6.1183 (7605) used greatest stack depth: 8712 bytes left
[  165.330827][ T7649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  165.350678][ T7649] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.365880][ T7657] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1200'.
[  165.413439][ T7657] openvswitch: netlink: Message has 8 unknown bytes.
[  165.438060][ T7658] loop2: detected capacity change from 0 to 256
[  165.483392][ T7658] FAT-fs (loop2): Directory bread(block 64) failed
[  165.490132][ T7658] FAT-fs (loop2): Directory bread(block 65) failed
[  165.496795][ T7658] FAT-fs (loop2): Directory bread(block 66) failed
[  165.503462][ T7658] FAT-fs (loop2): Directory bread(block 67) failed
[  165.510154][ T7658] FAT-fs (loop2): Directory bread(block 68) failed
[  165.516729][ T7658] FAT-fs (loop2): Directory bread(block 69) failed
[  165.523450][ T7658] FAT-fs (loop2): Directory bread(block 70) failed
[  165.530097][ T7658] FAT-fs (loop2): Directory bread(block 71) failed
[  165.536861][ T7658] FAT-fs (loop2): Directory bread(block 72) failed
[  165.543555][ T7658] FAT-fs (loop2): Directory bread(block 73) failed
[  165.704915][ T7657] loop6: detected capacity change from 0 to 512
[  165.777132][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop6
[  165.790817][ T7657] EXT4-fs: Ignoring removed nobh option
[  165.842560][ T7657] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4673: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  165.938549][ T7657] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  166.043423][ T7657] process 'syz.6.1200' launched '/dev/fd/5' with NULL argv: empty string added
[  166.116229][   T28] audit: type=1400 audit(1775149145.332:4521): avc:  denied  { execute_no_trans } for  pid=7656 comm="syz.6.1200" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=18932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  166.188942][ T7661] loop6: detected capacity change from 0 to 2048
[  166.249180][ T3304]  loop6: p3 p4 < >
[  166.253392][ T3304] loop6: p3 start 263168 is beyond EOD, truncated
[  166.332894][ T7661]  loop6: p3 p4 < >
[  166.337534][ T7661] loop6: p3 start 263168 is beyond EOD, truncated
[  166.353127][ T2999]  loop6: p3 p4 < >
[  166.357763][ T7657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7657 comm=syz.6.1200
[  166.374688][ T2999] loop6: p3 start 263168 is beyond EOD, truncated
[  166.549259][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  166.593255][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  166.614210][ T7666] loop7: detected capacity change from 0 to 7
[  166.683809][ T7667] FAT-fs (loop6): Directory bread(block 199916) failed
[  166.707896][ T7667] FAT-fs (loop6): Directory bread(block 199917) failed
[  166.729616][ T7667] FAT-fs (loop6): Directory bread(block 199918) failed
[  166.755710][ T7667] FAT-fs (loop6): Directory bread(block 199919) failed
[  166.772507][ T7667] FAT-fs (loop6): Directory bread(block 199920) failed
[  166.786295][ T7667] FAT-fs (loop6): Directory bread(block 199921) failed
[  166.801164][ T7667] FAT-fs (loop6): Directory bread(block 199922) failed
[  166.814827][ T7667] FAT-fs (loop6): Directory bread(block 199923) failed
[  166.894892][ T7667] FAT-fs (loop6): FAT read failed (blocknr 128)
[  166.961845][ T7667] FAT-fs (loop6): Directory bread(block 199916) failed
[  167.136537][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.187379][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.265549][ T7677] vhci_hcd vhci_hcd.0: invalid port number 236
[  167.292301][ T7677] vhci_hcd vhci_hcd.0: invalid port number 236
[  167.299228][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1205'.
[  167.324008][ T7679] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  167.347519][ T7685] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1206'.
[  167.608823][ T7685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.895281][ T7685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.963277][ T7685] bond0 (unregistering): Released all slaves
[  168.035187][   T35] syz1: Port: 1 Link DOWN
[  168.170872][ T7699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.342626][ T7699] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.255755][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.366860][ T7717] set_capacity_and_notify: 3 callbacks suppressed
[  170.366879][ T7717] loop7: detected capacity change from 0 to 7
[  170.413972][ T7722] loop5: detected capacity change from 0 to 512
[  170.439501][ T7722] FAT-fs (loop5): Directory bread(block 199916) failed
[  170.448741][ T7722] FAT-fs (loop5): Directory bread(block 199917) failed
[  170.456030][ T7722] FAT-fs (loop5): Directory bread(block 199918) failed
[  170.490769][ T7722] FAT-fs (loop5): Directory bread(block 199919) failed
[  170.521498][ T7722] FAT-fs (loop5): Directory bread(block 199920) failed
[  170.538069][ T7722] FAT-fs (loop5): Directory bread(block 199921) failed
[  170.547787][ T7722] FAT-fs (loop5): Directory bread(block 199922) failed
[  170.555165][ T7722] FAT-fs (loop5): Directory bread(block 199923) failed
[  170.604230][    C1] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  170.670804][ T7733] FAULT_INJECTION: forcing a failure.
