last executing test programs:

8m55.957419789s ago: executing program 32 (id=42):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b '], 0x9)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000400)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21)
fchdir(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

8m36.600677571s ago: executing program 33 (id=273):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000005ff07000003000090"], &(0x7f0000000f40)=""/4080, 0x3e, 0xff0, 0x9, 0x7ff}, 0x28) (rerun: 32)
clock_getres(0xfffffffffffffffe, &(0x7f0000000100))

6m44.819863385s ago: executing program 34 (id=1717):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xffffffffffffff47, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10)

6m9.627579573s ago: executing program 35 (id=1967):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
close_range(r0, 0xffffffffffffffff, 0x0)
capget(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x8, 0x5, 0x7fff, 0x384a, 0x7, 0xd1d0})

4m11.781431691s ago: executing program 36 (id=3825):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x2, 0x56d, 0x2, 0x40, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0xfffffffffffffec1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x6, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x5, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6ed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
gettid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="001a0000000000ffff0000000008400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000010000000000a247c22218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000bf0a0000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500004086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x17}, 0x94)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200809}, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000480)='./file0\x00', 0x41)
lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@known='security.apparmor\x00', &(0x7f0000000380)=""/30, 0x1e)

3m59.948795883s ago: executing program 37 (id=4000):
unshare(0x60400)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
ppoll(&(0x7f0000000540)=[{r1, 0x1080}], 0x1, 0x0, 0x0, 0x0)

3m57.674200146s ago: executing program 38 (id=4031):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf251e000000080004000000000008000100", @ANYRES32], 0x54}}, 0x4000)
r2 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x88}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r5, 0x9)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
kexec_load(0x4, 0xa, 0x0, 0x0)
write$cgroup_subtree(r5, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
getpeername$tipc(r8, &(0x7f0000000040)=@name, &(0x7f0000000140)=0x10)

3m31.518982925s ago: executing program 39 (id=4364):
socket(0x28, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_io_uring_setup(0x44cc, &(0x7f0000000280)={0x0, 0x30ed, 0x10100, 0x1040006, 0x37}, &(0x7f0000000100), &(0x7f0000000140))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x29b, &(0x7f0000000540)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}})
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100))

2m51.800518707s ago: executing program 40 (id=4569):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(0xffffffffffffffff)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
close(0x3)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r1, 0xb5d6)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xdc, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x514, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x4300, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)

2m47.274366972s ago: executing program 4 (id=4616):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000014c0)=ANY=[@ANYBLOB="ec04000019000100e5ff0000000000002001000000c300000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x4ec}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3503, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x83}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x3, 0x4, 0x9, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xfea, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800804, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

2m46.776795811s ago: executing program 4 (id=4621):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1c, 0x1c7, 0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
r4 = io_uring_setup(0x4042, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0xfffffffe, 0x4)
bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = syz_io_uring_setup(0x4d7d, &(0x7f0000000200)={0x0, 0x8d3b, 0x0, 0x2, 0x1a3}, &(0x7f0000000280), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2c6740, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000540)={0x5, 0x0, &(0x7f0000000500)=[r7]}, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071101d00000000008f817b9500000000"], 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)='u', 0x1}], 0x1}}], 0x1, 0x20008000)
close_range(r4, 0xffffffffffffffff, 0x0)

2m46.547709254s ago: executing program 4 (id=4623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0ba8000000000000000002000000200004801c0001800b800100736f636b657400000c000280080002400000129a833b7d81e3e75500000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
lseek(r1, 0x3, 0x1)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x9, 0x4, 0x2, 0x8000000000000001, 0x1000, <r3=>0x0})
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x6065, 0x4005, 0xb, 0x7, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x2009, 0x7, 0xfffffffffffffffd, 0xb, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
getdents64(r1, 0xfffffffffffffffe, 0x29)

2m46.028016164s ago: executing program 4 (id=4628):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @remote}, 0x10)
recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x8000, 0x4, 0x80f4000000000, 0x7fff, 0x1, 0x9}, &(0x7f0000000080)={0x3, 0x5, 0x0, 0x3, 0x3b85, 0x2, 0x4e9, 0x1}, &(0x7f00000000c0)={0x9, 0x2f, 0x0, 0x101, 0x8, 0xff, 0x7, 0x5}, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = getpgid(0x0)
r4 = getpgrp(0x0)
syz_pidfd_open(r4, 0x0)
setpgid(r3, r4)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00')
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000500)={'nat\x00', 0x0, [0x7f, 0x7, 0x20000004, 0x3, 0x100000c]}, &(0x7f0000000040)=0x54)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000000)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@sb}, {@nouid32}, {@resgid}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x491, &(0x7f0000000980)="$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")
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000002c0)='./file0\x00', 0x100000e49)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

2m45.031165663s ago: executing program 4 (id=4639):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

2m44.828854665s ago: executing program 41 (id=4641):
r0 = msgget$private(0x0, 0x421)
msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9"], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01002100000000000000"], 0x0, 0xa6, 0x0, 0x0, 0x8}, 0x28)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)={[{@check_strict}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB, @ANYRES32=0x0], 0x3c}}, 0x4000054)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==")
truncate(&(0x7f0000002540)='./file2\x00', 0xe)

2m44.627544167s ago: executing program 4 (id=4645):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==")
prctl$PR_GET_THP_DISABLE(0x2a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

2m44.625124277s ago: executing program 42 (id=4645):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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")
prctl$PR_GET_THP_DISABLE(0x2a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

2m21.838977349s ago: executing program 8 (id=4940):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB='\b\x00\b'], 0xfce)
socket$nl_route(0x10, 0x3, 0x0)

2m21.583838983s ago: executing program 8 (id=4944):
unshare(0x28000600)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
execve(0x0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xa4d, 0x80000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000001001f00000000000300080095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x87, 0xfe, 0x7f, 0xff}, {0x3, 0x80, 0x0, 0x1ff}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x221, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80c0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x18c, r4, 0xa00, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5a}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x990}, @NL80211_ATTR_FRAME={0x11c, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="678397456be3", {0x0, 0xbc2}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x4, 0x1}, {}, {0x48}]}, @val={0x3, 0x1, 0xb3}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x2, 0x0, {0x7, 0x0, 0x0, 0x9}, 0x1, 0x4fc1, 0x4}}, @val={0x72, 0x6}, [{0xdd, 0xca, "51af489e75306b97c4b7ad7c17764f9a81672ecc5d751930a7faf62a61bbc7b36b4033af73ece37199b1ee6924bf5a12ce2a3b6ca039a0ed9d9d350826516d74939b314aa86b98e3490ef089bf9d222a355f1e78529d011d2e21aa6061ed3d7204e95b32133aecbd31e1c343543e3f0c83b165e2769a6d1fb923aa0cd53844a63270d69d265085ec742d230fd8f342c7e0032d45adfd7ef6c519a10cfcc9e9d9db2a80dd4b597ecdc5c8a9e91c108282870a8682f77cb2166900ad2266fcb3b1f61fde89d118bbe3eb3c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x81d}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x36c]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1c10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18c}}, 0x20048040)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000180))

2m21.48496441s ago: executing program 8 (id=4946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff8d, &(0x7f0000000080)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x114)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xe, 0xfd, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x480d0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0)

2m21.333362208s ago: executing program 8 (id=4950):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0xa, 0x10, 0xb, 0x44, "0b696cb401c5246fe45beb5d178652f18d213c957244499d7da0f719a4522c90639689be6d29d45da7a649548c1d66c7d7111e3e3f25d13682c241ddae419949873b7c32"}}, 0x50) (async)
syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5c2, &(0x7f0000000c40)="$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")

2m21.222377515s ago: executing program 8 (id=4952):
socket$phonet(0x23, 0x2, 0x1)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x92, 0x6, 0x6, 0x7, 0x4, 0x2, 0x7de2, 'syz1\x00'})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x1, 0x2, 0x6}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'wrr\x00', 0x8, 0x323b, 0x1f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 0x4, 0x12d5c, 0x1255c}}, 0x44)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f22, 0x0, @dev={0xfe, 0x80, '\x00', 0x80}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2m20.78987997s ago: executing program 8 (id=4961):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async)
fcntl$lock(r4, 0x5, &(0x7f00000001c0)={0x2, 0x2, 0x7, 0x90})
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000440)={r9, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000005c0)={r9, @in6={{0xa, 0x4e23, 0xc1, @remote, 0xc81a}}}, &(0x7f0000000680)=0x84) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x530, 0x390, 0xf0, 0xffffffff, 0x0, 0x0, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0xff}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@local, [0xffffffff, 0xff000000, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0x0, 0xff000000, 0xff], 0x5a, 0x2, 0x87, 0x4e24, 0x4e22, 0x4e21, 0x4e22, 0x2160, 0x1050}, 0x41, 0x5}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@remote, @ipv6=@empty, @port=0x4e20, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)

2m20.78835244s ago: executing program 43 (id=4961):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async)
fcntl$lock(r4, 0x5, &(0x7f00000001c0)={0x2, 0x2, 0x7, 0x90})
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000440)={r9, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000005c0)={r9, @in6={{0xa, 0x4e23, 0xc1, @remote, 0xc81a}}}, &(0x7f0000000680)=0x84) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x530, 0x390, 0xf0, 0xffffffff, 0x0, 0x0, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0xff}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@local, [0xffffffff, 0xff000000, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0x0, 0xff000000, 0xff], 0x5a, 0x2, 0x87, 0x4e24, 0x4e22, 0x4e21, 0x4e22, 0x2160, 0x1050}, 0x41, 0x5}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@remote, @ipv6=@empty, @port=0x4e20, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)

2m4.508802492s ago: executing program 9 (id=5215):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
munlockall()
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="04000000040000000408080000b99ce93a0e2602004a1885e062a80b28512342bb95f932cb2fc0db6741c4e7d8657f56ae9dd03fba74a8beac3f08a95e97419a35890202258c7dd61f9b3ffd1239a4b767ac0aecf8b786e85f7bf755d2ca6ae76dfaf288257a5befbe9473042e7c70a208c7e16413bb02bb2d09aa7d53e1f9f285308ab2ce313dfbb9c7d23786b247673a3368b4c288ee4ddda500ac22cec1ee32459304eae86903e3b74dc6a251f0cc79d5a4c37e994a3fef82a00acd6b34a6b38d9f90bd3946141ce500097954c7ca", @ANYRES16=r0, @ANYBLOB="0000003c0003000000ff0700001acd72b0a49d5f7bf2e40706037d9d1da3cd70278ba5123b3c", @ANYRESDEC=0x0, @ANYRES32], 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x48480f5773ca2876)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bc29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'bond_slave_0\x00', 0x1000})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtaction={0x250, 0x30, 0x309, 0x0, 0x2, {}, [{0x23c, 0x1, [@m_tunnel_key={0x4c, 0x1, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x154, 0x6, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x8, 0x9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x101, 0x1, 0x7f, 0x1}, @broadcast, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x220, 0x7, 0x9, 0x6}, @local, @dev={0xac, 0x14, 0x14, 0x16}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd29, 0x2, 0x10000000, 0xe2a, 0x7}, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8c7, 0x0, 0x4, 0x4, 0x10000}, @empty, @dev={0xac, 0x14, 0x14, 0x44}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x0, 0x1, 0x2}, @remote, @local, 0xffffff00, 0x1}}]}, {0x3c, 0x6, "d92f1865e7a6c0a07ef64eb1f57fb6673fa66e427d22f5a9b1ea12dd996b53ecb349f1a8c1d9b78d7e6a960874f2688f68f779332b8a7084"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x98, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xa6ae, 0x0, 0x10000000, 0xcb4, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x7, 0x3f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf2, 0x0, 0x1, 0xffffffff, 0x5}, 0x2}}]}, {0xb, 0x6, "dc2fc1c425f7c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x80)

2m4.152597043s ago: executing program 9 (id=5220):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030801040000000000000000000000080500030021000000042c1206951b7e2014769c606163af1951b40f9bbbb2e7fa7e2683a978d35b499f"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'ip6tnl0\x00'}}, 0x1e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x5, 0x1, 0xfffd, 0x80000007, 0x83, "203c5eebfffe765e000080fffffffffffffff2", 0x8, 0x5})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r2, 0x2212, 0x807721, 0x16, 0x0, 0x0)

2m3.591637665s ago: executing program 9 (id=5223):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x800, 0x32, 0x43a1bd76, 0x7, 0xecc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x2, 0x5, 0x8, 0x10}, {0x5, 0xe9, 0x4, 0x24}, {0x3, 0xb, 0xf3, 0x3}, {0x81, 0xff, 0x2}, {0x7, 0xcc, 0xe, 0x7}]})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x4}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mprotect(&(0x7f000071b000/0x4000)=nil, 0x4000, 0x6)

2m3.111447143s ago: executing program 9 (id=5231):
r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333537372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
creat(&(0x7f0000000040)='./file0\x00', 0x81)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4840)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000000a010300000000000000000400000314000000090a01010000000000000000010000011400000011000100000000000000000002ec000a"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r8, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

2m2.207676546s ago: executing program 9 (id=5242):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300))
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)={0x8c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x64}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cdd783bdc5"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1966d691}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x123}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0x5, 0x34, @random='z'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
socket$inet6_sctp(0xa, 0x5, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)="6f63ae4234", 0x5}, {0x0}], 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x0, 0x5, 0x6, 0xea64, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$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")
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000240)=@assoc_value, &(0x7f00000001c0)=0x8)

2m2.007740428s ago: executing program 9 (id=5245):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80800)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0xf, 0x0, @fd_index=0x1, 0x6, {}, 0x4, 0x15})
io_uring_enter(r5, 0x47f6, 0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r4, 0x0, 0x80)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0)

2m2.007351708s ago: executing program 44 (id=5245):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80800)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0xf, 0x0, @fd_index=0x1, 0x6, {}, 0x4, 0x15})
io_uring_enter(r5, 0x47f6, 0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r4, 0x0, 0x80)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0)

37.175996257s ago: executing program 3 (id=6552):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004)

37.148862098s ago: executing program 3 (id=6554):
memfd_create(0x0, 0x4)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x225, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0, 0xf}, 0x404, 0x456a, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0)

37.098108382s ago: executing program 3 (id=6556):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0x20)
readv(r0, 0x0, 0x0)

37.031495255s ago: executing program 3 (id=6557):
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240), 0x1, 0x55e, &(0x7f0000001bc0)="$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")
r1 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x1a440, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000010000000020004000000000000000000cde61f844910c37abcce4b47b6770fb198488139d576b7d9c31d0f02e44f88c7a37203e8dc74a5f4b36c7f8dc51471939cc9d60716020d4dfa86d8005995e638b6f2ee385a1c2eca8e1f5cffa1511af0d3ce3ff1f8c7ebb42c866437f466e4fb3e0f7875bac5fdc1234f5d651cb7a97f04ac803e8f7680ce24f8ee0ad10dd50007c74dbfda15e0dddf99d61d51310d1269c4d670", @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000030000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300"/28], 0x50)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r3 = socket(0x1, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x101)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000480)={{0x0, 0xf0}, {0x0, 0x1}, 0x10, 0x1, 0xa0})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, r5)
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r5, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x17, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9a0b, 0xfffffffffffffffc, 0x7fc, 0x9}, 0x0, 0xffbffffffffffffb, 0xffffffffffffffff, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$poke(0x4, r7, &(0x7f00000011c0), 0x100000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5a49721c3afd68650e37c5f8ee41", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000000600)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000840000479998ee6d1bf69f0004000000180000000000000084000000000000009d5b250009260a0018000000000000008400000007000000640101010000000030000000000000008400000001000000050081000a0000000100000015260000000200000500000002000000", @ANYRES32, @ANYBLOB=' '], 0x98, 0x4004011}], 0x1, 0x40)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_bp={0x0, 0x2}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES8=r5, @ANYBLOB="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"], 0x194}}, 0x0)

36.965691299s ago: executing program 3 (id=6558):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @phonet={0x23, 0xf6, 0x4, 0x2}, @nl=@unspec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4})
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x7f, 0xc802)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r4=>0x0})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={<r5=>0x0, @broadcast, @loopback}, &(0x7f0000000440)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40a0000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x64}}, 0x8041)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

36.316946147s ago: executing program 3 (id=6564):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r0, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004)

36.293503109s ago: executing program 45 (id=6564):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r0, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004)

32.963274673s ago: executing program 2 (id=6622):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x2050, r1, 0x57aa3000)
setpgid(r0, r0)
setpgid(0x0, r0)
socket$tipc(0x1e, 0x5, 0x0)
wait4(r0, 0x0, 0x2, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="6916000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x48}, 0x94)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
gettid()
r5 = gettid()
rt_tgsigqueueinfo(r5, r5, 0x1b, &(0x7f0000000340)={0x6, 0xffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @thr={&(0x7f0000000200)="87e06851166e19fa82c8179152877c14b48001c834fb3fc7b8b772f76464c27a7d83c39d72866f8efdc425ddfedc7e45a9cfc9278641fa", &(0x7f00000003c0)="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"}}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
waitid(0x1, r0, &(0x7f0000000180), 0x1, 0x0)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)

