last executing test programs:

4m24.101834682s ago: executing program 1 (id=744):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000019c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40)

4m24.065033063s ago: executing program 1 (id=745):
pselect6(0x40, &(0x7f0000000000)={0x8, 0x978, 0x3, 0x80000000, 0x100000001, 0xc1f, 0x9, 0xffffffffffffff7f}, &(0x7f0000000040)={0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x2, 0x0, 0x6}, &(0x7f0000000080)={0x8, 0x1ff, 0x7fffffff, 0x2a8d, 0x2, 0x180000000000000, 0x5, 0x7}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={0x0})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f00000015c0), 0x6}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x98}}, 0x0, 0x0, 0x1d, 0x0, "7054843a3f4c4aba44c591fc448d83e8ba153897180fc8efd8b78765486cd6af8af845fc790390c56802d090bb1183eb7acd8615ad8bd1cc7e365c7a677ec7cbc9b3915a298f98d049c839de3aa2908f"}, 0xd8)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001380)={0x6, 0x2, 0x8004, 0x6, 0x93, 0x10000, 0xc, 0xfdc, <r2=>0x0}, &(0x7f00000013c0)=0x20)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0xd0, 0xe0}, &(0x7f0000001400)=0xc)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
signalfd(0xffffffffffffffff, &(0x7f0000003b40)={[0xb]}, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001480)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x58, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xff, 0x70}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xbc1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0xdb, 0xfffffff3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)
execveat$binfmt(r4, 0x0, &(0x7f0000001280)={[&(0x7f0000001200)=',$-\'%[\xf6@!*]c\x00', &(0x7f0000001240)='//%.:^&[\x98\x00']}, &(0x7f0000001300)={[&(0x7f00000012c0)='@}*-\x00']}, 0x800)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000001340)=@sr0, 0xee00, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

4m23.782471732s ago: executing program 1 (id=748):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010c84, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f0000000b40)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040890)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x110, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f000}, {0x6}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xebdf}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe00000}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000c0}, 0x44000)
write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './bus/file0'}, 0xf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000100)=0x1)
accept4$tipc(r2, &(0x7f0000000480)=@id, &(0x7f0000000640)=0x10, 0x800)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xc, 0xffffffffffffff2a)
sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="a6934565", 0x4}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x18, 0x4855}, 0x24000052)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

4m23.642291847s ago: executing program 1 (id=749):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==")
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
setpgid(0x0, r2)
fchdir(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800100b0000010003001000fdffff7f0000000000008e00000c00020001000000150000000c"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb})
socket$pppoe(0x18, 0x1, 0x0)

4m23.408736964s ago: executing program 1 (id=753):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$llc_int(r0, 0x10c, 0x3, 0x0, 0x0)

4m23.183371701s ago: executing program 1 (id=759):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x3, 0x6, 0x830, 0x9, 0x1b, "80b3e97923c08679b0b94e490a6c06cbe9b764"})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x0, 0x407a120, 0x61, {0xfffffff8, 0x100}})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

4m23.172964141s ago: executing program 32 (id=759):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x3, 0x6, 0x830, 0x9, 0x1b, "80b3e97923c08679b0b94e490a6c06cbe9b764"})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x0, 0x407a120, 0x61, {0xfffffff8, 0x100}})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14)

4m22.228534051s ago: executing program 0 (id=770):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$llc_int(r0, 0x10c, 0x3, 0x0, 0x0)

4m22.077348966s ago: executing program 0 (id=771):
r0 = dup(0xffffffffffffffff)
write$UHID_INPUT(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0xf, {0xa, 0x4e24, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}}, 0x24)
socket$kcm(0x10, 0x2, 0x0)
r2 = getpid()
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x24004000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r6, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x6, 0x40000002, 0x0)
syz_pidfd_open(r2, 0x0)

4m21.63606223s ago: executing program 0 (id=773):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000019c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

4m21.568238252s ago: executing program 0 (id=774):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES32], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
setpgid(0x0, r2)
fchdir(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800100b0000010003001000fdffff7f0000000000008e00000c00020001000000150000000c"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb})
socket$pppoe(0x18, 0x1, 0x0)

