last executing test programs:

1m32.978838666s ago: executing program 2 (id=30):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)
perf_event_open(&(0x7f0000000a00)={0x7, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd78, 0x7, 0x9, 0x2, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r5=>0x0)
io_pgetevents(r5, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x74010102}, 0x7, 0x0, 0x0, 0x4007}})
io_destroy(r5)
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x1, 0x7, 0x81, 0x6, 0x3], 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20048010)

1m32.627154297s ago: executing program 0 (id=39):
ioperm(0x0, 0xd, 0x4000000000000020)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5423, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)

1m32.626528397s ago: executing program 0 (id=40):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x100030, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80602, 0x148)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x601, 0x3f)

1m32.125136756s ago: executing program 0 (id=43):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})

1m32.020484142s ago: executing program 0 (id=45):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @local}}, 0x1, 0x4, 0x9, 0x0, 0x27, 0x7fffffff, 0x6}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)}], 0x3)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, 0x0, 0x301, 0x1, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}}, 0x24}}, 0x20000004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x40, 0x4, 0x5, {{0x8, 0x4, 0x0, 0x32, 0x20, 0x65, 0x0, 0x6, 0x6d, 0x0, @private=0xa010101, @multicast1, {[@generic={0x44, 0x7, "24877c5151"}, @ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={0x0}}, 0x53a0312486921888)
ioctl$sock_bt_hci(r5, 0x400448e0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
recvmsg$can_bcm(r6, &(0x7f0000000780)={&(0x7f0000000640)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/106, 0x6a}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x121)
sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000008001900c18a3775bcf732adf9855812430a6306511f707e3750e7ac820e339a8b6bbf363dfcde0095575d7b325eaa86fd189377b810979b627a28c3d0b7b8e95da15cad8f8e4f06d5ba395e8f82a6b71fcfefc9d1c3eb61bf9cdea980c9ccbdb99a58e81a11ee9f1c4702c1dd23cf53daa4dfc40f2ec6a7cddb003c0959786129018d4391f203a90067c42aa9c09cf9c9a422fe91653b7b24b7145986ddf5efdee6718c2e26277a4675431f275b78cf073e2183b46615ad29", @ANYRES32=0x0, @ANYBLOB="0800100000000000"], 0x2c}}, 0x0)
ioperm(0x0, 0xd, 0x4000000000000020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
iopl(0x3)

1m31.923112857s ago: executing program 2 (id=48):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0xc3, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

1m31.914082078s ago: executing program 2 (id=49):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000))
r1 = socket(0xf, 0x6, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xc)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8800)

1m31.781367876s ago: executing program 2 (id=54):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x100030, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000040)={0x3f, {{0x2, 0x4e24, @multicast2}}, {{0x3f, 0x4e24, @multicast1}}}, 0x108)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80602, 0x148)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x601, 0x0)

1m31.684707931s ago: executing program 0 (id=58):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r2 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x6000)
setresuid(0xee01, r5, r5)
fchown(r4, r5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[], 0x24}], 0x1}, 0x480b0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x2, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000005380)=0x2f, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRES32=r2, @ANYRES64=r1], 0x33fe0)

1m30.991760422s ago: executing program 0 (id=63):
ioperm(0x0, 0xd, 0x4000000000000020)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)

1m30.991622642s ago: executing program 32 (id=63):
ioperm(0x0, 0xd, 0x4000000000000020)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)

1m30.865453959s ago: executing program 2 (id=66):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c008ebe0963090400000000000000230a00000400028014000180080001000a01010108000200ebffffc76047effcc244f05a89e0797a061eff"], 0x2c}, 0x1, 0x0, 0x0, 0x24004880}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
close(r0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0x10, 0x80002, 0x6)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000300090002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80a0)
listen(r4, 0x22)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x0, 0x963}, {0x1, 0x9, 0x80, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x3, 0xfffffffc}, {{@in=@loopback, 0xfffffffc, 0x2b}, 0x0, @in=@multicast1, 0x3504, 0x4, 0x0, 0x0, 0x800}]}]}, 0x13c}}, 0x4048050)
listen(r3, 0xfffffffc)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0054315da027c2bc01f5ef05aeb9d5335ba17edff2a81ba52fd245401ce10d667a7715a4bf8f1a36e30661ad196ea56855c600acebc70bc52d92a6397caaec67cac07ea83a213e59630eac9b099d238af5f89c6556aae37ab30df1203899c315f27b631d5e26633274d2165abde630ab52c2eb18afaece6ffd01485b2273d616417ec8"])
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r9, &(0x7f0000000080)=""/1, 0x1)
sendfile(r8, r9, &(0x7f00000002c0)=0x9, 0xe)
openat(r9, &(0x7f0000000100)='./file0\x00', 0x301000, 0x100)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x2404c081)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

1m30.309440102s ago: executing program 2 (id=73):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4000080)

1m30.291974093s ago: executing program 33 (id=73):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4000080)

49.405454158s ago: executing program 6 (id=380):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023892)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000700)={0x1, 0xfffffffe, 0x8, 0x2, 0xe, "48ddd2fc3315e74649166f22a39adc58fcb973"})

49.396736258s ago: executing program 6 (id=381):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)
unshare(0x22020600)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r1, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/mnt\x00')
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r2=>0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0}])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x3}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
timer_delete(0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r6, 0x1, 0x37, 0x0, &(0x7f0000000140))

47.686705578s ago: executing program 6 (id=411):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
times(0x0)

47.409964034s ago: executing program 6 (id=421):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x19)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
shutdown(r3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r7 = open(&(0x7f0000000140)='.\x00', 0x129100, 0x112)
openat$cgroup_ro(r7, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x9d9342, 0x1e6)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)
syz_clone(0x800000, &(0x7f0000000200)="8c3cbbfc932a4ed53d728e61d3d4be2fa74af471002208e79428847a0017410e2c9b2edaaaffb67dbbcd3f30de8ee5a7d598e760b4e1f0f58b47521e6801a86b4d06b9f3f095930c1c3895297f09aeccc2414c4607f1db95f352200172b8", 0x5e, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)="e80058a711403a734ccc8daf009fdedecd07352e361d26a7ede269aa24ec19a7850a562fadcd38e368b11a0cd2192e37f1abdd578a03daef")

46.901208504s ago: executing program 6 (id=426):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8800)

46.385609714s ago: executing program 6 (id=440):
mount$tmpfs(0x300, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73697a653def"])

46.385478844s ago: executing program 34 (id=440):
mount$tmpfs(0x300, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73697a653def"])

35.200900596s ago: executing program 3 (id=637):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

35.152849029s ago: executing program 3 (id=638):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
shutdown(r1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

34.248965622s ago: executing program 3 (id=668):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000004c0)='m', 0x1}], 0x1}, 0x41)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x2)
fchdir(r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, 0x0)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x21)
r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xd0, 0xd0, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x2, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, r13, {0xfff1, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

33.868687694s ago: executing program 3 (id=676):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000edffffffff070001"], 0x24}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0)
lseek(r5, 0x104, 0x2)
getdents64(r5, 0xfffffffffffffffe, 0x29)
fcntl$setpipe(r2, 0x407, 0x7000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b)

33.388422252s ago: executing program 3 (id=687):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@debug}, {@norecovery}, {@mblk_io_submit}, {@quota}, {@nobarrier}, {@grpquota}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@dioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000800)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe94, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
lseek(r1, 0x5e8, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x10b, 0x0, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xd, 0x8, 0xfffffffc, 0xfffffffe}, 0x2}}, @TCA_IFE_METALST={0x1}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x894}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8000094)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@debug}, {@norecovery}, {@mblk_io_submit}, {@quota}, {@nobarrier}, {@grpquota}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@dioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000800)="$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") (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe94, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x80) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async)
lseek(r1, 0x5e8, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x10b, 0x0, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xd, 0x8, 0xfffffffc, 0xfffffffe}, 0x2}}, @TCA_IFE_METALST={0x1}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x894}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8000094) (async)

33.158185635s ago: executing program 3 (id=692):
r0 = socket(0x10, 0x3, 0x2)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000280))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local})
recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20)
pread64(r5, &(0x7f0000002200)=""/89, 0x59, 0x10000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110)
r8 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r8, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

33.143392576s ago: executing program 35 (id=692):
r0 = socket(0x10, 0x3, 0x2)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000280))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local})
recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20)
pread64(r5, &(0x7f0000002200)=""/89, 0x59, 0x10000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110)
r8 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r8, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

21.056030092s ago: executing program 1 (id=890):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r0, 0x0, 0x0)
syz_socket_connect_nvme_tcp()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005)

21.055844742s ago: executing program 1 (id=891):
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r1 = syz_socket_connect_nvme_tcp()
close(r1)

20.700484542s ago: executing program 1 (id=902):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r0, 0x0, 0x0)
syz_socket_connect_nvme_tcp()
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005)

20.56363184s ago: executing program 1 (id=909):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=@allocspi={0x10c, 0x16, 0x401, 0x70bd2d, 0x0, {{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0x6, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x1ffffffe, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x16}, {0x4, 0x7, 0x8, 0x6, 0x8}, {0x2, 0x0, 0x0, 0x4}, {0xeb, 0x1000001, 0x1}, 0xbffffffe, 0x0, 0x0, 0x1}, 0x8, 0x8e}, [@coaddr={0x14, 0xe, @in6=@mcast2}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r5 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000440)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x100)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
pread64(r7, &(0x7f0000000180)=""/183, 0xb7, 0x7f)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="bde957d4739eec84dd4b6ae8d8bce4551e0c51741a5a9e71fd5dff3d06e4a2d4a2be31976a304f88ee1e6931f903046eea05a74f79eb845304d15d922970f13412cd28464f51c0dfa6f245b74e23e569c43ad7773ebfe3bc9f4403c738d4459a5e71f3bc662941481a7a6e48da799a5a6a99b74c111487f3fb81f6e6b610612620bf6091a79e2dc7d91653096520d0e87bfd75d038a7fcdc62ad94227721f8a735389fadad1b77050ea870efc5eee94a17521a178412e75b539f57811f36338dc236123e46f9bdedabcd3ab97b690d7b6c17648f", 0xd4}, {&(0x7f0000000480)}, {&(0x7f00000008c0)="db3abb1790017d7df27529f76467cb38019493b0f1529489472eb11e0689261b453e1aa13e362f2925a194268cd522b627956c774121d9e5ecaa29871c2c0fd0ef3e8ba110798b6365d907f8254d8b52580d3b23ee6c95cb9e48e3c0aed2f7f57c9337d453c6959f35a70dd73580aff4423f599b473ca449fb023da19cfb398be7dff02747bcfc14116b69e4d076fc927cab5a1843f16e116fee3c41740fa3b448bdcbe8618dc8e462edd76a58d81e5603521f7a685374c1da7dbc463885b4e2fd20f63025da0fe3e61265fd37633cf6bb44bdd11da081a1e3d0d989b3a88ae7927c89135f543ded289e7d418b6220c1b79e3135eea6710162cff0742666511b92261eefa5add06be3ebee718af3df77efd04d9f1771b98bc38660e9911521dc66b5d996529f58f6eba7b377b218d7a4465e293e19c07d3cb75ab917ada780ae31b75c9f9e6727dadabd3abcc9eb6fd37aae2c6430b0e2cc8c314595130e23967d049b3a26836618d66a7b98eaf2cc5cc4367f366b2461fd3ea602872c0fece36cc2ee576f0426fc1d6ea12a267a47a473bf9cd47c65c84d892cc50755ced3fbd0828ffdede5b09fa9d91e8bca622d0de642c1d0564c927033dcd95bbe5caa7be92cc311af7a209c0829ce7d25df78fa994b43dc9aea14e75b25d148b9d7a740bdf318026b7b12755e49fa1bd2ce22f9306df5246ecaedf43a3ab2053586e316a76eaf925c0f66d192096d1d3c007da524f746efd721ab463c1c93ea4deca0749a66f145474da9583971a2d8efa0bd92cb2ba3c2e16af2720e70b99ad206b82f2666955dcbdcf78f7bfd5477055875ba67ad206a1a0b7f8b696501d56b860b4a0d35c6bc65ae2dd542b629aafcde47242a10b48c8dba0cae4688898221100e129adfd8be6d9b4d879ed2cc8f5d4ec51379d9392f7949e913a647f6be56364b36e2fe61ac4e08c82d269025eb55e1212c090ca57e6982b14ee88c99cd5ec158a9a11d161597ecebc71741b30fdb6e51ecbb42c80a4e53c31b9f46cb6b785f6a5fda8a738b9996fe2652c409a2bfb56a23eb180c5cf4da8d81639a8b6e2a75836bb7fc5656b137ae50e211a40ade54dde769c6e917e5d1d1404e4f50a5a3f0e37ac61b286cc9e7049159a119ca4d8ae25bb857370fe6c8ef8c2812fb56807a87500e553f02171e571b118cb244fdf2c770ce579c83033cdd5a5f6b727ade577307e0859cc518eb77627658d68bc84bfefa1a5ad5dd2e1f39f05ca2a0babf1ebaadd904a7072ce5b0f855f9ff3b9bf9b55470c41df17fead805e158ea7a37ddfdf7cad678d897a023c3d0e004c0aac609c5e50f62915c31d4555f6c2539fa78779e31a446cc01d09b87b9642484c02a1e1ce020548239f8ea296e1ac8e01fc852bdaea99a370e744fe18a4170f2e6c003dd1f765ff0f062e4875318cc5f7193b13ba67b16fa42a57a365b822555d0588269ad79ccaca243a7e12cbc6c636788cfc6142cd89892066dd96a1dcc76851beb7dc609f7c356ddce60b72aead3a2f5caa04fd15aa38af83d4dd5232ecd24a374b7be0479aecc04139255c391e8cbe1096fdf7de9f892690e7063cc88ae7b5cfd98ff277474e6c331b37f0942247868bf98600ca01c2bd7787261ff7b8f5a7db086d97dc788711e58be690e94d1425328dbbb0521e9ce767a540235d0f0d2ac9864a4eb4092e3172b8c28d2b67046b51017fbabcbc8408906160c88172218419da2aee630d3870d7ee11042e74595ce3cb9fcb9dfc11e868089fc3baa252fe4dbcc96e8d91381f888f62981ffc72831f6e6dc8022adf8b9900b187804214092bfbb474cf9807df3f463c2f44f831728022486c38e64998e0bbf23e0cc48d1b8748b09dc3726eb56220d1f358945d5ef7bc5073995915a55032124c0cda9890c19b6b95c2d4f7d187aa0e860915942a70e2cb3145b2be57b55f5a3facd703ca8c87336c895cfc963aa5dbfb4722b9f5ed6c3b327933e5beb548a5598d490ae5ac477f0981c86e51a64a1855c55fc0ae2cebfdb197fdea7c9396a4a1b5392c40ac4f63257892526abd0d9bf75b0af4746b478ea41b1587d5b7aa2e4ff5e7ebb45af2b71d089f9e8797a63b9ac43d641d3ef77a656ed5db93706d4db0f7e833e4a23ad7e1aab5eacf68b61e2e7b5e1032cdba6a20fc071b3a4bc58d62d41aa8d32f6dbf53f127fdfcc0fef783eb2fe9ab830f15f8d18fb50187badc7e77910ae3645e344db46c75c84b779d9ebc0eb1023762334a314469a3b38ac4f90276f05d8cd9a3c662985f33edc5739f11f3e3c3b47bf32cf5670f4f74ed5220eb662b1c510bba580c0fd6e8d5d81b2105d34f80b6fdca00e6028d5373d147a8c2af7478adb9ccdabeaea1b2a4b0cb5406b768679fa13484b3ba77f226739c4b4297aa07e998cc355c74ce3ba5b8f2ddc031f73ce79a3741c4f1b8f341b34a648232b0b45deb3a05fb5971caf0ef9ac2723d6e77add103811ecb4d160ecdc62353c9d54f159c9f46ede5f7b12f66fe36fe1c0d76726deb3a00379d4274a8e97b2d7878e9b917f91e3a1a488de31e42a8d9d885f9e49f187c0085209e5e31b788f60ca40375bdfd790619f09cff98cf0af2d0edfebef429c239d644edd0db3b48311f0cfebef0c0b0eb7953e2231612e4e5750a1fcbfaa1b5e14213f8349f4cf3d1260d1fcf68f0c2b4fd364e95a11ca7292cd8ab4e9977f33e45a8c7a4c80627e582fed6d9779b8d7344c7ef7455d4903d2ffe7c250e3d6623c443f1f4b70cc83e9f5839f30b36f769ab9bff9c34f9a550d6c21aeaa4da01e80adc738b0ff89fa4c3fc73b42af6b09eb197f3991dbe81874c28ae10892db339d1083713a649180b8d130abf2cda85498d2ce35017238b731468022b134e2734c8529b57c418a3602a6cb9b5d59353cc52924a5000a0448611fcd42147cc1433c1fff028115e3890b58cd0fcabbc210baf0cc83499dc7bb66a19d2fae0236c5ed1ad70fa3d49b6f326c5902996e5c47824a5ada3eef9a6a65141dab92921bcc806a3afa7b088e6ff8e48298d8b4e92ddef3ee4e73c232813bac1902ed551c2427a0ebe09622f943834003d0972e73c5fb41de43f4266b236a69536390cb1ccd1ecf87b6a494ed7173d7d8b55d8c4affe830831b768461ecc22630ca5f6283c5e78fb10ecfe65e51b7bf32326a50ce611cef3b24ba6210e72f454b3717e2becc31c051bd4e0c681310bb4d657ed63dc61db93acf7df0a4fdf73e4b2bbe3a19e4fb18f4366fc5266231d1c419ae7589aac02f408544a91e8e567575443ed1768558555e40d9a65328746d64acf6b4db76db59cf0efb2d3d065ff3d3ab1f02cdafc48c50b85fabd20359ba93f6f9a2701425682cce7e86447d3009d380e14c0e60c05671a569d6a272f1f3b0ae2b2476bd7108496bdfa6952bf85883cb8a5f75f180e7d9d169ec51934c7ce475e2c5e57dc43170e56c87d12652622cf312345210294a1eecf7a9a97d13395542709cdad4625df2b917d2e344c114d4985f78eb5e2128b3cd1046c2744d932326596b8ed3994c780c209959f01e42731ccaea83b3bba86988a51ce069161db2e2b0d0baf219b0b8961a980f3a13f87e9d4954397a0b5dd9853f49748df27ade7bdf2eb1b39ebb12b8860a1b34cf53806f674f9309588867f084cda46bce1eb1b7f4aadb619fd88ff01cc2bfc7ebfe4e6c3ed1e879875eca09728dadf5d8909fc579c857658193c1522b98630449d9dc452bdb16bc9a4e1ea81009bd4623fba430da1789d389e5fb71b06d1e0491bf35c52aec67b3dd710bca80c32fa184c6674d864c7030e14c6a226f31a8b735e9ac9377188ad3989b4013b908f70492ab65c5616f7cd45a84245ddc91130e9230e5e7d58c685a3f9d586dc1a642dc2943acac4c48a6c9520f76278f43c8fe216695107b7690b574852c0f2f19dddc3022120a4b3daf7ff59aec5dae113f4ad2698043aecd9ed8c1a0665c2a08098312ecaddc2a935421aa8e794f0aa13636b422453edd62f499434fc9e19fe45bd3f30286ebbf36b0b0f993ad215295b4d4b01955c899b2760d22f095ddfc84d6cf833864cd437c970633c22d47fa168aa43423bb5e0092ad537e76ca311852fa95d60ef38bbab586d7ecdad362512e9813bb9840e302509ce229e826d51803959271f56c2c790663420cac7f07f7beca8f945771875054fb35bc3205c9ce41350272c9dfa536e72caf3cc46abf9afe85280d652c46126fcf3d2bcb2a8e347e03040242df100b4c4ad9638808371456d13b34ac0f360cc13927b02be1e013e1d6147a05db77d561f454e6e46a999700402f3e5d16253f9d4ed9c91486e307588e528427acf1df89a10135b3597d2f0e4ccb97e6840c5415f176495e5c8996cd1583cad7499ea96b358de5bc5bea7bf9d47a15661e50d543e96c59621b523e33fecbf163fc069954a590bdda87b0750cbee9c701d6ad227cf6a3630c486d916ea47d1f129f9a8cb1464b0f902f503b3386cae9577d5bda4ebfde5f53ca582ff69966316c4f358dddb13cbab8d84298d7ca8091c062aafd6280eaa0d6b6f294a5b4a31f331ceb50a7b97dc87e84316132467edc4f0e0a814da4c6fe5a6d7ac95744a923b296065d9c435822273ddafc538294c437070afd73ff274a6f5389fb43f756019cfa96837cf11b731a4e5011bb980cfd2698539060348cf027f824a18f05d3dba4237894bb72a85eee7263741a6620836a0f827d47e4e09e8d211b2472ea760e4493d055fbde4485c085ebcd5ecb36e960e8c5153a21aa1211cb8b0459d5059d2871698d84c2df0745c0c9637d7dd03472a6abd3382c66302337b2b87f8fd1d675dd0040769ea131dc5c520ec7a559a064507cfd804b899bd972ce35960779cc6f423c918bffb8710c751cede4ca4a7f8735e9e804ebd32c5095d5c66ea74eb9f58da5279568b3acce1eb0081f4ae8c6da911c7dfefb38f392af9d835cc81c8dcfdac9bf072490a1d1bcbea9616b004164959856fa7e6d4149fd56dd92e5f48a3064811160b50cd4ca764b47c6d28cad73244aea7fb1ae4d79e41d9246bd0bd5ddcccf3abc0f70505ae7922227b7123807ea35e863f89d74887da6e1781f6863637a1bcec7214869a6c53571f5ad1f231e7b9f928f228e7067a099cca473463bc5d8be26098f088e7daa638b44891463b34eb007dc5e8cf38e29c721f2d002f8e16385347539621a8aa167c0054a27b75a82321532ece7008d66f320244b6f30e903fae8330e3045f7c3edc70a111de0eac0177f7bf7581a8d5fb34febafbbad7c8dcf3d8d94a8aeb4000be285586f5090a2af211e39cbc0f43caf1fad9d69fb66741ecec3490ac822e3ebd10926b2730a2bb5187ee583e46b2aecb542c79d6d91992276073638251a8b952da81376b4ecdb62e3924a56e28abc0bf1fb69f1c0ca5f75f2a4fc7a2cd2aa4650d8c5995ae4e84d1cdf830dcabdd5b0ea67d0dbc4cf0d47d22cbc1ac4b26379f9640de3a06b6e788ecdef6cb7bd2fc079694cafbb1db4fe1c84aa96a9beb8b25565b0706cd418681e5b967f2f86a14cf2911764b8862be36b7984bc7b65f19ee28812546d0763e0cd1856d7ef3ba5c5d9aa7b596b4b2bd72ef47672a886793352eb5a34cf19ae18350add20411182c7479d0fae4651544e9c425afe9edb57c231cdbce42d542761076af4c5cce666b88b72562ee42e90e326bfbf6aa81d474b77c4063dce4be2729e194de4e33af11882d883f322b647bc40173757905a8818d17f8d4724a37b822661", 0x1000}, {&(0x7f0000000580)="baf05204d5f7cc6c419102f84c46f724013bc52b3be330cc52e7dc73eddcef0ddc6f2da219f5536934aea855407024df877c7e125668123f5a6864425099fe64c208410bdf59971404ec7fd843dac3372e0977874cf6f923e0679e7dce32f80f8edc4af91371864e39a453242dcce7da1619c473a9a3506ca2bc13466316f945f80cd21601f176b7e8", 0x89}], 0x4, &(0x7f0000000640)="60c07db57117bb87c99f77e7eabe675083e6da491f46d7c53196faa7d7d522c4126b9dec750d0cd0b1736294025b2afacf4d8cc7a379b401d0b4c590da5bd640cc0e506e4d26bdd6990e896660a61612a7bff80f10676fc2333727d146cba5ad4993dba728b92293f564dde2cdc738377051e5ef0ed704803b3bc3b273b80fbb0a891789c6d2d85c45475c0ff1b320311806eb61b15a73c9a5de964171b5a0bdf8a512f0c74037c9cb695e94eac6273ac454900a7332c1d9f3d5a4d97cde6b7889be18ef5736ea1e560d84f066d011229abc4df33afa72f03db7c482565a4379485ecab9d42d23beadcb6b3686c033", 0xef, 0x8000002}, 0x20044000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01e723000000ffdbdf251500000024001d81"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000801)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