[  170.670804][ T7733] name failslab, interval 1, probability 0, space 0, times 0
[  170.684126][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.6.1222 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  170.684299][ T7733] Tainted: [W]=WARN
[  170.684308][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  170.684321][ T7733] Call Trace:
[  170.684328][ T7733]  <TASK>
[  170.684336][ T7733]  __dump_stack+0x1d/0x30
[  170.684365][ T7733]  dump_stack_lvl+0x95/0xd0
[  170.684391][ T7733]  dump_stack+0x15/0x1b
[  170.684455][ T7733]  should_fail_ex+0x263/0x280
[  170.684493][ T7733]  ? tty_open+0x81/0xaf0
[  170.684527][ T7733]  should_failslab+0x8c/0xb0
[  170.684615][ T7733]  __kmalloc_cache_noprof+0x5f/0x410
[  170.684645][ T7733]  tty_open+0x81/0xaf0
[  170.684700][ T7733]  ? kobject_get_unless_zero+0xf5/0x160
[  170.684735][ T7733]  chrdev_open+0x2eb/0x3a0
[  170.684760][ T7733]  do_dentry_open+0x4ca/0xa90
[  170.684800][ T7733]  ? __pfx_chrdev_open+0x10/0x10
[  170.684825][ T7733]  vfs_open+0x37/0x1e0
[  170.684860][ T7733]  path_openat+0x1b70/0x2050
[  170.684949][ T7733]  ? _parse_integer_limit+0x170/0x190
[  170.684983][ T7733]  ? kstrtouint+0x76/0xc0
[  170.685011][ T7733]  do_file_open+0x16c/0x290
[  170.685112][ T7733]  do_sys_openat2+0x94/0x130
[  170.685145][ T7733]  __x64_sys_openat+0xf2/0x120
[  170.685177][ T7733]  x64_sys_call+0x1e39/0x3020
[  170.685253][ T7733]  do_syscall_64+0x12c/0x370
[  170.685282][ T7733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.685306][ T7733] RIP: 0033:0x7f58f6d6c819
[  170.685324][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.685344][ T7733] RSP: 002b:00007f58f57c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  170.685428][ T7733] RAX: ffffffffffffffda RBX: 00007f58f6fe5fa0 RCX: 00007f58f6d6c819
[  170.685444][ T7733] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  170.685467][ T7733] RBP: 00007f58f57c7090 R08: 0000000000000000 R09: 0000000000000000
[  170.685483][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.685538][ T7733] R13: 00007f58f6fe6038 R14: 00007f58f6fe5fa0 R15: 00007ffe8de97818
[  170.685641][ T7733]  </TASK>
[  170.903294][ T7729] loop4: detected capacity change from 0 to 512
[  171.010786][ T7722] FAT-fs (loop5): Directory bread(block 199916) failed
[  171.018418][ T7742] loop6: detected capacity change from 0 to 1024
[  171.038876][ T7742] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  171.048604][ T7722] FAT-fs (loop5): Directory bread(block 199917) failed
[  171.050110][ T7729] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1220: bg 0: block 248: padding at end of block bitmap is not set
[  171.066390][ T7742] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  171.089531][ T7729] loop4: lost filesystem error report for type 5 error -117
[  171.095678][ T7742] EXT4-fs (loop6): invalid journal inode
[  171.103213][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  171.103231][    C1] EXT4-fs (loop4): last error at time 1775149150: ext4_validate_block_bitmap:441
[  171.125939][ T7742] EXT4-fs (loop6): can't get journal size
[  171.129496][ T7729] Quota error (device loop4): write_blk: dquota write failed
[  171.132211][ T7742] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 17104912: comm syz.6.1225: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  171.154862][ T7742] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  171.155557][ T7729] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  171.165466][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  171.165937][    C1] EXT4-fs (loop6): initial error at time 1775149150: ext4_map_blocks:786: inode 3: block 17104912
[  171.166538][    C1] EXT4-fs (loop6): last error at time 1775149150: ext4_map_blocks:786: inode 3: block 17104912
[  171.189363][ T7742] EXT4-fs (loop6): failed to initialize system zone (-117)
[  171.198658][ T7729] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.1220: Failed to acquire dquot type 1
[  171.227698][ T7729] loop4: lost filesystem error report for type 5 error -28
[  171.229290][ T7742] EXT4-fs (loop6): mount failed
[  171.255113][ T7729] EXT4-fs (loop4): 1 truncate cleaned up
[  171.378397][ T7729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.393890][ T7754] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1228'.
[  171.410609][ T7729] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.426223][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.433490][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.588962][ T7766] FAULT_INJECTION: forcing a failure.
[  171.588962][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.610455][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.5.1232 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  171.610495][ T7766] Tainted: [W]=WARN
[  171.610504][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  171.610519][ T7766] Call Trace:
[  171.610525][ T7766]  <TASK>
[  171.610616][ T7766]  __dump_stack+0x1d/0x30
[  171.610643][ T7766]  dump_stack_lvl+0x95/0xd0
[  171.610666][ T7766]  dump_stack+0x15/0x1b
[  171.610723][ T7766]  should_fail_ex+0x263/0x280
[  171.610752][ T7766]  should_fail+0xb/0x20
[  171.610782][ T7766]  should_fail_usercopy+0x1a/0x20
[  171.610813][ T7766]  _copy_from_user+0x1c/0xb0
[  171.610921][ T7766]  __sys_bpf+0x183/0x7e0
[  171.610954][ T7766]  __x64_sys_bpf+0x41/0x50
[  171.610976][ T7766]  x64_sys_call+0x10cb/0x3020
[  171.611055][ T7766]  do_syscall_64+0x12c/0x370
[  171.611081][ T7766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.611101][ T7766] RIP: 0033:0x7fba14b6c819
[  171.611121][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.611141][ T7766] RSP: 002b:00007fba135c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  171.611170][ T7766] RAX: ffffffffffffffda RBX: 00007fba14de5fa0 RCX: 00007fba14b6c819
[  171.611184][ T7766] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  171.611196][ T7766] RBP: 00007fba135c7090 R08: 0000000000000000 R09: 0000000000000000
[  171.611208][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.611221][ T7766] R13: 00007fba14de6038 R14: 00007fba14de5fa0 R15: 00007ffca1f64ad8
[  171.611239][ T7766]  </TASK>
[  171.798414][ T7768] loop5: detected capacity change from 0 to 1024
[  171.849618][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.861643][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.870676][ T7768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.902784][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.912308][   T28] audit: type=1400 audit(1775149151.102:4522): avc:  denied  { create } for  pid=7767 comm="syz.5.1234" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  172.146167][ T7781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7781 comm=syz.4.1236
[  172.188856][ T7771] syzkaller0: entered promiscuous mode
[  172.194618][ T7771] syzkaller0: entered allmulticast mode
[  172.219844][ T7048] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.229060][ T7048] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.256912][ T7048] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.269211][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.280148][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1236'.
[  172.302639][ T7048] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.368219][ T7788] loop7: detected capacity change from 0 to 7
[  172.432639][ T7793] loop5: detected capacity change from 0 to 512
[  172.477878][ T7793] FAT-fs (loop5): Directory bread(block 199916) failed
[  172.565315][ T7793] FAT-fs (loop5): Directory bread(block 199917) failed
[  172.610713][ T7793] FAT-fs (loop5): Directory bread(block 199918) failed
[  172.644768][ T7793] FAT-fs (loop5): Directory bread(block 199919) failed
[  172.669756][ T7793] FAT-fs (loop5): Directory bread(block 199920) failed
[  172.689745][ T7793] FAT-fs (loop5): Directory bread(block 199921) failed
[  172.707786][ T7793] FAT-fs (loop5): Directory bread(block 199922) failed
[  172.727694][ T7793] FAT-fs (loop5): Directory bread(block 199923) failed
[  172.757481][   T28] audit: type=1326 audit(1775149151.972:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  172.854327][   T28] audit: type=1326 audit(1775149152.002:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  172.903438][ T7793] FAT-fs (loop5): FAT read failed (blocknr 128)
[  172.954416][   T28] audit: type=1326 audit(1775149152.002:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  173.062108][   T28] audit: type=1326 audit(1775149152.002:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  173.093638][ T7793] FAT-fs (loop5): Directory bread(block 199916) failed
[  173.103071][ T7814] netlink: 'syz.4.1248': attribute type 3 has an invalid length.
[  173.125996][ T7814] netlink: 'syz.4.1248': attribute type 3 has an invalid length.
[  173.134442][ T7814] netlink: 199656 bytes leftover after parsing attributes in process `syz.4.1248'.
[  173.144188][   T28] audit: type=1326 audit(1775149152.002:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  173.184928][   T28] audit: type=1326 audit(1775149152.002:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  173.209264][ T7814] bond3: option lacp_rate: invalid value (128)
[  173.215700][   T28] audit: type=1326 audit(1775149152.002:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd100cc819 code=0x7ffc0000
[  173.216919][ T7814] bond3 (unregistering): Released all slaves
[  173.518371][ T7830] loop2: detected capacity change from 0 to 1024
[  173.525103][ T7830] EXT4-fs: Ignoring removed orlov option
[  173.531094][ T7830] EXT4-fs: inline encryption not supported
[  173.538965][ T7830] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  173.572385][ T7829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.579759][ T7829] IPv6: NLM_F_CREATE should be set when creating new route
[  173.613764][ T7830] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  173.640757][ T7835] FAULT_INJECTION: forcing a failure.