32.788952623s ago: executing program 2 (id=6627):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gretap0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x36, 0x0, 0xd}]})
close(0x3)

32.634764532s ago: executing program 2 (id=6631):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xff)

32.619964833s ago: executing program 2 (id=6632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000030801010000000000000000000000081400048008000140000000080800024000000003050003002f"], 0x30}, 0x1, 0x0, 0x0, 0x4008871}, 0x40000000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001600000", 0x24)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x6)
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xc2, r3, &(0x7f0000000180)="0055fd6000", 0x5, 0x36}])
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04)
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r7 = dup3(r5, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]})
r8 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0))
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00')
getdents(r4, &(0x7f0000000ec0)=""/4096, 0x1000)
setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000140), 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001000010400000000fbdbdf2500008000", @ANYRES32=0x0, @ANYBLOB="1e020500000000007c00128008000100677470007000028014000800fe800000000000000000000000000035050006000900000014000800ff01000000000000000000000000000108000700e0000001050006000000000008000700ac1414bb08000700ffffffff1400080000000000000000000000ffff0a01010008000100", @ANYRES32, @ANYBLOB="1400030067656e65766531000000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x80000000}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8041)

32.484112871s ago: executing program 2 (id=6635):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc4)
inotify_init1(0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x2013, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

32.131428601s ago: executing program 2 (id=6638):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100"], 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@remote, 0x20000, 0x0, 0x0, 0x2}, {{@in=@loopback, 0xfffffffd, 0x2b}, 0x0, @in6=@mcast1, 0x34ff, 0x0, 0x0, 0x0, 0x800}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@empty, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}}, 0x0)
inotify_init()
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x7f, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x480)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24)

32.080745295s ago: executing program 46 (id=6638):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100"], 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@remote, 0x20000, 0x0, 0x0, 0x2}, {{@in=@loopback, 0xfffffffd, 0x2b}, 0x0, @in6=@mcast1, 0x34ff, 0x0, 0x0, 0x0, 0x800}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@empty, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}}, 0x0)
inotify_init()
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x7f, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x480)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24)

1.998891013s ago: executing program 1 (id=7164):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
ppoll(&(0x7f0000000240)=[{r2, 0x5f}], 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f", 0x20, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81)
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/46, 0x2e)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==")
truncate(&(0x7f0000002540)='./file2\x00', 0xe)

1.501415482s ago: executing program 6 (id=7169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8953, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x120, 0xffff, 0x33f8, 0x1, 0x3, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2b, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad"}}, 0x39)

1.402843038s ago: executing program 0 (id=7171):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x5}, 0x140, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))

1.355981781s ago: executing program 0 (id=7173):
unshare(0x2c020400)
r0 = memfd_secret(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB='fN\x00'/20, @ANYRES32=0x0, @ANYRES32=r0], 0x50)

1.355385031s ago: executing program 6 (id=7174):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600))
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)
bind$can_raw(r1, &(0x7f0000000080), 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)

1.354931291s ago: executing program 0 (id=7175):
memfd_create(0x0, 0x4)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x225, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0, 0xf}, 0x404, 0x456a, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0)

1.287453755s ago: executing program 6 (id=7177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095)

970.841813ms ago: executing program 1 (id=7181):
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x31e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000606010100000000000000000300000a0900025e0b797a3100000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x2204000, 0x0)

948.969645ms ago: executing program 7 (id=7182):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000001400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000003340)=0x358a, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xa5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000003700090025bd7000ff84000002"], 0x24}}, 0x0)

931.374486ms ago: executing program 6 (id=7183):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffdf, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x6020, 0x0, 0xc86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r5, &(0x7f0000000480), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080))
ioctl$FIONREAD(r1, 0x541b, 0x0)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x4)
fstat(r6, &(0x7f0000000200))
ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x2, 0xf2, 0x6, 0x9}, {0xf, 0x2a, 0x80, 0x2}, {0x8, 0x40, 0x9, 0x8001}, {0x6, 0x0, 0x3, 0x1}]})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0)
r7 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='cpu<=0||!')

830.244432ms ago: executing program 0 (id=7184):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffdf, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x6020, 0x0, 0xc86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r5, &(0x7f0000000480), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080))
ioctl$FIONREAD(r1, 0x541b, 0x0)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x4)
fstat(r6, &(0x7f0000000200))
ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x2, 0xf2, 0x6, 0x9}, {0xf, 0x2a, 0x80, 0x2}, {0x8, 0x40, 0x9, 0x8001}, {0x6, 0x0, 0x3, 0x1}]})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0)
r7 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='cpu<=0||!')

769.478915ms ago: executing program 1 (id=7185):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x1200840, &(0x7f0000000100)=ANY=[], 0x3, 0x39a, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0xffe5)

755.560896ms ago: executing program 7 (id=7186):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
unshare(0x8000280)

686.3057ms ago: executing program 7 (id=7187):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18)
fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}, {0x8}}, 0x24, 0x0)
syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0), 0x1, 0x919, &(0x7f0000000a00)="$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")
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

588.930316ms ago: executing program 5 (id=7188):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64)
symlink(0x0, 0x0) (async, rerun: 64)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x1)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

539.348289ms ago: executing program 7 (id=7189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r2, &(0x7f0000004900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x10, 0x103, 0xfffffff8}], 0x10}}], 0x1, 0x40040040)

507.51392ms ago: executing program 0 (id=7190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) (async)
r4 = eventfd2(0x800, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0xb, r3, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r4}]) (async, rerun: 64)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x100) (async, rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0xc0}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c0002800500010000000000060003400000000008000740000000000400068041dd036f5f08ae5cc7b8ac55f6f39af6258ce4"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006801400040020"], 0xac}}, 0x0) (async, rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000273741f110b193ba6f3bb03010100000000000000000300ce883bdac9c7c0b7a6d5a455bbe38cc7d1092554d134c6a77773b4d8e058f6d5d4e9718c197912440fa9fa3728336435094d1d84cb8867a4149946"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x24044004)

423.836365ms ago: executing program 0 (id=7191):
syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00')
socket$netlink(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0x49c, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x1, &(0x7f00000002c0)={0x0, 0x18, 0x2, @thr={&(0x7f00000001c0)="c38e1cdefbe78feb96971457c25e65fcec726f958e501cf4f7d9f5b2bd218d3293e01c9c1dddf576408c9d8b9b0090183e4c73e6c7f3873be6923f2d4454356b43ae1bef942e4120a78d362f7b488aa1b94562eefb03f29e781044468f6db50c78070969b83d56d419f2ff0eddde4dfd16f332fae3dd5f374e0e78360f04cbaedef44b3b10707a61361f195240e09c6d477a0a15c4dca2c3849c5c4a38743ae664d88132b7bf94b0a1398aebad6b1d660a2eb7e410b61ec67292557b4f11d0146d3aaa2ced260a59c70738ab0d795f3f6a7ef6617b488012afcf0939e2068aafd601f17b091882ab151589a2e90e2c5d3322a64fcf", &(0x7f0000000340)="233a2900b33c518fde9e8226914e7df3acf914040170a1789b302ca834123348e739346205d6e88fbf4016aa92432b763e5f80be40d84906f231945d3affa9fd7b41c4bc35b69ca554d9230e99af3f41aff496c74b5599b2770e1c98937bd0e0617e7d22458bfb9c6202059b00cd8a43e1b726c4d22aa339c7326219bc11c31a64b4dd1513bca4f5ca86"}}, &(0x7f0000000400)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000440)={{0x77359400}, {0x77359400}}, &(0x7f0000000500))
openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4003, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x2, 0x1}}, 0xffffffffffffff2c)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x100}}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x8b)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
socket$tipc(0x1e, 0x5, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

421.166566ms ago: executing program 6 (id=7192):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x208086, &(0x7f0000000500)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@bsdgroups}, {@jqfmt_vfsold}, {@nodiscard}], [{@flag='mand'}]}, 0x3, 0x459, &(0x7f0000000c00)="$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")
socket$inet(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r9 = fsopen(&(0x7f0000000440)='ceph\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
ioctl$GIO_FONT(r8, 0x4b60, &(0x7f0000000340)=""/239)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)

369.894778ms ago: executing program 7 (id=7193):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095)

369.565708ms ago: executing program 1 (id=7194):
memfd_create(0x0, 0x4)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x225, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0, 0xf}, 0x404, 0x456a, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0)

361.479189ms ago: executing program 7 (id=7195):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x2000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0x50000091, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57)
sendto$inet(r2, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x3}, 0x2}], 0x2, 0x22, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

327.972251ms ago: executing program 1 (id=7196):
syz_clone(0x80000000, &(0x7f0000000040)="fffd26b8728679bba6baa6de43b95ebe802329469817355789ab34e5551863c1914c2fd79f9df0af0651153f1871af85edf362589d95f9a63beecd2fb97e2b31fce4f7e0b089d781aae4cc75ebe6e3dd5e4ff35e96fd0126cc7f595644861355e86fd6edbb26ea95b9ac62a0d0102a0b1d884e8822cc47ad9ba9c9609e63c8cc37913cd937349883b28b6bd15eca94ca12c004a9ed94a302502924d0ad2442a180f6fe55790641263b44f1090539e6f2c8a1e9cacef65e98e3be07f497d8386dd45f553e276b481ed017a976459655997cba82c184e85d3e9ec6391e2bc1bd06e796", 0xe2, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000005c0)={&(0x7f0000002000)={[{&(0x7f0000000100)="706c372161b0ff506de886875d8f9db7492d34e6ddbb8ca046c44cb5503a", 0x1e, 0x3}]}, 0x1, 0x3}, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1842108, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80000)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000380))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)

267.301204ms ago: executing program 5 (id=7197):
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x9000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001b40)='8', 0x1, 0x7f, 0x0, 0x1}])
open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e21, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='veth1_to_team\x00', 0x80, 0x80, 0x6})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x7, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@delalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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")
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000300)={0x0, r1, 'id0\x00'})
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x10, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @empty}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})

221.409537ms ago: executing program 5 (id=7198):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
unshare(0x8000280)

182.085699ms ago: executing program 1 (id=7199):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000001400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000003340)=0x358a, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xa5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000003700090025bd7000ff84000002"], 0x24}}, 0x0)

147.173011ms ago: executing program 5 (id=7200):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x10, 0x103, 0xfffffff8}], 0x10}}], 0x1, 0x40040040) (fail_nth: 2)

86.961955ms ago: executing program 6 (id=7201):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa0008004500002000000000002f907800001fe1e0000001a00086dd000c907801000000c7f9ced9aeea950fe339356d01dae1d029f41a554a4ef710853718520b8ed58ecb26cb8015603c0c78b655f26623b3adad928c30966706a560b3c84fb7d701ba7ecf6fdf5558467d78a3ca9b7def885536917efbd39d9175d0c4e0e54a8d49fef84a5fbc3bfca0"], 0x32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
sendfile(r2, r5, 0x0, 0x7a680000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060108000000000000000000fffd0c00078008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000000"], 0x58}}, 0x20000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x5})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000084600000000000000000001800000001000000040000009500000000000000db96e3c99cc2f1bf30a88ca43286d25dfcdaf5ef5a72e1d5dd17ef6f078482170a7300972958b7c99a4cc0d6883e642086f9a7d84576c2c0a93a1198ae24d348469021a7650a71e07ffd2c05efcf557a749efe4925a7e058efba0b8e459a13d463b0b75b3a194a9e20e1fe0f39c2997139f960fd7cf2bdce9df0578c8bd7638edf5f23cf0c13181ea605c0e6fb3292272b898a225d0bd8df077898bd4b04439befff7b90e8f14c37df4f307435e3a9419d35b6b369e740eb3ae0bae2a6c54a02b2033f5e6812b05fd0"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000440), &(0x7f0000000040)=@udp=r7}, 0x20)
sendto$inet(r7, 0x0, 0x0, 0x4000000, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
unshare(0x6020480)
r10 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05<r\xf8\xd56\xaf~Nh%\x14\xf4\x16\xa3\x88i*rR\x17\xf6:\x964\x82jOu\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\xc2C\x85\xe4\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\a\x00h\x1f@\xb7\xef&\x87\x93\x15\xa4\xe5D\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xeaZ\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\xfa\x1b\x01\xc0\x8c\x0f!\x93A-|Ss\xe8\xe3\xfa\xa2{\xef\xff1\xf9|Cj~\xf4\xd1\xf1q\x13\xb6\x94\xe1\x98#|(O7\xa8)\x86\xaf\x10\x1e\xa5\x18\x8a4\xcc\xd5f\xc0V\v:RK\xed\xc8HD\x9b;\xe0R\x92\x94\xf7\xeb\xe8\x97\x8f\x05\x9a\xe7\xdc\xf09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00', 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r11, &(0x7f000000b0c0)={0x0, 0x0, &(0x7f000000b080)={&(0x7f00000002c0)=@newtaction={0x44, 0x30, 0x1, 0x70bd27, 0x25dfdc01, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
fallocate(r10, 0x0, 0x0, 0x200401)

52.786527ms ago: executing program 5 (id=7202):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3)
close(r0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

0s ago: executing program 5 (id=7203):
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x27, 0x16, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20080006}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x3, 0x3, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xf2c}}}, 0x32)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x2, 0x1, 0x3, 0x1}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r1, 0x40047452, 0x0)
r2 = creat(&(0x7f0000000000)='./file1\x00', 0x14c)
lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000400)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r6=>0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r7)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f0000000140)='./file0\x00', 0xa4000021)
close(r8)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8409612f84d46401e344db0924400060000000102bda5ab979e76f013d3534183de68d7a4773a5c183a0446ae7decd62a66dcb8397681469f1a81f14179b2d95d6ecf45b6f3f9df0ec1a4a90b03b0b4968e3b3708055647827658c3d0bcf79306eb299685db5454c4ed909682425fe550f5ebf954277963620c058b251fb3b424c0e5cb"], 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000840)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r6, @ANYBLOB="14002b800c0001002294355910df0601000000000800040007000000"], 0x30}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810)
socket$inet6(0xa, 0x3, 0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xedaafb2054e515f3}, 0x44050)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

kernel console output (not intermixed with test programs):