20.211086831s ago: executing program 1 (id=913):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x2, 0x23f}}}}}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})

19.794611815s ago: executing program 1 (id=917):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

19.776581086s ago: executing program 36 (id=917):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

2.515222593s ago: executing program 8 (id=1215):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0xa772da54, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)="d385135eda88eaf485271de2aa6777327c759eefbe01065fe38a04f994484e2c98e40efd1472cf850b", 0x29, r0}, 0x68)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
modify_ldt$write(0x1, &(0x7f00000000c0), 0x10)

2.277323897s ago: executing program 8 (id=1218):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x7, 0x0, 0x0, 0x5, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x36, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xd3, 0xa0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=@allocspi={0x10c, 0x16, 0x401, 0x70bd2d, 0x0, {{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0x6, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x1ffffffe, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x16}, {0x4, 0x7, 0x8, 0x6, 0x8}, {0x2, 0x0, 0x0, 0x4}, {0xeb, 0x1000001, 0x1}, 0xbffffffe, 0x3, 0x0, 0x1, 0x0, 0x5}, 0x8, 0x8e}, [@coaddr={0x14, 0xe, @in6=@mcast2}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

2.268307417s ago: executing program 8 (id=1219):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x380c8c0, &(0x7f0000000040)={[{@abort}, {@noauto_da_alloc}, {@noacl}]}, 0x0, 0x5f6, &(0x7f0000001440)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x400)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000000f7000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002c0012800e00010069703665727370616e00000018000280060002001000000008000d00cf00000004001200"], 0x4c}}, 0x0)

2.266604467s ago: executing program 7 (id=1220):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5}, 0x38)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000012c0)={'ip_vti0\x00', <r3=>0x0, 0x10, 0x7808, 0x6, 0x0, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x66, 0x0, 0x7f, 0x29, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x7, 0xe8, [@remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0xa1, [@multicast1, @local, @empty]}, @timestamp={0x44, 0x10, 0x50, 0x0, 0x5, [0x6, 0x9, 0x2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001340)={'wg2\x00', <r4=>0x0})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001380)={<r5=>0x0, @multicast2, @broadcast}, &(0x7f00000013c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001400)={'vcan0\x00', <r6=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r1, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000001500)=[{}], 0x8, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0xa, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000001cc0)=@newchain={0xf14, 0x64, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xb, 0x3}, {0x5, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x5a547dfc}, @TCA_CHAIN={0x8, 0xb, 0x4a1c}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @filter_kind_options=@f_fw={{0x7}, {0xd8, 0x2, [@TCA_FW_ACT={0x88, 0x4, [@m_csum={0x84, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5ef, 0x3, 0x4, 0x0, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2b2, 0x9, 0x20000000, 0x3, 0xfffffff9}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x1, 0x2, 0x1000, 0x5}, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe6, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0xddc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_POLICE={0x8a0, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3c}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd72c}, @TCA_POLICE_RATE={0x404, 0x2, [0xb0, 0x80200, 0x3ff, 0x100, 0x5, 0x5, 0x5, 0x8001, 0x80000000, 0x1, 0x7, 0xffffffff, 0x200, 0x7, 0x3, 0x9, 0x395, 0x8, 0x7, 0x4, 0x8, 0x27, 0x7fffffff, 0xfffffff6, 0x9, 0x8, 0x2, 0xfffffffd, 0x6, 0x312, 0xe5, 0x5, 0x7, 0x7, 0x0, 0xfffffffb, 0x5, 0x5, 0x2, 0x1, 0x9b, 0x2, 0x1, 0x4, 0x1, 0xd, 0xeee, 0x6, 0x871e, 0x6, 0x10000, 0x2, 0x9a5, 0xecf5, 0x256e, 0xfffffffe, 0xb, 0x2, 0x1, 0x1, 0x4, 0x0, 0xe6e, 0x78bb, 0x7, 0x3, 0x1, 0x6, 0x0, 0x50, 0x4, 0x2, 0x100, 0xcb, 0x0, 0x6302f42b, 0x6, 0x6, 0x5, 0x84, 0x0, 0xfffffff8, 0xb, 0x7, 0x856a, 0xd5, 0x0, 0x4, 0x3ff, 0x1, 0x9, 0x8, 0x4, 0x5, 0x10, 0x987, 0x9, 0x8, 0xd88, 0xff, 0x4, 0x8, 0x0, 0x3, 0x8, 0x0, 0xd85, 0x6, 0x3ff, 0x7, 0x500, 0x9, 0x4, 0x7, 0x5, 0x5000000, 0x2, 0xc1, 0x7, 0x7, 0x4, 0x892a, 0x1, 0xfff, 0xe, 0x4, 0xbbd, 0x9, 0x9, 0x5, 0x6, 0x87d9, 0x7fff, 0x2, 0x5, 0x3, 0xfffffff9, 0x81, 0xbc, 0x3e7, 0x6, 0x1, 0x24, 0x40000, 0x8000, 0x800, 0x0, 0x0, 0x100, 0x7, 0x8, 0x28, 0xfb1, 0x2e32, 0x0, 0x1, 0x7ff, 0xffff, 0xfffffffa, 0x3, 0x1ffc00, 0x7, 0x7, 0x4, 0x8001, 0x1f43, 0x466, 0x9, 0x38, 0x4eaa, 0xb, 0x1, 0x6, 0x80000001, 0x3ff, 0xe647, 0xd, 0xfcf, 0x3, 0x4, 0x5, 0x9, 0x9, 0x0, 0x4, 0x0, 0xf336, 0x80000001, 0x8, 0xfffffff8, 0x800, 0x1, 0x8, 0xfffffffa, 0x8, 0x4, 0x7, 0x7fffffff, 0x1, 0xffffff65, 0xc04, 0x2, 0xf, 0x1ea, 0xbba, 0x800, 0x1, 0x8, 0x8, 0x3, 0x8, 0x7fff, 0x10, 0x8000, 0x8, 0x4, 0x2, 0xfffffffb, 0x3, 0x7fffffff, 0x8000, 0x2, 0x8, 0x2, 0x3, 0x80, 0x7, 0x900, 0x9, 0x2, 0x400, 0x1, 0x3, 0x8, 0xe3, 0xff, 0x7, 0x10c, 0x1, 0x1000, 0x5, 0xc5, 0x7, 0xe, 0x2, 0x10, 0xe, 0x10, 0x9, 0x3, 0x1ff, 0x6, 0xf47, 0x1, 0x5, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x1, 0x3, 0x5, {0x4, 0x1, 0x5, 0x7ff, 0x9, 0x7}, {0xa, 0x2, 0x800, 0x1, 0xc}, 0x5, 0x7, 0x3fc0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0xc, 0x6, 0x9, 0x6, {0x1, 0x2, 0x8, 0xb99b, 0x2, 0x81}, {0x9, 0x0, 0x6, 0x40, 0x9, 0xfffffff7}, 0x1, 0x6, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc000, 0x8, 0x3, 0x401, 0xfff, 0xc2b7, 0x77, 0x81, 0x2, 0xe2, 0x8, 0x6, 0x8, 0x0, 0x6, 0xfffffff3, 0xff, 0x81, 0x7, 0x7, 0x4, 0x8, 0xf, 0x8001, 0x8, 0xc4, 0x8, 0x400, 0x2, 0x0, 0x2, 0x3, 0x1, 0x96, 0x7, 0xb, 0x15c, 0xe, 0x6745, 0x8, 0x6, 0x8, 0x91, 0x1, 0x3ff, 0x6, 0x9, 0xfffffff9, 0xcc, 0x1, 0xffffffff, 0x8f, 0xfffffffb, 0x4ff, 0x5, 0x4, 0x9, 0x1, 0x3fefcf20, 0x7, 0x1, 0x384, 0x9, 0x6, 0x7, 0xfffffff7, 0x10, 0x101, 0x21, 0xcf, 0xf52, 0x5, 0x401, 0x1, 0x0, 0x7ff, 0x3, 0x0, 0xe53, 0x5c9d, 0x7, 0x3, 0x7, 0x5826, 0x0, 0x0, 0x3, 0x0, 0xf, 0x2, 0xb, 0x6, 0xfc, 0x0, 0xc, 0x97, 0x5, 0x4, 0x8, 0x1, 0x2, 0x955, 0x0, 0x3, 0x9, 0x7ff, 0x8000, 0x3, 0xc373, 0x0, 0xc00000, 0x4, 0x101, 0x0, 0x200, 0x3, 0x9, 0x6000, 0x4, 0x3, 0x1ff, 0x1, 0x6, 0x7ff, 0xc9, 0x42, 0x9, 0xb, 0x6, 0x8, 0x919, 0x2, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x0, 0x6, 0x5, 0xe, 0xb73, 0x7, 0x2, 0xc9a, 0x8, 0xfffffe77, 0xfffffbff, 0xfffffffa, 0x1, 0x3097, 0x8, 0xda, 0xffff, 0x7, 0x9, 0x4df, 0x7, 0x7, 0x6, 0x0, 0xfff, 0x0, 0x8, 0xe24b, 0x2, 0xff, 0x2, 0x523b, 0x1, 0x2, 0x4, 0x5, 0x6, 0xf0, 0x6, 0x1ff, 0xa000, 0x0, 0x4, 0x9, 0x6321, 0x401, 0x7fff, 0x10, 0x498c, 0x7, 0x7, 0x38, 0x8, 0xd4b, 0x0, 0x7, 0x0, 0x2, 0x0, 0x800, 0x7ff, 0x5, 0x1, 0x2, 0x4, 0x7fffffff, 0xab, 0x3, 0x4, 0x5, 0x8, 0xffffffff, 0x3, 0x5, 0x10001, 0x4, 0x40, 0x80000000, 0xff, 0xd, 0x6, 0x10, 0x6, 0xdc6, 0x4, 0x74, 0x100, 0x5, 0xfffffff8, 0x4, 0x7, 0x1, 0x3, 0x2, 0x10001, 0x0, 0xffffffe3, 0x4, 0x45c, 0x5, 0x4, 0x8, 0x9, 0x376, 0xff, 0x4, 0x400080, 0x9, 0xb, 0x4, 0xfffffffd, 0x4, 0x4, 0xf, 0x3, 0x6, 0x7, 0x5, 0x9]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x7ffd}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8a}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0xdb, 0x400, 0xf, 0x101, 0xfffffff8, 0xffff2c1f, 0x9, 0x9, 0x7f, 0x9, 0x5, 0xd2, 0x6, 0xfffff000, 0x10, 0x2, 0x5, 0x91df, 0x1, 0x3, 0x1, 0x8, 0x3, 0x8, 0x0, 0x4, 0x6, 0x8, 0x3, 0x7, 0x2, 0x7, 0x7fffffff, 0xcb, 0x1ff, 0x8000, 0xffff, 0x51, 0x2, 0x0, 0x3ff, 0xf4a, 0x3b, 0x17f, 0x3, 0x3, 0xfffffffb, 0x8, 0x19, 0x5, 0xfffffff6, 0x7, 0x445a, 0x100, 0x6, 0x10, 0x7, 0xffffffff, 0xa, 0xe3bf, 0x7, 0x4fbe56ad, 0x5, 0x5, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x3f, 0x80, 0x9, 0xf51, 0x4, 0x1, 0xce7, 0x6, 0x0, 0x0, 0x2, 0x6, 0x8, 0x1, 0x2, 0x8, 0x40, 0x3ff, 0x4, 0x7ff, 0x7, 0x34f, 0x2, 0x100, 0x2a76, 0x8, 0x4, 0x65f, 0xe, 0x9, 0x10000, 0x401, 0x7, 0x800, 0xfc2, 0x7ccf, 0xfffffff8, 0x6, 0x1, 0x5, 0xfff, 0x200, 0x801, 0x6, 0x8, 0x9, 0x6, 0x5, 0x80, 0x6, 0x6, 0x1777c, 0x8, 0x9, 0x2, 0x9, 0x7fff, 0x6, 0x80000000, 0x3, 0x4, 0x3, 0x7, 0x4, 0xe25, 0x3, 0x4, 0xfc59d34, 0x8ac6, 0x3, 0x8b, 0x81, 0x0, 0x2, 0x800, 0x6, 0xffffff45, 0x81, 0xfff, 0x63f0, 0xe52, 0x9, 0x1c7c9b5c, 0x7, 0x7, 0x349, 0xfffffbff, 0x9, 0xfff, 0x9, 0x67a4, 0x7, 0x0, 0x10001, 0x3ff, 0x1, 0x3, 0x48d, 0x3, 0x8, 0x10001, 0x9bc, 0x1, 0x8000, 0x6a3b, 0x7, 0xffff, 0x0, 0x1, 0x0, 0xf25, 0x75, 0x9, 0x8, 0x8, 0x5, 0x7, 0xffffff21, 0x7, 0x7, 0x3, 0x1, 0x2, 0x6, 0x4, 0x6, 0x5, 0x4, 0xaf67, 0x0, 0x9, 0x1, 0x8, 0xe, 0x101, 0x4, 0x9, 0xfffffff7, 0x3, 0x7, 0xffffffef, 0x5, 0x101, 0x9, 0x4, 0xfffffffa, 0x691, 0x1ff, 0x6, 0xfffffffb, 0x1, 0xbf7, 0x0, 0xa3e, 0x0, 0xfffffffe, 0x1, 0x2, 0x3, 0x5b8dda9d, 0xfffffffa, 0x8452, 0x10, 0x9, 0xfffffff8, 0xc000000, 0xd02, 0x9, 0x6, 0x10, 0xe, 0x3, 0x2, 0x5, 0x5, 0x80000000, 0x100, 0xd, 0x10000, 0xe, 0x5f2f, 0x2, 0x4, 0x3, 0x4]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_ROUTE4_ACT={0xfc, 0x6, [@m_mirred={0xf8, 0x6, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x2, 0x2, 0x7f}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x4, 0x4, 0x6}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xc15, 0xffffffffffffffff, 0x1ff}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x10000000, 0x0, 0x6}, 0x4}}]}, {0x4c, 0x6, "1232a601df2e5e6f00f0b6b5fd426137f67e1e3f9cf4823956a8ee36d86e5dc8ecb0e6c8f5327e05471f99428109167622e1e8d1eb8b2edb90002249c96487f2d14acfbd8720d990"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0xf14}, 0x1, 0x0, 0x0, 0x4004011}, 0x24000002)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)

2.05288874s ago: executing program 9 (id=1221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40000024, 0x800000000004, @tid=r1}, 0x0)
timer_create(0x1, &(0x7f0000000000)={0x0, 0xa, 0x0, @tid=r1}, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b400000000009000100", @ANYRES16=r0], 0xc4}}, 0x0)

2.005733233s ago: executing program 7 (id=1223):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {}, {0x9, 0x5, 0x83, 0x3, 0x60}}}}}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})

1.951308746s ago: executing program 9 (id=1224):
set_robust_list(&(0x7f0000000140)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="00e3ffffffffffffff1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

1.829356444s ago: executing program 8 (id=1225):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (fail_nth: 11)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})

1.773313146s ago: executing program 9 (id=1227):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.181282541s ago: executing program 4 (id=1228):
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x28, 0x1, 0x0, 0xff, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={&(0x7f00000007c0), 0x4}, 0xa822, 0x4, 0x3b, 0x3, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000001180)=ANY=[@ANYBLOB='overriderockperm,iocharset=macturkish,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c3d7265a4f26c617865642c7362736563746f723d3078303030303030303030303030303030322c00"], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==")
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$kcm(0x21, 0x2, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f')
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18001ce6000000001001000001000000dc00000000000300"], 0x18}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x8000, 0x7, 0xe7ac, 0x8, 0x1, 0x7, 0x7, 0x4, 0xff, 0x8d3c, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9c, 0x6, 0x80, 0x7, 0x3, 0x6, 0x1000, 0x8, 0x80000000, 0x100, 0x8, 0x7, 0x8cc, 0xe3ad, 0x7, 0x7, 0x1b, 0x7f, 0x0, 0x2, 0x16, 0x8372, 0x4004, 0x7, 0x9, 0x8, 0x7fffffff, 0x3, 0xc64, 0x4, 0x3, 0x7fff, 0x2f, 0xe, 0x7480, 0x7, 0x1, 0x2, 0x5, 0x1a700000, 0x2, 0x3ff, 0x5, 0x40, 0x401, 0x7, 0x1, 0x2, 0x0, 0x0, 0x5, 0x2, 0x5, 0x5a90, 0xfffffffb, 0x400, 0x8, 0x8000, 0x3, 0x80000000, 0xe93, 0x200, 0xfffffff9, 0x7, 0x6, 0x7, 0x9, 0xb0, 0x3f1, 0x0, 0x7, 0x8, 0xfffffff3, 0x8, 0x40, 0xfffffff6, 0x4, 0xfffffffa, 0xffffff0c, 0xffd, 0xb1, 0xfff, 0xffff8001, 0xffffffc0, 0x5, 0x8001, 0x3, 0x340, 0x9, 0x6, 0x7, 0x7, 0x3ff, 0xfffffeff, 0x3, 0x4, 0x9, 0xfffffffd, 0x5, 0x0, 0x1, 0xfffffffe, 0xff, 0x200, 0x4, 0x20000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8001, 0x2, 0x6, 0xc59, 0xffff, 0x8, 0x1, 0x40, 0x2, 0xffffffff, 0xffff8000, 0x4, 0x69b, 0xfffffffa, 0x2, 0x63f4, 0xb534, 0x89a, 0x9, 0x7fff, 0x600, 0x4, 0x9, 0x4000, 0xfffffff8, 0x4, 0x0, 0x101, 0x0, 0x9, 0x0, 0x20000, 0x7fffffff, 0xd, 0xfffffffb, 0x40, 0x6, 0x3ff, 0x4, 0x4c08, 0x1, 0x80, 0x1000, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x10000, 0x7fff, 0x1d3c, 0x0, 0x2ee3, 0x9a, 0x8, 0x10000, 0xf3a5, 0x0, 0x2, 0x2, 0x2, 0x80000000, 0x4, 0x0, 0xffffffff, 0x100, 0x8, 0x3, 0x6, 0xfffffffd, 0x3, 0xd, 0x5, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7fff, 0x5, 0x77a6, 0x0, 0x7, 0x400, 0x10000, 0x7f, 0xfffffffc, 0x0, 0x6, 0x5, 0x4, 0x6, 0x47, 0xaa, 0xe, 0x8, 0x7ff, 0x800, 0x7, 0x1893, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x0, 0x10, 0x40, 0x1, 0x8001, 0x9b6f, 0x2, 0x2f, 0x61, 0x8, 0x5, 0x8001, 0x401, 0x4, 0x31268a4e, 0x7fffffff, 0x0, 0x4, 0x2, 0x8, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x60e9, 0x8, 0xa, 0xf3a, 0x0, {0xb, 0x0, 0x1, 0x7, 0x9dcf, 0x1}, {0x6, 0x0, 0xe, 0xfffd, 0x9, 0x2}, 0x7fffffff, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x67, 0x9, 0x8, 0x3ff, 0x10, 0x840, 0x7fff, 0x68, 0x1, 0x2, 0xdb3, 0x5, 0x40, 0x6, 0x400, 0xd, 0x2537, 0x4, 0x4, 0x8, 0x100, 0x5, 0x8, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xb, 0x3, 0x0, 0x400, 0x2, 0x10001, 0x7ff, 0xfffffffe, 0xffff8930, 0x2, 0x5, 0xffffffff, 0x8, 0x7, 0xa4, 0x401, 0x2, 0x100, 0x5, 0x3, 0x10000, 0x5, 0x0, 0x2, 0xa, 0x1, 0x8001, 0x4, 0x7, 0x8001, 0xc, 0x8, 0x10001, 0xa63, 0x3, 0x6, 0x4, 0x80, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x7, 0x9, 0x9, 0xd7dd, 0xe2b, 0xe9ee, 0xfffffffd, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x62, 0xa9, 0x20000, 0x0, 0x80, 0xd1c, 0xfffffff8, 0x10, 0x53e, 0xb2, 0x4, 0x8e, 0xd, 0x5, 0x1, 0x101, 0x8, 0x3, 0xfffffe00, 0x3ff, 0xffffffff, 0x8, 0x1, 0x10, 0x3, 0xfff, 0x5, 0x6, 0xfffffff7, 0xa, 0x0, 0x10001, 0x81, 0xa, 0x9f6, 0x1ff, 0x0, 0x10, 0x40, 0x8, 0x7, 0x8, 0x800, 0x8, 0x10001, 0x4, 0x7, 0x3, 0x5, 0x80, 0x2, 0x0, 0x7, 0x800, 0x81, 0x80000000, 0xa, 0xec32, 0x1, 0x0, 0x4f, 0x2, 0x6d, 0x200, 0xd4b0, 0x9, 0x0, 0x2, 0x5, 0x9, 0x6, 0x1, 0x5, 0x7ff, 0x9, 0xfffffffb, 0x8, 0x1, 0xc, 0x1, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x4aec5ca0, 0x0, 0x2, 0x5, 0x26e8, 0x6, 0xffff, 0x3, 0x2800, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x10001, 0x4, 0x67, 0x6, 0x4e, 0x0, 0xf40, 0x3, 0x10001, 0xffffffff, 0x0, 0x2, 0xfffff504, 0x9, 0xfffffff9, 0x7ff, 0x2, 0x80, 0x80000001, 0x7, 0x200, 0x7, 0x5, 0x4, 0x10001, 0x1ff, 0x2, 0x8, 0x191, 0x5, 0x80000000, 0x5, 0x7, 0x401, 0x1, 0x7, 0x8, 0x5, 0x7, 0x8, 0x9, 0x4, 0x3, 0x5, 0x8001, 0x3, 0x9, 0x4, 0x5, 0x1, 0x2342, 0x6cf, 0x4, 0x3, 0x6, 0x9, 0x5, 0x9, 0x3, 0xa7, 0x0, 0x6, 0x30, 0x81, 0x1, 0xfff, 0x1, 0xb, 0x200, 0x4, 0x5, 0x759, 0xd, 0x4]}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x8020000)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
mount_setattr(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, &(0x7f0000000880)={0xf, 0x8e, 0x20000}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x7, 0x7fff, 0x80, 0x2, 0x2, "307032e478220b754e7e8ff658d8dda2218ee7", 0x9, 0x46})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd73, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f088a86000000e00001100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
memfd_create(&(0x7f00000002c0)='multiq\x00', 0x890b34c7fc1ca952)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/26, 0xfffffffffffffd6d)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="59cf00000020010000000800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)