[  173.640757][ T7835] name failslab, interval 1, probability 0, space 0, times 0
[  173.653844][ T7830] EXT4-fs (loop2): invalid journal inode
[  173.659704][ T7830] EXT4-fs (loop2): can't get journal size
[  173.665942][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.5.1253 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  173.665978][ T7835] Tainted: [W]=WARN
[  173.665987][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  173.666001][ T7835] Call Trace:
[  173.666090][ T7835]  <TASK>
[  173.666099][ T7835]  __dump_stack+0x1d/0x30
[  173.666131][ T7835]  dump_stack_lvl+0x95/0xd0
[  173.666159][ T7835]  dump_stack+0x15/0x1b
[  173.666289][ T7835]  should_fail_ex+0x263/0x280
[  173.666374][ T7835]  should_failslab+0x8c/0xb0
[  173.666408][ T7835]  __kmalloc_cache_node_noprof+0x6b/0x480
[  173.666510][ T7835]  ? __get_vm_area_node+0x106/0x1d0
[  173.666539][ T7835]  __get_vm_area_node+0x106/0x1d0
[  173.666570][ T7835]  __vmalloc_node_range_noprof+0x291/0x12b0
[  173.666604][ T7835]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  173.666623][ T7835]  ? selinux_file_open+0x2e6/0x330
[  173.666650][ T7835]  ? __rcu_read_unlock+0x4e/0x70
[  173.666670][ T7835]  ? avc_has_perm_noaudit+0xab/0x130
[  173.666742][ T7835]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  173.666801][ T7835]  __vmalloc_noprof+0xa4/0xf0
[  173.666831][ T7835]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  173.666850][ T7835]  bpf_prog_alloc_no_stats+0x47/0x390
[  173.666869][ T7835]  ? bpf_prog_alloc+0x2a/0x150
[  173.666905][ T7835]  bpf_prog_alloc+0x3c/0x150
[  173.666927][ T7835]  bpf_prog_load+0x506/0x1140
[  173.666958][ T7835]  ? security_bpf+0x2b/0x90
[  173.666985][ T7835]  __sys_bpf+0x505/0x7e0
[  173.667106][ T7835]  __x64_sys_bpf+0x41/0x50
[  173.667126][ T7835]  x64_sys_call+0x10cb/0x3020
[  173.667157][ T7835]  do_syscall_64+0x12c/0x370
[  173.667199][ T7835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.667221][ T7835] RIP: 0033:0x7fba14b6c819
[  173.667237][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.667255][ T7835] RSP: 002b:00007fba135c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  173.667281][ T7835] RAX: ffffffffffffffda RBX: 00007fba14de5fa0 RCX: 00007fba14b6c819
[  173.667352][ T7835] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  173.667365][ T7835] RBP: 00007fba135c7090 R08: 0000000000000000 R09: 0000000000000000
[  173.667378][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.667401][ T7835] R13: 00007fba14de6038 R14: 00007fba14de5fa0 R15: 00007ffca1f64ad8
[  173.667431][ T7835]  </TASK>
[  173.667440][ T7835] syz.5.1253: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  173.944427][ T7830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  173.965940][ T7835] ,cpuset=syz5,mems_allowed=0
[  173.977395][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.5.1253 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  173.977435][ T7835] Tainted: [W]=WARN
[  173.977443][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  173.977459][ T7835] Call Trace:
[  173.977466][ T7835]  <TASK>
[  173.977475][ T7835]  __dump_stack+0x1d/0x30
[  173.977582][ T7835]  dump_stack_lvl+0x95/0xd0
[  173.977608][ T7835]  dump_stack+0x15/0x1b
[  173.977634][ T7835]  warn_alloc+0x145/0x1c0
[  173.977663][ T7835]  __vmalloc_node_range_noprof+0x2b6/0x12b0
[  173.977769][ T7835]  ? selinux_file_open+0x2e6/0x330
[  173.977802][ T7835]  ? __rcu_read_unlock+0x4e/0x70
[  173.977827][ T7835]  ? avc_has_perm_noaudit+0xab/0x130
[  173.977919][ T7835]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  173.977941][ T7835]  __vmalloc_noprof+0xa4/0xf0
[  173.978048][ T7835]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  173.978068][ T7835]  bpf_prog_alloc_no_stats+0x47/0x390
[  173.978086][ T7835]  ? bpf_prog_alloc+0x2a/0x150
[  173.978173][ T7835]  bpf_prog_alloc+0x3c/0x150
[  173.978192][ T7835]  bpf_prog_load+0x506/0x1140
[  173.978232][ T7835]  ? security_bpf+0x2b/0x90
[  173.978258][ T7835]  __sys_bpf+0x505/0x7e0
[  173.978288][ T7835]  __x64_sys_bpf+0x41/0x50
[  173.978310][ T7835]  x64_sys_call+0x10cb/0x3020
[  173.978403][ T7835]  do_syscall_64+0x12c/0x370
[  173.978434][ T7835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.978460][ T7835] RIP: 0033:0x7fba14b6c819
[  173.978476][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.978493][ T7835] RSP: 002b:00007fba135c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  173.978519][ T7835] RAX: ffffffffffffffda RBX: 00007fba14de5fa0 RCX: 00007fba14b6c819
[  173.978546][ T7835] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  173.978561][ T7835] RBP: 00007fba135c7090 R08: 0000000000000000 R09: 0000000000000000
[  173.978574][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.978608][ T7835] R13: 00007fba14de6038 R14: 00007fba14de5fa0 R15: 00007ffca1f64ad8
[  173.978628][ T7835]  </TASK>
[  173.978635][ T7835] Mem-Info:
[  174.193383][ T7835] active_anon:24458 inactive_anon:0 isolated_anon:0
[  174.193383][ T7835]  active_file:26103 inactive_file:3275 isolated_file:0
[  174.193383][ T7835]  unevictable:0 dirty:278 writeback:0
[  174.193383][ T7835]  slab_reclaimable:3649 slab_unreclaimable:18372
[  174.193383][ T7835]  mapped:30582 shmem:15818 pagetables:1501
[  174.193383][ T7835]  sec_pagetables:0 bounce:0
[  174.193383][ T7835]  kernel_misc_reclaimable:0
[  174.193383][ T7835]  free:1849368 free_pcp:19169 free_cma:0
[  174.239160][ T7835] Node 0 active_anon:97832kB inactive_anon:0kB active_file:104412kB inactive_file:13100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122328kB dirty:1112kB writeback:0kB shmem:63272kB kernel_stack:4048kB pagetables:5888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  174.270871][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.282065][ T7835] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  174.312660][ T7835] lowmem_reserve[]: 0 2879 7857 7857
[  174.318739][ T7835] Node 0 DMA32 free:2944512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948140kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB
[  174.351967][ T7835] lowmem_reserve[]: 0 0 4978 4978
[  174.357155][ T7835] Node 0 Normal free:4436752kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97832kB inactive_anon:0kB active_file:104412kB inactive_file:13100kB unevictable:0kB writepending:1112kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:72884kB local_pcp:25340kB free_cma:0kB
[  174.397886][ T7835] lowmem_reserve[]: 0 0 0 0
[  174.403007][ T7835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  174.425083][ T7835] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944512kB
[  174.441946][ T7835] Node 0 Normal: 2347*4kB (UME) 1488*8kB (UM) 703*16kB (UM) 447*32kB (UME) 313*64kB (UM) 56*128kB (UM) 54*256kB (UME) 50*512kB (UM) 31*1024kB (UE) 30*2048kB (UM) 1033*4096kB (UM) = 4437820kB
[  174.461271][ T7835] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  174.491322][ T7846] loop2: detected capacity change from 0 to 512
[  174.509256][ T7835] 46665 total pagecache pages
[  174.551335][ T7846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  174.564050][ T7835] 0 pages in swap cache