t: type=1326 audit(2000003550.844:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26823 comm="syz.2.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd63fbf79 code=0x7ffc0000
[  528.563689][T26830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6271'.
[  528.593623][T26833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=26833 comm=syz.5.6273
[  528.613282][T26833] Unsupported ieee802154 address type: 0
[  528.637159][T26833] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6273'.
[  529.317026][T26887] loop3: detected capacity change from 0 to 256
[  529.336346][T26887] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  529.432364][T26887] FAT-fs (loop3): Directory bread(block 64) failed
[  529.441761][T26887] FAT-fs (loop3): Directory bread(block 65) failed
[  529.449305][T26896] loop7: detected capacity change from 0 to 1024
[  529.464143][T26887] FAT-fs (loop3): Directory bread(block 66) failed
[  529.470789][T26896] EXT4-fs: Ignoring removed orlov option
[  529.475948][T26887] FAT-fs (loop3): Directory bread(block 67) failed
[  529.492495][T26887] FAT-fs (loop3): Directory bread(block 68) failed
[  529.505138][T26896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.530000][T26887] FAT-fs (loop3): Directory bread(block 69) failed
[  529.537500][T26898] syzkaller0: entered promiscuous mode
[  529.543060][T26898] syzkaller0: entered allmulticast mode
[  529.561569][T26887] FAT-fs (loop3): Directory bread(block 70) failed
[  529.572945][T26887] FAT-fs (loop3): Directory bread(block 71) failed
[  529.579934][T26887] FAT-fs (loop3): Directory bread(block 72) failed
[  529.586526][T26887] FAT-fs (loop3): Directory bread(block 73) failed
[  529.638583][T26887] FAULT_INJECTION: forcing a failure.
[  529.638583][T26887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.661152][T26887] CPU: 1 UID: 0 PID: 26887 Comm: syz.3.6292 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  529.661190][T26887] Tainted: [W]=WARN
[  529.661265][T26887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  529.661280][T26887] Call Trace:
[  529.661287][T26887]  <TASK>
[  529.661295][T26887]  __dump_stack+0x1d/0x30
[  529.661323][T26887]  dump_stack_lvl+0x95/0xd0
[  529.661348][T26887]  dump_stack+0x15/0x1b
[  529.661416][T26887]  should_fail_ex+0x263/0x280
[  529.661448][T26887]  should_fail+0xb/0x20
[  529.661477][T26887]  should_fail_usercopy+0x1a/0x20
[  529.661571][T26887]  _copy_from_user+0x1c/0xb0
[  529.661611][T26887]  sctp_getsockopt_primary_addr+0x75/0x3a0
[  529.661711][T26887]  sctp_getsockopt+0x8a0/0xaa0
[  529.661743][T26887]  sock_common_getsockopt+0x60/0x70
[  529.661772][T26887]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  529.661858][T26887]  do_sock_getsockopt+0x1c4/0x210
[  529.661884][T26887]  __x64_sys_getsockopt+0x11d/0x1a0
[  529.661911][T26887]  x64_sys_call+0x2dcf/0x3020
[  529.661937][T26887]  do_syscall_64+0x12c/0x370
[  529.662020][T26887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.662045][T26887] RIP: 0033:0x7fe540edbf79
[  529.662063][T26887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.662082][T26887] RSP: 002b:00007fe53f937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  529.662099][T26887] RAX: ffffffffffffffda RBX: 00007fe541155fa0 RCX: 00007fe540edbf79
[  529.662177][T26887] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003
[  529.662188][T26887] RBP: 00007fe53f937090 R08: 0000200000000180 R09: 0000000000000000
[  529.662199][T26887] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  529.662243][T26887] R13: 00007fe541156038 R14: 00007fe541155fa0 R15: 00007ffc27472d68
[  529.662297][T26887]  </TASK>
[  529.667719][T26909] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6303'.
[  529.672667][T21595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.835731][T26905] rtc_cmos 00:00: Alarms can be up to one day in the future
[  529.934787][   T35] rtc_cmos 00:00: Alarms can be up to one day in the future
[  529.960367][   T35] rtc_cmos 00:00: Alarms can be up to one day in the future
[  529.968056][   T35] rtc_cmos 00:00: Alarms can be up to one day in the future
[  530.008927][   T35] rtc_cmos 00:00: Alarms can be up to one day in the future
[  530.043041][   T35] rtc rtc0: __rtc_set_alarm: err=-22
[  530.275869][T26934] loop7: detected capacity change from 0 to 1024
[  530.294463][T26936] xt_hashlimit: size too large, truncated to 1048576
[  530.302098][T26934] EXT4-fs: Ignoring removed orlov option
[  530.319634][T26934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.343822][T26937] bond0: option lp_interval: invalid value (0)
[  530.343844][T26937] bond0: option lp_interval: allowed values 1 - 2147483647
[  530.419696][T21595] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.718843][T26958] netlink: 1076 bytes leftover after parsing attributes in process `syz.5.6320'.
[  530.733833][T26958] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6320'.
[  530.734120][T26958] 9p: Bad value for 'wfdno'
[  530.803193][T26967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6323'.
[  531.163484][T26985] FAULT_INJECTION: forcing a failure.
[  531.163484][T26985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.205435][T26985] CPU: 1 UID: 0 PID: 26985 Comm: syz.2.6331 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  531.205474][T26985] Tainted: [W]=WARN
[  531.205485][T26985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  531.205497][T26985] Call Trace:
[  531.205503][T26985]  <TASK>
[  531.205511][T26985]  __dump_stack+0x1d/0x30
[  531.205541][T26985]  dump_stack_lvl+0x95/0xd0
[  531.205570][T26985]  dump_stack+0x15/0x1b
[  531.205596][T26985]  should_fail_ex+0x263/0x280
[  531.205712][T26985]  should_fail+0xb/0x20
[  531.205741][T26985]  should_fail_usercopy+0x1a/0x20
[  531.205778][T26985]  _copy_from_user+0x1c/0xb0
[  531.205876][T26985]  memdup_user+0x5e/0xd0
[  531.205983][T26985]  strndup_user+0x68/0xb0
[  531.206015][T26985]  perf_uprobe_init+0x48/0x150
[  531.206038][T26985]  perf_uprobe_event_init+0xc4/0x140
[  531.206122][T26985]  perf_try_init_event+0x25a/0x6f0
[  531.206153][T26985]  ? kmem_cache_alloc_node_noprof+0x20a/0x460
[  531.206192][T26985]  perf_event_alloc+0xb28/0x18e0
[  531.206223][T26985]  ? __fget_files+0x184/0x1c0
[  531.206312][T26985]  __se_sys_perf_event_open+0x4c9/0x1290
[  531.206368][T26985]  __x64_sys_perf_event_open+0x67/0x80
[  531.206487][T26985]  x64_sys_call+0x2789/0x3020
[  531.206710][T26985]  do_syscall_64+0x12c/0x370
[  531.206747][T26985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.206801][T26985] RIP: 0033:0x7febd63fbf79
[  531.206814][T26985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.206830][T26985] RSP: 002b:00007febd4e2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  531.206851][T26985] RAX: ffffffffffffffda RBX: 00007febd6676090 RCX: 00007febd63fbf79
[  531.206867][T26985] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000a40
[  531.206902][T26985] RBP: 00007febd4e2e090 R08: 0000000000000000 R09: 0000000000000000
[  531.206913][T26985] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  531.206992][T26985] R13: 00007febd6676128 R14: 00007febd6676090 R15: 00007ffed0a20e58
[  531.207011][T26985]  </TASK>
[  531.506845][T26997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6336'.
[  531.613511][T27005] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6339'.
[  531.648800][T27010] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6342'.
[  531.706709][T27011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.744964][T27011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.794791][T27013] lo speed is unknown, defaulting to 1000
[  531.800649][T27013] lo speed is unknown, defaulting to 1000
[  531.806872][T27013] lo speed is unknown, defaulting to 1000
[  531.815136][T27013] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  531.849039][T27013] lo speed is unknown, defaulting to 1000
[  531.856138][T27013] lo speed is unknown, defaulting to 1000
[  531.863763][T27013] lo speed is unknown, defaulting to 1000
[  531.870359][T27013] lo speed is unknown, defaulting to 1000
[  531.877456][T27013] lo speed is unknown, defaulting to 1000
[  531.884879][T27013] lo speed is unknown, defaulting to 1000
[  531.891793][T27013] lo speed is unknown, defaulting to 1000
[  531.948062][T27010] netlink: 'syz.7.6342': attribute type 1 has an invalid length.
[  532.027438][T27016] xt_nfacct: accounting object `syz1' does not exist
[  532.202362][T27025] xt_cgroup: path and classid specified
[  532.527799][T27058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27058 comm=syz.2.6360
[  532.696986][T27062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=27062 comm=syz.2.6361
[  532.931513][T27069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6364'.
[  533.015686][T27081] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6370'.
[  533.106392][    T9] IPVS: starting estimator thread 0...
[  533.208890][T27090] IPVS: using max 2064 ests per chain, 103200 per kthread
[  533.323654][   T28] kauditd_printk_skb: 411 callbacks suppressed
[  533.323674][   T28] audit: type=1400 audit(2000003811.877:7133): avc:  denied  { mac_admin } for  pid=27104 comm="syz.3.6380" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  533.348334][T27105] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  533.386578][   T28] audit: type=1400 audit(2000003811.937:7134): avc:  denied  { relabelto } for  pid=27104 comm="syz.3.6380" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  533.442680][   T28] audit: type=1400 audit(2000003811.937:7135): avc:  denied  { associate } for  pid=27104 comm="syz.3.6380" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0"
[  533.522269][T27120] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0
[  533.533059][T27110] lo speed is unknown, defaulting to 1000
[  533.580848][T27123] loop3: detected capacity change from 0 to 1024
[  533.589727][T27124] netlink: 'syz.5.6386': attribute type 14 has an invalid length.
[  533.591101][T27123] EXT4-fs: Ignoring removed oldalloc option
[  533.597846][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6386'.
[  533.604070][T27123] EXT4-fs: Ignoring removed bh option
[  533.661412][T27123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.753633][   T28] audit: type=1400 audit(2000003812.307:7136): avc:  denied  { append } for  pid=27122 comm="syz.3.6388" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  533.805966][T27132] netlink: 'syz.7.6389': attribute type 4 has an invalid length.
[  533.853160][   T28] audit: type=1400 audit(2000003812.407:7137): avc:  denied  { connect } for  pid=27140 comm="syz.0.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  533.881935][T27132] netlink: 'syz.7.6389': attribute type 4 has an invalid length.
[  533.901090][T22171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.976507][   T28] audit: type=1400 audit(2000003812.527:7138): avc:  denied  { ioctl } for  pid=27142 comm="syz.3.6393" path="socket:[87825]" dev="sockfs" ino=87825 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  534.060978][   T28] audit: type=1326 audit(2000000000.030:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27150 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe540edbf79 code=0x7ffc0000
[  534.088710][   T28] audit: type=1326 audit(2000000000.030:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27150 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe540edbf79 code=0x7ffc0000
[  534.113645][   T28] audit: type=1326 audit(2000000000.030:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27150 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe540edbf79 code=0x7ffc0000
[  534.142238][   T28] audit: type=1326 audit(2000000000.030:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27150 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe540edbf79 code=0x7ffc0000
[  534.489711][T27185] 9p: Bad value for 'rfdno'
[  534.495891][T27189] FAULT_INJECTION: forcing a failure.
[  534.495891][T27189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.524928][T27189] CPU: 1 UID: 0 PID: 27189 Comm: syz.0.6409 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  534.524967][T27189] Tainted: [W]=WARN
[  534.524975][T27189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  534.524996][T27189] Call Trace:
[  534.525004][T27189]  <TASK>
[  534.525059][T27189]  __dump_stack+0x1d/0x30
[  534.525085][T27189]  dump_stack_lvl+0x95/0xd0
[  534.525106][T27189]  dump_stack+0x15/0x1b
[  534.525132][T27189]  should_fail_ex+0x263/0x280
[  534.525216][T27189]  should_fail+0xb/0x20
[  534.525252][T27189]  should_fail_usercopy+0x1a/0x20
[  534.525338][T27189]  _copy_from_user+0x1c/0xb0
[  534.525479][T27189]  ___sys_recvmsg+0xaa/0x3b0
[  534.525513][T27189]  do_recvmmsg+0x1ef/0x560
[  534.525536][T27189]  ? fput+0x8f/0xc0
[  534.525553][T27189]  __x64_sys_recvmmsg+0xe5/0x170
[  534.525574][T27189]  x64_sys_call+0x80f/0x3020
[  534.525658][T27189]  do_syscall_64+0x12c/0x370
[  534.525695][T27189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.525719][T27189] RIP: 0033:0x7fe78d9fbf79
[  534.525817][T27189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.525891][T27189] RSP: 002b:00007fe78c457028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  534.525914][T27189] RAX: ffffffffffffffda RBX: 00007fe78dc75fa0 RCX: 00007fe78d9fbf79
[  534.525930][T27189] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000003
[  534.526006][T27189] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  534.526021][T27189] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002
[  534.526071][T27189] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  534.526148][T27189]  </TASK>
[  534.700095][T27169] IPVS: Unknown mcast interface: bridge_Slave_0
[  534.748012][T27198] __nla_validate_parse: 7 callbacks suppressed
[  534.748030][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6411'.
[  534.830859][T27200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27200 comm=syz.3.6414
[  535.007495][T27213] FAULT_INJECTION: forcing a failure.
[  535.007495][T27213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.022004][T27205] lo speed is unknown, defaulting to 1000
[  535.033739][T27213] CPU: 0 UID: 0 PID: 27213 Comm: syz.5.6418 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  535.033847][T27213] Tainted: [W]=WARN
[  535.033853][T27213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  535.033865][T27213] Call Trace:
[  535.033870][T27213]  <TASK>
[  535.033877][T27213]  __dump_stack+0x1d/0x30
[  535.033955][T27213]  dump_stack_lvl+0x95/0xd0
[  535.033982][T27213]  dump_stack+0x15/0x1b
[  535.034005][T27213]  should_fail_ex+0x263/0x280
[  535.034040][T27213]  should_fail+0xb/0x20
[  535.034070][T27213]  should_fail_usercopy+0x1a/0x20
[  535.034165][T27213]  _copy_from_user+0x1c/0xb0
[  535.034207][T27213]  ___sys_sendmsg+0xc1/0x1e0
[  535.034239][T27213]  __x64_sys_sendmsg+0xd4/0x160
[  535.034339][T27213]  x64_sys_call+0x194c/0x3020
[  535.034421][T27213]  do_syscall_64+0x12c/0x370
[  535.034453][T27213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.034478][T27213] RIP: 0033:0x7f00ce07bf79
[  535.034494][T27213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.034568][T27213] RSP: 002b:00007f00ccacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.034585][T27213] RAX: ffffffffffffffda RBX: 00007f00ce2f5fa0 RCX: 00007f00ce07bf79
[  535.034597][T27213] RDX: 00000000300080a4 RSI: 0000200000000200 RDI: 0000000000000003
[  535.034608][T27213] RBP: 00007f00ccacf090 R08: 0000000000000000 R09: 0000000000000000
[  535.034619][T27213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.034629][T27213] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  535.034845][T27213]  </TASK>
[  535.238225][T27211] loop3: detected capacity change from 0 to 1764
[  535.269159][T27211] iso9660: Corrupted directory entry in block 2 of inode 1920
[  535.300334][T27203] syzkaller1: entered promiscuous mode
[  535.305842][T27203] syzkaller1: entered allmulticast mode
[  535.386026][T27229] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.6423'.
[  535.402270][T27231] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.6424'.
[  535.413209][T27229] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6423'.
[  535.423832][T27231] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6424'.
[  535.433307][T27229] 9p: Bad value for 'wfdno'
[  535.452710][T27231] 9p: Bad value for 'wfdno'
[  535.501196][T27237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27237 comm=syz.7.6426
[  535.656511][T27249] sctp: [Deprecated]: syz.7.6432 (pid 27249) Use of struct sctp_assoc_value in delayed_ack socket option.
[  535.656511][T27249] Use struct sctp_sack_info instead
[  535.683182][T27233] lo speed is unknown, defaulting to 1000
[  535.738925][T27252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6433'.
[  535.775010][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6435'.
[  535.810332][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6437'.
[  535.820864][T27259] tipc: Started in network mode
[  535.825769][T27259] tipc: Node identity 06a7c605ce84, cluster identity 4711
[  535.841793][T27259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.905398][T27261] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6427'.
[  535.915463][T27259] syzkaller0: entered promiscuous mode
[  535.921422][T27259] syzkaller0: entered allmulticast mode
[  535.941779][T27259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6436'.
[  535.973170][T27259] tipc: Resetting bearer <eth:syzkaller0>
[  535.981911][T27258] tipc: Resetting bearer <eth:syzkaller0>
[  535.990249][T27266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27266 comm=syz.2.6439
[  536.005307][T27258] tipc: Disabling bearer <eth:syzkaller0>
[  536.048750][T27273] tipc: Started in network mode
[  536.053808][T27273] tipc: Node identity 669077ea7fd8, cluster identity 4711
[  536.061456][T27273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.082136][T27273] syzkaller0: entered promiscuous mode
[  536.087724][T27273] syzkaller0: entered allmulticast mode
[  536.163748][T27273] tipc: Resetting bearer <eth:syzkaller0>
[  536.181950][T27270] tipc: Resetting bearer <eth:syzkaller0>
[  536.193299][T27270] tipc: Disabling bearer <eth:syzkaller0>
[  537.008191][T27327] lo speed is unknown, defaulting to 1000