4m21.268552231s ago: executing program 0 (id=779):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000019c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x2c0, r1, 0x5a697397f1c7a8af, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4ebc8eb31be12cf5592cdc14b23a4b4a33083733dc7b0f0c46738e6e29271489"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "427dc138d97e55784535441071fcbe625fbd589d4844d1d7ee2107619d9cc0bd"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4c2077a0f300fb130548cb5f5f2e71ce8fcf51a2af22a1706ff523e6d88fa314"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "35185b9e8b7d0b15d97713cd39c3d830"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3c6b}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2ac173377e267ecc21f578126f53698cbf175909a919f55ba7d8e4b22eace93b"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b8e9d7f97ecfa7a144bf299cdd3b097b33e467d3a5b4aa231cda087ffd6cb3fc"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6f196d5b3d4f02af8946e61dd7bbf94ac5320988d5a29cbe02c420656154b22c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4fe75500e78af273542758593168d87105a4aa14b88a32bc391d1a58ae7effe4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9785d0a730b8f88339f221ed6bbfad6f31dd8d17e23a0792bcd5691089b70096"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9f01dc054b40a0eacf6b5006ba0c32954201f547af04d25669b8e15239d3b78e"}]}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a48110735ea7a8078b12554efd0be208ee0ff7e38f24197fed39af16b4330b5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9cddb6d38d50449094ce7370ad373950143aa2198edd5328b611acf34ddca75e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8591e3b3641138d22cb3878c89e85dbba1c98f7fb873db1def279bbf55edd6d4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

4m20.892583053s ago: executing program 0 (id=785):
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0xa, 0x1, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000020000000000", @ANYRES32=r3], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = inotify_init1(0x80800)
inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x10000000)
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x80)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

4m20.762721638s ago: executing program 33 (id=785):
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0xa, 0x1, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000020000000000", @ANYRES32=r3], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = inotify_init1(0x80800)
inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x10000000)
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x80)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000100)=0x5)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

32.280074631s ago: executing program 3 (id=2757):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0xe3, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x100, @broadcast=0xac14140a, @broadcast}, "040086dd0000ffff"}}}}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
ptrace$cont(0x1f, r1, 0x8, 0x3)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10)
syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540))
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = io_uring_setup(0x18e5, 0x0)
syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc, 0x0, r7}, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000c3}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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")
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r8, 0x10001, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200010042bd7000fedbdf25e0000001000000000000000100000000010004d60a006c"], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

30.183277217s ago: executing program 3 (id=2769):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x80000)
sendto$llc(r0, &(0x7f0000000140)="04f6993d9a5004e5656ec211f842eb6dff3c2b74d4e20b5756732e0be605abcb3424b1a4d3a4bac4ff792b5a586494c5a0fed23b5a96730621cc5960c0dd7e1eb575b1be9e19facd5d8d9ca9b84c9f504a224b1fbb2e2028866a28d115ffcd53d12716219c24088c0ae82b8ad9a8d202574c27a710b64742e187cda7f2becfd12f95aaff69ca1430ea7c4f8e49cbfabb19330c0e1c12", 0x96, 0x40040, &(0x7f0000000200)={0x1a, 0x8, 0x6, 0x6, 0x9, 0x3d, @remote}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000)
timer_gettime(r1, &(0x7f0000000240))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0xa81eb313d007ac2b, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x2, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_settime(0x6, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000), 0x8)
listen(r2, 0x3)
accept4(r2, 0x0, 0x0, 0x0)

26.898331761s ago: executing program 3 (id=2781):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) (fail_nth: 9)

26.352238698s ago: executing program 3 (id=2783):
modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f)
umount2(0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2001c9, 0x320, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe6, 0x9}, 0x200c, 0x2, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111081, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x89901)
syz_emit_ethernet(0x8a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff275bf34925d47a2700008100000086dd60104012004c2f00fc0000000000000000000000000000fcff0200000000000000000000000000013c00080067000000242081000000000200000800000086dd080088be00000000100000000100000000000000080022eb0000000020000008020000000000080000000000"], 0x0)
move_mount(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000100)='./file0/../file0\x00', 0x122)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socket(0x1, 0x2, 0x7fff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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")
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x274)
mkdirat(0xffffffffffffffff, 0x0, 0x14d)
rename(0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x80, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x100006}, 0xf)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

26.335720939s ago: executing program 3 (id=2784):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xf8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xcc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'ip6_vti0\x00'}, @TCA_U32_SEL={0xb4, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x1004, 0x2, 0x1, 0xa}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}]}}]}}]}, 0xf8}}, 0x24040084)

26.080250017s ago: executing program 3 (id=2789):
epoll_create1(0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r1, 0x400, 0x1)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'devices'}, {0x2d, 'net'}, {0x2d, 'freezer'}, {0x6, 'net_cls'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}]}, 0x32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000c001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