[  174.568309][ T7835] Free swap  = 124996kB
[  174.572710][ T7835] Total swap = 124996kB
[  174.577127][ T7835] 2097051 pages RAM
[  174.581243][ T7835] 0 pages HighMem/MovableOnly
[  174.585952][ T7835] 81616 pages reserved
[  174.629211][ T7846] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98
[  174.712485][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.733744][ T7860] loop5: detected capacity change from 0 to 512
[  174.759283][ T7860] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  174.783309][ T7860] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended
[  174.809337][ T7860] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1260: inode #15: comm syz.5.1260: iget: illegal inode #
[  174.827136][ T7860] loop5: lost filesystem error report for type 5 error -117
[  174.827957][ T7860] EXT4-fs (loop5): Remounting filesystem read-only
[  174.835323][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  174.835347][    C1] EXT4-fs (loop5): initial error at time 1775149154: ext4_orphan_get:1397
[  174.835373][    C1] EXT4-fs (loop5): last error at time 1775149154: ext4_orphan_get:1397
[  174.855469][ T7864] FAT-fs (loop4): Directory bread(block 199916) failed
[  174.857718][ T7860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.888788][ T7864] FAT-fs (loop4): Directory bread(block 199917) failed
[  174.900046][ T7864] FAT-fs (loop4): Directory bread(block 199918) failed
[  174.907013][ T7864] FAT-fs (loop4): Directory bread(block 199919) failed
[  174.923929][ T7864] FAT-fs (loop4): Directory bread(block 199920) failed
[  174.924767][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.940890][ T7864] FAT-fs (loop4): Directory bread(block 199921) failed
[  174.948227][ T7864] FAT-fs (loop4): Directory bread(block 199922) failed
[  174.955468][ T7864] FAT-fs (loop4): Directory bread(block 199923) failed
[  174.973291][ T7866] sch_tbf: burst 545 is lower than device lo mtu (32783) !
[  175.046616][ T7871] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1265'.
[  175.119100][ T7871] SELinux: failed to load policy
[  175.128805][ T7864] FAT-fs (loop4): Directory bread(block 199916) failed
[  175.136504][ T7864] FAT-fs (loop4): Directory bread(block 199917) failed
[  175.169116][ T7873] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.182740][ T7873] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.293889][ T7877] FAULT_INJECTION: forcing a failure.
[  175.293889][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.378439][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.2.1266 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  175.378521][ T7877] Tainted: [W]=WARN
[  175.378529][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  175.378541][ T7877] Call Trace:
[  175.378547][ T7877]  <TASK>
[  175.378554][ T7877]  __dump_stack+0x1d/0x30
[  175.378584][ T7877]  dump_stack_lvl+0x95/0xd0
[  175.378628][ T7877]  dump_stack+0x15/0x1b
[  175.378657][ T7877]  should_fail_ex+0x263/0x280
[  175.378689][ T7877]  should_fail+0xb/0x20
[  175.378718][ T7877]  should_fail_usercopy+0x1a/0x20
[  175.378799][ T7877]  _copy_to_user+0x20/0xa0
[  175.378832][ T7877]  simple_read_from_buffer+0xb5/0x130
[  175.378861][ T7877]  proc_fail_nth_read+0x10e/0x150
[  175.378933][ T7877]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  175.378966][ T7877]  vfs_read+0x1ab/0x7f0
[  175.378984][ T7877]  ? __rcu_read_unlock+0x4e/0x70
[  175.379005][ T7877]  ? __fget_files+0x184/0x1c0
[  175.379033][ T7877]  ? mutex_lock+0x57/0x90
[  175.379055][ T7877]  ksys_read+0xdc/0x1a0
[  175.379074][ T7877]  __x64_sys_read+0x40/0x50
[  175.379093][ T7877]  x64_sys_call+0x2886/0x3020
[  175.379121][ T7877]  do_syscall_64+0x12c/0x370
[  175.379199][ T7877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.379220][ T7877] RIP: 0033:0x7fe1b223d04e
[  175.379236][ T7877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  175.379254][ T7877] RSP: 002b:00007fe1b0cb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.379278][ T7877] RAX: ffffffffffffffda RBX: 00007fe1b0cb66c0 RCX: 00007fe1b223d04e
[  175.379323][ T7877] RDX: 000000000000000f RSI: 00007fe1b0cb60a0 RDI: 000000000000000c
[  175.379398][ T7877] RBP: 00007fe1b0cb6090 R08: 0000000000000000 R09: 0000000000000000
[  175.379412][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.379425][ T7877] R13: 00007fe1b24f6128 R14: 00007fe1b24f6090 R15: 00007ffc938cd098
[  175.379473][ T7877]  </TASK>
[  175.412064][ T7886] syzkaller0: entered promiscuous mode
[  175.590291][ T7886] syzkaller0: entered allmulticast mode
[  175.629915][ T7895] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1273'.
[  175.763650][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.797943][ T7900] set_capacity_and_notify: 3 callbacks suppressed
[  175.797961][ T7900] loop3: detected capacity change from 0 to 512
[  175.813751][ T7898] loop5: detected capacity change from 0 to 256
[  175.841292][ T7900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  175.872656][ T7898] FAT-fs (loop5): Directory bread(block 64) failed
[  175.879250][ T7898] FAT-fs (loop5): Directory bread(block 65) failed
[  175.885921][ T7898] FAT-fs (loop5): Directory bread(block 66) failed
[  175.892606][ T7898] FAT-fs (loop5): Directory bread(block 67) failed
[  175.899177][ T7898] FAT-fs (loop5): Directory bread(block 68) failed
[  175.905798][ T7898] FAT-fs (loop5): Directory bread(block 69) failed
[  175.912590][ T7898] FAT-fs (loop5): Directory bread(block 70) failed
[  175.919253][ T7898] FAT-fs (loop5): Directory bread(block 71) failed
[  175.925832][ T7898] FAT-fs (loop5): Directory bread(block 72) failed
[  175.932468][ T7898] FAT-fs (loop5): Directory bread(block 73) failed
[  175.944939][ T7900] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  175.964618][ T7900] EXT4-fs (loop3): Remounting filesystem read-only
[  175.971378][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  175.971399][    C1] EXT4-fs (loop3): initial error at time 1775149155: ext4_mb_generate_buddy:1317
[  175.971436][    C1] EXT4-fs (loop3): last error at time 1775149155: ext4_mb_generate_buddy:1317
[  175.996331][ T7900] EXT4-fs (loop3): 1 truncate cleaned up
[  176.003342][ T7900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.048714][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.074075][ T7920] loop4: detected capacity change from 0 to 512
[  176.084544][ T7920] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1284: invalid indirect mapped block 256 (level 2)
[  176.098886][ T7920] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  176.102255][ T7920] EXT4-fs (loop4): 2 truncates cleaned up
[  176.111576][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  176.111617][    C1] EXT4-fs (loop4): initial error at time 1775149407: ext4_free_branches:1023: inode 11
[  176.111637][    C1] EXT4-fs (loop4): last error at time 1775149407: ext4_free_branches:1023: inode 11
[  176.128954][ T7922] bond_slave_0: entered promiscuous mode
[  176.134608][ T7920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.152357][ T7922] bond_slave_0: entered allmulticast mode
[  176.307422][ T7930] netlink: 'syz.2.1287': attribute type 16 has an invalid length.