[  537.044850][T27349] FAULT_INJECTION: forcing a failure.
[  537.044850][T27349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.063504][T27352] 9p: Bad value for 'wfdno'
[  537.071051][T27349] CPU: 1 UID: 0 PID: 27349 Comm: syz.2.6468 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  537.071154][T27349] Tainted: [W]=WARN
[  537.071162][T27349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  537.071177][T27349] Call Trace:
[  537.071184][T27349]  <TASK>
[  537.071193][T27349]  __dump_stack+0x1d/0x30
[  537.071223][T27349]  dump_stack_lvl+0x95/0xd0
[  537.071327][T27349]  dump_stack+0x15/0x1b
[  537.071449][T27349]  should_fail_ex+0x263/0x280
[  537.071475][T27349]  should_fail+0xb/0x20
[  537.071498][T27349]  should_fail_usercopy+0x1a/0x20
[  537.071627][T27349]  _copy_from_iter+0xcf/0xea0
[  537.071660][T27349]  ? __alloc_skb+0x397/0x4b0
[  537.071691][T27349]  ? __alloc_skb+0x219/0x4b0
[  537.071774][T27349]  netlink_sendmsg+0x4ae/0x6f0
[  537.071800][T27349]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.071821][T27349]  ____sys_sendmsg+0x5af/0x600
[  537.071848][T27349]  ___sys_sendmsg+0x195/0x1e0
[  537.071916][T27349]  __x64_sys_sendmsg+0xd4/0x160
[  537.071938][T27349]  x64_sys_call+0x194c/0x3020
[  537.071961][T27349]  do_syscall_64+0x12c/0x370
[  537.071997][T27349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.072097][T27349] RIP: 0033:0x7febd63fbf79
[  537.072113][T27349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.072129][T27349] RSP: 002b:00007febd4e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.072146][T27349] RAX: ffffffffffffffda RBX: 00007febd6675fa0 RCX: 00007febd63fbf79
[  537.072160][T27349] RDX: 0000000024000840 RSI: 00002000000000c0 RDI: 0000000000000003
[  537.072171][T27349] RBP: 00007febd4e4f090 R08: 0000000000000000 R09: 0000000000000000
[  537.072183][T27349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.072224][T27349] R13: 00007febd6676038 R14: 00007febd6675fa0 R15: 00007ffed0a20e58
[  537.072247][T27349]  </TASK>
[  537.453625][T27372] FAULT_INJECTION: forcing a failure.
[  537.453625][T27372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.469867][T27372] CPU: 1 UID: 0 PID: 27372 Comm: syz.0.6479 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  537.469949][T27372] Tainted: [W]=WARN
[  537.469957][T27372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  537.470026][T27372] Call Trace:
[  537.470034][T27372]  <TASK>
[  537.470043][T27372]  __dump_stack+0x1d/0x30
[  537.470077][T27372]  dump_stack_lvl+0x95/0xd0
[  537.470107][T27372]  dump_stack+0x15/0x1b
[  537.470250][T27372]  should_fail_ex+0x263/0x280
[  537.470289][T27372]  should_fail+0xb/0x20
[  537.470317][T27372]  should_fail_usercopy+0x1a/0x20
[  537.470371][T27372]  _copy_from_iter+0xcf/0xea0
[  537.470472][T27372]  ? __rcu_read_unlock+0x4e/0x70
[  537.470515][T27372]  ? terminate_walk+0x1e6/0x210
[  537.470583][T27372]  ? path_openat+0x1ab2/0x2050
[  537.470618][T27372]  tun_get_user+0x15f/0x27c0
[  537.470654][T27372]  ? ref_tracker_alloc+0x1f2/0x2f0
[  537.470755][T27372]  tun_chr_write_iter+0x15e/0x210
[  537.470783][T27372]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  537.470808][T27372]  vfs_write+0x5a6/0x9f0
[  537.470872][T27372]  ksys_write+0xdc/0x1a0
[  537.470913][T27372]  __x64_sys_write+0x40/0x50
[  537.470948][T27372]  x64_sys_call+0x27e1/0x3020
[  537.471017][T27372]  do_syscall_64+0x12c/0x370
[  537.471063][T27372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.471103][T27372] RIP: 0033:0x7fe78d9fbf79
[  537.471130][T27372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.471202][T27372] RSP: 002b:00007fe78c457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  537.471229][T27372] RAX: ffffffffffffffda RBX: 00007fe78dc75fa0 RCX: 00007fe78d9fbf79
[  537.471249][T27372] RDX: 000000000000005e RSI: 0000200000000780 RDI: 0000000000000005
[  537.471327][T27372] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  537.471466][T27372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.471481][T27372] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  537.471507][T27372]  </TASK>
[  537.924699][T27389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58960 sclass=netlink_route_socket pid=27389 comm=syz.7.6485
[  537.971412][T27392] 9p: Bad value for 'wfdno'
[  538.241860][T27422] 9p: Bad value for 'wfdno'
[  539.083166][   T28] kauditd_printk_skb: 89 callbacks suppressed
[  539.083180][   T28] audit: type=1326 audit(2000000261.066:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.7.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  539.114021][   T28] audit: type=1326 audit(2000000261.106:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.7.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  539.142569][   T28] audit: type=1326 audit(2000000261.106:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.7.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  539.217298][   T28] audit: type=1326 audit(2000000261.106:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.7.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  539.285072][T27457] 9p: Bad value for 'wfdno'
[  539.310766][   T28] audit: type=1326 audit(2000000261.106:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.7.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  539.375834][   T28] audit: type=1326 audit(2000000261.106:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.7.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  540.188074][T27489] FAULT_INJECTION: forcing a failure.
[  540.188074][T27489] name failslab, interval 1, probability 0, space 0, times 0
[  540.209379][T27489] CPU: 0 UID: 0 PID: 27489 Comm: syz.5.6522 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  540.209413][T27489] Tainted: [W]=WARN
[  540.209478][T27489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  540.209568][T27489] Call Trace:
[  540.209599][T27489]  <TASK>
[  540.209613][T27489]  __dump_stack+0x1d/0x30
[  540.209701][T27489]  dump_stack_lvl+0x95/0xd0
[  540.209820][T27489]  dump_stack+0x15/0x1b
[  540.209904][T27489]  should_fail_ex+0x263/0x280
[  540.210003][T27489]  should_failslab+0x8c/0xb0
[  540.210158][T27489]  __kmalloc_noprof+0xb8/0x4e0
[  540.210258][T27489]  ? sock_kmalloc+0x85/0xc0
[  540.210324][T27489]  sock_kmalloc+0x85/0xc0
[  540.210460][T27489]  ipv6_sock_ac_join+0x1ea/0x540
[  540.210554][T27489]  do_ipv6_setsockopt+0x194d/0x21d0
[  540.210659][T27489]  ? kstrtoull+0x111/0x140
[  540.210722][T27489]  ? __rcu_read_unlock+0x4e/0x70
[  540.210840][T27489]  ? avc_has_perm_noaudit+0xab/0x130
[  540.210925][T27489]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  540.211064][T27489]  ipv6_setsockopt+0x59/0x130
[  540.211222][T27489]  tcp_setsockopt+0x98/0xb0
[  540.211310][T27489]  sock_common_setsockopt+0x69/0x80
[  540.211388][T27489]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  540.211496][T27489]  __sys_setsockopt+0x184/0x200
[  540.211557][T27489]  __x64_sys_setsockopt+0x64/0x80
[  540.211611][T27489]  x64_sys_call+0x2327/0x3020
[  540.211711][T27489]  do_syscall_64+0x12c/0x370
[  540.211798][T27489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.211860][T27489] RIP: 0033:0x7f00ce07bf79
[  540.211941][T27489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.211995][T27489] RSP: 002b:00007f00ccacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  540.212081][T27489] RAX: ffffffffffffffda RBX: 00007f00ce2f5fa0 RCX: 00007f00ce07bf79
[  540.212122][T27489] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004
[  540.212151][T27489] RBP: 00007f00ccacf090 R08: 0000000000000020 R09: 0000000000000000
[  540.212192][T27489] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.212227][T27489] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  540.212342][T27489]  </TASK>
[  540.246139][T27487] IPVS: Unknown mcast interface: bridge_Slave_0
[  540.336199][T27500] 9p: Bad value for 'rfdno'
[  540.336395][T27500] __nla_validate_parse: 13 callbacks suppressed
[  540.336410][T27500] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6526'.
[  540.340414][T27500] syzkaller1: tun_chr_ioctl cmd 1074025677
[  540.340494][T27500] syzkaller1: linktype set to 768
[  540.376365][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6527'.
[  540.376704][T27504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6527'.
[  540.376725][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6527'.
[  540.376773][T27504] netlink: 'syz.7.6527': attribute type 11 has an invalid length.
[  540.376788][T27504] netlink: 'syz.7.6527': attribute type 13 has an invalid length.
[  540.384853][T27500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6526'.
[  540.506291][T27514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27514 comm=syz.5.6528
[  540.656787][T27524] FAULT_INJECTION: forcing a failure.
[  540.656787][T27524] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  540.680273][T27524] CPU: 0 UID: 0 PID: 27524 Comm: syz.0.6535 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  540.680339][T27524] Tainted: [W]=WARN
[  540.680348][T27524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  540.680362][T27524] Call Trace:
[  540.680370][T27524]  <TASK>
[  540.680378][T27524]  __dump_stack+0x1d/0x30
[  540.680431][T27524]  dump_stack_lvl+0x95/0xd0
[  540.680483][T27524]  dump_stack+0x15/0x1b
[  540.680528][T27524]  should_fail_ex+0x263/0x280
[  540.680563][T27524]  should_fail_alloc_page+0xf2/0x100
[  540.680599][T27524]  __alloc_frozen_pages_noprof+0x108/0x350
[  540.680632][T27524]  alloc_pages_mpol+0xb3/0x260
[  540.680658][T27524]  ? anon_pipe_write+0x81/0xb30
[  540.680694][T27524]  alloc_pages_noprof+0x8f/0x130
[  540.680769][T27524]  anon_pipe_write+0x69f/0xb30
[  540.680801][T27524]  ? anon_pipe_write+0x81/0xb30
[  540.680980][T27524]  ? __pfx_anon_pipe_write+0x10/0x10
[  540.681015][T27524]  vfs_write+0x5a6/0x9f0
[  540.681051][T27524]  ksys_write+0xdc/0x1a0
[  540.681125][T27524]  __x64_sys_write+0x40/0x50
[  540.681157][T27524]  x64_sys_call+0x27e1/0x3020
[  540.681244][T27524]  do_syscall_64+0x12c/0x370
[  540.681283][T27524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.681308][T27524] RIP: 0033:0x7fe78d9bc84e
[  540.681323][T27524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  540.681369][T27524] RSP: 002b:00007fe78c456ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  540.681392][T27524] RAX: ffffffffffffffda RBX: 00007fe78c4576c0 RCX: 00007fe78d9bc84e
[  540.681415][T27524] RDX: 0000000000000029 RSI: 00007fe78c456e90 RDI: 0000000000000002
[  540.681430][T27524] RBP: 00007fe78c456e90 R08: 0000000000000000 R09: 0000000000000000
[  540.681444][T27524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029
[  540.681458][T27524] R13: 00007fe78dc4a640 R14: 00007fe78dc414a0 R15: 0000000000000001
[  540.681475][T27524]  </TASK>
[  540.883877][T27518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27518 comm=syz.5.6532
[  540.910391][   T28] audit: type=1326 audit(2000000262.896:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.0.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  540.934946][   T28] audit: type=1326 audit(2000000262.916:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.0.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  540.958779][   T28] audit: type=1326 audit(2000000262.916:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.0.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  540.982619][   T28] audit: type=1326 audit(2000000262.916:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.0.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  541.181435][T27522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6534'.
[  541.429933][T27568] loop3: detected capacity change from 0 to 128
[  541.476892][T27572] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6551'.
[  541.486687][T27572] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6551'.
[  541.509383][T27566] IPVS: Unknown mcast interface: bridge_Slave_0
[  541.534382][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6553'.
[  541.569422][T27582] tmpfs: Unknown parameter 'g'
[  541.627094][T27586] loop3: detected capacity change from 0 to 1024
[  541.678697][T27586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.729288][T22171] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8
[  541.742068][T22171] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8
[  542.193309][T27594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6559'.
[  542.349196][T27591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.511903][T27604] IPVS: Unknown mcast interface: bridge_Slave_0
[  542.641667][T27606] lo speed is unknown, defaulting to 1000
[  542.768608][T27606] chnl_net:caif_netlink_parms(): no params data found
[  543.008241][T27606] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.015385][T27606] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.022695][T27606] bridge_slave_0: entered allmulticast mode
[  543.029516][T27606] bridge_slave_0: entered promiscuous mode
[  543.036372][T27606] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.043642][T27606] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.050909][T27606] bridge_slave_1: entered allmulticast mode
[  543.057357][T27606] bridge_slave_1: entered promiscuous mode
[  543.080641][T27606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.130944][T27606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.151206][T27647] IPVS: Unknown mcast interface: bridge_Slave_0
[  543.193454][T27606] team0: Port device team_slave_0 added
[  543.245432][T27606] team0: Port device team_slave_1 added
[  543.579480][ T4156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.613337][T27606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.620449][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.661029][T27606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.673746][T27606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.680923][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.707660][T27606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.815294][ T4156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.827909][T27687] IPVS: Unknown mcast interface: bridge_Slave_0
[  543.857028][T27606] hsr_slave_0: entered promiscuous mode
[  543.870815][T27606] hsr_slave_1: entered promiscuous mode
[  543.884335][T27606] debugfs: 'hsr0' already exists in 'hsr'
[  543.891023][T27606] Cannot create hsr debugfs directory
[  543.900646][ T4156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.915493][T27697] dvmrp0: entered allmulticast mode
[  543.931077][T27696] dvmrp0: left allmulticast mode
[  543.978891][ T4156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.134940][ T4156] bridge_slave_1: left promiscuous mode
[  544.140935][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.158676][ T4156] bridge_slave_0: left allmulticast mode
[  544.173787][ T4156] bridge_slave_0: left promiscuous mode
[  544.208385][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.258160][ T3412] SELinux: failure in sel_netif_sid_slow(), invalid network interface (94)
[  544.297653][ T4156] team0: Port device geneve1 removed
[  544.322028][T27728] sctp: [Deprecated]: syz.0.6599 (pid 27728) Use of struct sctp_assoc_value in delayed_ack socket option.
[  544.322028][T27728] Use struct sctp_sack_info instead
[  544.378257][T27731] netlink: 'syz.0.6599': attribute type 10 has an invalid length.
[  544.388167][    T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (94)
[  544.469067][T27731] hsr0: entered promiscuous mode
[  544.475339][T27732] IPVS: Unknown mcast interface: bridge_Slave_0
[  544.559374][T27728] lo speed is unknown, defaulting to 1000
[  544.670031][ T4156] hsr_slave_0: left promiscuous mode
[  544.678260][ T4156] hsr_slave_1: left promiscuous mode
[  544.683953][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.708125][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.725711][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.748138][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.779968][ T4156] veth1_macvtap: left promiscuous mode
[  544.785537][ T4156] veth0_macvtap: left promiscuous mode
[  544.804121][ T4156] veth1_vlan: left promiscuous mode
[  544.814012][ T4156] veth0_vlan: left promiscuous mode
[  544.826001][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  544.826024][   T28] audit: type=1400 audit(2000000266.806:7253): avc:  denied  { read } for  pid=27771 comm="syz.5.6611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  544.996431][ T4156] team0 (unregistering): Port device team_slave_1 removed
[  545.006729][ T4156] team0 (unregistering): Port device team_slave_0 removed
[  545.110956][T27783] ipvlan0: entered promiscuous mode
[  545.119156][T27807] netlink: 'syz.7.6613': attribute type 10 has an invalid length.
[  545.128634][T27783] ipvlan0: left promiscuous mode
[  545.170838][T27807] team0: Port device netdevsim1 added
[  545.188149][T27782] lo speed is unknown, defaulting to 1000
[  545.263735][T27820] FAULT_INJECTION: forcing a failure.
[  545.263735][T27820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  545.291254][T27820] CPU: 1 UID: 0 PID: 27820 Comm: syz.5.6614 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  545.291284][T27820] Tainted: [W]=WARN
[  545.291292][T27820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  545.291345][T27820] Call Trace:
[  545.291352][T27820]  <TASK>
[  545.291360][T27820]  __dump_stack+0x1d/0x30
[  545.291388][T27820]  dump_stack_lvl+0x95/0xd0
[  545.291486][T27820]  dump_stack+0x15/0x1b
[  545.291503][T27820]  should_fail_ex+0x263/0x280
[  545.291529][T27820]  should_fail+0xb/0x20
[  545.291617][T27820]  should_fail_usercopy+0x1a/0x20
[  545.291645][T27820]  _copy_to_user+0x20/0xa0
[  545.291676][T27820]  simple_read_from_buffer+0xb5/0x130
[  545.291785][T27820]  proc_fail_nth_read+0x10e/0x150
[  545.291868][T27820]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  545.291964][T27820]  vfs_read+0x1ab/0x7f0
[  545.291998][T27820]  ? __rcu_read_unlock+0x4e/0x70
[  545.292027][T27820]  ? __rcu_read_unlock+0x4e/0x70
[  545.292112][T27820]  ? __fget_files+0x184/0x1c0
[  545.292139][T27820]  ? mutex_lock+0x57/0x90
[  545.292161][T27820]  ksys_read+0xdc/0x1a0
[  545.292185][T27820]  __x64_sys_read+0x40/0x50
[  545.292236][T27820]  x64_sys_call+0x2886/0x3020