26.079854517s ago: executing program 34 (id=2789):
epoll_create1(0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r1, 0x400, 0x1)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'devices'}, {0x2d, 'net'}, {0x2d, 'freezer'}, {0x6, 'net_cls'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}]}, 0x32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000c001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3.683500155s ago: executing program 6 (id=2908):
syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x4058, &(0x7f0000000500), 0x1, 0x502, &(0x7f0000000600)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

3.372555204s ago: executing program 6 (id=2912):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@norecovery}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")

3.032107776s ago: executing program 6 (id=2917):
ioprio_set$uid(0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68384, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7d, 0x2, @perf_config_ext={0x3, 0xa}, 0x10c8e8, 0x5, 0x0, 0x3, 0x7, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
syz_open_procfs(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=<r7=>0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=ANY=[@ANYRES64=r7, @ANYBLOB="edffccb7fb60d3639f1119e8801d34922f88aa47a807da004edc725188b501ee4e645a475ec8631db3714fb646cef3a7b90bb4362a56be9afc5cac3fdcc4c6b102f67102ec4853011a04ca1e4e55e2565ea432b855c9e2515b3caa89fa08abcb4e166fdfd72bf4081d86a8dccdbc4d81b683c99e3240afda9e9622f548c574fbca1eff3006752f0f56533151c61422862d09332936b7e212d258383e4e9eb45d53ae1bd3444754f00510fdd78042f56faead68b424d8c7ddca411b9b62ff8519a0e0d9215f678adb9a756cad4563adfb1330a9a2a51143a7126b7e7f63053e701c77d22697ce9ac2498a", @ANYRESHEX], 0x44}}, 0x4040840)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x3c}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000016010000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)

2.610126409s ago: executing program 4 (id=2921):
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040)
r0 = socket(0x2000000015, 0x80005, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000200900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e6174005c000000060a010400000000000000000100000008000b400000000034000480300001800b00010074617267657400002000028005000300000000000a000100415544495400000008000240000000000900010073797a30"], 0xcc}}, 0x0)
sendto$inet6(r0, 0x0, 0x56, 0x40001, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x7, 0x7d, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010025bd7000dfdbdf25000000006e0012d87a33781ad4f8b1c24dfaa03b7885e4d5aa853393d7632f07b1286c022a10ca718aa0262a34c799958a76", @ANYRES32=0x0, @ANYBLOB="4db20200307a01000500100002000000140003006e657464657673696d30000000000000040014000a0001007a2f9711ec2b000008001f0002"], 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x20048010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x401, 0x1, 0x800006, 0xe}, 0x10)
sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xb1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6, 0xb5}, 0x8)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="41032abd7000fbdfdf25070000004c00028024"], 0x60}, 0x1, 0x0, 0x0, 0x20004815}, 0x8014)
close(0xffffffffffffffff)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000d1401022abd7000fbd9df250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000100)={0xaee, 0x6, 0x64e256a5, 0x2, 0x4, "b7000000000000000000004000", 0x3fe, 0xbe})

2.463498014s ago: executing program 6 (id=2922):
setresuid(0xee01, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x8b)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r0, r2, 0x16}, 0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$TCSBRKP(r2, 0x5425, 0x1000)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp={0x8, 0x1000000}, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x800)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000002060407000000e7060000000000000005000400020000001c00078008000b4000000007050003000900000008000b40000000090900020073797a310000000d"], 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x200000c1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
writev(r7, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x7d, "e7f7f8fbfaa71ab7fabc991c84e61a70389d1000000000000000914bd293f6bfc930b25bd09a89b4fb1c1452f17dc90acf6de9af9df0a26ffa2a9c1246196b3c9861fb4e6bb5a2363d5f638c520900a56097945d257f541dd38a701dfa1b35fe48824ae775af1253e32339d31f71a0cb8a2fc636605cabd31660ed4d6e"}, &(0x7f0000000580)=0x85)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
close(r5)

2.105585255s ago: executing program 4 (id=2923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
dup(r1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x816)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0)

2.101242475s ago: executing program 5 (id=2924):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xd8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'ip6_vti0\x00'}, @TCA_U32_SEL={0x94, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0x1004, 0x2, 0x1, 0xa}, {0x2, 0x0, 0xf53, 0x8}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}]}}]}}]}, 0xd8}}, 0x24040084)

2.087890036s ago: executing program 4 (id=2925):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x9)
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98)
r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x118)
write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")

2.087147396s ago: executing program 5 (id=2926):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0xa, 0x80805, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0xb1ec}, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x7}, &(0x7f00000000c0)=0x8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==")
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540))