1.02743013s ago: executing program 7 (id=1229):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x30, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r0], 0x3c}}, 0x4880)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000020010000300012800b000100697036746e6c00002000028008000100"], 0x50}}, 0x20004010)

988.095222ms ago: executing program 4 (id=1230):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840)
sendto$inet(r0, &(0x7f0000000200)="0e", 0x1, 0x40801, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x1000000000000000)

948.446825ms ago: executing program 7 (id=1231):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a"], 0x38}}, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0x4, 0x0, 0x6, 0x0, 0x8, 0x4, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x58b4, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x4001, 0xb, 0x6, 0x6, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x3, r0, 0xe)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='.-/\x00')

948.079335ms ago: executing program 4 (id=1232):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@noquota}, {@noload}, {@norecovery}, {@auto_da_alloc}]}, 0xfe, 0x492, &(0x7f0000001280)="$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")
r0 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4)
preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0) (async)
getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

939.697335ms ago: executing program 5 (id=1233):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r0], 0x3c}}, 0x4880)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000020010000300012800b000100697036746e6c00002000028008000100"], 0x50}}, 0x20004010)

826.523712ms ago: executing program 9 (id=1234):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5}, 0x38)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000012c0)={'ip_vti0\x00', <r3=>0x0, 0x10, 0x7808, 0x6, 0x0, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x66, 0x0, 0x7f, 0x29, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x7, 0xe8, [@remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0xa1, [@multicast1, @local, @empty]}, @timestamp={0x44, 0x10, 0x50, 0x0, 0x5, [0x6, 0x9, 0x2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001340)={'wg2\x00', <r4=>0x0})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001380)={<r5=>0x0, @multicast2, @broadcast}, &(0x7f00000013c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001400)={'vcan0\x00', <r6=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r1, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000001500)=[{}], 0x8, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0xa, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000001cc0)=@newchain={0xf14, 0x64, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xb, 0x3}, {0x5, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x5a547dfc}, @TCA_CHAIN={0x8, 0xb, 0x4a1c}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @filter_kind_options=@f_fw={{0x7}, {0xd8, 0x2, [@TCA_FW_ACT={0x88, 0x4, [@m_csum={0x84, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5ef, 0x3, 0x4, 0x0, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2b2, 0x9, 0x20000000, 0x3, 0xfffffff9}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x1, 0x2, 0x1000, 0x5}, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe6, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0xddc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_POLICE={0x8a0, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3c}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd72c}, @TCA_POLICE_RATE={0x404, 0x2, [0xb0, 0x80200, 0x3ff, 0x100, 0x5, 0x5, 0x5, 0x8001, 0x80000000, 0x1, 0x7, 0xffffffff, 0x200, 0x7, 0x3, 0x9, 0x395, 0x8, 0x7, 0x4, 0x8, 0x27, 0x7fffffff, 0xfffffff6, 0x9, 0x8, 0x2, 0xfffffffd, 0x6, 0x312, 0xe5, 0x5, 0x7, 0x7, 0x0, 0xfffffffb, 0x5, 0x5, 0x2, 0x1, 0x9b, 0x2, 0x1, 0x4, 0x1, 0xd, 0xeee, 0x6, 0x871e, 0x6, 0x10000, 0x2, 0x9a5, 0xecf5, 0x256e, 0xfffffffe, 0xb, 0x2, 0x1, 0x1, 0x4, 0x0, 0xe6e, 0x78bb, 0x7, 0x3, 0x1, 0x6, 0x0, 0x50, 0x4, 0x2, 0x100, 0xcb, 0x0, 0x6302f42b, 0x6, 0x6, 0x5, 0x84, 0x0, 0xfffffff8, 0xb, 0x7, 0x856a, 0xd5, 0x0, 0x4, 0x3ff, 0x1, 0x9, 0x8, 0x4, 0x5, 0x10, 0x987, 0x9, 0x8, 0xd88, 0xff, 0x4, 0x8, 0x0, 0x3, 0x8, 0x0, 0xd85, 0x6, 0x3ff, 0x7, 0x500, 0x9, 0x4, 0x7, 0x5, 0x5000000, 0x2, 0xc1, 0x7, 0x7, 0x4, 0x892a, 0x1, 0xfff, 0xe, 0x4, 0xbbd, 0x9, 0x9, 0x5, 0x6, 0x87d9, 0x7fff, 0x2, 0x5, 0x3, 0xfffffff9, 0x81, 0xbc, 0x3e7, 0x6, 0x1, 0x24, 0x40000, 0x8000, 0x800, 0x0, 0x0, 0x100, 0x7, 0x8, 0x28, 0xfb1, 0x2e32, 0x0, 0x1, 0x7ff, 0xffff, 0xfffffffa, 0x3, 0x1ffc00, 0x7, 0x7, 0x4, 0x8001, 0x1f43, 0x466, 0x9, 0x38, 0x4eaa, 0xb, 0x1, 0x6, 0x80000001, 0x3ff, 0xe647, 0xd, 0xfcf, 0x3, 0x4, 0x5, 0x9, 0x9, 0x0, 0x4, 0x0, 0xf336, 0x80000001, 0x8, 0xfffffff8, 0x800, 0x1, 0x8, 0xfffffffa, 0x8, 0x4, 0x7, 0x7fffffff, 0x1, 0xffffff65, 0xc04, 0x2, 0xf, 0x1ea, 0xbba, 0x800, 0x1, 0x8, 0x8, 0x3, 0x8, 0x7fff, 0x10, 0x8000, 0x8, 0x4, 0x2, 0xfffffffb, 0x3, 0x7fffffff, 0x8000, 0x2, 0x8, 0x2, 0x3, 0x80, 0x7, 0x900, 0x9, 0x2, 0x400, 0x1, 0x3, 0x8, 0xe3, 0xff, 0x7, 0x10c, 0x1, 0x1000, 0x5, 0xc5, 0x7, 0xe, 0x2, 0x10, 0xe, 0x10, 0x9, 0x3, 0x1ff, 0x6, 0xf47, 0x1, 0x5, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x1, 0x3, 0x5, {0x4, 0x1, 0x5, 0x7ff, 0x9, 0x7}, {0xa, 0x2, 0x800, 0x1, 0xc}, 0x5, 0x7, 0x3fc0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0xc, 0x6, 0x9, 0x6, {0x1, 0x2, 0x8, 0xb99b, 0x2, 0x81}, {0x9, 0x0, 0x6, 0x40, 0x9, 0xfffffff7}, 0x1, 0x6, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc000, 0x8, 0x3, 0x401, 0xfff, 0xc2b7, 0x77, 0x81, 0x2, 0xe2, 0x8, 0x6, 0x8, 0x0, 0x6, 0xfffffff3, 0xff, 0x81, 0x7, 0x7, 0x4, 0x8, 0xf, 0x8001, 0x8, 0xc4, 0x8, 0x400, 0x2, 0x0, 0x2, 0x3, 0x1, 0x96, 0x7, 0xb, 0x15c, 0xe, 0x6745, 0x8, 0x6, 0x8, 0x91, 0x1, 0x3ff, 0x6, 0x9, 0xfffffff9, 0xcc, 0x1, 0xffffffff, 0x8f, 0xfffffffb, 0x4ff, 0x5, 0x4, 0x9, 0x1, 0x3fefcf20, 0x7, 0x1, 0x384, 0x9, 0x6, 0x7, 0xfffffff7, 0x10, 0x101, 0x21, 0xcf, 0xf52, 0x5, 0x401, 0x1, 0x0, 0x7ff, 0x3, 0x0, 0xe53, 0x5c9d, 0x7, 0x3, 0x7, 0x5826, 0x0, 0x0, 0x3, 0x0, 0xf, 0x2, 0xb, 0x6, 0xfc, 0x0, 0xc, 0x97, 0x5, 0x4, 0x8, 0x1, 0x2, 0x955, 0x0, 0x3, 0x9, 0x7ff, 0x8000, 0x3, 0xc373, 0x0, 0xc00000, 0x4, 0x101, 0x0, 0x200, 0x3, 0x9, 0x6000, 0x4, 0x3, 0x1ff, 0x1, 0x6, 0x7ff, 0xc9, 0x42, 0x9, 0xb, 0x6, 0x8, 0x919, 0x2, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x0, 0x6, 0x5, 0xe, 0xb73, 0x7, 0x2, 0xc9a, 0x8, 0xfffffe77, 0xfffffbff, 0xfffffffa, 0x1, 0x3097, 0x8, 0xda, 0xffff, 0x7, 0x9, 0x4df, 0x7, 0x7, 0x6, 0x0, 0xfff, 0x0, 0x8, 0xe24b, 0x2, 0xff, 0x2, 0x523b, 0x1, 0x2, 0x4, 0x5, 0x6, 0xf0, 0x6, 0x1ff, 0xa000, 0x0, 0x4, 0x9, 0x6321, 0x401, 0x7fff, 0x10, 0x498c, 0x7, 0x7, 0x38, 0x8, 0xd4b, 0x0, 0x7, 0x0, 0x2, 0x0, 0x800, 0x7ff, 0x5, 0x1, 0x2, 0x4, 0x7fffffff, 0xab, 0x3, 0x4, 0x5, 0x8, 0xffffffff, 0x3, 0x5, 0x10001, 0x4, 0x40, 0x80000000, 0xff, 0xd, 0x6, 0x10, 0x6, 0xdc6, 0x4, 0x74, 0x100, 0x5, 0xfffffff8, 0x4, 0x7, 0x1, 0x3, 0x2, 0x10001, 0x0, 0xffffffe3, 0x4, 0x45c, 0x5, 0x4, 0x8, 0x9, 0x376, 0xff, 0x4, 0x400080, 0x9, 0xb, 0x4, 0xfffffffd, 0x4, 0x4, 0xf, 0x3, 0x6, 0x7, 0x5, 0x9]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x7ffd}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8a}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0xdb, 0x400, 0xf, 0x101, 0xfffffff8, 0xffff2c1f, 0x9, 0x9, 0x7f, 0x9, 0x5, 0xd2, 0x6, 0xfffff000, 0x10, 0x2, 0x5, 0x91df, 0x1, 0x3, 0x1, 0x8, 0x3, 0x8, 0x0, 0x4, 0x6, 0x8, 0x3, 0x7, 0x2, 0x7, 0x7fffffff, 0xcb, 0x1ff, 0x8000, 0xffff, 0x51, 0x2, 0x0, 0x3ff, 0xf4a, 0x3b, 0x17f, 0x3, 0x3, 0xfffffffb, 0x8, 0x19, 0x5, 0xfffffff6, 0x7, 0x445a, 0x100, 0x6, 0x10, 0x7, 0xffffffff, 0xa, 0xe3bf, 0x7, 0x4fbe56ad, 0x5, 0x5, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x3f, 0x80, 0x9, 0xf51, 0x4, 0x1, 0xce7, 0x6, 0x0, 0x0, 0x2, 0x6, 0x8, 0x1, 0x2, 0x8, 0x40, 0x3ff, 0x4, 0x7ff, 0x7, 0x34f, 0x2, 0x100, 0x2a76, 0x8, 0x4, 0x65f, 0xe, 0x9, 0x10000, 0x401, 0x7, 0x800, 0xfc2, 0x7ccf, 0xfffffff8, 0x6, 0x1, 0x5, 0xfff, 0x200, 0x801, 0x6, 0x8, 0x9, 0x6, 0x5, 0x80, 0x6, 0x6, 0x1777c, 0x8, 0x9, 0x2, 0x9, 0x7fff, 0x6, 0x80000000, 0x3, 0x4, 0x3, 0x7, 0x4, 0xe25, 0x3, 0x4, 0xfc59d34, 0x8ac6, 0x3, 0x8b, 0x81, 0x0, 0x2, 0x800, 0x6, 0xffffff45, 0x81, 0xfff, 0x63f0, 0xe52, 0x9, 0x1c7c9b5c, 0x7, 0x7, 0x349, 0xfffffbff, 0x9, 0xfff, 0x9, 0x67a4, 0x7, 0x0, 0x10001, 0x3ff, 0x1, 0x3, 0x48d, 0x3, 0x8, 0x10001, 0x9bc, 0x1, 0x8000, 0x6a3b, 0x7, 0xffff, 0x0, 0x1, 0x0, 0xf25, 0x75, 0x9, 0x8, 0x8, 0x5, 0x7, 0xffffff21, 0x7, 0x7, 0x3, 0x1, 0x2, 0x6, 0x4, 0x6, 0x5, 0x4, 0xaf67, 0x0, 0x9, 0x1, 0x8, 0xe, 0x101, 0x4, 0x9, 0xfffffff7, 0x3, 0x7, 0xffffffef, 0x5, 0x101, 0x9, 0x4, 0xfffffffa, 0x691, 0x1ff, 0x6, 0xfffffffb, 0x1, 0xbf7, 0x0, 0xa3e, 0x0, 0xfffffffe, 0x1, 0x2, 0x3, 0x5b8dda9d, 0xfffffffa, 0x8452, 0x10, 0x9, 0xfffffff8, 0xc000000, 0xd02, 0x9, 0x6, 0x10, 0xe, 0x3, 0x2, 0x5, 0x5, 0x80000000, 0x100, 0xd, 0x10000, 0xe, 0x5f2f, 0x2, 0x4, 0x3, 0x4]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_ROUTE4_ACT={0xfc, 0x6, [@m_mirred={0xf8, 0x6, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x2, 0x2, 0x7f}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x4, 0x4, 0x6}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xc15, 0xffffffffffffffff, 0x1ff}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x10000000, 0x0, 0x6}, 0x4}}]}, {0x4c, 0x6, "1232a601df2e5e6f00f0b6b5fd426137f67e1e3f9cf4823956a8ee36d86e5dc8ecb0e6c8f5327e05471f99428109167622e1e8d1eb8b2edb90002249c96487f2d14acfbd8720d990"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0xf14}, 0x1, 0x0, 0x0, 0x4004011}, 0x24000002)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
creat(&(0x7f0000000080)='./file1/file0\x00', 0x182)

826.154342ms ago: executing program 7 (id=1235):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc, 0xfff2}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4)
shutdown(r1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040))
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

825.618562ms ago: executing program 8 (id=1236):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

824.877552ms ago: executing program 5 (id=1237):
set_robust_list(&(0x7f0000000140)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="00e3ffffffffffffff1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

794.095874ms ago: executing program 4 (id=1238):
syz_create_resource$binfmt(0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000304c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
set_mempolicy(0x6005, 0x0, 0x4)
readv(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20040054)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x453, 0x7, 0xeca3, 0x400, 0xfffffffffffffff8, 0xe63eae5e75ad31fa})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0})

735.686177ms ago: executing program 5 (id=1239):
prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setitimer(0x1, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x3)

717.977198ms ago: executing program 5 (id=1240):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x5, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000))
fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00d8f71400b600002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe73}], 0x4}, 0x0)

500.961731ms ago: executing program 9 (id=1241):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(r2, &(0x7f0000000000)=""/40, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x2}])
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd72, 0x2, 0x9, 0xa772da54, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000a80)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}}}}}}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)

440.139984ms ago: executing program 5 (id=1242):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(r2, &(0x7f0000000000)=""/40, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0)

391.200977ms ago: executing program 4 (id=1243):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20a701, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f00000000c0)={0x385200080, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

358.585009ms ago: executing program 4 (id=1244):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
gettid()
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x2845, 0x40810}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x4008894)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00})

196.319569ms ago: executing program 5 (id=1245):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

153.262951ms ago: executing program 8 (id=1255):
ioperm(0x0, 0xd, 0x4000000000000020)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20048080)
r2 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r6, 0x29, 0xb, 0x0, &(0x7f0000000000))
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000380)={0xb0, 0xf, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0xe000, [0x6]}}, @generic={0x53, 0x35, "9b63337eed2ddf344e597a6dbe74cf127d41f9fd6c7909b633864836c60fba2d50849e7fe725bcf11b6fac398f2b37cbb2c1107721"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x4, [0x0, 0x7ff]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x81}]}, 0x88)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r7, &(0x7f0000004200)='t', 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9)
sendfile(r7, r3, 0x0, 0x3ffff)
sendfile(r7, r3, 0x0, 0x7ffff000)
iopl(0x3)
ioperm(0x0, 0x5, 0x92)