[  176.322520][ T7930] netlink: 'syz.2.1287': attribute type 17 has an invalid length.
[  176.447790][ T7936] loop7: detected capacity change from 0 to 7
[  176.596530][ T7943] loop6: detected capacity change from 0 to 512
[  176.631086][ T7930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.741693][ T7943] FAT-fs (loop6): Directory bread(block 199916) failed
[  176.828264][ T7943] FAT-fs (loop6): Directory bread(block 199917) failed
[  176.877072][ T7943] FAT-fs (loop6): Directory bread(block 199918) failed
[  176.946696][ T7943] FAT-fs (loop6): Directory bread(block 199919) failed
[  176.954044][ T7943] FAT-fs (loop6): Directory bread(block 199920) failed
[  176.961241][ T7943] FAT-fs (loop6): Directory bread(block 199921) failed
[  176.968262][ T7943] FAT-fs (loop6): Directory bread(block 199922) failed
[  176.975514][ T7943] FAT-fs (loop6): Directory bread(block 199923) failed
[  177.153390][ T7942] FAT-fs (loop6): FAT read failed (blocknr 128)
[  177.273361][ T7942] FAT-fs (loop6): Directory bread(block 199916) failed
[  177.678859][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  177.678878][   T28] audit: type=1400 audit(1775149408.898:4596): avc:  denied  { getattr } for  pid=7955 comm="syz.6.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  177.739590][   T28] audit: type=1400 audit(1775149408.938:4597): avc:  denied  { bind } for  pid=7955 comm="syz.6.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  178.003093][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.058576][ T7967] Cannot find del_set index 0 as target
[  178.220823][ T7975] loop5: detected capacity change from 0 to 512
[  178.295848][   T28] audit: type=1400 audit(1775149409.508:4598): avc:  denied  { bind } for  pid=7976 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  178.331844][ T7975] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  178.456725][ T7975] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  178.540851][   T28] audit: type=1400 audit(1775149409.538:4599): avc:  denied  { read } for  pid=7976 comm="syz.2.1301" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  178.582446][ T7975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  178.585277][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1303'.
[  178.598748][ T7975] System zones: 0-2, 18-18, 34-34
[  178.612868][ T7975] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1300: bad orphan inode 15
[  178.615323][   T28] audit: type=1400 audit(1775149409.538:4600): avc:  denied  { open } for  pid=7976 comm="syz.2.1301" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  178.653597][ T7975] loop5: lost filesystem error report for type 5 error -117
[  178.653756][ T7975] ext4_test_bit(bit=14, block=18) = 1
[  178.661138][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  178.661158][    C0] EXT4-fs (loop5): initial error at time 1775149409: ext4_orphan_get:1423
[  178.661186][    C0] EXT4-fs (loop5): last error at time 1775149409: ext4_orphan_get:1423
[  178.724573][ T7975] is_bad_inode(inode)=0
[  178.731089][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'.
[  178.742644][ T7975] NEXT_ORPHAN(inode)=2264924160
[  178.754222][ T7975] max_ino=32
[  178.762811][ T7975] i_nlink=0
[  178.770657][ T7975] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.1300: corrupted inode contents
[  178.788716][ T7975] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.788992][ T7975] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.1300: mark_inode_dirty error
[  178.818935][ T7975] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.819163][ T7975] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.1300: corrupted inode contents
[  178.842755][ T7975] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.842966][ T7975] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1300: mark_inode_dirty error
[  178.865397][ T7975] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.865665][ T7975] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.1300: mark inode dirty (error -117)
[  178.888291][ T7975] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.888485][ T7975] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117)
[  178.907690][ T7975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.115483][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.288144][ T8002] loop4: detected capacity change from 0 to 512
[  179.297188][ T8002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1312: bg 0: block 393: padding at end of block bitmap is not set
[  179.319540][ T8002] loop4: lost filesystem error report for type 5 error -117
[  179.320488][ T8002] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  179.336884][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  179.336908][    C1] EXT4-fs (loop4): initial error at time 1775149410: ext4_validate_block_bitmap:441
[  179.336936][    C1] EXT4-fs (loop4): last error at time 1775149410: ext4_validate_block_bitmap:441
[  179.437031][ T8006] loop5: detected capacity change from 0 to 1764
[  179.546458][ T8006] iso9660: Corrupted directory entry in block 2 of inode 1920
[  179.624506][ T8002] loop4: lost filesystem error report for type 5 error -117
[  179.672913][ T8002] EXT4-fs (loop4): 2 truncates cleaned up
[  179.711436][ T8012] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1
[  179.735897][ T8002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.139300][ T8024] loop6: detected capacity change from 0 to 256
[  182.300496][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.313380][ T8024] FAT-fs (loop6): Directory bread(block 64) failed
[  182.319958][ T8024] FAT-fs (loop6): Directory bread(block 65) failed
[  182.326727][ T8024] FAT-fs (loop6): Directory bread(block 66) failed
[  182.333331][ T8024] FAT-fs (loop6): Directory bread(block 67) failed
[  182.339888][ T8024] FAT-fs (loop6): Directory bread(block 68) failed
[  182.346481][ T8024] FAT-fs (loop6): Directory bread(block 69) failed
[  182.353222][ T8024] FAT-fs (loop6): Directory bread(block 70) failed
[  182.359896][ T8024] FAT-fs (loop6): Directory bread(block 71) failed
[  182.366668][ T8024] FAT-fs (loop6): Directory bread(block 72) failed
[  182.373395][ T8024] FAT-fs (loop6): Directory bread(block 73) failed
[  182.443830][ T8029] batadv_slave_0: entered promiscuous mode
[  182.611228][ T8029] loop5: detected capacity change from 0 to 8192
[  182.836892][ T4184] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  182.948550][ T8036] loop3: detected capacity change from 0 to 512
[  182.980564][ T4184] FAT-fs (loop5): Filesystem has been set read-only
[  182.988070][ T8038] VFS: Mount too revealing
[  183.012510][ T8036] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1320: invalid indirect mapped block 256 (level 2)
[  183.023390][ T8034] loop7: detected capacity change from 0 to 7
[  183.039255][ T8038] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  183.048047][ T8036] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  183.048304][ T8036] EXT4-fs (loop3): 2 truncates cleaned up
[  183.057742][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  183.057764][    C0] EXT4-fs (loop3): initial error at time 1775149414: ext4_free_branches:1023: inode 11
[  183.057797][    C0] EXT4-fs (loop3): last error at time 1775149414: ext4_free_branches:1023: inode 11
[  183.220349][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.370549][ T8030] batadv_slave_0: left promiscuous mode
[  183.519372][ T8047] loop2: detected capacity change from 0 to 512
[  183.537290][ T8034] loop4: detected capacity change from 0 to 512
[  183.613787][ T8047] EXT4-fs error (device loop2): ext4_quota_enable:7217: inode #3: comm syz.2.1325: iget: checksum invalid
[  183.653803][ T8034] FAT-fs (loop4): Directory bread(block 199916) failed
[  183.682484][ T8034] FAT-fs (loop4): Directory bread(block 199917) failed
[  183.702248][ T8047] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74
[  183.706985][ T8047] EXT4-fs error (device loop2): ext4_quota_enable:7220: comm syz.2.1325: Bad quota inode: 3, type: 0
[  183.716143][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  183.716167][    C0] EXT4-fs (loop2): initial error at time 1775149414: ext4_quota_enable:7217: inode 3
[  183.716195][    C0] EXT4-fs (loop2): last error at time 1775149414: ext4_quota_enable:7217: inode 3
[  183.805820][ T8034] FAT-fs (loop4): Directory bread(block 199918) failed
[  183.815069][ T8034] FAT-fs (loop4): Directory bread(block 199919) failed
[  183.831600][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.841556][ T8034] FAT-fs (loop4): Directory bread(block 199920) failed
[  183.857938][ T8034] FAT-fs (loop4): Directory bread(block 199921) failed
[  183.896223][ T8034] FAT-fs (loop4): Directory bread(block 199922) failed
[  183.947574][ T8049] lo speed is unknown, defaulting to 1000
[  183.958370][ T8034] FAT-fs (loop4): Directory bread(block 199923) failed
[  183.968622][ T8047] loop2: lost filesystem error report for type 5 error -117
[  183.969025][ T8047] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix.