2.008106488s ago: executing program 5 (id=2927):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async, rerun: 32)
r0 = getpid() (rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (async)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0xffffffffffffffb6) (async)
recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/48, 0x30}], 0x3, &(0x7f0000000600)=""/172, 0xac}, 0x8}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/36, 0x24}, {&(0x7f0000000d40)=""/155, 0x9b}, {&(0x7f0000000e00)=""/81, 0x51}, {&(0x7f0000000e80)=""/252, 0xfc}], 0x4, &(0x7f0000000fc0)=""/111, 0x6f}, 0x4}, {{&(0x7f0000001040)=@alg, 0x80, &(0x7f0000001700)=[{&(0x7f00000010c0)=""/39, 0x27}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/7, 0x7}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/93, 0x5d}, {&(0x7f0000001400)=""/101, 0x7e}, {&(0x7f0000001480)=""/156, 0x9c}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001640)=""/139, 0x8b}], 0xa, &(0x7f00000017c0)=""/228, 0xe4}, 0xfffffffb}], 0x3, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf17}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64)
r6 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000)
r8 = socket(0x10, 0x803, 0x0)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x31, 0x0, &(0x7f0000000340)) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c02000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioprio_get$pid(0x6, r6) (async)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b0000002b00080001000100000000001c250800000007000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff0000000000000000fffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c617465003b2703705dd0d46d25019800"/251, @ANYRESDEC=r5, @ANYRESOCT=r5, @ANYRES16=r8, @ANYRES32=r2], 0x138}}, 0x844)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)

1.95621308s ago: executing program 7 (id=2928):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1)
ioctl$FIBMAP(r0, 0x5309, &(0x7f0000000040)=0x85)

1.924358941s ago: executing program 7 (id=2929):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xbf}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000881}, 0x20004) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0xc02080, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000540)={0x53, 0xffffffffffffffff, 0xcd, 0x9, @scatter={0x4, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/57, 0x39}]}, &(0x7f0000000380)="b8d8e07b58016fb840df5c9a99d0823d1411ac9d832bdc26265e33eff7742f87932ae7566c63789d9e0c3342661aa2ebfd3a381d061df42fb9a84fe092af99f293f1e63663a4e4315f87cb079885a1864e3e45641bbb72f4376c7155fa36c373551b936cdf03df81ea10caa16f03c8ad79b9f764f40f0a7016143b1cd53fc9b59267cea0f774edaa4baa054a838eedefd77371c68de19356baf85bcfea257ab9bbcc39d57226ab3dac0919130a1338fe7c46b8ebe33f1fb2b183f3600c03bb49d41d275a1b2e334f3e9ed784eb", &(0x7f0000000480)=""/102, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000500)}) (async)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r0, 0x605, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000740)={@rand_addr, @local, <r3=>0x0}, &(0x7f0000000780)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r4=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6_vti0\x00', <r5=>0x0, 0x29, 0x3, 0x2, 0x4, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x7, 0x8, 0x80000000, 0xa1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', <r6=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000009c0)={@local, <r8=>0x0}, &(0x7f0000000a00)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x235108cf74033229}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x140, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x44004}, 0x20004014)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000c40)=0x1e, 0x4) (async)
sendmsg$nl_route(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x82a0d8a09162e7e7}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@delneigh={0x48, 0x1d, 0x400, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, r8, 0x1, 0x1, 0x2}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x7}, @NDA_IFINDEX={0x8, 0x8, r8}, @NDA_VNI={0x8, 0x7, 0xbd}, @NDA_CACHEINFO={0x14, 0x3, {0x8, 0x7df0dd78, 0x7, 0x2}}]}, 0x48}}, 0x8000040) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) (async)
mknodat(r1, &(0x7f0000000ec0)='./file0\x00', 0x8000, 0xa73) (async)
memfd_secret(0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)={<r12=>0xffffffffffffffff}) (async)
r13 = dup(r1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r13, 0xc038943b, &(0x7f0000000f80)={0x1, 0x28, '\x00', 0x1, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$F2FS_IOC_COMPRESS_FILE(r13, 0xf518, 0x0)
ioctl$TIOCL_BLANKSCREEN(r10, 0x541c, &(0x7f0000000fc0))
ioctl$OCFS2_IOC_RESVSP64(r12, 0x4030582a, &(0x7f0000001000)={0x0, 0x2, 0x4, 0x4, 0xc4, 0x8})
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001040)=<r14=>0x0)
sched_setaffinity(r14, 0x8, &(0x7f0000001080)=0x80) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}]]}, 0x58}, 0x1, 0x0, 0x0, 0x14008015}, 0x8000)