57.699357ms ago: executing program 9 (id=1246):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5}, 0x38)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000012c0)={'ip_vti0\x00', <r3=>0x0, 0x10, 0x7808, 0x6, 0x0, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x66, 0x0, 0x7f, 0x29, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x7, 0xe8, [@remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0xa1, [@multicast1, @local, @empty]}, @timestamp={0x44, 0x10, 0x50, 0x0, 0x5, [0x6, 0x9, 0x2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001340)={'wg2\x00', <r4=>0x0})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001380)={<r5=>0x0, @multicast2, @broadcast}, &(0x7f00000013c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001400)={'vcan0\x00', <r6=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r1, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000001500)=[{}], 0x8, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0xa, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000001cc0)=@newchain={0xf14, 0x64, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xb, 0x3}, {0x5, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x5a547dfc}, @TCA_CHAIN={0x8, 0xb, 0x4a1c}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @filter_kind_options=@f_fw={{0x7}, {0xd8, 0x2, [@TCA_FW_ACT={0x88, 0x4, [@m_csum={0x84, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5ef, 0x3, 0x4, 0x0, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2b2, 0x9, 0x20000000, 0x3, 0xfffffff9}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x1, 0x2, 0x1000, 0x5}, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe6, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0xddc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_POLICE={0x8a0, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3c}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd72c}, @TCA_POLICE_RATE={0x404, 0x2, [0xb0, 0x80200, 0x3ff, 0x100, 0x5, 0x5, 0x5, 0x8001, 0x80000000, 0x1, 0x7, 0xffffffff, 0x200, 0x7, 0x3, 0x9, 0x395, 0x8, 0x7, 0x4, 0x8, 0x27, 0x7fffffff, 0xfffffff6, 0x9, 0x8, 0x2, 0xfffffffd, 0x6, 0x312, 0xe5, 0x5, 0x7, 0x7, 0x0, 0xfffffffb, 0x5, 0x5, 0x2, 0x1, 0x9b, 0x2, 0x1, 0x4, 0x1, 0xd, 0xeee, 0x6, 0x871e, 0x6, 0x10000, 0x2, 0x9a5, 0xecf5, 0x256e, 0xfffffffe, 0xb, 0x2, 0x1, 0x1, 0x4, 0x0, 0xe6e, 0x78bb, 0x7, 0x3, 0x1, 0x6, 0x0, 0x50, 0x4, 0x2, 0x100, 0xcb, 0x0, 0x6302f42b, 0x6, 0x6, 0x5, 0x84, 0x0, 0xfffffff8, 0xb, 0x7, 0x856a, 0xd5, 0x0, 0x4, 0x3ff, 0x1, 0x9, 0x8, 0x4, 0x5, 0x10, 0x987, 0x9, 0x8, 0xd88, 0xff, 0x4, 0x8, 0x0, 0x3, 0x8, 0x0, 0xd85, 0x6, 0x3ff, 0x7, 0x500, 0x9, 0x4, 0x7, 0x5, 0x5000000, 0x2, 0xc1, 0x7, 0x7, 0x4, 0x892a, 0x1, 0xfff, 0xe, 0x4, 0xbbd, 0x9, 0x9, 0x5, 0x6, 0x87d9, 0x7fff, 0x2, 0x5, 0x3, 0xfffffff9, 0x81, 0xbc, 0x3e7, 0x6, 0x1, 0x24, 0x40000, 0x8000, 0x800, 0x0, 0x0, 0x100, 0x7, 0x8, 0x28, 0xfb1, 0x2e32, 0x0, 0x1, 0x7ff, 0xffff, 0xfffffffa, 0x3, 0x1ffc00, 0x7, 0x7, 0x4, 0x8001, 0x1f43, 0x466, 0x9, 0x38, 0x4eaa, 0xb, 0x1, 0x6, 0x80000001, 0x3ff, 0xe647, 0xd, 0xfcf, 0x3, 0x4, 0x5, 0x9, 0x9, 0x0, 0x4, 0x0, 0xf336, 0x80000001, 0x8, 0xfffffff8, 0x800, 0x1, 0x8, 0xfffffffa, 0x8, 0x4, 0x7, 0x7fffffff, 0x1, 0xffffff65, 0xc04, 0x2, 0xf, 0x1ea, 0xbba, 0x800, 0x1, 0x8, 0x8, 0x3, 0x8, 0x7fff, 0x10, 0x8000, 0x8, 0x4, 0x2, 0xfffffffb, 0x3, 0x7fffffff, 0x8000, 0x2, 0x8, 0x2, 0x3, 0x80, 0x7, 0x900, 0x9, 0x2, 0x400, 0x1, 0x3, 0x8, 0xe3, 0xff, 0x7, 0x10c, 0x1, 0x1000, 0x5, 0xc5, 0x7, 0xe, 0x2, 0x10, 0xe, 0x10, 0x9, 0x3, 0x1ff, 0x6, 0xf47, 0x1, 0x5, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x1, 0x3, 0x5, {0x4, 0x1, 0x5, 0x7ff, 0x9, 0x7}, {0xa, 0x2, 0x800, 0x1, 0xc}, 0x5, 0x7, 0x3fc0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0xc, 0x6, 0x9, 0x6, {0x1, 0x2, 0x8, 0xb99b, 0x2, 0x81}, {0x9, 0x0, 0x6, 0x40, 0x9, 0xfffffff7}, 0x1, 0x6, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc000, 0x8, 0x3, 0x401, 0xfff, 0xc2b7, 0x77, 0x81, 0x2, 0xe2, 0x8, 0x6, 0x8, 0x0, 0x6, 0xfffffff3, 0xff, 0x81, 0x7, 0x7, 0x4, 0x8, 0xf, 0x8001, 0x8, 0xc4, 0x8, 0x400, 0x2, 0x0, 0x2, 0x3, 0x1, 0x96, 0x7, 0xb, 0x15c, 0xe, 0x6745, 0x8, 0x6, 0x8, 0x91, 0x1, 0x3ff, 0x6, 0x9, 0xfffffff9, 0xcc, 0x1, 0xffffffff, 0x8f, 0xfffffffb, 0x4ff, 0x5, 0x4, 0x9, 0x1, 0x3fefcf20, 0x7, 0x1, 0x384, 0x9, 0x6, 0x7, 0xfffffff7, 0x10, 0x101, 0x21, 0xcf, 0xf52, 0x5, 0x401, 0x1, 0x0, 0x7ff, 0x3, 0x0, 0xe53, 0x5c9d, 0x7, 0x3, 0x7, 0x5826, 0x0, 0x0, 0x3, 0x0, 0xf, 0x2, 0xb, 0x6, 0xfc, 0x0, 0xc, 0x97, 0x5, 0x4, 0x8, 0x1, 0x2, 0x955, 0x0, 0x3, 0x9, 0x7ff, 0x8000, 0x3, 0xc373, 0x0, 0xc00000, 0x4, 0x101, 0x0, 0x200, 0x3, 0x9, 0x6000, 0x4, 0x3, 0x1ff, 0x1, 0x6, 0x7ff, 0xc9, 0x42, 0x9, 0xb, 0x6, 0x8, 0x919, 0x2, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x0, 0x6, 0x5, 0xe, 0xb73, 0x7, 0x2, 0xc9a, 0x8, 0xfffffe77, 0xfffffbff, 0xfffffffa, 0x1, 0x3097, 0x8, 0xda, 0xffff, 0x7, 0x9, 0x4df, 0x7, 0x7, 0x6, 0x0, 0xfff, 0x0, 0x8, 0xe24b, 0x2, 0xff, 0x2, 0x523b, 0x1, 0x2, 0x4, 0x5, 0x6, 0xf0, 0x6, 0x1ff, 0xa000, 0x0, 0x4, 0x9, 0x6321, 0x401, 0x7fff, 0x10, 0x498c, 0x7, 0x7, 0x38, 0x8, 0xd4b, 0x0, 0x7, 0x0, 0x2, 0x0, 0x800, 0x7ff, 0x5, 0x1, 0x2, 0x4, 0x7fffffff, 0xab, 0x3, 0x4, 0x5, 0x8, 0xffffffff, 0x3, 0x5, 0x10001, 0x4, 0x40, 0x80000000, 0xff, 0xd, 0x6, 0x10, 0x6, 0xdc6, 0x4, 0x74, 0x100, 0x5, 0xfffffff8, 0x4, 0x7, 0x1, 0x3, 0x2, 0x10001, 0x0, 0xffffffe3, 0x4, 0x45c, 0x5, 0x4, 0x8, 0x9, 0x376, 0xff, 0x4, 0x400080, 0x9, 0xb, 0x4, 0xfffffffd, 0x4, 0x4, 0xf, 0x3, 0x6, 0x7, 0x5, 0x9]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x7ffd}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8a}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0xdb, 0x400, 0xf, 0x101, 0xfffffff8, 0xffff2c1f, 0x9, 0x9, 0x7f, 0x9, 0x5, 0xd2, 0x6, 0xfffff000, 0x10, 0x2, 0x5, 0x91df, 0x1, 0x3, 0x1, 0x8, 0x3, 0x8, 0x0, 0x4, 0x6, 0x8, 0x3, 0x7, 0x2, 0x7, 0x7fffffff, 0xcb, 0x1ff, 0x8000, 0xffff, 0x51, 0x2, 0x0, 0x3ff, 0xf4a, 0x3b, 0x17f, 0x3, 0x3, 0xfffffffb, 0x8, 0x19, 0x5, 0xfffffff6, 0x7, 0x445a, 0x100, 0x6, 0x10, 0x7, 0xffffffff, 0xa, 0xe3bf, 0x7, 0x4fbe56ad, 0x5, 0x5, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x3f, 0x80, 0x9, 0xf51, 0x4, 0x1, 0xce7, 0x6, 0x0, 0x0, 0x2, 0x6, 0x8, 0x1, 0x2, 0x8, 0x40, 0x3ff, 0x4, 0x7ff, 0x7, 0x34f, 0x2, 0x100, 0x2a76, 0x8, 0x4, 0x65f, 0xe, 0x9, 0x10000, 0x401, 0x7, 0x800, 0xfc2, 0x7ccf, 0xfffffff8, 0x6, 0x1, 0x5, 0xfff, 0x200, 0x801, 0x6, 0x8, 0x9, 0x6, 0x5, 0x80, 0x6, 0x6, 0x1777c, 0x8, 0x9, 0x2, 0x9, 0x7fff, 0x6, 0x80000000, 0x3, 0x4, 0x3, 0x7, 0x4, 0xe25, 0x3, 0x4, 0xfc59d34, 0x8ac6, 0x3, 0x8b, 0x81, 0x0, 0x2, 0x800, 0x6, 0xffffff45, 0x81, 0xfff, 0x63f0, 0xe52, 0x9, 0x1c7c9b5c, 0x7, 0x7, 0x349, 0xfffffbff, 0x9, 0xfff, 0x9, 0x67a4, 0x7, 0x0, 0x10001, 0x3ff, 0x1, 0x3, 0x48d, 0x3, 0x8, 0x10001, 0x9bc, 0x1, 0x8000, 0x6a3b, 0x7, 0xffff, 0x0, 0x1, 0x0, 0xf25, 0x75, 0x9, 0x8, 0x8, 0x5, 0x7, 0xffffff21, 0x7, 0x7, 0x3, 0x1, 0x2, 0x6, 0x4, 0x6, 0x5, 0x4, 0xaf67, 0x0, 0x9, 0x1, 0x8, 0xe, 0x101, 0x4, 0x9, 0xfffffff7, 0x3, 0x7, 0xffffffef, 0x5, 0x101, 0x9, 0x4, 0xfffffffa, 0x691, 0x1ff, 0x6, 0xfffffffb, 0x1, 0xbf7, 0x0, 0xa3e, 0x0, 0xfffffffe, 0x1, 0x2, 0x3, 0x5b8dda9d, 0xfffffffa, 0x8452, 0x10, 0x9, 0xfffffff8, 0xc000000, 0xd02, 0x9, 0x6, 0x10, 0xe, 0x3, 0x2, 0x5, 0x5, 0x80000000, 0x100, 0xd, 0x10000, 0xe, 0x5f2f, 0x2, 0x4, 0x3, 0x4]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_ROUTE4_ACT={0xfc, 0x6, [@m_mirred={0xf8, 0x6, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x2, 0x2, 0x7f}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x4, 0x4, 0x6}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xc15, 0xffffffffffffffff, 0x1ff}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x10000000, 0x0, 0x6}, 0x4}}]}, {0x4c, 0x6, "1232a601df2e5e6f00f0b6b5fd426137f67e1e3f9cf4823956a8ee36d86e5dc8ecb0e6c8f5327e05471f99428109167622e1e8d1eb8b2edb90002249c96487f2d14acfbd8720d990"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0xf14}, 0x1, 0x0, 0x0, 0x4004011}, 0x24000002)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)
creat(&(0x7f0000000080)='./file1/file0\x00', 0x182)

0s ago: executing program 7 (id=1247):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x800}, 0xdb01, 0x0, 0x2, 0x48000000, 0x0, 0x0, 0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x183, 0x6}, 0x2025, 0x4005, 0xb, 0x0, 0x1, 0x4, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x68000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r6, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000200000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0)

kernel console output (not intermixed with test programs):