[  184.015526][ T8047] EXT4-fs (loop2): mount failed
[  184.050100][ T8066] loop6: detected capacity change from 0 to 1024
[  184.057118][ T8066] EXT4-fs: Ignoring removed orlov option
[  184.079586][ T8066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.105253][ T8071] loop3: detected capacity change from 0 to 512
[  184.134650][ T8049] chnl_net:caif_netlink_parms(): no params data found
[  184.142120][ T8071] ext3: Bad value for 'init_itable'
[  184.303322][ T8076] FAT-fs (loop4): Directory bread(block 199916) failed
[  184.312973][ T8076] FAT-fs (loop4): Directory bread(block 199917) failed
[  184.483980][ T8077] Driver unsupported XDP return value 0 on prog  (id 382) dev N/A, expect packet loss!
[  184.889407][ T8088] FAULT_INJECTION: forcing a failure.
[  184.889407][ T8088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.914146][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.4.1330 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  184.914185][ T8088] Tainted: [W]=WARN
[  184.914192][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  184.914207][ T8088] Call Trace:
[  184.914273][ T8088]  <TASK>
[  184.914282][ T8088]  __dump_stack+0x1d/0x30
[  184.914353][ T8088]  dump_stack_lvl+0x95/0xd0
[  184.914381][ T8088]  dump_stack+0x15/0x1b
[  184.914404][ T8088]  should_fail_ex+0x263/0x280
[  184.914435][ T8088]  should_fail+0xb/0x20
[  184.914503][ T8088]  should_fail_usercopy+0x1a/0x20
[  184.914536][ T8088]  _copy_to_user+0x20/0xa0
[  184.914573][ T8088]  simple_read_from_buffer+0xb5/0x130
[  184.914637][ T8088]  proc_fail_nth_read+0x10e/0x150
[  184.914673][ T8088]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  184.914706][ T8088]  vfs_read+0x1ab/0x7f0
[  184.914794][ T8088]  ? __rcu_read_unlock+0x4e/0x70
[  184.914820][ T8088]  ? __fget_files+0x184/0x1c0
[  184.914849][ T8088]  ? mutex_lock+0x57/0x90
[  184.914888][ T8088]  ksys_read+0xdc/0x1a0
[  184.914911][ T8088]  __x64_sys_read+0x40/0x50
[  184.914995][ T8088]  x64_sys_call+0x2886/0x3020
[  184.915020][ T8088]  do_syscall_64+0x12c/0x370
[  184.915129][ T8088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.915205][ T8088] RIP: 0033:0x7efd1008d04e
[  184.915222][ T8088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  184.915241][ T8088] RSP: 002b:00007efd0eb1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.915266][ T8088] RAX: ffffffffffffffda RBX: 00007efd0eb1f6c0 RCX: 00007efd1008d04e
[  184.915282][ T8088] RDX: 000000000000000f RSI: 00007efd0eb1f0a0 RDI: 0000000000000005
[  184.915335][ T8088] RBP: 00007efd0eb1f090 R08: 0000000000000000 R09: 0000000000000000
[  184.915350][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.915364][ T8088] R13: 00007efd10346038 R14: 00007efd10345fa0 R15: 00007fffea868028
[  184.915385][ T8088]  </TASK>
[  185.827682][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.887383][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.937396][ T8049] bridge_slave_0: entered allmulticast mode
[  185.994877][ T8049] bridge_slave_0: entered promiscuous mode
[  186.003826][ T5649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.105730][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.176911][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.205157][ T8049] bridge_slave_1: entered allmulticast mode
[  186.232563][ T8049] bridge_slave_1: entered promiscuous mode
[  186.329627][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.344898][   T28] audit: type=1326 audit(1775149417.558:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.405642][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.454814][   T28] audit: type=1326 audit(1775149417.588:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.514200][ T8049] team0: Port device team_slave_0 added
[  186.525095][ T8049] team0: Port device team_slave_1 added
[  186.545539][   T28] audit: type=1326 audit(1775149417.588:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.578331][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.585857][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.612153][    C1] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  186.625773][   T28] audit: type=1326 audit(1775149417.588:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.650097][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.661229][   T28] audit: type=1326 audit(1775149417.588:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.689862][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.697143][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.724219][   T28] audit: type=1326 audit(1775149417.588:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.751660][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.766864][   T28] audit: type=1326 audit(1775149417.588:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.826919][ T8049] hsr_slave_0: entered promiscuous mode
[  186.832840][   T28] audit: type=1326 audit(1775149417.588:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.861539][ T8049] hsr_slave_1: entered promiscuous mode
[  186.868091][ T8049] debugfs: 'hsr0' already exists in 'hsr'
[  186.874261][ T8049] Cannot create hsr debugfs directory
[  186.905190][   T28] audit: type=1326 audit(1775149417.588:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  186.986990][   T28] audit: type=1326 audit(1775149417.588:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.3.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c296cc819 code=0x7ffc0000
[  187.084364][ T8049] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  187.098907][ T8049] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  187.110515][ T8049] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  187.122509][ T8049] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  187.206243][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.226995][ T8049] 8021q: adding VLAN 0 to HW filter on device team0
[  187.241633][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.248744][ T3891] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.266056][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.273199][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.315488][ T8049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.435493][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.456702][ T8136] loop7: detected capacity change from 0 to 7
[  187.500801][ T8148] loop6: detected capacity change from 0 to 512
[  187.519109][ T8145] FAULT_INJECTION: forcing a failure.