[  545.292279][T27820]  do_syscall_64+0x12c/0x370
[  545.292310][T27820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.292329][T27820] RIP: 0033:0x7f00ce03c84e
[  545.292343][T27820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  545.292361][T27820] RSP: 002b:00007f00ccaadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  545.292380][T27820] RAX: ffffffffffffffda RBX: 00007f00ccaae6c0 RCX: 00007f00ce03c84e
[  545.292392][T27820] RDX: 000000000000000f RSI: 00007f00ccaae0a0 RDI: 0000000000000007
[  545.292453][T27820] RBP: 00007f00ccaae090 R08: 0000000000000000 R09: 0000000000000000
[  545.292465][T27820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.292476][T27820] R13: 00007f00ce2f6128 R14: 00007f00ce2f6090 R15: 00007ffd473d2db8
[  545.292508][T27820]  </TASK>
[  545.713852][T27847] __nla_validate_parse: 5 callbacks suppressed
[  545.713872][T27847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6623'.
[  545.732907][T27843] netlink: 'syz.0.6621': attribute type 1 has an invalid length.
[  545.741216][T27847] vxlan0: entered promiscuous mode
[  545.746512][T27847] vxlan0: entered allmulticast mode
[  545.752614][   T28] audit: type=1400 audit(2000000267.746:7254): avc:  denied  { map } for  pid=27844 comm="syz.2.6622" path="socket:[91429]" dev="sockfs" ino=91429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  545.778981][   T28] audit: type=1400 audit(2000000267.746:7255): avc:  denied  { accept } for  pid=27844 comm="syz.2.6622" path="socket:[91429]" dev="sockfs" ino=91429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  545.803624][T23155] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.812486][T23155] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.851147][T27856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27856 comm=syz.7.6625
[  545.861666][T27843] bond1: entered promiscuous mode
[  545.878630][T27843] 8021q: adding VLAN 0 to HW filter on device bond1
[  545.917628][T23155] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.926435][T23155] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.941088][T27858] bond1: (slave bridge1): making interface the new active one
[  545.952010][T27858] bridge1: entered promiscuous mode
[  545.961118][T27858] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  545.984765][T27863] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  546.047753][T27865] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6629'.
[  546.064189][T27865] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6629'.
[  546.127391][T27606] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  546.144698][   T28] audit: type=1400 audit(2000000268.126:7256): avc:  denied  { mounton } for  pid=27872 comm="syz.2.6632" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  546.170468][T27606] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  546.185675][T27606] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  546.238841][T27606] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  546.404441][T27606] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.429257][T27606] 8021q: adding VLAN 0 to HW filter on device team0
[  546.446449][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.459652][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.502883][T23155] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.510013][T23155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.530885][T27903] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27903 comm=syz.0.6637
[  546.549773][T27606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  546.560834][T27606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  546.649623][ T4156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.699329][   T28] audit: type=1326 audit(2000000268.676:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.6642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00ce07bf79 code=0x0
[  546.726011][T27606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.758513][ T4156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.818909][T27933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6643'.
[  546.859475][ T4156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.893872][T27933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.906167][T27933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  547.082298][ T4156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.109585][T27962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6646'.
[  547.114096][   T28] audit: type=1400 audit(2000000269.096:7258): avc:  denied  { create } for  pid=27923 comm="syz.0.6640" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  547.173498][T27962] Failed to initialize the IGMP autojoin socket (err -2)
[  547.197179][T27606] veth0_vlan: entered promiscuous mode
[  547.227589][T27929] Failed to initialize the IGMP autojoin socket (err -2)
[  547.245991][T27606] veth1_vlan: entered promiscuous mode
[  547.280854][ T4156] bridge_slave_1: left allmulticast mode
[  547.286824][ T4156] bridge_slave_1: left promiscuous mode
[  547.310311][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.320713][ T4156] bridge_slave_0: left allmulticast mode
[  547.326408][ T4156] bridge_slave_0: left promiscuous mode
[  547.334299][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.452950][   T28] audit: type=1400 audit(2000000269.436:7259): avc:  denied  { read } for  pid=27991 comm="syz.5.6650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  547.520525][ T4156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.530838][ T4156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.540737][ T4156] bond0 (unregistering): Released all slaves
[  547.563607][T27992] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6650'.
[  547.605771][ T4156] tipc: Left network mode
[  547.672635][T27606] veth0_macvtap: entered promiscuous mode
[  547.698277][T27606] veth1_macvtap: entered promiscuous mode
[  547.726443][T28033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28033 comm=syz.5.6656
[  547.741758][T27606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.756842][T27929] chnl_net:caif_netlink_parms(): no params data found
[  547.783661][T27606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.840117][T27606] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  547.866488][T28042] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6658'.
[  547.900097][ T4156] hsr_slave_0: left promiscuous mode
[  547.926160][ T4156] hsr_slave_1: left promiscuous mode
[  547.933657][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  547.936928][   T28] audit: type=1400 audit(2000000269.926:7260): avc:  denied  { ioctl } for  pid=28028 comm="syz.0.6654" path="socket:[92057]" dev="sockfs" ino=92057 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  547.948262][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.038448][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.057448][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.475124][ T4156] veth0_macvtap: left promiscuous mode
[  548.485083][ T4156] veth1_vlan: left promiscuous mode
[  548.503174][ T4156] veth0_vlan: left promiscuous mode
[  548.984371][ T4156] team0 (unregistering): Port device team_slave_1 removed
[  549.001002][ T4156] team0 (unregistering): Port device team_slave_0 removed
[  549.091206][T28113] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.110098][T27606] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  549.181228][T28113] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.211137][T27606] wireguard: wg0: Could not create IPv4 socket
[  549.226230][T27929] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.234498][T27929] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.248517][T27929] bridge_slave_0: entered allmulticast mode
[  549.259307][T27929] bridge_slave_0: entered promiscuous mode
[  549.274512][T28120] FAULT_INJECTION: forcing a failure.
[  549.274512][T28120] name failslab, interval 1, probability 0, space 0, times 0
[  549.295111][T28120] CPU: 1 UID: 0 PID: 28120 Comm: syz.0.6667 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  549.295142][T28120] Tainted: [W]=WARN
[  549.295148][T28120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  549.295160][T28120] Call Trace:
[  549.295235][T28120]  <TASK>
[  549.295246][T28120]  __dump_stack+0x1d/0x30
[  549.295275][T28120]  dump_stack_lvl+0x95/0xd0
[  549.295343][T28120]  dump_stack+0x15/0x1b
[  549.295361][T28120]  should_fail_ex+0x263/0x280
[  549.295459][T28120]  ? tcf_action_init_1+0x12d/0x4d0
[  549.295485][T28120]  should_failslab+0x8c/0xb0
[  549.295519][T28120]  __kmalloc_cache_noprof+0x5f/0x400
[  549.295562][T28120]  tcf_action_init_1+0x12d/0x4d0
[  549.295658][T28120]  tcf_action_init+0x29c/0x700
[  549.295718][T28120]  tc_ctl_action+0x29b/0x830
[  549.295850][T28120]  ? __mutex_lock_slowpath+0xa/0x10
[  549.295876][T28120]  ? __pfx_tc_ctl_action+0x10/0x10
[  549.295949][T28120]  rtnetlink_rcv_msg+0x6a7/0x720
[  549.295984][T28120]  netlink_rcv_skb+0x123/0x220
[  549.296007][T28120]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  549.296116][T28120]  rtnetlink_rcv+0x1c/0x30
[  549.296189][T28120]  netlink_unicast+0x5c0/0x690
[  549.296227][T28120]  netlink_sendmsg+0x5c8/0x6f0
[  549.296254][T28120]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.296294][T28120]  ____sys_sendmsg+0x5af/0x600
[  549.296360][T28120]  ___sys_sendmsg+0x195/0x1e0
[  549.296416][T28120]  __x64_sys_sendmsg+0xd4/0x160
[  549.296447][T28120]  x64_sys_call+0x194c/0x3020
[  549.296483][T28120]  do_syscall_64+0x12c/0x370
[  549.296547][T28120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.296576][T28120] RIP: 0033:0x7fe78d9fbf79
[  549.296596][T28120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.296651][T28120] RSP: 002b:00007fe78c457028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.296675][T28120] RAX: ffffffffffffffda RBX: 00007fe78dc75fa0 RCX: 00007fe78d9fbf79
[  549.296691][T28120] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  549.296706][T28120] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  549.296755][T28120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.296771][T28120] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  549.296797][T28120]  </TASK>
[  549.540572][T28113] team0: Port device netdevsim1 removed
[  549.547775][T28113] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.561741][T28132] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6668'.
[  549.585723][T27929] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.596162][T27929] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.608164][   T28] audit: type=1326 audit(2000000527.587:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  549.610703][T27929] bridge_slave_1: entered allmulticast mode
[  549.660404][T27929] bridge_slave_1: entered promiscuous mode
[  549.665116][   T28] audit: type=1326 audit(2000000527.587:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.0.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  549.701885][T27606] wireguard: wg1: Could not create IPv4 socket
[  549.755687][T28113] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.793490][T27929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.806180][T28152] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6670'.
[  549.820631][ T4156] IPVS: stop unused estimator thread 0...
[  549.849025][T28156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6672'.
[  549.866991][T27606] wireguard: wg2: Could not create IPv4 socket
[  549.909501][T27929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.975521][T27929] team0: Port device team_slave_0 added
[  550.003993][ T1702] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.023841][T27929] team0: Port device team_slave_1 added
[  550.053468][ T1702] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.112662][ T1702] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.140390][T27929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.147373][T27929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.248199][T27929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.259558][ T4156] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.278642][T27929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.295098][T27929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.321809][T27929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.429523][T27929] hsr_slave_0: entered promiscuous mode
[  550.451541][T27929] hsr_slave_1: entered promiscuous mode
[  550.476945][T28170] netlink: 'syz.0.6673': attribute type 1 has an invalid length.
[  550.614874][T28177] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  550.653689][T28177] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  550.665140][T28177] bond2: (slave vxcan1): making interface the new active one
[  550.673290][T28177] bond2: (slave vxcan1): Enslaving as an active interface with an up link
[  550.711316][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  550.711329][   T28] audit: type=1326 audit(2000000528.697:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  550.895060][   T28] audit: type=1326 audit(2000000528.727:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  550.952186][   T28] audit: type=1326 audit(2000000528.727:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.000133][   T28] audit: type=1326 audit(2000000528.727:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.066714][   T28] audit: type=1326 audit(2000000528.727:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.098206][   T28] audit: type=1326 audit(2000000528.727:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.158216][   T28] audit: type=1326 audit(2000000528.727:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.191963][   T28] audit: type=1326 audit(2000000528.727:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.242669][   T28] audit: type=1326 audit(2000000528.727:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.276769][T28203] netlink: 'syz.5.6680': attribute type 5 has an invalid length.
[  551.291161][   T28] audit: type=1326 audit(2000000528.727:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz.7.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f0bf79 code=0x7ffc0000
[  551.343823][T28208] __nla_validate_parse: 1 callbacks suppressed
[  551.343839][T28208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6683'.
[  551.527562][T28227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28227 comm=syz.5.6687
[  551.593806][T27929] netdevsim netdevsim6 netdevsim0: renamed from eth9
[  551.642861][T27929] netdevsim netdevsim6 netdevsim1: renamed from eth10
[  551.690458][T27929] netdevsim netdevsim6 netdevsim2: renamed from eth11
[  551.713906][T27929] netdevsim netdevsim6 netdevsim3: renamed from eth12
[  551.826951][T28257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28257 comm=syz.5.6694
[  551.868526][T28263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6695'.
[  551.898053][T28263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6695'.
[  551.950953][T27929] 8021q: adding VLAN 0 to HW filter on device team0
[  552.001641][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.008835][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.077908][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.085160][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.094085][T28289] FAULT_INJECTION: forcing a failure.
[  552.094085][T28289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.109586][T28289] CPU: 1 UID: 0 PID: 28289 Comm: syz.5.6702 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  552.109622][T28289] Tainted: [W]=WARN
[  552.109632][T28289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  552.109717][T28289] Call Trace:
[  552.109726][T28289]  <TASK>
[  552.109736][T28289]  __dump_stack+0x1d/0x30
[  552.109852][T28289]  dump_stack_lvl+0x95/0xd0
[  552.109873][T28289]  dump_stack+0x15/0x1b
[  552.110017][T28289]  should_fail_ex+0x263/0x280
[  552.110066][T28289]  should_fail+0xb/0x20
[  552.110098][T28289]  should_fail_usercopy+0x1a/0x20
[  552.110136][T28289]  _copy_to_user+0x20/0xa0
[  552.110229][T28289]  simple_read_from_buffer+0xb5/0x130
[  552.110267][T28289]  proc_fail_nth_read+0x10e/0x150
[  552.110306][T28289]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  552.110333][T28289]  vfs_read+0x1ab/0x7f0
[  552.110364][T28289]  ? __rcu_read_unlock+0x4e/0x70
[  552.110468][T28289]  ? __fget_files+0x184/0x1c0
[  552.110508][T28289]  ? mutex_lock+0x57/0x90
[  552.110540][T28289]  ksys_read+0xdc/0x1a0
[  552.110573][T28289]  __x64_sys_read+0x40/0x50
[  552.110609][T28289]  x64_sys_call+0x2886/0x3020
[  552.110640][T28289]  do_syscall_64+0x12c/0x370
[  552.110679][T28289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.110706][T28289] RIP: 0033:0x7f00ce03c84e
[  552.110745][T28289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  552.110765][T28289] RSP: 002b:00007f00ccacefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  552.110848][T28289] RAX: ffffffffffffffda RBX: 00007f00ccacf6c0 RCX: 00007f00ce03c84e
[  552.110866][T28289] RDX: 000000000000000f RSI: 00007f00ccacf0a0 RDI: 0000000000000007
[  552.110881][T28289] RBP: 00007f00ccacf090 R08: 0000000000000000 R09: 0000000000000000
[  552.110897][T28289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.110912][T28289] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  552.110982][T28289]  </TASK>
[  552.305890][T27929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  552.341655][T27929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  552.446317][T27929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  552.568458][T28331] netlink: 'syz.0.6711': attribute type 3 has an invalid length.
[  552.747622][T27929] veth0_vlan: entered promiscuous mode
[  552.753134][T28348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6714'.
[  552.786410][T28348] erspan1: entered allmulticast mode
[  552.805220][T27929] veth1_vlan: entered promiscuous mode
[  552.831496][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6714'.
[  552.894143][T27929] veth0_macvtap: entered promiscuous mode
[  552.908994][T27929] veth1_macvtap: entered promiscuous mode