[   T55] veth0_vlan: left promiscuous mode
[   93.899423][   T55] team0 (unregistering): Port device team_slave_1 removed
[   93.929325][   T55] team0 (unregistering): Port device team_slave_0 removed
[   93.986516][ T5920] loop4: detected capacity change from 0 to 8192
[   93.996517][ T5920] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.200542][ T5805] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   94.211758][ T5805] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   94.222848][ T5805] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   94.245432][ T5805] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   94.355469][ T5960] loop5: detected capacity change from 0 to 512
[   94.365738][ T5960] vfat: Unknown parameter '0x0000000000000004'
[   94.417073][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.467680][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[   94.489720][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.497021][ T5184] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.545535][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.552669][ T5184] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.720533][ T5986] FAULT_INJECTION: forcing a failure.
[   94.720533][ T5986] name failslab, interval 1, probability 0, space 0, times 0
[   94.733416][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: syz.4.734 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.733511][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   94.733524][ T5986] Call Trace:
[   94.733530][ T5986]  <TASK>
[   94.733538][ T5986]  __dump_stack+0x1d/0x30
[   94.733566][ T5986]  dump_stack_lvl+0x95/0xd0
[   94.733592][ T5986]  dump_stack+0x15/0x1b
[   94.733657][ T5986]  should_fail_ex+0x263/0x280
[   94.733723][ T5986]  should_failslab+0x8c/0xb0
[   94.733750][ T5986]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   94.733780][ T5986]  ? __alloc_skb+0x2f0/0x4b0
[   94.733813][ T5986]  __alloc_skb+0x2f0/0x4b0
[   94.733850][ T5986]  ? __alloc_skb+0x219/0x4b0
[   94.733943][ T5986]  netlink_ack+0xfd/0x500
[   94.733982][ T5986]  netlink_rcv_skb+0x192/0x220
[   94.734085][ T5986]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   94.734115][ T5986]  rtnetlink_rcv+0x1c/0x30
[   94.734136][ T5986]  netlink_unicast+0x5c0/0x690
[   94.734210][ T5986]  netlink_sendmsg+0x5c8/0x6f0
[   94.734234][ T5986]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.734256][ T5986]  ____sys_sendmsg+0x5af/0x600
[   94.734341][ T5986]  ___sys_sendmsg+0x195/0x1e0
[   94.734374][ T5986]  __x64_sys_sendmsg+0xd4/0x160
[   94.734401][ T5986]  x64_sys_call+0x17ba/0x3000
[   94.734429][ T5986]  do_syscall_64+0xc0/0x2a0
[   94.734483][ T5986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.734508][ T5986] RIP: 0033:0x7fd83a11aeb9
[   94.734526][ T5986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.734547][ T5986] RSP: 002b:00007fd838b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.734569][ T5986] RAX: ffffffffffffffda RBX: 00007fd83a395fa0 RCX: 00007fd83a11aeb9
[   94.734624][ T5986] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   94.734637][ T5986] RBP: 00007fd838b77090 R08: 0000000000000000 R09: 0000000000000000
[   94.734697][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.734779][ T5986] R13: 00007fd83a396038 R14: 00007fd83a395fa0 R15: 00007ffe64bcec58
[   94.734798][ T5986]  </TASK>
[   95.031928][   T29] kauditd_printk_skb: 272 callbacks suppressed
[   95.031946][   T29] audit: type=1326 audit(1770028866.282:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.033403][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.054549][   T29] audit: type=1326 audit(1770028866.282:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.091905][   T29] audit: type=1326 audit(1770028866.282:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.107112][ T5998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5998 comm=syz.1.737
[   95.115489][   T29] audit: type=1326 audit(1770028866.282:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.151410][   T29] audit: type=1326 audit(1770028866.282:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.158279][ T6001] FAULT_INJECTION: forcing a failure.
[   95.158279][ T6001] name failslab, interval 1, probability 0, space 0, times 0
[   95.185170][   T29] audit: type=1326 audit(1770028866.312:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.188016][ T6001] CPU: 0 UID: 0 PID: 6001 Comm: syz.1.738 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   95.188123][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   95.188137][ T6001] Call Trace:
[   95.188144][ T6001]  <TASK>
[   95.188152][ T6001]  __dump_stack+0x1d/0x30
[   95.188179][ T6001]  dump_stack_lvl+0x95/0xd0
[   95.188229][ T6001]  dump_stack+0x15/0x1b
[   95.188251][ T6001]  should_fail_ex+0x263/0x280
[   95.188282][ T6001]  should_failslab+0x8c/0xb0
[   95.188364][ T6001]  __kmalloc_noprof+0xb8/0x580
[   95.188397][ T6001]  ? security_sk_alloc+0x52/0x120
[   95.188421][ T6001]  security_sk_alloc+0x52/0x120
[   95.188443][ T6001]  sk_prot_alloc+0xc2/0x180
[   95.188477][ T6001]  sk_alloc+0x34/0x3d0
[   95.188528][ T6001]  unix_create1+0xa5/0x400
[   95.188551][ T6001]  ? inode_init_always_gfp+0x4cd/0x500
[   95.188576][ T6001]  unix_create+0x11f/0x150
[   95.188599][ T6001]  __sock_create+0x2e4/0x580
[   95.188631][ T6001]  __sys_socketpair+0x1bb/0x420
[   95.188710][ T6001]  __x64_sys_socketpair+0x52/0x60
[   95.188739][ T6001]  x64_sys_call+0x2df3/0x3000
[   95.188765][ T6001]  do_syscall_64+0xc0/0x2a0
[   95.188876][ T6001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.189035][ T6001] RIP: 0033:0x7f0922ddc77a
[   95.189053][ T6001] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.189072][ T6001] RSP: 002b:00007f0921836f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   95.189095][ T6001] RAX: ffffffffffffffda RBX: 00007f0923055f00 RCX: 00007f0922ddc77a
[   95.189111][ T6001] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   95.189124][ T6001] RBP: 00007f0921837090 R08: 0000000000000000 R09: 0000000000000000
[   95.189195][ T6001] R10: 00007f0921836f88 R11: 0000000000000246 R12: 0aa7f3cec63cbb9d
[   95.189265][ T6001] R13: 00007f0923056038 R14: 00007f0923055fa0 R15: 00007ffd4d708ba8
[   95.189286][ T6001]  </TASK>
[   95.403124][   T29] audit: type=1326 audit(1770028866.312:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.426610][   T29] audit: type=1326 audit(1770028866.312:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.449854][   T29] audit: type=1326 audit(1770028866.312:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.473181][   T29] audit: type=1326 audit(1770028866.312:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[   95.475959][ T5805] veth0_vlan: entered promiscuous mode
[   95.510892][ T5805] veth1_vlan: entered promiscuous mode
[   95.560571][ T5805] veth0_macvtap: entered promiscuous mode
[   95.592551][ T5805] veth1_macvtap: entered promiscuous mode
[   95.634898][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.662823][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.705017][ T3440] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.718005][ T3440] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.731952][ T3440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.746337][ T3440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.120222][ T6080] netlink: 'syz.8.748': attribute type 1 has an invalid length.
[   96.315235][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.327231][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.359677][ T6094] __nla_validate_parse: 6 callbacks suppressed
[   96.359695][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.752'.
[   96.423782][ T6102] FAULT_INJECTION: forcing a failure.
[   96.423782][ T6102] name failslab, interval 1, probability 0, space 0, times 0
[   96.436561][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.1.754 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   96.436651][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   96.436665][ T6102] Call Trace:
[   96.436673][ T6102]  <TASK>
[   96.436679][ T6102]  __dump_stack+0x1d/0x30
[   96.436698][ T6102]  dump_stack_lvl+0x95/0xd0
[   96.436731][ T6102]  dump_stack+0x15/0x1b
[   96.436744][ T6102]  should_fail_ex+0x263/0x280
[   96.436838][ T6102]  should_failslab+0x8c/0xb0
[   96.436854][ T6102]  kmem_cache_alloc_lru_noprof+0x6c/0x490
[   96.436872][ T6102]  ? __d_alloc+0x37/0x340
[   96.436892][ T6102]  __d_alloc+0x37/0x340
[   96.436970][ T6102]  ? default_pointer+0xf2/0x5e0
[   96.436988][ T6102]  d_alloc+0x2e/0x100
[   96.437058][ T6102]  lookup_one_qstr_excl+0x99/0x250
[   96.437078][ T6102]  start_dirop+0x3e/0x70
[   96.437096][ T6102]  simple_start_creating+0xa2/0xd0
[   96.437157][ T6102]  debugfs_start_creating+0xda/0x150
[   96.437191][ T6102]  __debugfs_create_file+0x70/0x2b0
[   96.437314][ T6102]  debugfs_create_file_full+0x3f/0x60
[   96.437335][ T6102]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[   96.437352][ T6102]  ref_tracker_dir_debugfs+0x10e/0x220
[   96.437379][ T6102]  alloc_netdev_mqs+0x1a7/0xa40
[   96.437422][ T6102]  rtnl_create_link+0x239/0x720
[   96.437445][ T6102]  rtnl_newlink_create+0x174/0x650
[   96.437465][ T6102]  ? security_capable+0x7b/0x90
[   96.437544][ T6102]  ? netlink_ns_capable+0x86/0xa0
[   96.437572][ T6102]  rtnl_newlink+0xf5b/0x1370
[   96.437593][ T6102]  ? __rcu_read_unlock+0x4e/0x70
[   96.437614][ T6102]  ? skb_network_protocol+0x329/0x420
[   96.437636][ T6102]  ? __rcu_read_unlock+0x4e/0x70
[   96.437733][ T6102]  ? avc_has_perm_noaudit+0xab/0x130
[   96.437819][ T6102]  ? cred_has_capability+0x224/0x290
[   96.437843][ T6102]  ? selinux_capable+0x31/0x40
[   96.437860][ T6102]  ? security_capable+0x7b/0x90
[   96.437879][ T6102]  ? ns_capable+0x7c/0xb0
[   96.437929][ T6102]  ? __pfx_rtnl_newlink+0x10/0x10
[   96.437945][ T6102]  rtnetlink_rcv_msg+0x64b/0x720
[   96.437963][ T6102]  netlink_rcv_skb+0x123/0x220
[   96.437990][ T6102]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   96.438009][ T6102]  rtnetlink_rcv+0x1c/0x30
[   96.438024][ T6102]  netlink_unicast+0x5c0/0x690
[   96.438059][ T6102]  netlink_sendmsg+0x5c8/0x6f0
[   96.438075][ T6102]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.438089][ T6102]  ____sys_sendmsg+0x5af/0x600
[   96.438105][ T6102]  ___sys_sendmsg+0x195/0x1e0
[   96.438126][ T6102]  __x64_sys_sendmsg+0xd4/0x160
[   96.438198][ T6102]  x64_sys_call+0x17ba/0x3000
[   96.438215][ T6102]  do_syscall_64+0xc0/0x2a0
[   96.438293][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.438338][ T6102] RIP: 0033:0x7f0922ddaeb9
[   96.438351][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.438364][ T6102] RSP: 002b:00007f0921837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.438380][ T6102] RAX: ffffffffffffffda RBX: 00007f0923055fa0 RCX: 00007f0922ddaeb9
[   96.438422][ T6102] RDX: 0000000000004880 RSI: 0000200000000140 RDI: 0000000000000004
[   96.438431][ T6102] RBP: 00007f0921837090 R08: 0000000000000000 R09: 0000000000000000
[   96.438440][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.438449][ T6102] R13: 00007f0923056038 R14: 00007f0923055fa0 R15: 00007ffd4d708ba8
[   96.438462][ T6102]  </TASK>
[   96.438874][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'.
[   96.845836][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.757'.
[   96.864692][ T6106] loop7: detected capacity change from 0 to 128
[   96.873780][ T6106] EXT4-fs: Ignoring removed nobh option
[   96.900269][ T6106] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.917095][ T6106] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.931713][ T6106] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.755: checksumming directory block 0
[   96.948513][ T6106] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.755: checksumming directory block 0
[   96.980703][ T5020] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.990298][ T6125] random: crng reseeded on system resumption
[   96.994695][ T6126] netlink: 'syz.5.762': attribute type 1 has an invalid length.
[   97.150562][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.7.770'.
[   97.262545][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.299168][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.477405][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.8.775'.
[   97.674776][ T6167] netlink: 'syz.1.779': attribute type 1 has an invalid length.
[   97.768293][ T6176] FAULT_INJECTION: forcing a failure.
[   97.768293][ T6176] name failslab, interval 1, probability 0, space 0, times 0
[   97.780977][ T6176] CPU: 0 UID: 0 PID: 6176 Comm: syz.1.782 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   97.781083][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   97.781098][ T6176] Call Trace:
[   97.781105][ T6176]  <TASK>
[   97.781163][ T6176]  __dump_stack+0x1d/0x30
[   97.781230][ T6176]  dump_stack_lvl+0x95/0xd0
[   97.781256][ T6176]  dump_stack+0x15/0x1b
[   97.781280][ T6176]  should_fail_ex+0x263/0x280
[   97.781383][ T6176]  should_failslab+0x8c/0xb0
[   97.781411][ T6176]  __kmalloc_node_track_caller_noprof+0xb8/0x590
[   97.781443][ T6176]  ? vfs_parse_monolithic_sep+0x16a/0x270
[   97.781471][ T6176]  kmemdup_nul+0x36/0xc0
[   97.781514][ T6176]  ? __pfx_shmem_next_opt+0x10/0x10
[   97.781549][ T6176]  vfs_parse_monolithic_sep+0x16a/0x270
[   97.781578][ T6176]  shmem_parse_monolithic+0x24/0x30
[   97.781683][ T6176]  parse_monolithic_mount_data+0x46/0x60
[   97.781713][ T6176]  do_new_mount+0x251/0x700
[   97.781736][ T6176]  ? security_capable+0x7b/0x90
[   97.781831][ T6176]  path_mount+0x4d0/0xbc0
[   97.781853][ T6176]  ? user_path_at+0xbf/0x130
[   97.781977][ T6176]  __se_sys_mount+0x28c/0x2e0
[   97.782001][ T6176]  ? fput+0x8f/0xc0
[   97.782034][ T6176]  __x64_sys_mount+0x67/0x80
[   97.782114][ T6176]  x64_sys_call+0x2cca/0x3000
[   97.782140][ T6176]  do_syscall_64+0xc0/0x2a0
[   97.782175][ T6176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.782201][ T6176] RIP: 0033:0x7f0922ddaeb9
[   97.782258][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.782281][ T6176] RSP: 002b:00007f0921837028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   97.782306][ T6176] RAX: ffffffffffffffda RBX: 00007f0923055fa0 RCX: 00007f0922ddaeb9
[   97.782366][ T6176] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[   97.782383][ T6176] RBP: 00007f0921837090 R08: 00002000000001c0 R09: 0000000000000000
[   97.782398][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.782413][ T6176] R13: 00007f0923056038 R14: 00007f0923055fa0 R15: 00007ffd4d708ba8
[   97.782452][ T6176]  </TASK>
[   98.069447][ T6184] vhci_hcd vhci_hcd.0: invalid port number 65
[   98.113050][ T6186] bond1: option lacp_rate: invalid value (128)
[   98.117848][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system
[   98.133508][ T6186] bond1 (unregistering): Released all slaves
[   98.170921][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system
[   98.212156][ T4793] udevd[4793]: symlink '../../loop5' '/dev/disk/by-diskseq/175.tmp-b7:5' failed: Read-only file system
[   98.261101][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system
[   98.261368][ T6199] ieee802154 phy0 wpan0: encryption failed: -22
[   98.310276][ T4793] udevd[4793]: symlink '../../loop5' '/dev/disk/by-diskseq/175.tmp-b7:5' failed: Read-only file system
[   98.332895][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system
[   98.359728][ T6206] loop1: detected capacity change from 0 to 512
[   98.378115][ T6206] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   98.387261][ T5039] udevd[5039]: symlink '../../loop5' '/dev/disk/by-diskseq/175.tmp-b7:5' failed: Read-only file system
[   98.406807][ T6206] EXT4-fs (loop1): 1 truncate cleaned up
[   98.416302][ T4793] udevd[4793]: symlink '../../loop1' '/dev/disk/by-diskseq/179.tmp-b7:1' failed: Read-only file system
[   98.417164][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.793'.
[   98.428256][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.436760][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.793'.
[   98.452655][ T4793] udevd[4793]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system
[   98.487730][ T5039] udevd[5039]: symlink '../../loop4' '/dev/disk/by-diskseq/176.tmp-b7:4' failed: Read-only file system
[   98.514522][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.773486][ T6224] FAULT_INJECTION: forcing a failure.
[   98.773486][ T6224] name failslab, interval 1, probability 0, space 0, times 0
[   98.786290][ T6224] CPU: 1 UID: 0 PID: 6224 Comm: syz.4.801 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   98.786375][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   98.786391][ T6224] Call Trace:
[   98.786440][ T6224]  <TASK>
[   98.786447][ T6224]  __dump_stack+0x1d/0x30
[   98.786474][ T6224]  dump_stack_lvl+0x95/0xd0
[   98.786502][ T6224]  dump_stack+0x15/0x1b
[   98.786555][ T6224]  should_fail_ex+0x263/0x280
[   98.786591][ T6224]  should_failslab+0x8c/0xb0
[   98.786615][ T6224]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   98.786640][ T6224]  ? __alloc_skb+0x2f0/0x4b0
[   98.786695][ T6224]  __alloc_skb+0x2f0/0x4b0
[   98.786729][ T6224]  ? __alloc_skb+0x219/0x4b0
[   98.786762][ T6224]  netlink_alloc_large_skb+0xbf/0xf0
[   98.786858][ T6224]  netlink_sendmsg+0x40c/0x6f0
[   98.786879][ T6224]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.786897][ T6224]  ____sys_sendmsg+0x5af/0x600
[   98.786918][ T6224]  ___sys_sendmsg+0x195/0x1e0
[   98.787017][ T6224]  __x64_sys_sendmsg+0xd4/0x160
[   98.787040][ T6224]  x64_sys_call+0x17ba/0x3000
[   98.787065][ T6224]  do_syscall_64+0xc0/0x2a0
[   98.787136][ T6224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.787163][ T6224] RIP: 0033:0x7fd83a11aeb9
[   98.787182][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.787249][ T6224] RSP: 002b:00007fd838b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.787271][ T6224] RAX: ffffffffffffffda RBX: 00007fd83a395fa0 RCX: 00007fd83a11aeb9
[   98.787287][ T6224] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004
[   98.787304][ T6224] RBP: 00007fd838b77090 R08: 0000000000000000 R09: 0000000000000000
[   98.787320][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.787332][ T6224] R13: 00007fd83a396038 R14: 00007fd83a395fa0 R15: 00007ffe64bcec58
[   98.787380][ T6224]  </TASK>
[   99.040749][ T6232] loop7: detected capacity change from 0 to 128
[   99.105983][ T6236] loop1: detected capacity change from 0 to 512
[   99.113653][ T6236] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   99.114387][ T6238] loop7: detected capacity change from 0 to 512
[   99.125511][ T6236] EXT4-fs (loop1): 1 truncate cleaned up
[   99.136474][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.188432][ T6238] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   99.197777][ T6238] EXT4-fs error (device loop7): ext4_get_journal_inode:5849: inode #3: comm syz.7.807: iget: special inode unallocated
[   99.213050][ T6238] EXT4-fs (loop7): no journal found
[   99.218359][ T6238] EXT4-fs (loop7): can't get journal size
[   99.234677][ T6238] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[   99.248380][ T6238] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #3: comm syz.7.807: iget: special inode unallocated
[   99.267118][ T6238] EXT4-fs (loop7): failed to initialize system zone (-117)
[   99.275015][ T6238] EXT4-fs (loop7): mount failed
[   99.282507][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.330654][ T6238] loop7: detected capacity change from 0 to 512
[   99.336535][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.8.816'.
[   99.337117][ T6252] loop4: detected capacity change from 0 to 512
[   99.370972][ T6238] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   99.388970][ T6238] EXT4-fs error (device loop7): ext4_get_journal_inode:5849: inode #3: comm syz.7.807: iget: special inode unallocated
[   99.395882][ T6262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6262 comm=syz.8.818
[   99.416106][ T6252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   99.426644][ T6258] loop5: detected capacity change from 0 to 2048
[   99.454289][ T6238] EXT4-fs (loop7): no journal found
[   99.459668][ T6238] EXT4-fs (loop7): can't get journal size
[   99.465939][ T6252] EXT4-fs (loop4): 1 truncate cleaned up
[   99.484411][ T6266] FAULT_INJECTION: forcing a failure.
[   99.484411][ T6266] name failslab, interval 1, probability 0, space 0, times 0
[   99.497115][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.5.819 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   99.497147][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   99.497162][ T6266] Call Trace:
[   99.497170][ T6266]  <TASK>
[   99.497180][ T6266]  __dump_stack+0x1d/0x30
[   99.497335][ T6266]  dump_stack_lvl+0x95/0xd0
[   99.497357][ T6266]  dump_stack+0x15/0x1b
[   99.497441][ T6266]  should_fail_ex+0x263/0x280
[   99.497474][ T6266]  should_failslab+0x8c/0xb0
[   99.497535][ T6252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.497500][ T6266]  __kmalloc_cache_noprof+0x64/0x4a0
[   99.497586][ T6266]  ? rtnl_newlink+0x5c/0x1370
[   99.497610][ T6266]  ? __pfx_rtnl_newlink+0x10/0x10
[   99.497634][ T6266]  rtnl_newlink+0x5c/0x1370
[   99.497724][ T6266]  ? __rcu_read_unlock+0x4e/0x70
[   99.497789][ T6266]  ? __memcg_slab_free_hook+0x135/0x230
[   99.497829][ T6266]  ? __rcu_read_unlock+0x4e/0x70
[   99.497858][ T6266]  ? avc_has_perm_noaudit+0xab/0x130
[   99.497891][ T6266]  ? cred_has_capability+0x224/0x290
[   99.497935][ T6266]  ? selinux_capable+0x31/0x40
[   99.497955][ T6266]  ? security_capable+0x7b/0x90
[   99.497986][ T6266]  ? ns_capable+0x7c/0xb0
[   99.498014][ T6266]  ? __pfx_rtnl_newlink+0x10/0x10
[   99.498042][ T6266]  rtnetlink_rcv_msg+0x64b/0x720
[   99.498078][ T6266]  netlink_rcv_skb+0x123/0x220
[   99.498111][ T6266]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.498140][ T6266]  rtnetlink_rcv+0x1c/0x30
[   99.498193][ T6266]  netlink_unicast+0x5c0/0x690
[   99.498263][ T6266]  netlink_sendmsg+0x5c8/0x6f0
[   99.498286][ T6266]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.498306][ T6266]  ____sys_sendmsg+0x5af/0x600
[   99.498330][ T6266]  ___sys_sendmsg+0x195/0x1e0
[   99.498390][ T6266]  __x64_sys_sendmsg+0xd4/0x160
[   99.498413][ T6266]  x64_sys_call+0x17ba/0x3000
[   99.498439][ T6266]  do_syscall_64+0xc0/0x2a0
[   99.498526][ T6266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.498549][ T6266] RIP: 0033:0x7fa827e5aeb9
[   99.498629][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.498668][ T6266] RSP: 002b:00007fa8268b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.498691][ T6266] RAX: ffffffffffffffda RBX: 00007fa8280d5fa0 RCX: 00007fa827e5aeb9
[   99.498707][ T6266] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   99.498721][ T6266] RBP: 00007fa8268b7090 R08: 0000000000000000 R09: 0000000000000000
[   99.498735][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.498759][ T6266] R13: 00007fa8280d6038 R14: 00007fa8280d5fa0 R15: 00007ffec9c03f08
[   99.498843][ T6266]  </TASK>
[   99.576118][ T6238] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[   99.779569][ T6277] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'.
[   99.781949][ T6238] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #3: comm syz.7.807: iget: special inode unallocated
[   99.803998][ T6238] EXT4-fs (loop7): failed to initialize system zone (-117)
[   99.811521][ T6238] EXT4-fs (loop7): mount failed
[   99.854172][ T6282] FAULT_INJECTION: forcing a failure.
[   99.854172][ T6282] name failslab, interval 1, probability 0, space 0, times 0
[   99.866962][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.5.826 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   99.867026][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   99.867038][ T6282] Call Trace:
[   99.867046][ T6282]  <TASK>
[   99.867055][ T6282]  __dump_stack+0x1d/0x30
[   99.867081][ T6282]  dump_stack_lvl+0x95/0xd0
[   99.867153][ T6282]  dump_stack+0x15/0x1b
[   99.867177][ T6282]  should_fail_ex+0x263/0x280
[   99.867214][ T6282]  should_failslab+0x8c/0xb0
[   99.867241][ T6282]  __kmalloc_node_noprof+0xbd/0x590
[   99.867298][ T6282]  ? __vmalloc_node_range_noprof+0x428/0x12b0
[   99.867331][ T6282]  __vmalloc_node_range_noprof+0x428/0x12b0
[   99.867362][ T6282]  ? xt_check_target+0x2c5/0x4c0
[   99.867427][ T6282]  ? mutex_unlock+0x4e/0x90
[   99.867458][ T6282]  ? translate_table+0x1020/0x10d0
[   99.867503][ T6282]  ? xt_counters_alloc+0x40/0x50
[   99.867541][ T6282]  vzalloc_noprof+0x82/0xb0
[   99.867611][ T6282]  ? xt_counters_alloc+0x40/0x50
[   99.867649][ T6282]  xt_counters_alloc+0x40/0x50
[   99.867686][ T6282]  __do_replace+0x4d/0x570
[   99.867746][ T6282]  do_ipt_set_ctl+0x774/0x8e0
[   99.867788][ T6282]  nf_setsockopt+0x199/0x1b0
[   99.867818][ T6282]  ip_setsockopt+0x102/0x110
[   99.867900][ T6282]  udp_setsockopt+0x99/0xb0
[   99.867932][ T6282]  sock_common_setsockopt+0x69/0x80
[   99.868004][ T6282]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   99.868036][ T6282]  __sys_setsockopt+0x184/0x200
[   99.868106][ T6282]  __x64_sys_setsockopt+0x64/0x80
[   99.868173][ T6282]  x64_sys_call+0x21d5/0x3000
[   99.868203][ T6282]  do_syscall_64+0xc0/0x2a0
[   99.868239][ T6282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.868265][ T6282] RIP: 0033:0x7fa827e5aeb9
[   99.868297][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.868320][ T6282] RSP: 002b:00007fa8268b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.868345][ T6282] RAX: ffffffffffffffda RBX: 00007fa8280d5fa0 RCX: 00007fa827e5aeb9
[   99.868361][ T6282] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005
[   99.868417][ T6282] RBP: 00007fa8268b7090 R08: 0000000000000310 R09: 0000000000000000
[   99.868455][ T6282] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.868470][ T6282] R13: 00007fa8280d6038 R14: 00007fa8280d5fa0 R15: 00007ffec9c03f08
[   99.868493][ T6282]  </TASK>
[   99.868503][ T6282] syz.5.826: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  100.119696][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.5.826 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  100.119777][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  100.119791][ T6282] Call Trace:
[  100.119799][ T6282]  <TASK>
[  100.119808][ T6282]  __dump_stack+0x1d/0x30
[  100.119878][ T6282]  dump_stack_lvl+0x95/0xd0
[  100.119901][ T6282]  dump_stack+0x15/0x1b
[  100.119923][ T6282]  warn_alloc+0x145/0x1c0
[  100.119960][ T6282]  __vmalloc_node_range_noprof+0x7d9/0x12b0
[  100.120090][ T6282]  ? xt_check_target+0x2c5/0x4c0
[  100.120129][ T6282]  ? mutex_unlock+0x4e/0x90
[  100.120223][ T6282]  ? translate_table+0x1020/0x10d0
[  100.120262][ T6282]  ? xt_counters_alloc+0x40/0x50
[  100.120295][ T6282]  vzalloc_noprof+0x82/0xb0
[  100.120385][ T6282]  ? xt_counters_alloc+0x40/0x50
[  100.120536][ T6282]  xt_counters_alloc+0x40/0x50
[  100.120630][ T6282]  __do_replace+0x4d/0x570
[  100.120667][ T6282]  do_ipt_set_ctl+0x774/0x8e0
[  100.120710][ T6282]  nf_setsockopt+0x199/0x1b0
[  100.120740][ T6282]  ip_setsockopt+0x102/0x110
[  100.120786][ T6282]  udp_setsockopt+0x99/0xb0
[  100.120811][ T6282]  sock_common_setsockopt+0x69/0x80
[  100.120845][ T6282]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  100.120906][ T6282]  __sys_setsockopt+0x184/0x200
[  100.120938][ T6282]  __x64_sys_setsockopt+0x64/0x80