[  187.519109][ T8145] name failslab, interval 1, probability 0, space 0, times 0
[  187.536217][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.1342 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  187.536326][ T8145] Tainted: [W]=WARN
[  187.536334][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.536347][ T8145] Call Trace:
[  187.536355][ T8145]  <TASK>
[  187.536363][ T8145]  __dump_stack+0x1d/0x30
[  187.536392][ T8145]  dump_stack_lvl+0x95/0xd0
[  187.536422][ T8145]  dump_stack+0x15/0x1b
[  187.536453][ T8145]  should_fail_ex+0x263/0x280
[  187.536544][ T8145]  should_failslab+0x8c/0xb0
[  187.536634][ T8145]  __kmalloc_cache_node_noprof+0x6b/0x480
[  187.536671][ T8145]  ? __get_vm_area_node+0x106/0x1d0
[  187.536702][ T8145]  __get_vm_area_node+0x106/0x1d0
[  187.536731][ T8145]  __vmalloc_node_range_noprof+0x291/0x12b0
[  187.536770][ T8145]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  187.536793][ T8145]  ? selinux_file_open+0x2e6/0x330
[  187.536881][ T8145]  ? __rcu_read_unlock+0x4e/0x70
[  187.536906][ T8145]  ? avc_has_perm_noaudit+0xab/0x130
[  187.536945][ T8145]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  187.536970][ T8145]  __vmalloc_noprof+0xa4/0xf0
[  187.537062][ T8145]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  187.537108][ T8145]  bpf_prog_alloc_no_stats+0x47/0x390
[  187.537130][ T8145]  ? bpf_prog_alloc+0x2a/0x150
[  187.537182][ T8145]  bpf_prog_alloc+0x3c/0x150
[  187.537206][ T8145]  bpf_prog_load+0x506/0x1140
[  187.537246][ T8145]  ? security_bpf+0x2b/0x90
[  187.537339][ T8145]  __sys_bpf+0x505/0x7e0
[  187.537367][ T8145]  __x64_sys_bpf+0x41/0x50
[  187.537389][ T8145]  x64_sys_call+0x10cb/0x3020
[  187.537426][ T8145]  do_syscall_64+0x12c/0x370
[  187.537573][ T8145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.537599][ T8145] RIP: 0033:0x7fe1b227c819
[  187.537618][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.537664][ T8145] RSP: 002b:00007fe1b0cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  187.537688][ T8145] RAX: ffffffffffffffda RBX: 00007fe1b24f5fa0 RCX: 00007fe1b227c819
[  187.537705][ T8145] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  187.537720][ T8145] RBP: 00007fe1b0cd7090 R08: 0000000000000000 R09: 0000000000000000
[  187.537734][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.537781][ T8145] R13: 00007fe1b24f6038 R14: 00007fe1b24f5fa0 R15: 00007ffc938cd098
[  187.537802][ T8145]  </TASK>
[  187.537839][ T8145] syz.2.1342: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  187.599592][ T8148] FAT-fs (loop6): Directory bread(block 199916) failed
[  187.611781][ T8145] ,cpuset=
[  187.630225][ T8148] FAT-fs (loop6): Directory bread(block 199917) failed
[  187.691210][ T8145] syz2
[  187.693746][ T8148] FAT-fs (loop6): Directory bread(block 199918) failed
[  187.724207][ T8145] ,mems_allowed=0
[  187.733241][ T8148] FAT-fs (loop6): Directory bread(block 199919) failed
[  187.749059][ T8145] 
[  187.772822][ T8148] FAT-fs (loop6): Directory bread(block 199920) failed
[  187.772850][ T8148] FAT-fs (loop6): Directory bread(block 199921) failed
[  187.772872][ T8148] FAT-fs (loop6): Directory bread(block 199922) failed
[  187.777066][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.1342 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  187.777130][ T8145] Tainted: [W]=WARN
[  187.777138][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.777150][ T8145] Call Trace:
[  187.777156][ T8145]  <TASK>
[  187.777164][ T8145]  __dump_stack+0x1d/0x30
[  187.777193][ T8145]  dump_stack_lvl+0x95/0xd0
[  187.777263][ T8145]  dump_stack+0x15/0x1b
[  187.777362][ T8145]  warn_alloc+0x145/0x1c0
[  187.777401][ T8145]  __vmalloc_node_range_noprof+0x2b6/0x12b0
[  187.777439][ T8145]  ? selinux_file_open+0x2e6/0x330
[  187.777524][ T8145]  ? __rcu_read_unlock+0x4e/0x70
[  187.777586][ T8145]  ? avc_has_perm_noaudit+0xab/0x130
[  187.777619][ T8145]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  187.777646][ T8145]  __vmalloc_noprof+0xa4/0xf0
[  187.777671][ T8145]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  187.777694][ T8145]  bpf_prog_alloc_no_stats+0x47/0x390
[  187.777714][ T8145]  ? bpf_prog_alloc+0x2a/0x150
[  187.777734][ T8145]  bpf_prog_alloc+0x3c/0x150
[  187.777801][ T8145]  bpf_prog_load+0x506/0x1140
[  187.777876][ T8145]  ? security_bpf+0x2b/0x90
[  187.777898][ T8145]  __sys_bpf+0x505/0x7e0
[  187.777926][ T8145]  __x64_sys_bpf+0x41/0x50
[  187.777944][ T8145]  x64_sys_call+0x10cb/0x3020
[  187.777981][ T8145]  do_syscall_64+0x12c/0x370
[  187.778014][ T8145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.778037][ T8145] RIP: 0033:0x7fe1b227c819
[  187.778080][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.778098][ T8145] RSP: 002b:00007fe1b0cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  187.778120][ T8145] RAX: ffffffffffffffda RBX: 00007fe1b24f5fa0 RCX: 00007fe1b227c819
[  187.778135][ T8145] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  187.778148][ T8145] RBP: 00007fe1b0cd7090 R08: 0000000000000000 R09: 0000000000000000
[  187.778162][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.778174][ T8145] R13: 00007fe1b24f6038 R14: 00007fe1b24f5fa0 R15: 00007ffc938cd098
[  187.778201][ T8145]  </TASK>
[  187.778234][ T8145] Mem-Info:
[  187.800217][ T8148] FAT-fs (loop6): Directory bread(block 199923) failed
[  187.809302][ T8145] active_anon:41935 inactive_anon:0 isolated_anon:0
[  187.809302][ T8145]  active_file:26103 inactive_file:3283 isolated_file:0
[  187.809302][ T8145]  unevictable:0 dirty:103 writeback:0
[  187.809302][ T8145]  slab_reclaimable:3711 slab_unreclaimable:19202
[  187.809302][ T8145]  mapped:30608 shmem:33200 pagetables:1480
[  187.809302][ T8145]  sec_pagetables:0 bounce:0
[  187.809302][ T8145]  kernel_misc_reclaimable:0
[  187.809302][ T8145]  free:1836684 free_pcp:13393 free_cma:0
[  187.811376][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'.