[  552.944623][T27929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.977667][T27929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.011399][T27929] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  553.077557][T27929] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  553.108924][T27929] wireguard: wg0: Could not create IPv4 socket
[  553.116292][T27929] wireguard: wg1: Could not create IPv4 socket
[  553.124829][T27929] wireguard: wg2: Could not create IPv4 socket
[  553.132631][T28367] netlink: 'syz.1.6720': attribute type 1 has an invalid length.
[  553.214473][T28354] netlink: 'syz.5.6715': attribute type 29 has an invalid length.
[  553.240049][T28361] netlink: 'syz.5.6715': attribute type 29 has an invalid length.
[  553.382912][T28387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6723'.
[  553.410024][T28387] bridge: RTM_NEWNEIGH with invalid ether address
[  553.431519][T28385] vhci_hcd vhci_hcd.2: invalid port number 96
[  553.441472][T28382] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6723'.
[  553.450749][T28382] bridge: RTM_NEWNEIGH with invalid ether address
[  553.458954][T28385] vhci_hcd vhci_hcd.2: default hub control req: 0000 vfffc i0060 l0
[  553.484303][T28392] loop1: detected capacity change from 0 to 128
[  553.492161][T28389] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  553.495119][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6727'.
[  553.544947][T28392] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  553.566929][T28401] loop6: detected capacity change from 0 to 256
[  553.581553][T28399] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.6727'.
[  553.623814][T28399] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.6727'.
[  553.633702][T28385] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512)
[  553.645577][T28401] FAT-fs (loop6): IO charset koi8-u not found
[  553.690007][T28385] FAT-fs (loop1): Filesystem has been set read-only
[  553.754547][T28418] FAULT_INJECTION: forcing a failure.
[  553.754547][T28418] name failslab, interval 1, probability 0, space 0, times 0
[  553.801701][T28418] CPU: 0 UID: 0 PID: 28418 Comm: syz.0.6733 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  553.801732][T28418] Tainted: [W]=WARN
[  553.801738][T28418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  553.801781][T28418] Call Trace:
[  553.801788][T28418]  <TASK>
[  553.801796][T28418]  __dump_stack+0x1d/0x30
[  553.801822][T28418]  dump_stack_lvl+0x95/0xd0
[  553.801841][T28418]  dump_stack+0x15/0x1b
[  553.801858][T28418]  should_fail_ex+0x263/0x280
[  553.801905][T28418]  should_failslab+0x8c/0xb0
[  553.801979][T28418]  kmem_cache_alloc_noprof+0x66/0x400
[  553.802139][T28418]  ? security_inode_alloc+0x37/0x100
[  553.802168][T28418]  security_inode_alloc+0x37/0x100
[  553.802270][T28418]  inode_init_always_gfp+0x4b7/0x500
[  553.802315][T28418]  ? __pfx_sock_alloc_inode+0x10/0x10
[  553.802344][T28418]  alloc_inode+0x58/0x170
[  553.802434][T28418]  do_accept+0xa0/0x390
[  553.802465][T28418]  ? _raw_spin_lock+0x52/0xa0
[  553.802486][T28418]  __sys_accept4+0xbe/0x170
[  553.802514][T28418]  __x64_sys_accept4+0x51/0x60
[  553.802603][T28418]  x64_sys_call+0x48d/0x3020
[  553.802707][T28418]  do_syscall_64+0x12c/0x370
[  553.802738][T28418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.802762][T28418] RIP: 0033:0x7fe78d9fbf79
[  553.802779][T28418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.802869][T28418] RSP: 002b:00007fe78c457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  553.802891][T28418] RAX: ffffffffffffffda RBX: 00007fe78dc75fa0 RCX: 00007fe78d9fbf79
[  553.802933][T28418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  553.802944][T28418] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  553.803020][T28418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.803033][T28418] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  553.803051][T28418]  </TASK>
[  554.042563][T28431] FAULT_INJECTION: forcing a failure.
[  554.042563][T28431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  554.062456][T28431] CPU: 0 UID: 0 PID: 28431 Comm: syz.0.6737 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  554.062493][T28431] Tainted: [W]=WARN
[  554.062516][T28431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  554.062528][T28431] Call Trace:
[  554.062533][T28431]  <TASK>
[  554.062539][T28431]  __dump_stack+0x1d/0x30
[  554.062589][T28431]  dump_stack_lvl+0x95/0xd0
[  554.062614][T28431]  dump_stack+0x15/0x1b
[  554.062678][T28431]  should_fail_ex+0x263/0x280
[  554.062711][T28431]  should_fail+0xb/0x20
[  554.062774][T28431]  should_fail_usercopy+0x1a/0x20
[  554.062814][T28431]  _copy_to_user+0x20/0xa0
[  554.062854][T28431]  simple_read_from_buffer+0xb5/0x130
[  554.062921][T28431]  proc_fail_nth_read+0x10e/0x150
[  554.062941][T28431]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  554.062959][T28431]  vfs_read+0x1ab/0x7f0
[  554.063013][T28431]  ? __rcu_read_unlock+0x4e/0x70
[  554.063069][T28431]  ? __fget_files+0x184/0x1c0
[  554.063103][T28431]  ? selinux_getselfattr+0x99/0xd0
[  554.063131][T28431]  ? mutex_lock+0x57/0x90
[  554.063271][T28431]  ksys_read+0xdc/0x1a0
[  554.063299][T28431]  __x64_sys_read+0x40/0x50
[  554.063326][T28431]  x64_sys_call+0x2886/0x3020
[  554.063405][T28431]  do_syscall_64+0x12c/0x370
[  554.063441][T28431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.063464][T28431] RIP: 0033:0x7fe78d9bc84e
[  554.063479][T28431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  554.063499][T28431] RSP: 002b:00007fe78c456fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  554.063517][T28431] RAX: ffffffffffffffda RBX: 00007fe78c4576c0 RCX: 00007fe78d9bc84e
[  554.063529][T28431] RDX: 000000000000000f RSI: 00007fe78c4570a0 RDI: 0000000000000004
[  554.063540][T28431] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  554.063551][T28431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.063630][T28431] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  554.063653][T28431]  </TASK>
[  554.280524][T28436] Failed to initialize the IGMP autojoin socket (err -2)
[  554.506584][T28471] FAULT_INJECTION: forcing a failure.
[  554.506584][T28471] name failslab, interval 1, probability 0, space 0, times 0
[  554.519437][T28471] CPU: 1 UID: 0 PID: 28471 Comm: syz.6.6745 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  554.519466][T28471] Tainted: [W]=WARN
[  554.519472][T28471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  554.519483][T28471] Call Trace:
[  554.519490][T28471]  <TASK>
[  554.519609][T28471]  __dump_stack+0x1d/0x30
[  554.519640][T28471]  dump_stack_lvl+0x95/0xd0
[  554.519666][T28471]  dump_stack+0x15/0x1b
[  554.519690][T28471]  should_fail_ex+0x263/0x280
[  554.519724][T28471]  should_failslab+0x8c/0xb0
[  554.519794][T28471]  __kmalloc_noprof+0xb8/0x4e0
[  554.519870][T28471]  ? __list_lru_init+0x72/0x2e0
[  554.519896][T28471]  __list_lru_init+0x72/0x2e0
[  554.519920][T28471]  alloc_super+0x519/0x580
[  554.519948][T28471]  sget_fc+0x24e/0x6e0
[  554.519972][T28471]  ? __pfx_set_anon_super_fc+0x10/0x10
[  554.520008][T28471]  ? __pfx_ramfs_fill_super+0x10/0x10
[  554.520155][T28471]  get_tree_nodev+0x2a/0x100
[  554.520186][T28471]  ramfs_get_tree+0x1c/0x30
[  554.520293][T28471]  vfs_get_tree+0x57/0x1d0
[  554.520369][T28471]  vfs_cmd_create+0x8a/0x140
[  554.520402][T28471]  vfs_fsconfig_locked+0x6f/0x210
[  554.520427][T28471]  __se_sys_fsconfig+0x684/0x7d0
[  554.520506][T28471]  __x64_sys_fsconfig+0x67/0x80
[  554.520527][T28471]  x64_sys_call+0xd6e/0x3020
[  554.520550][T28471]  do_syscall_64+0x12c/0x370
[  554.520585][T28471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.520653][T28471] RIP: 0033:0x7f77fb1fbf79
[  554.520672][T28471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.520694][T28471] RSP: 002b:00007f77f9c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  554.520729][T28471] RAX: ffffffffffffffda RBX: 00007f77fb475fa0 RCX: 00007f77fb1fbf79
[  554.520776][T28471] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  554.520790][T28471] RBP: 00007f77f9c57090 R08: 0000000000000000 R09: 0000000000000000
[  554.520802][T28471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.520813][T28471] R13: 00007f77fb476038 R14: 00007f77fb475fa0 R15: 00007ffc1b2a95d8
[  554.520830][T28471]  </TASK>
[  554.945564][T28442] macvlan2: entered promiscuous mode
[  554.951482][T28442] batman_adv: batadv0: Adding interface: macvlan2
[  554.957944][T28442] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.991015][T28442] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active
[  555.108240][T28508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28508 comm=syz.6.6754
[  555.231533][T28467] sch_tbf: burst 88 is lower than device veth1_to_batadv mtu (1514) !
[  555.414356][T28552] loop6: detected capacity change from 0 to 256
[  555.436694][T28552] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  555.459161][T28552] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  555.477903][T28552] FAT-fs (loop6): Filesystem has been set read-only
[  555.535932][T28572] futex_wake_op: syz.5.6770 tries to shift op by 144; fix this program
[  555.633426][T28583] FAULT_INJECTION: forcing a failure.
[  555.633426][T28583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  555.645353][T28587] netlink: 'syz.1.6774': attribute type 3 has an invalid length.
[  555.676120][T28587] netlink: 'syz.1.6774': attribute type 2 has an invalid length.
[  555.698504][T28583] CPU: 1 UID: 0 PID: 28583 Comm: syz.5.6772 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  555.698624][T28583] Tainted: [W]=WARN
[  555.698660][T28583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  555.698676][T28583] Call Trace:
[  555.698683][T28583]  <TASK>
[  555.698692][T28583]  __dump_stack+0x1d/0x30
[  555.698723][T28583]  dump_stack_lvl+0x95/0xd0
[  555.698744][T28583]  dump_stack+0x15/0x1b
[  555.698823][T28583]  should_fail_ex+0x263/0x280
[  555.698860][T28583]  should_fail+0xb/0x20
[  555.698892][T28583]  should_fail_usercopy+0x1a/0x20
[  555.698940][T28583]  _copy_from_iter+0xcf/0xea0
[  555.698995][T28583]  ? __alloc_skb+0x397/0x4b0
[  555.699032][T28583]  ? __alloc_skb+0x219/0x4b0
[  555.699073][T28583]  netlink_sendmsg+0x4ae/0x6f0
[  555.699173][T28583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  555.699291][T28583]  ____sys_sendmsg+0x5af/0x600
[  555.699322][T28583]  ___sys_sendmsg+0x195/0x1e0
[  555.699384][T28583]  __x64_sys_sendmsg+0xd4/0x160
[  555.699415][T28583]  x64_sys_call+0x194c/0x3020
[  555.699487][T28583]  do_syscall_64+0x12c/0x370
[  555.699526][T28583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.699617][T28583] RIP: 0033:0x7f00ce07bf79
[  555.699650][T28583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.699674][T28583] RSP: 002b:00007f00ccacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  555.699701][T28583] RAX: ffffffffffffffda RBX: 00007f00ce2f5fa0 RCX: 00007f00ce07bf79
[  555.699719][T28583] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d
[  555.699737][T28583] RBP: 00007f00ccacf090 R08: 0000000000000000 R09: 0000000000000000
[  555.699775][T28583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.699852][T28583] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  555.699879][T28583]  </TASK>
[  556.056200][T28612] macsec0: entered promiscuous mode
[  556.070598][T28612] macsec0: entered allmulticast mode
[  556.085182][T28612] veth1_macvtap: entered allmulticast mode
[  556.091286][T28617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=28617 comm=syz.5.6780
[  556.149567][T28622] FAULT_INJECTION: forcing a failure.
[  556.149567][T28622] name failslab, interval 1, probability 0, space 0, times 0
[  556.149603][T28622] CPU: 1 UID: 0 PID: 28622 Comm: syz.6.6782 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  556.149641][T28622] Tainted: [W]=WARN
[  556.149649][T28622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  556.149663][T28622] Call Trace:
[  556.149670][T28622]  <TASK>
[  556.149679][T28622]  __dump_stack+0x1d/0x30
[  556.149716][T28622]  dump_stack_lvl+0x95/0xd0
[  556.149741][T28622]  dump_stack+0x15/0x1b
[  556.149764][T28622]  should_fail_ex+0x263/0x280
[  556.149795][T28622]  should_failslab+0x8c/0xb0
[  556.149906][T28622]  kmem_cache_alloc_noprof+0x66/0x400
[  556.149993][T28622]  ? security_inode_alloc+0x37/0x100
[  556.150031][T28622]  security_inode_alloc+0x37/0x100
[  556.150063][T28622]  inode_init_always_gfp+0x4b7/0x500
[  556.150099][T28622]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  556.150152][T28622]  alloc_inode+0x58/0x170
[  556.150244][T28622]  new_inode+0x1d/0xe0
[  556.150396][T28622]  shmem_get_inode+0x246/0x750
[  556.150429][T28622]  __shmem_file_setup+0x112/0x210
[  556.150524][T28622]  shmem_file_setup+0x3b/0x50
[  556.150568][T28622]  memfd_alloc_file+0x4e/0x300
[  556.150600][T28622]  __se_sys_memfd_create+0x2e1/0x3b0
[  556.150659][T28622]  __x64_sys_memfd_create+0x31/0x40
[  556.150785][T28622]  x64_sys_call+0x1f22/0x3020
[  556.150815][T28622]  do_syscall_64+0x12c/0x370
[  556.150849][T28622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.150880][T28622] RIP: 0033:0x7f77fb1fbf79
[  556.150897][T28622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.150918][T28622] RSP: 002b:00007f77f9c56e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  556.151006][T28622] RAX: ffffffffffffffda RBX: 000000000000054e RCX: 00007f77fb1fbf79
[  556.151023][T28622] RDX: 00007f77f9c56ee0 RSI: 0000000000000000 RDI: 00007f77fb2929dd
[  556.151038][T28622] RBP: 0000200000000fc0 R08: 00000000ffffffff R09: 0000000000000000
[  556.151093][T28622] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000002140
[  556.151108][T28622] R13: 00007f77f9c56ee0 R14: 00007f77f9c56ea0 R15: 0000200000000080
[  556.151154][T28622]  </TASK>
[  556.151203][T28612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28612 comm=syz.5.6780
[  556.177748][T28612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=28612 comm=syz.5.6780
[  556.244958][T28636] FAULT_INJECTION: forcing a failure.
[  556.244958][T28636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.244999][T28636] CPU: 0 UID: 0 PID: 28636 Comm: syz.5.6786 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  556.245028][T28636] Tainted: [W]=WARN
[  556.245034][T28636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  556.245046][T28636] Call Trace:
[  556.245053][T28636]  <TASK>
[  556.245078][T28636]  __dump_stack+0x1d/0x30
[  556.245104][T28636]  dump_stack_lvl+0x95/0xd0
[  556.245156][T28636]  dump_stack+0x15/0x1b
[  556.245183][T28636]  should_fail_ex+0x263/0x280
[  556.245251][T28636]  should_fail+0xb/0x20
[  556.245283][T28636]  should_fail_usercopy+0x1a/0x20
[  556.245325][T28636]  _copy_from_user+0x1c/0xb0
[  556.245365][T28636]  perf_copy_attr+0x145/0x610
[  556.245394][T28636]  ? get_pid_task+0x96/0xd0
[  556.245483][T28636]  __se_sys_perf_event_open+0x67/0x1290
[  556.245525][T28636]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  556.245591][T28636]  ? vfs_write+0x86e/0x9f0
[  556.245633][T28636]  ? __rcu_read_unlock+0x4e/0x70
[  556.245685][T28636]  __x64_sys_perf_event_open+0x67/0x80
[  556.245756][T28636]  x64_sys_call+0x2789/0x3020
[  556.245806][T28636]  do_syscall_64+0x12c/0x370
[  556.245860][T28636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.245884][T28636] RIP: 0033:0x7f00ce07bf79
[  556.245900][T28636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.245994][T28636] RSP: 002b:00007f00ccacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  556.246020][T28636] RAX: ffffffffffffffda RBX: 00007f00ce2f5fa0 RCX: 00007f00ce07bf79
[  556.246038][T28636] RDX: ffbfffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  556.246056][T28636] RBP: 00007f00ccacf090 R08: 0000000000000002 R09: 0000000000000000
[  556.246072][T28636] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  556.246149][T28636] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  556.246194][T28636]  </TASK>
[  556.551549][T28664] __nla_validate_parse: 10 callbacks suppressed
[  556.551563][T28664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6791'.
[  556.656640][T28672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6791'.
[  557.185246][T28703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6794'.
[  557.355208][T28703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6794'.
[  557.544908][   T28] kauditd_printk_skb: 64 callbacks suppressed
[  557.544995][   T28] audit: type=1326 audit(2000000535.527:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  557.564618][T28734] netlink: 'syz.0.6802': attribute type 4 has an invalid length.
[  557.630735][T28744] netlink: 'syz.0.6802': attribute type 4 has an invalid length.
[  557.638577][   T28] audit: type=1326 audit(2000000535.527:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  557.761735][   T28] audit: type=1326 audit(2000000535.527:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  557.846696][   T28] audit: type=1326 audit(2000000535.527:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  557.969867][T28776] IPv6: sit1: Disabled Multicast RS
[  558.104640][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6813'.
[  558.259965][   T28] audit: type=1326 audit(2000000535.527:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe78d9fbce2 code=0x7ffc0000
[  558.358115][   T28] audit: type=1326 audit(2000000535.527:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  558.420587][   T28] audit: type=1326 audit(2000000535.527:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe78d9fbda7 code=0x7ffc0000
[  558.516913][   T28] audit: type=1326 audit(2000000535.527:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  558.605553][   T28] audit: type=1326 audit(2000000535.527:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  558.659268][   T28] audit: type=1326 audit(2000000535.527:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  558.821119][T28843] team0: Device gtp0 is of different type
[  558.993301][T28864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6824'.
[  559.098780][T28864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6824'.
[  559.108279][T28864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6824'.
[  559.154803][T28878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16488 sclass=netlink_route_socket pid=28878 comm=syz.6.6829
[  559.311313][T28888] bridge1: entered promiscuous mode