[  100.120977][ T6282]  x64_sys_call+0x21d5/0x3000
[  100.121036][ T6282]  do_syscall_64+0xc0/0x2a0
[  100.121066][ T6282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.121099][ T6282] RIP: 0033:0x7fa827e5aeb9
[  100.121115][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.121137][ T6282] RSP: 002b:00007fa8268b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  100.121163][ T6282] RAX: ffffffffffffffda RBX: 00007fa8280d5fa0 RCX: 00007fa827e5aeb9
[  100.121179][ T6282] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005
[  100.121195][ T6282] RBP: 00007fa8268b7090 R08: 0000000000000310 R09: 0000000000000000
[  100.121251][ T6282] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.121267][ T6282] R13: 00007fa8280d6038 R14: 00007fa8280d5fa0 R15: 00007ffec9c03f08
[  100.121329][ T6282]  </TASK>
[  100.121338][ T6282] Mem-Info:
[  100.341767][ T6282] active_anon:10054 inactive_anon:0 isolated_anon:0
[  100.341767][ T6282]  active_file:23254 inactive_file:2340 isolated_file:0
[  100.341767][ T6282]  unevictable:1508 dirty:310 writeback:0
[  100.341767][ T6282]  slab_reclaimable:3506 slab_unreclaimable:15969
[  100.341767][ T6282]  mapped:30853 shmem:1555 pagetables:1932
[  100.341767][ T6282]  sec_pagetables:0 bounce:0
[  100.341767][ T6282]  kernel_misc_reclaimable:0
[  100.341767][ T6282]  free:1879172 free_pcp:6462 free_cma:0
[  100.387031][ T6282] Node 0 active_anon:40216kB inactive_anon:0kB active_file:93016kB inactive_file:9360kB unevictable:6032kB isolated(anon):0kB isolated(file):0kB mapped:123412kB dirty:1240kB writeback:0kB shmem:6220kB kernel_stack:4160kB pagetables:7728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.414614][ T6282] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  100.444371][ T6282] lowmem_reserve[]: 0 2879 7858 7858
[  100.449724][ T6282] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  100.481144][ T6282] lowmem_reserve[]: 0 0 4978 4978
[  100.486251][ T6282] Node 0 Normal free:4556480kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40216kB inactive_anon:0kB active_file:93016kB inactive_file:9360kB unevictable:6032kB writepending:1240kB zspages:0kB present:5242880kB managed:5098240kB mlocked:6032kB bounce:0kB free_pcp:22320kB local_pcp:3400kB free_cma:0kB
[  100.519705][ T6282] lowmem_reserve[]: 0 0 0 0
[  100.524252][ T6282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  100.537533][ T6282] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB
[  100.553751][ T6282] Node 0 Normal: 2267*4kB (UME) 1191*8kB (UME) 491*16kB (UME) 352*32kB (UM) 257*64kB (UME) 122*128kB (UM) 66*256kB (UME) 30*512kB (UM) 16*1024kB (UME) 13*2048kB (UM) 1077*4096kB (M) = 4556436kB
[  100.573467][ T6282] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  100.583329][ T6282] 28622 total pagecache pages
[  100.588089][ T6282] 0 pages in swap cache
[  100.592298][ T6282] Free swap  = 124996kB
[  100.596477][ T6282] Total swap = 124996kB
[  100.600637][ T6282] 2097051 pages RAM
[  100.604489][ T6282] 0 pages HighMem/MovableOnly
[  100.609376][ T6282] 81557 pages reserved
[  100.745989][ T6290] loop7: detected capacity change from 0 to 8192
[  100.820827][   T29] kauditd_printk_skb: 102 callbacks suppressed
[  100.820845][   T29] audit: type=1400 audit(1770028872.072:839): avc:  denied  { read } for  pid=6294 comm="syz.5.830" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  100.850311][   T29] audit: type=1400 audit(1770028872.072:840): avc:  denied  { open } for  pid=6294 comm="syz.5.830" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  100.945420][ T6300] tmpfs: Bad value for 'size'
[  101.045428][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.089493][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.8.836'.
[  101.103972][   T29] audit: type=1400 audit(1770028872.172:841): avc:  denied  { write } for  pid=6294 comm="syz.5.830" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  101.127131][   T29] audit: type=1400 audit(1770028872.172:842): avc:  denied  { ioctl } for  pid=6294 comm="syz.5.830" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  101.152679][   T29] audit: type=1400 audit(1770028872.322:843): avc:  denied  { execute } for  pid=6305 comm="syz.7.835" path="/75/cpu.stat" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.199408][   T29] audit: type=1400 audit(1770028872.432:844): avc:  denied  { getopt } for  pid=6305 comm="syz.7.835" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  101.308776][ T6325] netlink: 'syz.8.842': attribute type 322 has an invalid length.
[  101.416479][ T6333] loop8: detected capacity change from 0 to 2048
[  101.449883][   T29] audit: type=1400 audit(1770028872.702:845): avc:  denied  { mounton } for  pid=6328 comm="syz.8.844" path="/30/file0/file0/file0" dev="loop8" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  101.939556][ T6345] __nla_validate_parse: 1 callbacks suppressed
[  101.939574][ T6345] netlink: 44 bytes leftover after parsing attributes in process `syz.5.849'.
[  101.996572][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.850'.
[  102.533198][   T29] audit: type=1400 audit(1770028873.782:846): avc:  denied  { getopt } for  pid=6364 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  102.686508][ T6376] syzkaller1: entered promiscuous mode
[  102.692047][ T6376] syzkaller1: entered allmulticast mode
[  102.809393][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.861'.
[  102.818479][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.861'.
[  102.830386][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'.
[  102.911349][ T6385] netlink: 'syz.4.863': attribute type 10 has an invalid length.
[  102.916578][   T29] audit: type=1400 audit(1770028874.162:847): avc:  denied  { connect } for  pid=6384 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.938995][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.946340][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.968585][ T6386] syz.4.863(6386): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  102.994609][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.001873][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.009271][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.016414][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.033452][   T29] audit: type=1400 audit(1770028874.282:848): avc:  denied  { cmd } for  pid=6392 comm="syz.8.866" path="socket:[15865]" dev="sockfs" ino=15865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  103.065989][ T6385] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  103.129876][ T5039] udevd[5039]: symlink '../../loop4' '/dev/disk/by-diskseq/194.tmp-b7:4' failed: Read-only file system
[  103.130587][ T6402] batadv1: entered promiscuous mode
[  103.187845][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/193.tmp-b7:7' failed: Read-only file system
[  103.207909][ T5039] udevd[5039]: symlink '../../loop4' '/dev/disk/by-diskseq/194.tmp-b7:4' failed: Read-only file system
[  103.258402][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/193.tmp-b7:7' failed: Read-only file system
[  103.311596][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/196.tmp-b7:8' failed: Read-only file system
[  103.321985][ T6416] loop8: detected capacity change from 0 to 1024
[  103.342138][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/197.tmp-b7:8' failed: Read-only file system
[  103.354350][ T6416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  103.375487][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  103.381316][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.874'.
[  103.486071][ T5805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  103.506842][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-uuid/00000000-0000-0000-0000-001000000000.tmp-b7:8' failed: Read-only file system
[  103.611412][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/197.tmp-b7:8' failed: Read-only file system
[  103.682875][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'.
[  103.692034][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'.
[  103.724918][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  104.002090][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.5.884'.
[  104.061213][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'.
[  104.071096][ T6454] loop5: detected capacity change from 0 to 512
[  104.091614][ T6454] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  104.103476][ T6454] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.887: invalid indirect mapped block 256 (level 1)
[  104.140900][ T6454] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.887: invalid indirect mapped block 2683928664 (level 1)
[  104.187085][ T6469] loop7: detected capacity change from 0 to 128
[  104.208819][ T6454] EXT4-fs (loop5): 1 truncate cleaned up
[  104.215085][ T6454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.232824][ T6469] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.250377][ T6454] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.887: invalid fast symlink length 39
[  104.265734][ T6469] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  104.410739][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.420905][ T5020] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.604294][ T6512] FAULT_INJECTION: forcing a failure.
[  104.604294][ T6512] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  104.617718][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.4.911 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.617831][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  104.617846][ T6512] Call Trace:
[  104.617853][ T6512]  <TASK>
[  104.617867][ T6512]  __dump_stack+0x1d/0x30
[  104.617924][ T6512]  dump_stack_lvl+0x95/0xd0
[  104.617949][ T6512]  dump_stack+0x15/0x1b
[  104.617971][ T6512]  should_fail_ex+0x263/0x280
[  104.618072][ T6512]  should_fail_alloc_page+0xf2/0x100
[  104.618122][ T6512]  __alloc_frozen_pages_noprof+0x108/0x350
[  104.618162][ T6512]  alloc_pages_mpol+0xb3/0x260
[  104.618196][ T6512]  ? css_rstat_updated+0xbb/0x280
[  104.618285][ T6512]  vma_alloc_folio_noprof+0x1a9/0x300
[  104.618319][ T6512]  handle_mm_fault+0x111f/0x3030
[  104.618352][ T6512]  ? vma_start_read+0x1c7/0x2c0
[  104.618452][ T6512]  do_user_addr_fault+0x62f/0x1050
[  104.618484][ T6512]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  104.618510][ T6512]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  104.618570][ T6512]  ? irqentry_exit+0x3c/0x510
[  104.618597][ T6512]  exc_page_fault+0x62/0xa0
[  104.618624][ T6512]  asm_exc_page_fault+0x26/0x30
[  104.618663][ T6512] RIP: 0033:0x7fd839fe2c0a
[  104.618681][ T6512] Code: 00 4c 89 e7 31 c0 48 8d 35 8b 6a 1a 00 e8 ee 68 0e 00 66 0f 6f 05 56 50 1e 00 4c 89 e6 48 8d bc 24 f0 10 00 00 ba 80 00 00 00 <0f> 29 84 24 70 10 00 00 66 0f ef c0 0f 29 84 24 80 10 00 00 0f 29
[  104.618785][ T6512] RSP: 002b:00007fd838b74f60 EFLAGS: 00010202
[  104.618806][ T6512] RAX: 000000000000000b RBX: 0000000000000004 RCX: 0000000000000000
[  104.618821][ T6512] RDX: 0000000000000080 RSI: 00007fd838b74fa0 RDI: 00007fd838b76050
[  104.618837][ T6512] RBP: 00007fd838b75fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  104.618922][ T6512] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fd838b74fa0
[  104.618996][ T6512] R13: 0000200000000080 R14: 0000000000000003 R15: 0000000000000000
[  104.619018][ T6512]  </TASK>
[  104.802998][ T6512] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  105.301689][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.345332][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.353997][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.459614][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.490816][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.520511][ T6551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6551 comm=syz.8.920
[  105.555117][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.608401][ T6557] loop5: detected capacity change from 0 to 8192
[  105.619134][ T6557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.644734][   T52] bridge_slave_1: left allmulticast mode
[  105.650568][   T52] bridge_slave_1: left promiscuous mode
[  105.656337][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.686507][   T52] bridge_slave_0: left allmulticast mode
[  105.692212][   T52] bridge_slave_0: left promiscuous mode
[  105.697969][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.829938][ T6568] forcing mempool usage for bio_alloc_bioset+0x448/0xa50
[  105.830057][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.847118][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.857147][   T52] bond0 (unregistering): Released all slaves
[  105.868929][ T6537] chnl_net:caif_netlink_parms(): no params data found
[  105.910649][ T6581] FAULT_INJECTION: forcing a failure.
[  105.910649][ T6581] name failslab, interval 1, probability 0, space 0, times 0
[  105.923399][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.5.924 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  105.923422][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  105.923431][ T6581] Call Trace:
[  105.923436][ T6581]  <TASK>
[  105.923442][ T6581]  __dump_stack+0x1d/0x30
[  105.923501][ T6581]  dump_stack_lvl+0x95/0xd0
[  105.923516][ T6581]  dump_stack+0x15/0x1b
[  105.923530][ T6581]  should_fail_ex+0x263/0x280
[  105.923551][ T6581]  should_failslab+0x8c/0xb0
[  105.923606][ T6581]  kmem_cache_alloc_noprof+0x68/0x490
[  105.923622][ T6581]  ? pidfs_register_pid+0x87/0x180
[  105.923645][ T6581]  pidfs_register_pid+0x87/0x180
[  105.923740][ T6581]  unix_socketpair+0x7b/0x430
[  105.923758][ T6581]  __sys_socketpair+0x21c/0x420
[  105.923781][ T6581]  __x64_sys_socketpair+0x52/0x60
[  105.923817][ T6581]  x64_sys_call+0x2df3/0x3000
[  105.923840][ T6581]  do_syscall_64+0xc0/0x2a0
[  105.923874][ T6581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.923925][ T6581] RIP: 0033:0x7fa827e5c77a
[  105.923937][ T6581] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.923950][ T6581] RSP: 002b:00007fa8268b6f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  105.924042][ T6581] RAX: ffffffffffffffda RBX: 00007fa8280d5f00 RCX: 00007fa827e5c77a
[  105.924053][ T6581] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  105.924062][ T6581] RBP: 00007fa8268b7090 R08: 0000000000000000 R09: 0000000000000000
[  105.924070][ T6581] R10: 00007fa8268b6f88 R11: 0000000000000246 R12: 0aa7f3cec63cbb9d
[  105.924090][ T6581] R13: 00007fa8280d6038 R14: 00007fa8280d5fa0 R15: 00007ffec9c03f08
[  105.924176][ T6581]  </TASK>
[  105.924416][   T52] hsr_slave_0: left promiscuous mode
[  106.100250][   T52] hsr_slave_1: left promiscuous mode
[  106.105945][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.113511][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.131208][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.132300][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  106.132316][   T29] audit: type=1400 audit(1770028877.382:860): avc:  denied  { create } for  pid=6583 comm="syz.7.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  106.138764][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.145713][   T29] audit: type=1400 audit(1770028877.392:861): avc:  denied  { bind } for  pid=6583 comm="syz.7.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  106.190591][   T29] audit: type=1400 audit(1770028877.422:862): avc:  denied  { getopt } for  pid=6583 comm="syz.7.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  106.211968][   T52] veth1_macvtap: left promiscuous mode
[  106.217658][   T52] veth0_macvtap: left promiscuous mode
[  106.223144][   T52] veth1_vlan: left promiscuous mode
[  106.228636][   T52] veth0_vlan: left promiscuous mode
[  106.302105][   T52] team0 (unregistering): Port device team_slave_1 removed
[  106.311957][   T52] team0 (unregistering): Port device team_slave_0 removed
[  106.344124][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6590 comm=syz.7.926
[  106.367294][ T6586] bond0: entered promiscuous mode
[  106.372382][ T6586] bond_slave_0: entered promiscuous mode
[  106.378226][ T6586] bond_slave_1: entered promiscuous mode
[  106.389688][ T6586] gretap0: entered promiscuous mode
[  106.395941][ T6586] hsr1: entered promiscuous mode
[  106.442385][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.449610][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.456924][ T6537] bridge_slave_0: entered allmulticast mode
[  106.464002][ T6537] bridge_slave_0: entered promiscuous mode
[  106.474047][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.481200][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.488694][ T6537] bridge_slave_1: entered allmulticast mode
[  106.495355][ T6537] bridge_slave_1: entered promiscuous mode
[  106.523060][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.535037][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.575322][ T6537] team0: Port device team_slave_0 added
[  106.596479][ T6608] FAULT_INJECTION: forcing a failure.
[  106.596479][ T6608] name failslab, interval 1, probability 0, space 0, times 0
[  106.609257][ T6608] CPU: 0 UID: 0 PID: 6608 Comm: syz.8.933 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  106.609288][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  106.609301][ T6608] Call Trace:
[  106.609309][ T6608]  <TASK>
[  106.609318][ T6608]  __dump_stack+0x1d/0x30
[  106.609358][ T6608]  dump_stack_lvl+0x95/0xd0
[  106.609448][ T6608]  dump_stack+0x15/0x1b
[  106.609472][ T6608]  should_fail_ex+0x263/0x280
[  106.609533][ T6608]  should_failslab+0x8c/0xb0
[  106.609563][ T6608]  kmem_cache_alloc_lru_noprof+0x6c/0x490
[  106.609592][ T6608]  ? __d_alloc+0x37/0x340
[  106.609700][ T6608]  __d_alloc+0x37/0x340
[  106.609730][ T6608]  ? default_pointer+0xf2/0x5e0
[  106.609818][ T6608]  d_alloc+0x2e/0x100
[  106.609920][ T6608]  lookup_one_qstr_excl+0x99/0x250
[  106.610003][ T6608]  start_dirop+0x3e/0x70
[  106.610034][ T6608]  simple_start_creating+0xa2/0xd0
[  106.610065][ T6608]  debugfs_start_creating+0xda/0x150
[  106.610144][ T6608]  __debugfs_create_file+0x70/0x2b0
[  106.610245][ T6608]  debugfs_create_file_full+0x3f/0x60
[  106.610283][ T6608]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  106.610313][ T6608]  ref_tracker_dir_debugfs+0x10e/0x220
[  106.610411][ T6608]  alloc_netdev_mqs+0x1a7/0xa40
[  106.610438][ T6608]  rtnl_create_link+0x239/0x720
[  106.610478][ T6608]  rtnl_newlink_create+0x174/0x650
[  106.610587][ T6608]  rtnl_newlink+0xf5b/0x1370
[  106.610623][ T6608]  ? __rcu_read_unlock+0x4e/0x70
[  106.610659][ T6608]  ? __memcg_slab_free_hook+0x135/0x230
[  106.610698][ T6608]  ? __rcu_read_unlock+0x4e/0x70
[  106.610787][ T6608]  ? avc_has_perm_noaudit+0xab/0x130
[  106.610837][ T6608]  ? cred_has_capability+0x224/0x290
[  106.610872][ T6608]  ? selinux_capable+0x31/0x40
[  106.610963][ T6608]  ? security_capable+0x7b/0x90
[  106.610998][ T6608]  ? ns_capable+0x7c/0xb0
[  106.611029][ T6608]  ? __pfx_rtnl_newlink+0x10/0x10
[  106.611057][ T6608]  rtnetlink_rcv_msg+0x64b/0x720
[  106.611112][ T6608]  netlink_rcv_skb+0x123/0x220
[  106.611197][ T6608]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  106.611232][ T6608]  rtnetlink_rcv+0x1c/0x30
[  106.611309][ T6608]  netlink_unicast+0x5c0/0x690
[  106.611372][ T6608]  netlink_sendmsg+0x5c8/0x6f0
[  106.611400][ T6608]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.611494][ T6608]  ____sys_sendmsg+0x5af/0x600
[  106.611520][ T6608]  ___sys_sendmsg+0x195/0x1e0
[  106.611581][ T6608]  __x64_sys_sendmsg+0xd4/0x160
[  106.611603][ T6608]  x64_sys_call+0x17ba/0x3000
[  106.611628][ T6608]  do_syscall_64+0xc0/0x2a0
[  106.611710][ T6608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.611788][ T6608] RIP: 0033:0x7f60dc48aeb9
[  106.611805][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.611823][ T6608] RSP: 002b:00007f60daee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.611905][ T6608] RAX: ffffffffffffffda RBX: 00007f60dc705fa0 RCX: 00007f60dc48aeb9
[  106.611927][ T6608] RDX: 0000000000004880 RSI: 0000200000000140 RDI: 0000000000000004
[  106.611943][ T6608] RBP: 00007f60daee7090 R08: 0000000000000000 R09: 0000000000000000
[  106.611960][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.611976][ T6608] R13: 00007f60dc706038 R14: 00007f60dc705fa0 R15: 00007ffc2b308708
[  106.611999][ T6608]  </TASK>
[  106.936530][ T6537] team0: Port device team_slave_1 added
[  106.954150][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.961291][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.961660][ T6608] __nla_validate_parse: 8 callbacks suppressed
[  106.961674][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.8.933'.
[  106.987295][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.999562][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.019934][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.046092][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.101453][ T6633] loop5: detected capacity change from 0 to 1024
[  107.131178][ T6633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  107.141552][ T6633] System zones: 0-1, 3-36
[  107.153550][ T6633] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.936: bad orphan inode 134217728
[  107.217486][ T6633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.288751][ T6537] hsr_slave_0: entered promiscuous mode
[  107.302004][ T6537] hsr_slave_1: entered promiscuous mode
[  107.317482][ T6537] debugfs: 'hsr0' already exists in 'hsr'
[  107.323283][ T6537] Cannot create hsr debugfs directory
[  107.445253][   T29] audit: type=1400 audit(1770028878.672:863): avc:  denied  { name_bind } for  pid=6659 comm="syz.4.939" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  107.471141][ T6661] ipt_rpfilter: unknown options
[  107.487697][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.940'.
[  107.496734][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.940'.
[  107.522583][ T6661] loop4: detected capacity change from 0 to 256
[  107.548160][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'.
[  107.557195][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  107.680715][ T6537] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  107.736085][ T6537] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  107.748977][ T6537] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  107.768363][ T6537] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  107.794513][   T29] audit: type=1400 audit(1770028879.042:864): avc:  denied  { write } for  pid=6682 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  107.815156][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.875663][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.5.945'.
[  107.901798][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.933283][ T6537] 8021q: adding VLAN 0 to HW filter on device team0
[  107.958413][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.965513][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.990135][ T6537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.000765][ T6537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.015795][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.022995][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.031583][ T6712] loop5: detected capacity change from 0 to 128
[  108.093767][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'.
[  108.094245][ T6712] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.102720][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'.
[  108.124107][ T6712] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  108.192456][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.233684][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/207.tmp-b7:4' failed: Read-only file system
[  108.256584][ T6734] loop8: detected capacity change from 0 to 512
[  108.256832][ T5039] udevd[5039]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system
[  108.263391][ T6734] EXT4-fs: Ignoring removed i_version option
[  108.301862][ T6734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.302534][ T4775] udevd[4775]: symlink '../../loop8' '/dev/disk/by-diskseq/198.tmp-b7:8' failed: Read-only file system
[  108.340356][ T4775] udevd[4775]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  108.366284][   T29] audit: type=1400 audit(1770028879.592:865): avc:  denied  { setattr } for  pid=6732 comm="syz.8.953" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  108.388798][   T29] audit: type=1326 audit(1770028879.592:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dc48aeb9 code=0x7ffc0000
[  108.412080][   T29] audit: type=1326 audit(1770028879.592:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60dc48aeb9 code=0x7ffc0000
[  108.435771][   T29] audit: type=1326 audit(1770028879.592:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dc48aeb9 code=0x7ffc0000
[  108.457130][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.459086][   T29] audit: type=1326 audit(1770028879.592:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60dc48aeb9 code=0x7ffc0000
[  108.477381][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/210.tmp-b7:8' failed: Read-only file system
[  108.504516][ T4775] udevd[4775]: symlink '../../loop4' '/dev/disk/by-diskseq/207.tmp-b7:4' failed: Read-only file system
[  108.517537][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.527375][ T5039] udevd[5039]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system
[  108.531999][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  108.570662][ T6754] tmpfs: Bad value for 'size'
[  108.585974][ T6754] FAULT_INJECTION: forcing a failure.
[  108.585974][ T6754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.588511][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/210.tmp-b7:8' failed: Read-only file system
[  108.599248][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.7.955 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  108.599277][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  108.599361][ T6754] Call Trace:
[  108.599369][ T6754]  <TASK>
[  108.599378][ T6754]  __dump_stack+0x1d/0x30
[  108.599472][ T6754]  dump_stack_lvl+0x95/0xd0
[  108.599496][ T6754]  dump_stack+0x15/0x1b
[  108.599518][ T6754]  should_fail_ex+0x263/0x280
[  108.599568][ T6754]  should_fail+0xb/0x20
[  108.599597][ T6754]  should_fail_usercopy+0x1a/0x20
[  108.599710][ T6754]  _copy_to_user+0x20/0xa0
[  108.599748][ T6754]  simple_read_from_buffer+0xb5/0x130
[  108.599784][ T6754]  proc_fail_nth_read+0x10e/0x150
[  108.599858][ T6754]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  108.599893][ T6754]  vfs_read+0x1ab/0x7f0
[  108.599913][ T6754]  ? __rcu_read_unlock+0x4e/0x70
[  108.599953][ T6754]  ? __fget_files+0x184/0x1c0
[  108.599976][ T6754]  ? mutex_lock+0x57/0x90
[  108.600023][ T6754]  ksys_read+0xdc/0x1a0
[  108.600044][ T6754]  __x64_sys_read+0x40/0x50
[  108.600065][ T6754]  x64_sys_call+0x2889/0x3000
[  108.600091][ T6754]  do_syscall_64+0xc0/0x2a0
[  108.600176][ T6754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.600199][ T6754] RIP: 0033:0x7f7252c8b78e
[  108.600217][ T6754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  108.600237][ T6754] RSP: 002b:00007f7251726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  108.600315][ T6754] RAX: ffffffffffffffda RBX: 00007f72517276c0 RCX: 00007f7252c8b78e
[  108.600331][ T6754] RDX: 000000000000000f RSI: 00007f72517270a0 RDI: 0000000000000003