[  187.817051][ T8145] Node 0 active_anon:167740kB inactive_anon:0kB active_file:104412kB inactive_file:13132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122432kB dirty:412kB writeback:0kB shmem:132800kB kernel_stack:4208kB pagetables:5920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.829219][ T8155] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1344'.
[  187.830729][ T8145] Node 0 
[  187.836899][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'.
[  187.892286][ T8049] veth0_vlan: entered promiscuous mode
[  187.895269][ T8145] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.941127][ T8049] veth1_vlan: entered promiscuous mode
[  187.972080][ T8145] lowmem_reserve[]:
[  187.990930][ T8049] veth0_macvtap: entered promiscuous mode
[  188.088829][ T8145]  0
[  188.120257][ T8049] veth1_macvtap: entered promiscuous mode
[  188.210901][ T8145]  2879
[  188.229558][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.258106][ T8148] FAT-fs (loop6): Directory bread(block 199916) failed
[  188.258340][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.287967][ T7048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.294062][ T8148] FAT-fs (loop6): Directory bread(block 199917) failed
[  188.298750][ T7048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.304768][ T8145]  7857 7857
[  188.324940][ T8145] Node 0 DMA32 free:2944512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948140kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB
[  188.357239][ T8145] lowmem_reserve[]: 0
[  188.368140][ T7048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.387997][ T7048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.397902][ T8145]  0 4978 4978
[  188.417409][ T8145] Node 0 Normal free:4386864kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:175512kB inactive_anon:0kB active_file:104412kB inactive_file:13364kB unevictable:0kB writepending:412kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:42500kB local_pcp:18748kB free_cma:0kB
[  188.446773][ T8175] loop3: detected capacity change from 0 to 512
[  188.480895][ T8145] lowmem_reserve[]: 0 0 0 0
[  188.485642][ T8145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  188.513952][ T8175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.527270][ T8179] 9p: Bad value for 'wfdno'
[  188.576479][ T8145] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944512kB
[  188.648072][ T8145] Node 0 Normal: 760*4kB (UME) 702*8kB (UME) 1*16kB (M) 33*32kB (UE) 81*64kB (UM) 27*128kB (UM) 68*256kB (UM) 74*512kB (UM) 32*1024kB (UME) 30*2048kB (UM) 1030*4096kB (UM) = 4386752kB
[  188.701245][ T8145] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  188.710660][ T8145] 66000 total pagecache pages
[  188.715548][ T8145] 0 pages in swap cache
[  188.720044][ T8145] Free swap  = 124996kB
[  188.724212][ T8145] Total swap = 124996kB
[  188.728384][ T8145] 2097051 pages RAM
[  188.732329][ T8145] 0 pages HighMem/MovableOnly
[  188.737114][ T8145] 81616 pages reserved
[  188.861117][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1324'.
[  188.933328][ T8203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8203 comm=syz.6.1352
[  189.017034][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'.
[  189.300667][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.381290][ T8214] loop3: detected capacity change from 0 to 1024
[  189.392199][ T8214] EXT4-fs: Ignoring removed bh option
[  189.591721][ T8214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.771978][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.875568][ T8221] loop7: detected capacity change from 0 to 7
[  190.051137][ T8223] lo speed is unknown, defaulting to 1000
[  190.338114][ T8235] loop6: detected capacity change from 0 to 512
[  190.376413][ T8235] FAT-fs (loop6): Directory bread(block 199916) failed
[  190.474336][ T8235] FAT-fs (loop6): Directory bread(block 199917) failed
[  190.507159][ T8235] FAT-fs (loop6): Directory bread(block 199918) failed
[  190.534278][ T8235] FAT-fs (loop6): Directory bread(block 199919) failed
[  190.570797][ T8235] FAT-fs (loop6): Directory bread(block 199920) failed
[  190.602651][ T8235] FAT-fs (loop6): Directory bread(block 199921) failed
[  190.630904][ T8235] FAT-fs (loop6): Directory bread(block 199922) failed
[  190.656027][ T8235] FAT-fs (loop6): Directory bread(block 199923) failed
[  190.853853][ T8239] FAT-fs (loop6): Directory bread(block 199916) failed
[  191.012553][ T8239] FAT-fs (loop6): Directory bread(block 199917) failed
[  191.052651][ T8241] loop3: detected capacity change from 0 to 8192
[  191.229580][ T8243] 9p: Bad value for 'wfdno'
[  191.270786][ T3302]  loop3: p4 < >
[  191.293464][ T8241]  loop3: p4 < >
[  191.329254][ T8245] syzkaller0: entered promiscuous mode
[  191.368090][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  191.384801][ T8245] syzkaller0: entered allmulticast mode
[  191.409805][ T3302] ==================================================================
[  191.417968][ T3302] BUG: KCSAN: data-race in touch_atime / touch_atime
[  191.424688][ T3302] 
[  191.427020][ T3302] write to 0xffff888105784f78 of 4 bytes by task 3300 on cpu 1:
[  191.435172][ T3302]  touch_atime+0x1d7/0x330
[  191.439605][ T3302]  shmem_file_read_iter+0x477/0x540
[  191.444991][ T3302]  vfs_read+0x6c0/0x7f0
[  191.449145][ T3302]  ksys_read+0xdc/0x1a0
[  191.453302][ T3302]  __x64_sys_read+0x40/0x50
[  191.457806][ T3302]  x64_sys_call+0x2886/0x3020
[  191.462492][ T3302]  do_syscall_64+0x12c/0x370
[  191.467103][ T3302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.473109][ T3302] 
[  191.475435][ T3302] write to 0xffff888105784f78 of 4 bytes by task 3302 on cpu 0:
[  191.483159][ T3302]  touch_atime+0x1d7/0x330
[  191.487586][ T3302]  shmem_file_read_iter+0x477/0x540
[  191.492794][ T3302]  vfs_read+0x6c0/0x7f0
[  191.496948][ T3302]  ksys_read+0xdc/0x1a0
[  191.501189][ T3302]  __x64_sys_read+0x40/0x50
[  191.505690][ T3302]  x64_sys_call+0x2886/0x3020
[  191.510461][ T3302]  do_syscall_64+0x12c/0x370
[  191.515069][ T3302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.520973][ T3302] 
[  191.523477][ T3302] value changed: 0x2573ce32 -> 0x25d2a56d
[  191.529296][ T3302] 
[  191.531629][ T3302] Reported by Kernel Concurrency Sanitizer on:
[  191.537866][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  191.548472][ T3302] Tainted: [W]=WARN
[  191.552409][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  191.562565][ T3302] ==================================================================
[  191.589450][ T8251] loop7: detected capacity change from 0 to 512
[  191.600522][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  191.724213][ T8248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.746287][ T8251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.787860][ T8244] tipc: Resetting bearer <eth:syzkaller0>
[  191.827565][ T8244] tipc: Disabling bearer <eth:syzkaller0>
[  191.886382][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.893793][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.946674][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.006210][ T8049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.019386][ T3891] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.030923][ T3891] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.064841][ T3891] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.073988][ T3891] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0