[  559.347561][T28890] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6834'.
[  559.380605][T28890] gretap0: entered promiscuous mode
[  559.429300][T28893] netlink: 'syz.7.6833': attribute type 3 has an invalid length.
[  559.490169][T28893] netlink: 'syz.7.6833': attribute type 1 has an invalid length.
[  559.534792][T28893] netlink: 181400 bytes leftover after parsing attributes in process `syz.7.6833'.
[  560.142209][T28940] loop6: detected capacity change from 0 to 512
[  560.162915][T28940] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  560.489037][T28992] IPv6: NLM_F_REPLACE set, but no existing node found!
[  560.497632][T28994] FAULT_INJECTION: forcing a failure.
[  560.497632][T28994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  560.526133][T28994] CPU: 1 UID: 0 PID: 28994 Comm: syz.0.6855 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  560.526170][T28994] Tainted: [W]=WARN
[  560.526179][T28994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  560.526198][T28994] Call Trace:
[  560.526206][T28994]  <TASK>
[  560.526214][T28994]  __dump_stack+0x1d/0x30
[  560.526239][T28994]  dump_stack_lvl+0x95/0xd0
[  560.526266][T28994]  dump_stack+0x15/0x1b
[  560.526284][T28994]  should_fail_ex+0x263/0x280
[  560.526310][T28994]  should_fail+0xb/0x20
[  560.526417][T28994]  should_fail_usercopy+0x1a/0x20
[  560.526450][T28994]  _copy_from_user+0x1c/0xb0
[  560.526519][T28994]  memdup_user+0x5e/0xd0
[  560.526594][T28994]  nvram_misc_write+0x78/0xd0
[  560.526618][T28994]  ? __pfx_nvram_misc_write+0x10/0x10
[  560.526649][T28994]  vfs_write+0x269/0x9f0
[  560.526683][T28994]  ? __rcu_read_unlock+0x4e/0x70
[  560.526827][T28994]  ? __fget_files+0x184/0x1c0
[  560.526865][T28994]  ksys_write+0xdc/0x1a0
[  560.526896][T28994]  __x64_sys_write+0x40/0x50
[  560.526941][T28994]  x64_sys_call+0x27e1/0x3020
[  560.527018][T28994]  do_syscall_64+0x12c/0x370
[  560.527049][T28994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.527091][T28994] RIP: 0033:0x7fe78d9fbf79
[  560.527104][T28994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.527171][T28994] RSP: 002b:00007fe78c457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  560.527193][T28994] RAX: ffffffffffffffda RBX: 00007fe78dc75fa0 RCX: 00007fe78d9fbf79
[  560.527209][T28994] RDX: 0000000000000b55 RSI: 0000200000003600 RDI: 0000000000000003
[  560.527223][T28994] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  560.527234][T28994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  560.527258][T28994] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  560.527336][T28994]  </TASK>
[  560.859647][T29015] loop7: detected capacity change from 0 to 16384
[  561.059544][T29022] loop7: detected capacity change from 16384 to 0
[  561.078932][    C0] blk_print_req_error: 1 callbacks suppressed
[  561.078950][    C0] I/O error, dev loop7, sector 7176 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 2
[  561.286100][T29070] FAULT_INJECTION: forcing a failure.
[  561.286100][T29070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.309569][T29070] CPU: 0 UID: 0 PID: 29070 Comm: syz.0.6872 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  561.309607][T29070] Tainted: [W]=WARN
[  561.309616][T29070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  561.309679][T29070] Call Trace:
[  561.309688][T29070]  <TASK>
[  561.309697][T29070]  __dump_stack+0x1d/0x30
[  561.309727][T29070]  dump_stack_lvl+0x95/0xd0
[  561.309754][T29070]  dump_stack+0x15/0x1b
[  561.309775][T29070]  should_fail_ex+0x263/0x280
[  561.309871][T29070]  should_fail+0xb/0x20
[  561.309903][T29070]  should_fail_usercopy+0x1a/0x20
[  561.309941][T29070]  _copy_to_user+0x20/0xa0
[  561.310040][T29070]  simple_read_from_buffer+0xb5/0x130
[  561.310073][T29070]  proc_fail_nth_read+0x10e/0x150
[  561.310158][T29070]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  561.310186][T29070]  vfs_read+0x1ab/0x7f0
[  561.310217][T29070]  ? __rcu_read_unlock+0x4e/0x70
[  561.310259][T29070]  ? __fget_files+0x184/0x1c0
[  561.310327][T29070]  ? selinux_getselfattr+0x99/0xd0
[  561.310429][T29070]  ? mutex_lock+0x57/0x90
[  561.310455][T29070]  ksys_read+0xdc/0x1a0
[  561.310480][T29070]  __x64_sys_read+0x40/0x50
[  561.310532][T29070]  x64_sys_call+0x2886/0x3020
[  561.310622][T29070]  do_syscall_64+0x12c/0x370
[  561.310666][T29070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.310749][T29070] RIP: 0033:0x7fe78d9bc84e
[  561.310780][T29070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  561.310803][T29070] RSP: 002b:00007fe78c456fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  561.310904][T29070] RAX: ffffffffffffffda RBX: 00007fe78c4576c0 RCX: 00007fe78d9bc84e
[  561.310922][T29070] RDX: 000000000000000f RSI: 00007fe78c4570a0 RDI: 0000000000000007
[  561.310938][T29070] RBP: 00007fe78c457090 R08: 0000000000000000 R09: 0000000000000000
[  561.311005][T29070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.311027][T29070] R13: 00007fe78dc76038 R14: 00007fe78dc75fa0 R15: 00007fff98907178
[  561.311054][T29070]  </TASK>
[  561.771922][   T56] ip6gretap0: left allmulticast mode
[  561.778406][   T56] ip6gretap0: left promiscuous mode
[  561.806891][   T56] bridge0: port 3(ip6gretap0) entered disabled state
[  561.837749][   T56] bridge_slave_0: left allmulticast mode
[  561.843520][   T56] bridge_slave_0: left promiscuous mode
[  561.863932][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.930149][T29114] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6880'.
[  562.200284][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.210573][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.225605][   T56] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  562.235863][   T56] bond0 (unregistering): Released all slaves
[  562.245846][   T56] bond1 (unregistering): Released all slaves
[  562.333242][   T56] tipc: Left network mode
[  562.374924][   T56] hsr_slave_0: left promiscuous mode
[  562.380992][   T56] hsr_slave_1: left promiscuous mode
[  562.386772][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  562.394593][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  562.418644][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.426408][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.444986][   T56] veth1_vlan: left promiscuous mode
[  562.459233][   T56] veth0_vlan: left promiscuous mode
[  562.511870][T29160] loop1: detected capacity change from 0 to 512
[  562.544496][T29160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.563877][T29160] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  562.583137][T29160] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #12: comm syz.1.6882: Directory hole found for htree leaf block 0
[  562.616855][T29160] netlink: 'syz.1.6882': attribute type 10 has an invalid length.
[  562.637921][T29170] FAULT_INJECTION: forcing a failure.
[  562.637921][T29170] name failslab, interval 1, probability 0, space 0, times 0
[  562.656484][T29160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6882'.
[  562.677546][   T56] team0 (unregistering): Port device team_slave_1 removed
[  562.778170][T29170] CPU: 1 UID: 0 PID: 29170 Comm: syz.5.6888 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  562.778243][T29170] Tainted: [W]=WARN
[  562.778251][T29170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  562.778266][T29170] Call Trace:
[  562.778291][T29170]  <TASK>
[  562.778300][T29170]  __dump_stack+0x1d/0x30
[  562.778330][T29170]  dump_stack_lvl+0x95/0xd0
[  562.778354][T29170]  dump_stack+0x15/0x1b
[  562.778373][T29170]  should_fail_ex+0x263/0x280
[  562.778474][T29170]  should_failslab+0x8c/0xb0
[  562.778526][T29170]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  562.778571][T29170]  ? __alloc_skb+0x2f0/0x4b0
[  562.778676][T29170]  __alloc_skb+0x2f0/0x4b0
[  562.778708][T29170]  ? __alloc_skb+0x219/0x4b0
[  562.778848][T29170]  netlink_alloc_large_skb+0xbf/0xf0
[  562.778881][T29170]  netlink_sendmsg+0x40c/0x6f0
[  562.778911][T29170]  ? __pfx_netlink_sendmsg+0x10/0x10
[  562.779017][T29170]  ____sys_sendmsg+0x5af/0x600
[  562.779040][T29170]  ___sys_sendmsg+0x195/0x1e0
[  562.779072][T29170]  __x64_sys_sendmsg+0xd4/0x160
[  562.779124][T29170]  x64_sys_call+0x194c/0x3020
[  562.779181][T29170]  do_syscall_64+0x12c/0x370
[  562.779212][T29170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.779232][T29170] RIP: 0033:0x7f00ce07bf79
[  562.779247][T29170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.779269][T29170] RSP: 002b:00007f00ccaae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  562.779294][T29170] RAX: ffffffffffffffda RBX: 00007f00ce2f6090 RCX: 00007f00ce07bf79
[  562.779311][T29170] RDX: 0000000001000000 RSI: 0000200000000040 RDI: 0000000000000003
[  562.779325][T29170] RBP: 00007f00ccaae090 R08: 0000000000000000 R09: 0000000000000000
[  562.779337][T29170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.779348][T29170] R13: 00007f00ce2f6128 R14: 00007f00ce2f6090 R15: 00007ffd473d2db8
[  562.779391][T29170]  </TASK>
[  563.127194][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  563.127209][   T28] audit: type=1400 audit(2000000541.107:7393): avc:  denied  { accept } for  pid=29173 comm="syz.7.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  563.153456][   T56] team0 (unregistering): Port device team_slave_0 removed
[  563.328522][T29160] dummy0: entered promiscuous mode
[  563.343853][T29160] bridge0: port 3(dummy0) entered blocking state
[  563.358661][T29160] bridge0: port 3(dummy0) entered disabled state
[  563.378482][T29160] dummy0: entered allmulticast mode
[  563.404326][T29160] bridge0: port 3(dummy0) entered blocking state
[  563.410818][T29160] bridge0: port 3(dummy0) entered forwarding state
[  563.450457][T29203] loop6: detected capacity change from 0 to 512
[  563.476499][T29203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  563.489286][T29206] netlink: 'syz.0.6895': attribute type 10 has an invalid length.
[  563.497195][T29206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6895'.
[  563.533432][T27606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.573604][T29206] dummy0: entered promiscuous mode
[  563.596026][T29180] Failed to initialize the IGMP autojoin socket (err -2)
[  563.609427][T29206] bridge0: port 3(dummy0) entered blocking state
[  563.628273][T29206] bridge0: port 3(dummy0) entered disabled state
[  563.648593][T29206] dummy0: entered allmulticast mode
[  563.667247][T29206] bridge0: port 3(dummy0) entered blocking state
[  563.673777][T29206] bridge0: port 3(dummy0) entered forwarding state
[  563.759755][T29221] bond1: option min_links: invalid value (18446744073709551601)
[  563.773595][   T28] audit: type=1326 audit(2000000541.757:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  563.803791][T29221] bond1: option min_links: allowed values 0 - 2147483647
[  563.841173][T29221] bond1 (unregistering): Released all slaves
[  563.863536][   T28] audit: type=1326 audit(2000000541.757:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe78d9fd807 code=0x7ffc0000
[  563.890098][T29220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  563.898198][T29229] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  563.971368][   T28] audit: type=1326 audit(2000000541.757:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  563.971405][   T28] audit: type=1326 audit(2000000541.757:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  563.971429][   T28] audit: type=1326 audit(2000000541.757:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  563.971513][   T28] audit: type=1326 audit(2000000541.757:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe78d9bc84e code=0x7ffc0000
[  563.971564][   T28] audit: type=1326 audit(2000000541.787:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  563.971594][   T28] audit: type=1326 audit(2000000541.787:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  563.971619][   T28] audit: type=1326 audit(2000000541.787:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d9fbf79 code=0x7ffc0000
[  564.200593][   T56] IPVS: stop unused estimator thread 0...
[  564.265125][T29242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29242 comm=syz.1.6896
[  564.438933][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.475176][T29256] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6899'.
[  564.475358][T29256] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.475438][T29256] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.577930][T29261] loop6: detected capacity change from 0 to 512
[  564.578430][T29261] EXT4-fs: Ignoring removed oldalloc option
[  564.599105][T29261] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.6901: Parent and EA inode have the same ino 15
[  564.599136][T29261] loop6: lost filesystem error report for type 5 error -117
[  564.612029][T29261] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.6901: Parent and EA inode have the same ino 15
[  564.748737][T29261] loop6: lost filesystem error report for type 5 error -117
[  564.756326][T29261] EXT4-fs (loop6): 1 orphan inode deleted
[  564.756670][T29261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.795392][T29261] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6901'.
[  564.945498][T29275] netlink: 'syz.5.6907': attribute type 1 has an invalid length.
[  564.956784][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.984735][T29284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6910'.
[  565.170274][T29294] loop6: detected capacity change from 0 to 128
[  565.194321][T29294] FAT-fs (loop6): Directory bread(block 414) failed
[  565.211669][T29294] FAT-fs (loop6): Directory bread(block 415) failed
[  565.227568][T29294] FAT-fs (loop6): Directory bread(block 416) failed
[  565.253457][T29294] FAT-fs (loop6): Directory bread(block 417) failed
[  565.260151][T29294] FAT-fs (loop6): Directory bread(block 418) failed
[  565.266771][T29294] FAT-fs (loop6): Directory bread(block 419) failed
[  565.288122][T29294] FAT-fs (loop6): Directory bread(block 420) failed
[  565.294756][T29294] FAT-fs (loop6): Directory bread(block 421) failed
[  565.318871][T29304] netlink: 'syz.5.6915': attribute type 39 has an invalid length.
[  565.398362][T29294] syz.6.6909: attempt to access beyond end of device
[  565.398362][T29294] loop6: rw=8388611, sector=462, nr_sectors = 2 limit=128
[  565.438278][T29294] syz.6.6909: attempt to access beyond end of device
[  565.438278][T29294] loop6: rw=8390659, sector=464, nr_sectors = 6 limit=128
[  565.695678][T29346] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6927'.
[  565.913346][T29378] loop1: detected capacity change from 0 to 128
[  565.948354][T29383] netlink: 'syz.7.6936': attribute type 29 has an invalid length.
[  566.142790][T29407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6942'.
[  566.289705][T29419] netlink: 'syz.1.6945': attribute type 4 has an invalid length.
[  566.400659][T29431] netlink: 'syz.1.6945': attribute type 4 has an invalid length.
[  566.666503][T29432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29432 comm=syz.5.6943
[  566.682206][T29429] Failed to initialize the IGMP autojoin socket (err -2)
[  566.967611][T29462] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6953'.
[  567.097537][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6956'.
[  567.139503][T29469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6955'.
[  567.168134][T29472] netlink: 'syz.6.6956': attribute type 7 has an invalid length.
[  567.175993][T29472] netlink: 'syz.6.6956': attribute type 8 has an invalid length.
[  567.201083][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6956'.
[  567.900494][T29562] 9pnet_fd: Insufficient options for proto=fd
[  567.987867][T29570] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  568.018152][T29575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6982'.
[  568.113247][T29575] geneve2: entered promiscuous mode
[  568.142007][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  568.142022][   T28] audit: type=1400 audit(2000000546.127:7444): avc:  denied  { write } for  pid=29595 comm="syz.5.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  568.225938][T29601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6990'.
[  568.348011][T29613] loop6: detected capacity change from 0 to 1024
[  568.355104][T29601] geneve2: entered promiscuous mode
[  568.388609][T29613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  568.470536][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.563649][T29630] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6996'.
[  568.660581][T29637] loop6: detected capacity change from 0 to 512
[  568.678905][T29637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  568.688271][T29637] EXT4-fs (loop6): orphan cleanup on readonly fs
[  568.688964][T29637] EXT4-fs error (device loop6): ext4_quota_enable:7185: comm syz.6.6998: Bad quota inum: 2, type: 2
[  568.688986][T29637] loop6: lost filesystem error report for type 5 error -117
[  568.689458][T29637] EXT4-fs warning (device loop6): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  568.689754][T29637] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  568.690169][T29637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  568.690617][T29637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.846015][T29663] FAULT_INJECTION: forcing a failure.
[  568.846015][T29663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.846054][T29663] CPU: 1 UID: 0 PID: 29663 Comm: syz.5.7004 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  568.846089][T29663] Tainted: [W]=WARN
[  568.846098][T29663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  568.846113][T29663] Call Trace:
[  568.846121][T29663]  <TASK>
[  568.846138][T29663]  __dump_stack+0x1d/0x30
[  568.846215][T29663]  dump_stack_lvl+0x95/0xd0
[  568.846258][T29663]  dump_stack+0x15/0x1b
[  568.846362][T29663]  should_fail_ex+0x263/0x280
[  568.846400][T29663]  should_fail+0xb/0x20
[  568.846431][T29663]  should_fail_usercopy+0x1a/0x20
[  568.846479][T29663]  _copy_from_iter+0xcf/0xea0
[  568.846578][T29663]  ? __alloc_skb+0x397/0x4b0
[  568.846617][T29663]  ? __alloc_skb+0x219/0x4b0
[  568.846658][T29663]  netlink_sendmsg+0x4ae/0x6f0