[  108.600345][ T6754] RBP: 00007f7251727090 R08: 0000000000000000 R09: 0000000000000000
[  108.600359][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  108.600452][ T6754] R13: 00007f7252f46038 R14: 00007f7252f45fa0 R15: 00007ffd61e15a38
[  108.600516][ T6754]  </TASK>
[  108.628620][ T5039] udevd[5039]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system
[  108.720697][ T5805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.852812][ T6537] veth0_vlan: entered promiscuous mode
[  108.889131][ T6537] veth1_vlan: entered promiscuous mode
[  108.917404][ T6537] veth0_macvtap: entered promiscuous mode
[  108.928811][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.949225][ T6537] veth1_macvtap: entered promiscuous mode
[  108.975335][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.960'.
[  108.976780][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.984306][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.960'.
[  109.006550][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.018427][ T5184] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.039011][ T5184] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.055954][ T5184] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.104209][ T5184] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.433769][ T6826] FAULT_INJECTION: forcing a failure.
[  109.433769][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.446903][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.7.968 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  109.447012][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  109.447028][ T6826] Call Trace:
[  109.447037][ T6826]  <TASK>
[  109.447046][ T6826]  __dump_stack+0x1d/0x30
[  109.447075][ T6826]  dump_stack_lvl+0x95/0xd0
[  109.447134][ T6826]  dump_stack+0x15/0x1b
[  109.447159][ T6826]  should_fail_ex+0x263/0x280
[  109.447190][ T6826]  should_fail+0xb/0x20
[  109.447276][ T6826]  should_fail_usercopy+0x1a/0x20
[  109.447314][ T6826]  _copy_from_iter+0xcf/0xea0
[  109.447334][ T6826]  ? __alloc_skb+0x397/0x4b0
[  109.447430][ T6826]  ? __alloc_skb+0x219/0x4b0
[  109.447463][ T6826]  netlink_sendmsg+0x4ae/0x6f0
[  109.447489][ T6826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.447514][ T6826]  ____sys_sendmsg+0x5af/0x600
[  109.447591][ T6826]  ___sys_sendmsg+0x195/0x1e0
[  109.447625][ T6826]  __sys_sendmmsg+0x185/0x320
[  109.447728][ T6826]  __x64_sys_sendmmsg+0x57/0x70
[  109.447753][ T6826]  x64_sys_call+0x1e28/0x3000
[  109.447784][ T6826]  do_syscall_64+0xc0/0x2a0
[  109.447819][ T6826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.447893][ T6826] RIP: 0033:0x7f7252ccaeb9
[  109.447922][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.447941][ T6826] RSP: 002b:00007f7251727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  109.447964][ T6826] RAX: ffffffffffffffda RBX: 00007f7252f45fa0 RCX: 00007f7252ccaeb9
[  109.447987][ T6826] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  109.448004][ T6826] RBP: 00007f7251727090 R08: 0000000000000000 R09: 0000000000000000
[  109.448020][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.448033][ T6826] R13: 00007f7252f46038 R14: 00007f7252f45fa0 R15: 00007ffd61e15a38
[  109.448051][ T6826]  </TASK>
[  110.009451][ T6859] loop7: detected capacity change from 0 to 512
[  110.017820][ T6859] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  110.034941][ T6859] EXT4-fs (loop7): 1 truncate cleaned up
[  110.045523][ T6859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.084792][ T6867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32622 sclass=netlink_route_socket pid=6867 comm=syz.9.980
[  110.115713][ T6869] loop4: detected capacity change from 0 to 2048
[  110.176111][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ba8fa00: rx timeout, send abort
[  110.185392][ T6878] FAULT_INJECTION: forcing a failure.
[  110.185392][ T6878] name failslab, interval 1, probability 0, space 0, times 0
[  110.188296][ T5020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.198160][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.4.983 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  110.198189][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  110.198280][ T6878] Call Trace:
[  110.198287][ T6878]  <TASK>
[  110.198295][ T6878]  __dump_stack+0x1d/0x30
[  110.198322][ T6878]  dump_stack_lvl+0x95/0xd0
[  110.198346][ T6878]  dump_stack+0x15/0x1b
[  110.198403][ T6878]  should_fail_ex+0x263/0x280
[  110.198509][ T6878]  should_failslab+0x8c/0xb0
[  110.198534][ T6878]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  110.198561][ T6878]  ? __alloc_skb+0x2f0/0x4b0
[  110.198593][ T6878]  __alloc_skb+0x2f0/0x4b0
[  110.198637][ T6878]  ? __alloc_skb+0x219/0x4b0
[  110.198666][ T6878]  netlink_ack+0xfd/0x500
[  110.198702][ T6878]  netlink_rcv_skb+0x192/0x220
[  110.198771][ T6878]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  110.198836][ T6878]  rtnetlink_rcv+0x1c/0x30
[  110.198858][ T6878]  netlink_unicast+0x5c0/0x690
[  110.198956][ T6878]  netlink_sendmsg+0x5c8/0x6f0
[  110.198980][ T6878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.199001][ T6878]  ____sys_sendmsg+0x5af/0x600
[  110.199025][ T6878]  ___sys_sendmsg+0x195/0x1e0
[  110.199065][ T6878]  __x64_sys_sendmsg+0xd4/0x160
[  110.199089][ T6878]  x64_sys_call+0x17ba/0x3000
[  110.199161][ T6878]  do_syscall_64+0xc0/0x2a0
[  110.199192][ T6878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.199216][ T6878] RIP: 0033:0x7fd83a11aeb9
[  110.199234][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.199254][ T6878] RSP: 002b:00007fd838b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.199312][ T6878] RAX: ffffffffffffffda RBX: 00007fd83a395fa0 RCX: 00007fd83a11aeb9
[  110.199328][ T6878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  110.199342][ T6878] RBP: 00007fd838b77090 R08: 0000000000000000 R09: 0000000000000000
[  110.199357][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.199370][ T6878] R13: 00007fd83a396038 R14: 00007fd83a395fa0 R15: 00007ffe64bcec58
[  110.199416][ T6878]  </TASK>
[  110.450053][ T6893] batadv_slave_1: entered promiscuous mode
[  110.470998][ T6893] batadv_slave_1: left promiscuous mode
[  110.684392][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ba8fa00: abort rx timeout. Force session deactivation
[  111.033317][ T6903] loop7: detected capacity change from 0 to 8192
[  111.049812][ T6903] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.128895][ T6921] loop8: detected capacity change from 0 to 2048
[  111.154451][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  111.154471][   T29] audit: type=1400 audit(1770028882.402:910): avc:  denied  { watch } for  pid=6902 comm="syz.7.994" path="/105/file0" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  111.225475][ T6932] FAULT_INJECTION: forcing a failure.
[  111.225475][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.238676][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.5.1004 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  111.238764][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  111.238855][ T6932] Call Trace:
[  111.238863][ T6932]  <TASK>
[  111.238871][ T6932]  __dump_stack+0x1d/0x30
[  111.238900][ T6932]  dump_stack_lvl+0x95/0xd0
[  111.238925][ T6932]  dump_stack+0x15/0x1b
[  111.238994][ T6932]  should_fail_ex+0x263/0x280
[  111.239104][ T6932]  should_fail+0xb/0x20
[  111.239132][ T6932]  should_fail_usercopy+0x1a/0x20
[  111.239162][ T6932]  _copy_from_user+0x1c/0xb0
[  111.239191][ T6932]  ___sys_sendmsg+0xc1/0x1e0
[  111.239332][ T6932]  __x64_sys_sendmsg+0xd4/0x160
[  111.239361][ T6932]  x64_sys_call+0x17ba/0x3000
[  111.239390][ T6932]  do_syscall_64+0xc0/0x2a0
[  111.239421][ T6932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.239496][ T6932] RIP: 0033:0x7fa827e5aeb9
[  111.239517][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.239539][ T6932] RSP: 002b:00007fa8268b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.239646][ T6932] RAX: ffffffffffffffda RBX: 00007fa8280d5fa0 RCX: 00007fa827e5aeb9
[  111.239664][ T6932] RDX: 0000000000008800 RSI: 0000200000000180 RDI: 0000000000000004
[  111.239680][ T6932] RBP: 00007fa8268b7090 R08: 0000000000000000 R09: 0000000000000000
[  111.239695][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.239707][ T6932] R13: 00007fa8280d6038 R14: 00007fa8280d5fa0 R15: 00007ffec9c03f08
[  111.239726][ T6932]  </TASK>
[  111.801027][   T29] audit: type=1400 audit(1770028883.052:911): avc:  denied  { getopt } for  pid=6948 comm="syz.9.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  112.068182][ T6931] syz.8.1005 (6931) used greatest stack depth: 8968 bytes left
[  112.093149][ T6966] loop7: detected capacity change from 0 to 1024
[  112.093936][ T6965] loop5: detected capacity change from 0 to 1024
[  112.132754][ T6966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.133019][ T6965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  112.158457][ T6965] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.193315][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  112.215573][ T6982] __nla_validate_parse: 8 callbacks suppressed
[  112.215590][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1018'.
[  112.225087][ T6979] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  112.253257][ T6979] bond1 (unregistering): Released all slaves
[  112.424508][ T6996] netlink: 'syz.9.1025': attribute type 12 has an invalid length.
[  112.479198][ T7000] syzkaller0: entered promiscuous mode
[  112.484805][ T7000] syzkaller0: entered allmulticast mode
[  112.543883][ T7005] syzkaller0: entered promiscuous mode
[  112.549538][ T7005] syzkaller0: entered allmulticast mode
[  112.560372][ T7010] loop4: detected capacity change from 0 to 512
[  112.572539][ T7010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  112.582952][ T7005] net_ratelimit: 83 callbacks suppressed
[  112.582970][ T7005] 0: reclassify loop, rule prio 0, protocol 800
[  112.618692][ T7010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  112.672084][ T7010] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.766071][   T29] audit: type=1400 audit(1770028884.012:912): avc:  denied  { append } for  pid=7009 comm="syz.4.1031" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  112.801859][ T7010] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  112.813020][ T7010] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  112.831815][ T7010] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1031: Failed to acquire dquot type 0
[  112.922547][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  112.988925][ T5020] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  112.999949][ T5020] CPU: 0 UID: 0 PID: 5020 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.999978][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  113.000009][ T5020] Call Trace:
[  113.000016][ T5020]  <TASK>
[  113.000025][ T5020]  __dump_stack+0x1d/0x30
[  113.000137][ T5020]  dump_stack_lvl+0x95/0xd0
[  113.000163][ T5020]  dump_stack+0x15/0x1b
[  113.000249][ T5020]  dump_header+0x80/0x240
[  113.000270][ T5020]  oom_kill_process+0x295/0x350
[  113.000300][ T5020]  out_of_memory+0x97d/0xb80
[  113.000409][ T5020]  try_charge_memcg+0x62e/0xa10
[  113.000443][ T5020]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  113.000487][ T5020]  __read_swap_cache_async+0x17b/0x2d0
[  113.000520][ T5020]  swap_cluster_readahead+0x362/0x3c0
[  113.000625][ T5020]  swapin_readahead+0xde/0x840
[  113.000658][ T5020]  ? __perf_event_task_sched_in+0xa65/0xad0
[  113.000710][ T5020]  ? __rcu_read_unlock+0x4e/0x70
[  113.000781][ T5020]  ? swap_cache_get_folio+0x26f/0x280
[  113.000812][ T5020]  do_swap_page+0x59b/0x2a50
[  113.000850][ T5020]  ? finish_task_switch+0x79/0x280
[  113.000899][ T5020]  ? __schedule+0x82d/0xc90
[  113.000922][ T5020]  ? __rcu_read_lock+0x36/0x50
[  113.000956][ T5020]  ? __pfx_default_wake_function+0x10/0x10
[  113.000995][ T5020]  handle_mm_fault+0xb40/0x3030
[  113.001051][ T5020]  ? vma_start_read+0x1c7/0x2c0
[  113.001088][ T5020]  do_user_addr_fault+0x62f/0x1050
[  113.001242][ T5020]  exc_page_fault+0x62/0xa0
[  113.001272][ T5020]  asm_exc_page_fault+0x26/0x30
[  113.001298][ T5020] RIP: 0033:0x7f7252c860d7
[  113.001319][ T5020] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  113.001398][ T5020] RSP: 002b:00007ffd61e15d30 EFLAGS: 00010202
[  113.001420][ T5020] RAX: 0000000000000000 RBX: 0000555564242500 RCX: 00007f7252c860d7
[  113.001437][ T5020] RDX: 00007ffd61e15d70 RSI: 0000000000000000 RDI: 0000000000000000
[  113.001453][ T5020] RBP: 00007ffd61e15ddc R08: 0000000000000000 R09: 0000000000000000
[  113.001538][ T5020] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  113.001554][ T5020] R13: 00000000000927c0 R14: 000000000001b7d8 R15: 00007ffd61e15e30
[  113.001603][ T5020]  </TASK>
[  113.001611][ T5020] memory: usage 307200kB, limit 307200kB, failcnt 249
[  113.070390][   T29] audit: type=1400 audit(1770028884.322:913): avc:  denied  { execute_no_trans } for  pid=7024 comm="syz.8.1035" path="/74/file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.072396][ T5020] memory+swap: usage 310304kB, limit 9007199254740988kB, failcnt 0
[  113.072456][ T5020] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  113.072470][ T5020] Memory cgroup stats for /syz7:
[  113.082871][ T5020] cache 8192
[  113.276098][ T5020] rss 0
[  113.279045][ T5020] shmem 0
[  113.282057][ T5020] mapped_file 3280896
[  113.286024][ T5020] dirty 0
[  113.288987][ T5020] writeback 0
[  113.292277][ T5020] workingset_refault_anon 77
[  113.296882][ T5020] workingset_refault_file 0
[  113.301597][ T5020] swap 3178496
[  113.304955][ T5020] swapcached 0
[  113.308436][ T5020] pgpgin 19024
[  113.311987][ T5020] pgpgout 19022
[  113.315432][ T5020] pgfault 36439
[  113.319079][ T5020] pgmajfault 51
[  113.322556][ T5020] inactive_anon 0
[  113.326557][ T5020] active_anon 0
[  113.330033][ T5020] inactive_file 8192
[  113.333944][ T5020] active_file 0
[  113.337786][ T5020] unevictable 0
[  113.341261][ T5020] hierarchical_memory_limit 314572800
[  113.346692][ T5020] hierarchical_memsw_limit 9223372036854771712
[  113.352877][ T5020] total_cache 8192
[  113.356617][ T5020] total_rss 0
[  113.359917][ T5020] total_shmem 0
[  113.363371][ T5020] total_mapped_file 3280896
[  113.367888][ T5020] total_dirty 0
[  113.371352][ T5020] total_writeback 0
[  113.375165][ T5020] total_workingset_refault_anon 77
[  113.380429][ T5020] total_workingset_refault_file 0
[  113.385453][ T5020] total_swap 3178496
[  113.389376][ T5020] total_swapcached 0
[  113.393363][ T5020] total_pgpgin 19024
[  113.397357][ T5020] total_pgpgout 19022
[  113.401398][ T5020] total_pgfault 36439
[  113.405402][ T5020] total_pgmajfault 51
[  113.409710][ T5020] total_inactive_anon 0
[  113.413894][ T5020] total_active_anon 0
[  113.418040][ T5020] total_inactive_file 8192
[  113.422469][ T5020] total_active_file 0
[  113.426490][ T5020] total_unevictable 0
[  113.430547][ T5020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1016,pid=6964,uid=0
[  113.445384][ T5020] Memory cgroup out of memory: Killed process 6964 (syz.7.1016) total-vm:97336kB, anon-rss:1332kB, file-rss:25892kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  113.498261][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/225.tmp-b7:4' failed: Read-only file system
[  113.511756][ T6966] syz.7.1016 (6966) used greatest stack depth: 7232 bytes left
[  113.533126][ T5020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.552892][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/225.tmp-b7:4' failed: Read-only file system
[  113.583587][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/219.tmp-b7:8' failed: Read-only file system
[  113.590814][ T5039] udevd[5039]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  113.614859][ T7034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1039'.
[  113.632511][ T7039] loop8: detected capacity change from 0 to 512
[  113.641077][ T4793] udevd[4793]: symlink '../../loop5' '/dev/disk/by-diskseq/223.tmp-b7:5' failed: Read-only file system
[  113.647246][ T5039] udevd[5039]: symlink '../../loop7' '/dev/disk/by-diskseq/221.tmp-b7:7' failed: Read-only file system
[  113.666531][ T7039] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  113.683488][ T4775] udevd[4775]: symlink '../../loop8' '/dev/disk/by-diskseq/227.tmp-b7:8' failed: Read-only file system
[  113.702318][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/225.tmp-b7:4' failed: Read-only file system
[  113.711795][ T4775] udevd[4775]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  113.717149][ T7039] EXT4-fs (loop8): 1 truncate cleaned up
[  113.731289][ T5039] udevd[5039]: symlink '../../loop7' '/dev/disk/by-diskseq/221.tmp-b7:7' failed: Read-only file system
[  113.750487][ T7039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.772278][   T29] audit: type=1400 audit(1770028884.992:914): avc:  denied  { create } for  pid=7035 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  113.826826][ T7049] loop9: detected capacity change from 0 to 512
[  113.857652][ T7049] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  113.872563][ T7049] EXT4-fs (loop9): mount failed
[  113.891187][ T5805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.940378][   T29] audit: type=1400 audit(1770028885.192:915): avc:  denied  { append } for  pid=7056 comm="syz.7.1047" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  114.002789][   T29] audit: type=1400 audit(1770028885.222:916): avc:  denied  { create } for  pid=7062 comm="syz.8.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  114.023060][   T29] audit: type=1400 audit(1770028885.222:917): avc:  denied  { write } for  pid=7062 comm="syz.8.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  114.118625][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'.
[  114.529750][ T7086] loop4: detected capacity change from 0 to 128
[  114.555471][ T7086] EXT4-fs: Ignoring removed nobh option
[  114.582450][ T7086] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  114.599483][ T7095] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512)
[  114.607229][ T7095] FAT-fs (loop8): Filesystem has been set read-only
[  114.616862][ T7095] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8)
[  114.652456][ T7086] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.664807][ T7086] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.1057: checksumming directory block 0
[  114.678367][ T7086] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.1057: checksumming directory block 0
[  114.708885][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.827296][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1067'.
[  114.845038][ T7112] FAULT_INJECTION: forcing a failure.
[  114.845038][ T7112] name failslab, interval 1, probability 0, space 0, times 0
[  114.857801][ T7112] CPU: 1 UID: 0 PID: 7112 Comm: syz.8.1067 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.857860][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.857877][ T7112] Call Trace:
[  114.857885][ T7112]  <TASK>
[  114.857895][ T7112]  __dump_stack+0x1d/0x30
[  114.857926][ T7112]  dump_stack_lvl+0x95/0xd0
[  114.857953][ T7112]  dump_stack+0x15/0x1b
[  114.858006][ T7112]  should_fail_ex+0x263/0x280
[  114.858040][ T7112]  should_failslab+0x8c/0xb0
[  114.858108][ T7112]  kmem_cache_alloc_noprof+0x68/0x490
[  114.858200][ T7112]  ? skb_clone+0x151/0x1f0
[  114.858286][ T7112]  skb_clone+0x151/0x1f0
[  114.858308][ T7112]  __netlink_deliver_tap+0x2c9/0x500
[  114.858351][ T7112]  ? netlink_attachskb+0x2e2/0x660
[  114.858389][ T7112]  netlink_sendskb+0x126/0x150
[  114.858452][ T7112]  netlink_unicast+0x2a2/0x690
[  114.858484][ T7112]  netlink_ack+0x4c8/0x500
[  114.858603][ T7112]  netlink_rcv_skb+0x192/0x220
[  114.858684][ T7112]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  114.858720][ T7112]  rtnetlink_rcv+0x1c/0x30
[  114.858747][ T7112]  netlink_unicast+0x5c0/0x690
[  114.858778][ T7112]  netlink_sendmsg+0x5c8/0x6f0
[  114.858824][ T7112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.858918][ T7112]  ____sys_sendmsg+0x5af/0x600
[  114.858964][ T7112]  ___sys_sendmsg+0x195/0x1e0
[  114.858994][ T7112]  __x64_sys_sendmsg+0xd4/0x160
[  114.859023][ T7112]  x64_sys_call+0x17ba/0x3000
[  114.859055][ T7112]  do_syscall_64+0xc0/0x2a0
[  114.859148][ T7112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.859176][ T7112] RIP: 0033:0x7f60dc48aeb9
[  114.859196][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.859220][ T7112] RSP: 002b:00007f60daee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.859262][ T7112] RAX: ffffffffffffffda RBX: 00007f60dc705fa0 RCX: 00007f60dc48aeb9
[  114.859277][ T7112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  114.859290][ T7112] RBP: 00007f60daee7090 R08: 0000000000000000 R09: 0000000000000000
[  114.859303][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.859315][ T7112] R13: 00007f60dc706038 R14: 00007f60dc705fa0 R15: 00007ffc2b308708
[  114.859338][ T7112]  </TASK>
[  115.142634][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1071'.
[  115.282612][ T7129] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1073'.
[  115.456710][ T7135] set_capacity_and_notify: 1 callbacks suppressed
[  115.456724][ T7135] loop8: detected capacity change from 0 to 128
[  115.572766][ T7142] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512)
[  115.580480][ T7142] FAT-fs (loop8): Filesystem has been set read-only
[  115.593605][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.610407][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.690053][ T7150] loop5: detected capacity change from 0 to 8192
[  115.702448][ T7150] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.710209][ T7152] loop7: detected capacity change from 0 to 8192
[  115.725814][ T7152] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.928715][ T7160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.147720][ T7183] loop4: detected capacity change from 0 to 2048
[  116.154490][ T7183] ext2: Unknown parameter 'euid>00000000000000000000'
[  116.249904][ T7187] FAULT_INJECTION: forcing a failure.
[  116.249904][ T7187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.263044][ T7187] CPU: 1 UID: 0 PID: 7187 Comm: syz.9.1094 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  116.263067][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.263075][ T7187] Call Trace:
[  116.263080][ T7187]  <TASK>
[  116.263087][ T7187]  __dump_stack+0x1d/0x30
[  116.263135][ T7187]  dump_stack_lvl+0x95/0xd0
[  116.263151][ T7187]  dump_stack+0x15/0x1b
[  116.263216][ T7187]  should_fail_ex+0x263/0x280
[  116.263262][ T7187]  should_fail+0xb/0x20
[  116.263281][ T7187]  should_fail_usercopy+0x1a/0x20
[  116.263303][ T7187]  _copy_from_user+0x1c/0xb0
[  116.263333][ T7187]  raw_ioctl+0x642/0x1e10
[  116.263353][ T7187]  ? ioctl_has_perm+0x27e/0x2d0
[  116.263378][ T7187]  ? __pfx_raw_ioctl+0x10/0x10
[  116.263397][ T7187]  __se_sys_ioctl+0xce/0x140
[  116.263597][ T7187]  __x64_sys_ioctl+0x43/0x50
[  116.263641][ T7187]  x64_sys_call+0x14b0/0x3000
[  116.263658][ T7187]  do_syscall_64+0xc0/0x2a0
[  116.263680][ T7187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.263696][ T7187] RIP: 0033:0x7f2edcf1ab4b
[  116.263709][ T7187] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  116.263783][ T7187] RSP: 002b:00007f2edb974f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.263799][ T7187] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2edcf1ab4b
[  116.263845][ T7187] RDX: 00007f2edb975fd0 RSI: 0000000041015500 RDI: 0000000000000004
[  116.263854][ T7187] RBP: 00007f2edb975fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  116.263864][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2edb974fa0
[  116.263873][ T7187] R13: 0000200000000080 R14: 0000000000000003 R15: 0000000000000000
[  116.263936][ T7187]  </TASK>
[  116.444416][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1093'.
[  116.461538][ T7191] loop7: detected capacity change from 0 to 512
[  116.469866][ T7191] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  116.482091][ T7191] EXT4-fs (loop7): 1 truncate cleaned up
[  116.488380][ T7191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.508857][ T7189] netlink: 'syz.4.1093': attribute type 10 has an invalid length.
[  116.516816][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1093'.
[  116.531266][ T7189] team0: Port device geneve1 added
[  116.605753][ T5020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.678210][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1096'.
[  116.687582][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1096'.
[  116.754871][ T7197] loop5: detected capacity change from 0 to 128
[  116.812850][ T7197] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512)
[  116.820494][ T7197] FAT-fs (loop5): Filesystem has been set read-only
[  116.918836][ T7210] xt_CT: No such helper "snmp"
[  116.963693][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.979548][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.012513][ T7212] pim6reg1: entered promiscuous mode
[  117.094604][ T7220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7220 comm=syz.4.1106
[  117.235461][ T7223] loop9: detected capacity change from 0 to 512
[  117.244706][ T7223] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  117.257657][ T7223] EXT4-fs (loop9): 1 truncate cleaned up
[  117.263851][ T7223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.301964][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  117.301983][   T29] audit: type=1326 audit(1770028888.552:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.332557][   T29] audit: type=1326 audit(1770028888.582:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.356073][   T29] audit: type=1326 audit(1770028888.582:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.379536][   T29] audit: type=1326 audit(1770028888.582:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.403153][   T29] audit: type=1326 audit(1770028888.582:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.426624][   T29] audit: type=1326 audit(1770028888.582:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.450149][   T29] audit: type=1326 audit(1770028888.582:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.473550][   T29] audit: type=1326 audit(1770028888.582:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.496931][   T29] audit: type=1326 audit(1770028888.582:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.520419][   T29] audit: type=1326 audit(1770028888.582:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a11aeb9 code=0x7ffc0000
[  117.545187][ T6537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.613751][ T7237] loop7: detected capacity change from 0 to 512
[  117.622220][ T7237] EXT4-fs (loop7): orphan cleanup on readonly fs
[  117.629194][ T7237] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #11: block 1: comm syz.7.1112: lblock 0 mapped to illegal pblock 1 (length 1)
[  117.643790][ T7237] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  117.660006][ T7237] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.1112: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  117.675834][ T7237] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.1112: ea_inode dec ref err=-117
[  117.688861][ T7237] EXT4-fs (loop7): 1 orphan inode deleted
[  117.695077][ T7237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  117.718713][ T5020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.766340][ T7244] loop7: detected capacity change from 0 to 8192
[  117.773820][ T7244] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.815831][ T7246] Cannot find set identified by id 0 to match
[  117.877475][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1120'.
[  117.891648][ T7249] loop5: detected capacity change from 0 to 1024
[  117.928327][ T7249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.003631][ T7257] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.100526][ T7273] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1127'.
[  118.117520][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.281126][ T7257] netlink: 'syz.4.1122': attribute type 10 has an invalid length.
[  118.289090][ T7257] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1122'.
[  118.298093][ T7257] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  118.318340][ T7290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7290 comm=syz.7.1126
[  118.331419][ T7291] pim6reg1: entered promiscuous mode
[  118.456799][ T7305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  118.457501][ T7312] netlink: 'syz.8.1131': attribute type 1 has an invalid length.
[  118.497155][ T7305] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  118.510207][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/259.tmp-b7:4' failed: Read-only file system
[  118.511305][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  118.547462][ T7305] EXT4-fs (loop4): 1 truncate cleaned up
[  118.559290][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/256.tmp-b7:7' failed: Read-only file system
[  118.570852][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.603778][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/256.tmp-b7:7' failed: Read-only file system
[  118.647248][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1138'.
[  118.666369][ T4793] udevd[4793]: symlink '../../loop9' '/dev/disk/by-diskseq/248.tmp-b7:9' failed: Read-only file system
[  118.706557][ T5039] udevd[5039]: symlink '../../loop7' '/dev/disk/by-diskseq/256.tmp-b7:7' failed: Read-only file system
[  118.707438][ T7337] lo speed is unknown, defaulting to 1000
[  118.742769][ T7337] lo speed is unknown, defaulting to 1000
[  118.754134][ T4793] udevd[4793]: symlink '../../loop8' '/dev/disk/by-diskseq/240.tmp-b7:8' failed: Read-only file system
[  118.770206][ T7337] lo speed is unknown, defaulting to 1000
[  118.777627][ T7337] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  118.781253][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.785437][ T7337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  118.806991][ T7348] EXT4-fs: Ignoring removed nomblk_io_submit option
[  118.817655][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/256.tmp-b7:7' failed: Read-only file system
[  118.832293][ T7337] lo speed is unknown, defaulting to 1000
[  118.849323][ T5039] udevd[5039]: symlink '../../loop9' '/dev/disk/by-diskseq/260.tmp-b7:9' failed: Read-only file system
[  118.865281][ T7337] lo speed is unknown, defaulting to 1000
[  118.871686][ T5039] udevd[5039]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  118.894863][ T7337] lo speed is unknown, defaulting to 1000
[  118.901438][ T7337] lo speed is unknown, defaulting to 1000
[  118.916509][ T7337] lo speed is unknown, defaulting to 1000
[  118.942669][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.959735][ T7348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  118.973711][ T7348] System zones: 0-1, 3-36
[  118.979424][ T7356] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.993589][ T7348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.000025][ T7360] lo speed is unknown, defaulting to 1000
[  119.053139][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.241063][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1152'.
[  119.250177][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1152'.
[  119.287664][ T6537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.313086][ T7404] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1154'.
[  119.323075][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.363348][ T7411] FAULT_INJECTION: forcing a failure.
[  119.363348][ T7411] name failslab, interval 1, probability 0, space 0, times 0
[  119.376184][ T7411] CPU: 0 UID: 0 PID: 7411 Comm: syz.5.1156 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  119.376297][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  119.376312][ T7411] Call Trace:
[  119.376321][ T7411]  <TASK>
[  119.376330][ T7411]  __dump_stack+0x1d/0x30
[  119.376421][ T7411]  dump_stack_lvl+0x95/0xd0
[  119.376448][ T7411]  dump_stack+0x15/0x1b
[  119.376471][ T7411]  should_fail_ex+0x263/0x280
[  119.376508][ T7411]  should_failslab+0x8c/0xb0
[  119.376545][ T7411]  __kmalloc_cache_noprof+0x64/0x4a0
[  119.376620][ T7411]  ? rtnl_newlink+0x5c/0x1370
[  119.376646][ T7411]  ? __pfx_rtnl_newlink+0x10/0x10
[  119.376673][ T7411]  rtnl_newlink+0x5c/0x1370
[  119.376707][ T7411]  ? __memcg_slab_free_hook+0x135/0x230
[  119.376809][ T7411]  ? __rcu_read_unlock+0x4e/0x70
[  119.376896][ T7411]  ? avc_has_perm_noaudit+0xab/0x130
[  119.376927][ T7411]  ? cred_has_capability+0x224/0x290
[  119.376959][ T7411]  ? selinux_capable+0x31/0x40
[  119.376981][ T7411]  ? security_capable+0x7b/0x90
[  119.377048][ T7411]  ? ns_capable+0x7c/0xb0
[  119.377077][ T7411]  ? __pfx_rtnl_newlink+0x10/0x10
[  119.377101][ T7411]  rtnetlink_rcv_msg+0x64b/0x720
[  119.377213][ T7411]  netlink_rcv_skb+0x123/0x220
[  119.377374][ T7411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.377405][ T7411]  rtnetlink_rcv+0x1c/0x30
[  119.377429][ T7411]  netlink_unicast+0x5c0/0x690
[  119.377460][ T7411]  netlink_sendmsg+0x5c8/0x6f0
[  119.377561][ T7411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.377585][ T7411]  ____sys_sendmsg+0x5af/0x600
[  119.377611][ T7411]  ___sys_sendmsg+0x195/0x1e0
[  119.377645][ T7411]  __sys_sendmmsg+0x185/0x320
[  119.377696][ T7411]  __x64_sys_sendmmsg+0x57/0x70
[  119.377721][ T7411]  x64_sys_call+0x1e28/0x3000
[  119.377750][ T7411]  do_syscall_64+0xc0/0x2a0
[  119.377785][ T7411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.377878][ T7411] RIP: 0033:0x7fa827e5aeb9
[  119.377898][ T7411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.377920][ T7411] RSP: 002b:00007fa8268b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  119.377945][ T7411] RAX: ffffffffffffffda RBX: 00007fa8280d5fa0 RCX: 00007fa827e5aeb9
[  119.377978][ T7411] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  119.377996][ T7411] RBP: 00007fa8268b7090 R08: 0000000000000000 R09: 0000000000000000
[  119.378026][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.378041][ T7411] R13: 00007fa8280d6038 R14: 00007fa8280d5fa0 R15: 00007ffec9c03f08
[  119.378063][ T7411]  </TASK>
[  119.381025][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.404195][ T7408] IPVS: length: 24 != 3445080
[  119.428790][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.657791][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.748165][ T7436] all: renamed from lo (while UP)
[  119.762540][ T7437] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.1160: corrupted in-inode xattr: bad e_name length
[  119.877159][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.885700][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.926411][ T7437] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1160: couldn't read orphan inode 12 (err -117)
[  119.971577][ T7437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.020723][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1163'.
[  120.030773][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.118206][ T7454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.153898][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1164'.
[  120.248373][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.276806][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1167'.
[  120.454934][ T7493] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512)
[  120.462584][ T7493] FAT-fs (loop5): Filesystem has been set read-only
[  120.493485][ T7497] set_capacity_and_notify: 8 callbacks suppressed
[  120.493508][ T7497] loop8: detected capacity change from 0 to 128
[  120.700237][ T7507] tmpfs: Bad value for 'size'
[  120.762110][ T7511] loop5: detected capacity change from 0 to 1024
[  120.792898][ T7511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.840138][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.957380][ T7526] FAULT_INJECTION: forcing a failure.
[  120.957380][ T7526] name failslab, interval 1, probability 0, space 0, times 0
[  120.970099][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.4.1183 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  120.970127][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  120.970139][ T7526] Call Trace:
[  120.970145][ T7526]  <TASK>
[  120.970152][ T7526]  __dump_stack+0x1d/0x30
[  120.970181][ T7526]  dump_stack_lvl+0x95/0xd0
[  120.970202][ T7526]  dump_stack+0x15/0x1b
[  120.970290][ T7526]  should_fail_ex+0x263/0x280
[  120.970329][ T7526]  should_failslab+0x8c/0xb0
[  120.970354][ T7526]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  120.970394][ T7526]  ? __alloc_skb+0x2f0/0x4b0
[  120.970426][ T7526]  __alloc_skb+0x2f0/0x4b0
[  120.970459][ T7526]  ? __alloc_skb+0x219/0x4b0
[  120.970589][ T7526]  netlink_alloc_large_skb+0xbf/0xf0
[  120.970681][ T7526]  netlink_sendmsg+0x40c/0x6f0
[  120.970715][ T7526]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.970734][ T7526]  ____sys_sendmsg+0x5af/0x600
[  120.970860][ T7526]  ___sys_sendmsg+0x195/0x1e0
[  120.970943][ T7526]  __x64_sys_sendmsg+0xd4/0x160
[  120.970968][ T7526]  x64_sys_call+0x17ba/0x3000
[  120.971024][ T7526]  do_syscall_64+0xc0/0x2a0
[  120.971170][ T7526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.971199][ T7526] RIP: 0033:0x7fd83a11aeb9
[  120.971218][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.971238][ T7526] RSP: 002b:00007fd838b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.971282][ T7526] RAX: ffffffffffffffda RBX: 00007fd83a395fa0 RCX: 00007fd83a11aeb9
[  120.971298][ T7526] RDX: 0000000000008800 RSI: 0000200000000180 RDI: 0000000000000004
[  120.971313][ T7526] RBP: 00007fd838b77090 R08: 0000000000000000 R09: 0000000000000000
[  120.971327][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.971340][ T7526] R13: 00007fd83a396038 R14: 00007fd83a395fa0 R15: 00007ffe64bcec58
[  120.971379][ T7526]  </TASK>
[  121.294756][ T7532] loop8: detected capacity change from 0 to 1024
[  121.318409][ T7532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.567232][ T7553] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  121.593247][ T5805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.786568][ T7578] loop5: detected capacity change from 0 to 128
[  121.836753][ T7586] FAULT_INJECTION: forcing a failure.
[  121.836753][ T7586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.849911][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.4.1201 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  121.850046][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.850061][ T7586] Call Trace:
[  121.850070][ T7586]  <TASK>
[  121.850080][ T7586]  __dump_stack+0x1d/0x30
[  121.850107][ T7586]  dump_stack_lvl+0x95/0xd0
[  121.850133][ T7586]  dump_stack+0x15/0x1b
[  121.850179][ T7586]  should_fail_ex+0x263/0x280
[  121.850215][ T7586]  should_fail+0xb/0x20
[  121.850241][ T7586]  should_fail_usercopy+0x1a/0x20
[  121.850334][ T7586]  _copy_from_iter+0xcf/0xea0
[  121.850358][ T7586]  ? __alloc_skb+0x397/0x4b0
[  121.850393][ T7586]  ? __alloc_skb+0x219/0x4b0
[  121.850450][ T7586]  netlink_sendmsg+0x4ae/0x6f0
[  121.850477][ T7586]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.850499][ T7586]  ____sys_sendmsg+0x5af/0x600
[  121.850521][ T7586]  ___sys_sendmsg+0x195/0x1e0
[  121.850632][ T7586]  __x64_sys_sendmsg+0xd4/0x160
[  121.850655][ T7586]  x64_sys_call+0x17ba/0x3000
[  121.850685][ T7586]  do_syscall_64+0xc0/0x2a0
[  121.850801][ T7586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.850823][ T7586] RIP: 0033:0x7fd83a11aeb9
[  121.850839][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.850933][ T7586] RSP: 002b:00007fd838b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.850981][ T7586] RAX: ffffffffffffffda RBX: 00007fd83a395fa0 RCX: 00007fd83a11aeb9
[  121.850998][ T7586] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  121.851014][ T7586] RBP: 00007fd838b77090 R08: 0000000000000000 R09: 0000000000000000
[  121.851030][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.851044][ T7586] R13: 00007fd83a396038 R14: 00007fd83a395fa0 R15: 00007ffe64bcec58
[  121.851072][ T7586]  </TASK>
[  122.093330][ T7590] loop9: detected capacity change from 0 to 512
[  122.153725][ T7578] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512)
[  122.161285][ T7578] FAT-fs (loop5): Filesystem has been set read-only
[  122.161687][ T7590] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  122.177064][ T7590] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  122.196738][ T7597] loop4: detected capacity change from 0 to 1024
[  122.209752][ T7595] wireguard0: entered promiscuous mode
[  122.215309][ T7595] wireguard0: entered allmulticast mode
[  122.226636][ T7594] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  122.236249][ T7597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.258129][ T7590] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  122.266536][ T7590] System zones: 0-2, 18-18, 34-35
[  122.272268][ T7590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  122.297605][ T7590] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  122.310740][ T7590] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  122.320042][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  122.320060][   T29] audit: type=1400 audit(1770028893.572:1004): avc:  denied  { mount } for  pid=7607 comm="syz.7.1208" name="/" dev="hugetlbfs" ino=20024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  122.327895][ T7590] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  122.407224][ T7590] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1202: bg 0: block 353: padding at end of block bitmap is not set
[  122.419961][   T29] audit: type=1400 audit(1770028893.672:1005): avc:  denied  { create } for  pid=7607 comm="syz.7.1208" name="@" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1
[  122.448605][ T6537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.478191][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.502363][   T29] audit: type=1400 audit(1770028893.752:1006): avc:  denied  { mount } for  pid=7611 comm="syz.5.1210" name="/" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  122.529572][   T29] audit: type=1400 audit(1770028893.752:1007): avc:  denied  { search } for  pid=7611 comm="syz.5.1210" name="/" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.552112][   T29] audit: type=1400 audit(1770028893.752:1008): avc:  denied  { search } for  pid=7611 comm="syz.5.1210" name="/" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.574587][   T29] audit: type=1400 audit(1770028893.752:1009): avc:  denied  { read open } for  pid=7611 comm="syz.5.1210" path="/" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.597251][   T29] audit: type=1400 audit(1770028893.752:1010): avc:  denied  { write } for  pid=7611 comm="syz.5.1210" name="/" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.682397][ T7630] loop7: detected capacity change from 0 to 2048
[  122.743574][   T29] audit: type=1400 audit(1770028893.992:1011): avc:  denied  { map } for  pid=7629 comm="syz.7.1214" path="/proc/416/task/417/attr/sockcreate" dev="proc" ino=20795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  122.768338][   T29] audit: type=1400 audit(1770028893.992:1012): avc:  denied  { execute } for  pid=7629 comm="syz.7.1214" path="/proc/416/task/417/attr/sockcreate" dev="proc" ino=20795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  122.793173][   T29] audit: type=1400 audit(1770028893.992:1013): avc:  denied  { create } for  pid=7629 comm="syz.7.1214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1
[  122.856039][ T7640] FAULT_INJECTION: forcing a failure.
[  122.856039][ T7640] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.869334][ T7640] CPU: 1 UID: 0 PID: 7640 Comm: syz.7.1217 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  122.869397][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  122.869412][ T7640] Call Trace:
[  122.869420][ T7640]  <TASK>
[  122.869429][ T7640]  __dump_stack+0x1d/0x30
[  122.869528][ T7640]  dump_stack_lvl+0x95/0xd0
[  122.869578][ T7640]  dump_stack+0x15/0x1b
[  122.869601][ T7640]  should_fail_ex+0x263/0x280
[  122.869648][ T7640]  should_fail+0xb/0x20
[  122.869713][ T7640]  should_fail_usercopy+0x1a/0x20
[  122.869844][ T7640]  _copy_to_user+0x20/0xa0
[  122.869959][ T7640]  simple_read_from_buffer+0xb5/0x130
[  122.869984][ T7640]  proc_fail_nth_read+0x10e/0x150
[  122.870039][ T7640]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  122.870114][ T7640]  vfs_read+0x1ab/0x7f0
[  122.870127][ T7640]  ? __rcu_read_unlock+0x4e/0x70
[  122.870148][ T7640]  ? __fget_files+0x184/0x1c0
[  122.870195][ T7640]  ? mutex_lock+0x57/0x90
[  122.870233][ T7640]  ksys_read+0xdc/0x1a0
[  122.870246][ T7640]  __x64_sys_read+0x40/0x50
[  122.870260][ T7640]  x64_sys_call+0x2889/0x3000
[  122.870352][ T7640]  do_syscall_64+0xc0/0x2a0
[  122.870373][ T7640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.870389][ T7640] RIP: 0033:0x7f7252c8b78e
[  122.870400][ T7640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  122.870414][ T7640] RSP: 002b:00007f7251726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  122.870463][ T7640] RAX: ffffffffffffffda RBX: 00007f72517276c0 RCX: 00007f7252c8b78e
[  122.870473][ T7640] RDX: 000000000000000f RSI: 00007f72517270a0 RDI: 0000000000000004
[  122.870505][ T7640] RBP: 00007f7251727090 R08: 0000000000000000 R09: 0000000000000000
[  122.870514][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.870523][ T7640] R13: 00007f7252f46038 R14: 00007f7252f45fa0 R15: 00007ffd61e15a38
[  122.870536][ T7640]  </TASK>
[  123.074486][ T7645] loop8: detected capacity change from 0 to 512
[  123.081530][ T7645] ext3: Unknown parameter 'noacl'
[  123.109208][ T7647] __nla_validate_parse: 8 callbacks suppressed
[  123.109225][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1221'.
[  123.143440][ T7645] loop8: detected capacity change from 0 to 512
[  123.167525][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.196388][ T7645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.236827][ T7645] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1219: bad orphan inode 11
[  123.247305][ T7645] ext4_test_bit(bit=10, block=4) = 1
[  123.252737][ T7645] is_bad_inode(inode)=0
[  123.257026][ T7645] NEXT_ORPHAN(inode)=2080374784
[  123.261893][ T7645] max_ino=32
[  123.265159][ T7645] i_nlink=0
[  123.268417][ T7645] EXT4-fs (loop8): 1 truncate cleaned up
[  123.274550][ T7645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.288742][ T7645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7645 comm=syz.8.1219
[  123.302265][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.320714][ T7649] loop4: detected capacity change from 0 to 8192
[  123.351317][ T5805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.359585][ T7649] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.425793][ T7661] FAULT_INJECTION: forcing a failure.
[  123.425793][ T7661] name failslab, interval 1, probability 0, space 0, times 0
[  123.438610][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.8.1225 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  123.438639][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  123.438652][ T7661] Call Trace:
[  123.438659][ T7661]  <TASK>
[  123.438735][ T7661]  __dump_stack+0x1d/0x30
[  123.438761][ T7661]  dump_stack_lvl+0x95/0xd0
[  123.438782][ T7661]  dump_stack+0x15/0x1b
[  123.438830][ T7661]  should_fail_ex+0x263/0x280
[  123.438924][ T7661]  should_failslab+0x8c/0xb0
[  123.438947][ T7661]  __kmalloc_cache_noprof+0x64/0x4a0
[  123.438977][ T7661]  ? raw_ioctl+0x118e/0x1e10
[  123.439010][ T7661]  raw_ioctl+0x118e/0x1e10
[  123.439042][ T7661]  ? ioctl_has_perm+0x27e/0x2d0
[  123.439203][ T7661]  ? __pfx_raw_ioctl+0x10/0x10
[  123.439233][ T7661]  __se_sys_ioctl+0xce/0x140
[  123.439263][ T7661]  __x64_sys_ioctl+0x43/0x50
[  123.439321][ T7661]  x64_sys_call+0x14b0/0x3000
[  123.439346][ T7661]  do_syscall_64+0xc0/0x2a0
[  123.439377][ T7661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.439404][ T7661] RIP: 0033:0x7f60dc48ab4b
[  123.439435][ T7661] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  123.439466][ T7661] RSP: 002b:00007f60daee4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.439492][ T7661] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f60dc48ab4b
[  123.439510][ T7661] RDX: 00007f60daee5fd0 RSI: 0000000041015500 RDI: 0000000000000004
[  123.439527][ T7661] RBP: 00007f60daee5fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  123.439544][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60daee4fa0
[  123.439560][ T7661] R13: 0000200000000080 R14: 0000000000000003 R15: 0000000000000000
[  123.439600][ T7661]  </TASK>
[  123.702722][ T7664] FAULT_INJECTION: forcing a failure.
[  123.702722][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.715911][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.4.1222 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  123.715942][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  123.715958][ T7664] Call Trace:
[  123.716018][ T7664]  <TASK>
[  123.716027][ T7664]  __dump_stack+0x1d/0x30
[  123.716089][ T7664]  dump_stack_lvl+0x95/0xd0
[  123.716134][ T7664]  dump_stack+0x15/0x1b
[  123.716159][ T7664]  should_fail_ex+0x263/0x280
[  123.716197][ T7664]  should_fail+0xb/0x20
[  123.716285][ T7664]  should_fail_usercopy+0x1a/0x20
[  123.716321][ T7664]  _copy_to_user+0x20/0xa0
[  123.716343][ T7664]  simple_read_from_buffer+0xb5/0x130
[  123.716421][ T7664]  proc_fail_nth_read+0x10e/0x150
[  123.716511][ T7664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  123.716539][ T7664]  vfs_read+0x1ab/0x7f0
[  123.716562][ T7664]  ? __rcu_read_unlock+0x4e/0x70
[  123.716619][ T7664]  ? __fget_files+0x184/0x1c0
[  123.716649][ T7664]  ? mutex_lock+0x57/0x90
[  123.716751][ T7664]  ksys_read+0xdc/0x1a0
[  123.716778][ T7664]  __x64_sys_read+0x40/0x50
[  123.716817][ T7664]  x64_sys_call+0x2889/0x3000
[  123.716841][ T7664]  do_syscall_64+0xc0/0x2a0
[  123.716872][ T7664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.716899][ T7664] RIP: 0033:0x7fd83a0db78e
[  123.716919][ T7664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  123.717004][ T7664] RSP: 002b:00007fd838b55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  123.717026][ T7664] RAX: ffffffffffffffda RBX: 00007fd838b566c0 RCX: 00007fd83a0db78e
[  123.717104][ T7664] RDX: 000000000000000f RSI: 00007fd838b560a0 RDI: 0000000000000005
[  123.717175][ T7664] RBP: 00007fd838b56090 R08: 0000000000000000 R09: 0000000000000000
[  123.717191][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.717207][ T7664] R13: 00007fd83a396128 R14: 00007fd83a396090 R15: 00007ffe64bcec58
[  123.717256][ T7664]  </TASK>
[  123.932065][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/288.tmp-b7:4' failed: Read-only file system
[  123.947000][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/288.tmp-b7:4' failed: Read-only file system
[  123.963264][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/290.tmp-b7:4' failed: Read-only file system
[  123.978914][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system
[  123.992947][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system
[  124.007152][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system
[  124.135779][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/284.tmp-b7:7' failed: Read-only file system
[  124.136954][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1229'.
[  124.175279][ T4793] udevd[4793]: symlink '../../loop7' '/dev/disk/by-diskseq/284.tmp-b7:7' failed: Read-only file system
[  124.204152][ T5039] udevd[5039]: symlink '../../loop4' '/dev/disk/by-diskseq/292.tmp-b7:4' failed: Read-only file system
[  124.217766][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1231'.
[  124.222630][ T4793] udevd[4793]: symlink '../../loop4' '/dev/disk/by-diskseq/292.tmp-b7:4' failed: Read-only file system
[  124.244598][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1233'.
[  124.269393][ T7679] EXT4-fs (loop4): #blocks per group too big: 131071
[  125.039423][ T7715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  125.049190][ T7715] System zones: 0-1, 3-36
[  125.054728][ T7715] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1255: bad orphan inode 134217728
[  125.066090][ T7715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.208499][ T7721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.288576][ T7727] ==================================================================
[  125.296731][ T7727] BUG: KCSAN: data-race in filemap_read / filemap_read
[  125.303649][ T7727] 
[  125.305988][ T7727] read to 0xffff88811cc56468 of 8 bytes by task 7722 on cpu 0:
[  125.313600][ T7727]  filemap_read+0x6f/0xa10
[  125.318220][ T7727]  generic_file_read_iter+0x79/0x330
[  125.323538][ T7727]  ext4_file_read_iter+0x1cc/0x290
[  125.328690][ T7727]  copy_splice_read+0x471/0x6c0
[  125.333591][ T7727]  splice_direct_to_actor+0x28f/0x670
[  125.338984][ T7727]  do_splice_direct+0x119/0x1a0
[  125.343857][ T7727]  do_sendfile+0x382/0x650
[  125.348304][ T7727]  __x64_sys_sendfile64+0x105/0x150
[  125.353539][ T7727]  x64_sys_call+0x2db1/0x3000
[  125.358242][ T7727]  do_syscall_64+0xc0/0x2a0
[  125.362768][ T7727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.368666][ T7727] 
[  125.370985][ T7727] write to 0xffff88811cc56468 of 8 bytes by task 7727 on cpu 1:
[  125.378706][ T7727]  filemap_read+0x98d/0xa10
[  125.383210][ T7727]  generic_file_read_iter+0x79/0x330
[  125.388496][ T7727]  ext4_file_read_iter+0x1cc/0x290
[  125.393636][ T7727]  copy_splice_read+0x471/0x6c0
[  125.398507][ T7727]  splice_direct_to_actor+0x28f/0x670
[  125.403869][ T7727]  do_splice_direct+0x119/0x1a0
[  125.408731][ T7727]  do_sendfile+0x382/0x650
[  125.413166][ T7727]  __x64_sys_sendfile64+0x105/0x150
[  125.418366][ T7727]  x64_sys_call+0x2db1/0x3000
[  125.423050][ T7727]  do_syscall_64+0xc0/0x2a0
[  125.427572][ T7727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.433473][ T7727] 
[  125.435789][ T7727] value changed: 0x00000000000001ac -> 0x00000000000001ad
[  125.442904][ T7727] 
[  125.445225][ T7727] Reported by Kernel Concurrency Sanitizer on:
[  125.451367][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.8.1255 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  125.461075][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  125.471383][ T7727] ==================================================================
[  125.596240][ T6537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.837649][ T5805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.