[  568.846761][T29663]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.846786][T29663]  ____sys_sendmsg+0x5af/0x600
[  568.846822][T29663]  ___sys_sendmsg+0x195/0x1e0
[  568.846916][T29663]  __x64_sys_sendmsg+0xd4/0x160
[  568.846938][T29663]  x64_sys_call+0x194c/0x3020
[  568.846963][T29663]  do_syscall_64+0x12c/0x370
[  568.847020][T29663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.847046][T29663] RIP: 0033:0x7f00ce07bf79
[  568.847062][T29663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.847077][T29663] RSP: 002b:00007f00ccacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  568.847095][T29663] RAX: ffffffffffffffda RBX: 00007f00ce2f5fa0 RCX: 00007f00ce07bf79
[  568.847110][T29663] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  568.847141][T29663] RBP: 00007f00ccacf090 R08: 0000000000000000 R09: 0000000000000000
[  568.847157][T29663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.847172][T29663] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  568.847195][T29663]  </TASK>
[  568.894379][T29670] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7006'.
[  569.020203][T29677] syz.0.7008 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  569.020851][   T28] audit: type=1400 audit(2000000547.007:7445): avc:  denied  { setopt } for  pid=29675 comm="syz.0.7008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  569.043039][   T28] audit: type=1400 audit(2000000547.027:7446): avc:  denied  { recv } for  pid=29683 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth1_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  569.178391][T29690] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7012'.
[  569.404018][T29704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7017'.
[  569.417063][T29705] 9p: Bad value for 'wfdno'
[  569.606206][T29722] binfmt_misc: register: failed to install interpreter file ./file1
[  570.399500][T29803] loop6: detected capacity change from 0 to 1024
[  570.582122][T29833] Failed to initialize the IGMP autojoin socket (err -2)
[  570.948277][   T28] audit: type=1400 audit(2000000548.927:7447): avc:  denied  { map } for  pid=29894 comm="syz.5.7073" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  571.032916][   T28] audit: type=1400 audit(2000000548.927:7448): avc:  denied  { execute } for  pid=29894 comm="syz.5.7073" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  571.081844][T29905] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2
[  571.102298][T29881] loop1: detected capacity change from 0 to 164
[  571.151249][T29881] Unable to read rock-ridge attributes
[  571.253580][T29881] Unable to read rock-ridge attributes
[  571.289707][T29881] iso9660: Corrupted directory entry in block 4 of inode 1792
[  571.400111][T29941] loop6: detected capacity change from 0 to 1024
[  571.429475][T29941] EXT4-fs: Ignoring removed orlov option
[  571.437327][T29941] EXT4-fs (loop6): stripe (129) is not aligned with cluster size (16), stripe is disabled
[  571.459606][   T28] audit: type=1326 audit(2000000549.437:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.0.7076" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe78d9fbf79 code=0x0
[  571.494087][T29941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  571.515048][T29954] loop1: detected capacity change from 0 to 128
[  571.523061][T29941] EXT4-fs (loop6): resizing filesystem from 512 to 0 blocks
[  571.531008][T29954] ext4: Unknown parameter 'nouser_xattr'
[  571.579996][T29941] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  571.633012][   T28] audit: type=1400 audit(2000000549.617:7450): avc:  denied  { map } for  pid=29940 comm="syz.6.7083" path="/89/file1/net_prio.prioidx" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  571.662109][   T28] audit: type=1400 audit(2000000549.617:7451): avc:  denied  { ioctl } for  pid=29940 comm="syz.6.7083" path="/89/file1/net_prio.prioidx" dev="loop6" ino=18 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  571.702365][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.811397][T29984] netlink: 'syz.6.7089': attribute type 2 has an invalid length.
[  571.880019][T29989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29989 comm=syz.7.7090
[  571.897100][T29993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  572.124102][T30020] __nla_validate_parse: 14 callbacks suppressed
[  572.124122][T30020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7096'.
[  572.170850][   T28] audit: type=1400 audit(2000000550.157:7452): avc:  denied  { write } for  pid=30030 comm="syz.0.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  572.246140][T30043] loop6: detected capacity change from 0 to 128
[  572.312897][T30035] bond3: option primary: mode dependency failed, not supported in mode broadcast(3)
[  572.337705][T30035] bond3 (unregistering): Released all slaves
[  573.672031][T30122] loop6: detected capacity change from 0 to 128
[  573.694267][T30122] FAT-fs (loop6): Directory bread(block 414) failed
[  573.701604][T30122] FAT-fs (loop6): Directory bread(block 415) failed
[  573.718740][T30122] FAT-fs (loop6): Directory bread(block 416) failed
[  573.734317][T30122] FAT-fs (loop6): Directory bread(block 417) failed
[  573.748113][T30122] FAT-fs (loop6): Directory bread(block 418) failed
[  573.762485][T30122] FAT-fs (loop6): Directory bread(block 419) failed
[  573.782159][T30122] FAT-fs (loop6): Directory bread(block 420) failed
[  573.797657][T30122] FAT-fs (loop6): Directory bread(block 421) failed
[  573.825737][T30122] FAT-fs (loop6): Directory bread(block 414) failed
[  573.845757][T30129] netlink: 'syz.5.7116': attribute type 1 has an invalid length.
[  573.850510][T30122] FAT-fs (loop6): Directory bread(block 415) failed
[  573.877045][T30129] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  574.098795][T30149] siw: device registration error -23
[  574.113482][T30149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30149 comm=syz.7.7118
[  574.479201][T30152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7121'.
[  574.489224][T30152] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.500260][T30151] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.508695][T30161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7124'.
[  574.717083][T30179] can: request_module (can-proto-5) failed.
[  574.733329][ T5805] rtc_cmos 00:00: Alarms can be up to one day in the future
[  574.984417][ T5805] rtc_cmos 00:00: Alarms can be up to one day in the future
[  575.048970][ T5805] rtc_cmos 00:00: Alarms can be up to one day in the future
[  575.106969][ T5805] rtc_cmos 00:00: Alarms can be up to one day in the future
[  575.148595][T30189] loop6: detected capacity change from 0 to 512
[  575.165283][ T5805] rtc rtc0: __rtc_set_alarm: err=-22
[  575.197630][T30189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.212384][T30191] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7131'.
[  575.246181][   T28] audit: type=1400 audit(2000000553.227:7453): avc:  denied  { create } for  pid=30195 comm="syz.7.7132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  575.346905][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.653964][T30225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7137'.
[  575.787410][T30243] loop6: detected capacity change from 0 to 8192
[  575.838462][T30243] msdos: Unknown parameter 'nodo˙˙'
[  575.869307][T30243] loop6: detected capacity change from 0 to 128
[  575.907233][T30243] vfat: Unknown parameter '0x000000000000ee00'
[  575.936169][   T28] audit: type=1326 audit(2000000553.917:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.064050][   T28] audit: type=1326 audit(2000000553.917:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.105376][   T28] audit: type=1326 audit(2000000553.917:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.142015][   T28] audit: type=1326 audit(2000000553.917:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.165826][   T28] audit: type=1326 audit(2000000553.917:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.208885][   T28] audit: type=1326 audit(2000000553.917:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.258298][   T28] audit: type=1326 audit(2000000553.917:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.312230][   T28] audit: type=1326 audit(2000000553.917:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.412252][   T28] audit: type=1326 audit(2000000553.917:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30242 comm="syz.6.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fb1fbf79 code=0x50000
[  576.496609][T30299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7155'.
[  577.009521][T30317] loop6: detected capacity change from 0 to 512
[  577.069083][T30317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  577.090320][T30317] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  577.137981][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.149598][T30375] syz.0.7167 (30375) used obsolete PPPIOCDETACH ioctl
[  577.253848][T30388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7170'.
[  577.325347][T30401] loop6: detected capacity change from 0 to 512
[  577.345422][T30401] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  577.358979][T30401] EXT4-fs (loop6): 1 truncate cleaned up
[  577.366002][T30401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  577.399604][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.427546][T30415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7179'.
[  577.439338][T30414] FAULT_INJECTION: forcing a failure.
[  577.439338][T30414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  577.452631][T30414] CPU: 1 UID: 0 PID: 30414 Comm: syz.5.7178 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  577.452712][T30414] Tainted: [W]=WARN
[  577.452719][T30414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  577.452731][T30414] Call Trace:
[  577.452736][T30414]  <TASK>
[  577.452743][T30414]  __dump_stack+0x1d/0x30
[  577.452765][T30414]  dump_stack_lvl+0x95/0xd0
[  577.452825][T30414]  dump_stack+0x15/0x1b
[  577.452902][T30414]  should_fail_ex+0x263/0x280
[  577.452937][T30414]  should_fail+0xb/0x20
[  577.452967][T30414]  should_fail_usercopy+0x1a/0x20
[  577.453033][T30414]  _copy_to_user+0x20/0xa0
[  577.453072][T30414]  simple_read_from_buffer+0xb5/0x130
[  577.453146][T30414]  proc_fail_nth_read+0x10e/0x150
[  577.453173][T30414]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  577.453197][T30414]  vfs_read+0x1ab/0x7f0
[  577.453224][T30414]  ? __rcu_read_unlock+0x4e/0x70
[  577.453323][T30414]  ? __fget_files+0x184/0x1c0
[  577.453400][T30414]  ? putname+0x7c/0xc0
[  577.453427][T30414]  ? mutex_lock+0x57/0x90
[  577.453450][T30414]  ksys_read+0xdc/0x1a0
[  577.453556][T30414]  __x64_sys_read+0x40/0x50
[  577.453586][T30414]  x64_sys_call+0x2886/0x3020
[  577.453684][T30414]  do_syscall_64+0x12c/0x370
[  577.453828][T30414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.453853][T30414] RIP: 0033:0x7f00ce03c84e
[  577.453871][T30414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  577.453890][T30414] RSP: 002b:00007f00ccacefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  577.453979][T30414] RAX: ffffffffffffffda RBX: 00007f00ccacf6c0 RCX: 00007f00ce03c84e
[  577.453995][T30414] RDX: 000000000000000f RSI: 00007f00ccacf0a0 RDI: 0000000000000007
[  577.454009][T30414] RBP: 00007f00ccacf090 R08: 0000000000000000 R09: 0000000000000000
[  577.454023][T30414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.454035][T30414] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  577.454055][T30414]  </TASK>
[  577.818012][T30425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7182'.
[  577.923823][T30438] loop1: detected capacity change from 0 to 256
[  577.971521][T30438] FAT-fs (loop1): Directory bread(block 64) failed
[  578.025595][T30438] FAT-fs (loop1): Directory bread(block 65) failed
[  578.043156][T30438] FAT-fs (loop1): Directory bread(block 66) failed
[  578.068147][T30438] FAT-fs (loop1): Directory bread(block 67) failed
[  578.091932][T30438] FAT-fs (loop1): Directory bread(block 68) failed
[  578.109029][T30438] FAT-fs (loop1): Directory bread(block 69) failed
[  578.127045][T30438] FAT-fs (loop1): Directory bread(block 70) failed
[  578.137172][T30438] FAT-fs (loop1): Directory bread(block 71) failed
[  578.150599][T30438] FAT-fs (loop1): Directory bread(block 72) failed
[  578.180990][T30438] FAT-fs (loop1): Directory bread(block 73) failed
[  578.368842][T30477] loop6: detected capacity change from 0 to 512
[  578.396292][T30477] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  578.416517][T30490] loop1: detected capacity change from 0 to 256
[  578.424690][T30477] EXT4-fs (loop6): inodes count not valid: 63 vs 32
[  578.436562][T30495] Failed to initialize the IGMP autojoin socket (err -2)
[  578.557743][T30509] FAULT_INJECTION: forcing a failure.
[  578.557743][T30509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  578.584679][T30509] CPU: 1 UID: 0 PID: 30509 Comm: syz.5.7200 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  578.584715][T30509] Tainted: [W]=WARN
[  578.584724][T30509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  578.584788][T30509] Call Trace:
[  578.584796][T30509]  <TASK>
[  578.584884][T30509]  __dump_stack+0x1d/0x30
[  578.584943][T30509]  dump_stack_lvl+0x95/0xd0
[  578.584968][T30509]  dump_stack+0x15/0x1b
[  578.584990][T30509]  should_fail_ex+0x263/0x280
[  578.585022][T30511] loop6: detected capacity change from 0 to 512
[  578.585022][T30509]  should_fail+0xb/0x20
[  578.585057][T30509]  should_fail_usercopy+0x1a/0x20
[  578.585153][T30511] ==================================================================
[  578.585154][T30509]  _copy_from_user+0x1c/0xb0
[  578.585274][T30509]  ____sys_sendmsg+0x1e2/0x600
[  578.585357][T30509]  ___sys_sendmsg+0x195/0x1e0
[  578.585409][T30509]  ? path_openat+0x1b01/0x2050
[  578.585536][T30509]  __sys_sendmmsg+0x185/0x320
[  578.585699][T30509]  __x64_sys_sendmmsg+0x57/0x70
[  578.585820][T30509]  x64_sys_call+0x27aa/0x3020
[  578.585892][T30509]  do_syscall_64+0x12c/0x370
[  578.585992][T30509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.586113][T30509] RIP: 0033:0x7f00ce07bf79
[  578.586156][T30509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.586203][T30509] RSP: 002b:00007f00ccacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  578.586268][T30509] RAX: ffffffffffffffda RBX: 00007f00ce2f5fa0 RCX: 00007f00ce07bf79
[  578.586342][T30509] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000004
[  578.586420][T30509] RBP: 00007f00ccacf090 R08: 0000000000000000 R09: 0000000000000000
[  578.586456][T30509] R10: 0000000040040040 R11: 0000000000000246 R12: 0000000000000001
[  578.586494][T30509] R13: 00007f00ce2f6038 R14: 00007f00ce2f5fa0 R15: 00007ffd473d2db8
[  578.586543][T30509]  </TASK>
[  578.633960][T30511] BUG: KCSAN: data-race in data_push_tail / vsnprintf
[  578.634004][T30511] 
[  578.634013][T30511] write to 0xffffffff89130198 of 1 bytes by task 30509 on cpu 1:
[  578.634028][T30511]  vsnprintf+0x2ce/0x860
[  578.634046][T30511]  vscnprintf+0x41/0x90
[  578.634065][T30511]  printk_sprint+0x30/0x2c0
[  578.634100][T30511]  vprintk_store+0x57b/0x910
[  578.634136][T30511]  vprintk_emit+0x1a4/0x600
[  578.634164][T30511]  vprintk_default+0x26/0x30
[  578.634192][T30511]  vprintk+0x1d/0x30
[  578.634212][T30511]  _printk+0x79/0xa0
[  578.634250][T30511]  __show_trace_log_lvl+0x460/0x560
[  578.634301][T30511]  __dump_stack+0x1d/0x30
[  578.634327][T30511]  dump_stack_lvl+0x95/0xd0
[  578.634352][T30511]  dump_stack+0x15/0x1b
[  578.634378][T30511]  should_fail_ex+0x263/0x280
[  578.634410][T30511]  should_fail+0xb/0x20
[  578.634438][T30511]  should_fail_usercopy+0x1a/0x20
[  578.634478][T30511]  _copy_from_user+0x1c/0xb0
[  578.634513][T30511]  ____sys_sendmsg+0x1e2/0x600
[  578.634534][T30511]  ___sys_sendmsg+0x195/0x1e0
[  578.634557][T30511]  __sys_sendmmsg+0x185/0x320
[  578.634579][T30511]  __x64_sys_sendmmsg+0x57/0x70
[  578.634600][T30511]  x64_sys_call+0x27aa/0x3020
[  578.634623][T30511]  do_syscall_64+0x12c/0x370
[  578.634655][T30511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.634680][T30511] 
[  578.634688][T30511] read to 0xffffffff89130198 of 8 bytes by task 30511 on cpu 0:
[  578.634708][T30511]  data_push_tail+0x100/0x470
[  578.634738][T30511]  data_alloc+0x11b/0x390
[  578.634768][T30511]  prb_reserve+0x8d7/0xae0
[  578.634793][T30511]  vprintk_store+0x54a/0x910
[  578.634818][T30511]  vprintk_emit+0x1a4/0x600
[  578.634847][T30511]  vprintk_default+0x26/0x30
[  578.634879][T30511]  vprintk+0x1d/0x30
[  578.634898][T30511]  _printk+0x79/0xa0
[  578.634913][T30511]  set_capacity_and_notify+0x1dd/0x230
[  578.634935][T30511]  loop_set_size+0x2e/0x70
[  578.634967][T30511]  loop_configure+0x828/0x9c0
[  578.634995][T30511]  lo_ioctl+0x1e1/0x13a0
[  578.635023][T30511]  blkdev_ioctl+0x387/0x460
[  578.635049][T30511]  __se_sys_ioctl+0xce/0x140
[  578.635078][T30511]  __x64_sys_ioctl+0x43/0x50
[  578.635106][T30511]  x64_sys_call+0x1563/0x3020
[  578.635135][T30511]  do_syscall_64+0x12c/0x370
[  578.635167][T30511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.635192][T30511] 
[  578.635198][T30511] value changed: 0x0000000100001716 -> 0x5f646c756f687320
[  578.635212][T30511] 
[  578.635217][T30511] Reported by Kernel Concurrency Sanitizer on:
[  578.635231][T30511] CPU: 0 UID: 0 PID: 30511 Comm: syz.6.7201 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  578.635266][T30511] Tainted: [W]=WARN
[  578.635275][T30511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  578.635287][T30511] ==================================================================
[  578.647340][T30516] 9p: Bad value for 'wfdno'
[  578.743699][T30518] netlink: 'syz.5.7203': attribute type 1 has an invalid length.
[  578.802086][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7199'.
[  578.825377][T30511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  578.827375][T30518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7203'.
[  579.108126][T30511] EXT4-fs (loop6): 1 truncate cleaned up
[  579.114340][T30511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.159260][T30511] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7201'.
[  579.269879][T27929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.