1.875473962s ago: executing program 5 (id=2931):
ioprio_set$uid(0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68384, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7d, 0x2, @perf_config_ext={0x3, 0xa}, 0x10c8e8, 0x5, 0x0, 0x3, 0x7, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
openat(0xffffffffffffffff, &(0x7f0000019200)='./file0\x00', 0x200, 0x180)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=<r7=>0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=ANY=[@ANYRES64=r7, @ANYBLOB="edffccb7fb60d3639f1119e8801d34922f88aa47a807da004edc725188b501ee4e645a475ec8631db3714fb646cef3a7b90bb4362a56be9afc5cac3fdcc4c6b102f67102ec4853011a04ca1e4e55e2565ea432b855c9e2515b3caa89fa08abcb4e166fdfd72bf4081d86a8dccdbc4d81b683c99e3240afda9e9622f548c574fbca1eff3006752f0f56533151c61422862d09332936b7e212d258383e4e9eb45d53ae1bd3444754f00510fdd78042f56faead68b424d8c7ddca411b9b62ff8519a0e0d9215f678adb9a756cad4563adfb1330a9a2a51143a7126b7e7f63053e701c77d22697ce9ac2498a", @ANYRESHEX], 0x44}}, 0x4040840)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x3c}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000016010000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)

1.874711232s ago: executing program 7 (id=2932):
r0 = perf_event_open(0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x3)
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = socket(0x10, 0x2, 0x0)
unshare(0x8040480)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0)
write(r1, &(0x7f0000000200)="1c0000001a009b8a140000003b00"/28, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair(0x2a, 0x2, 0x7ff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0xa0, &(0x7f00000002c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x8, 0x0, 0x0}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "80d389"}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x1ff}}]}}}]}, 0x64}}, 0x4000010)

1.819934144s ago: executing program 5 (id=2934):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x68)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x2, 0xff, 0x0, 0xff, 0x20, 0x0, 0x0, 0x80, 0x0, 0x9, 0xfe, 0xfe, 0x0, 0x93}, 0xe)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000400)=ANY=[], 0xfd, 0x347, &(0x7f0000000080)="$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")
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x62)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20048080)
setsockopt$sock_attach_bpf(r1, 0x6, 0x2, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

1.806523024s ago: executing program 7 (id=2935):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1)
syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
getresuid(&(0x7f0000000580), &(0x7f00000005c0)=<r5=>0x0, &(0x7f0000000600))
chown(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, 0xee01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000135000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13780, 0x1, 0xc4}, &(0x7f0000000100), 0x0, &(0x7f0000000000))

1.63152845s ago: executing program 7 (id=2938):
r0 = socket(0xa, 0x3, 0xff)
close(r0)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x95, 0x0, &(0x7f0000000480)="fac89208a4ead1e6489d57436ddea57055b5e4ffe5d3e97b7442555627625b6957cf0784db5dafeb798a92cc2d637ca75cb8c57c72c3b3537d21501a7352d663ad0ab98f859079048dc1ddd479e7f3ef3a82575755013b956629c541eed332425137911375cbf1eb1ea2d49fd529457f3d355c0ce686e43e5696e407886fb5f9a1c7679874dd9ae0f75510e9ae7dff2fcbfcf670d1", 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10c50, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x6, <r2=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x40000fff, 0x10}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020000000000000008000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701000001000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r5 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000080), 0x0)
tkill(0x0, 0x16)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

1.486503145s ago: executing program 6 (id=2940):
set_mempolicy(0x3, 0x0, 0x3)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401f, 0x8001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x46df8f59d95ab291}, 0x150, 0xf3, 0x40000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000000)={0x8, 0x978, 0x3, 0x80000000, 0x100000001, 0xc1f, 0x9, 0xffffffffffffff7f}, &(0x7f0000000040)={0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x0, 0x6}, &(0x7f0000000080)={0x8, 0x1ff, 0x7fffffff, 0x2a8d, 0x5, 0x180000000000000, 0x5, 0x7}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000100)={[0x5]}, 0x8})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f00000015c0), 0x6}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0xd0, 0xe0}, &(0x7f0000001400)=0xc)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000a60000000000000000000000e5ffffffffffffff0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r7, &(0x7f0000000500), &(0x7f00000005c0)=""/35}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}})
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2076)

1.486049834s ago: executing program 7 (id=2941):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00'}) (async)
prctl$PR_PAC_RESET_KEYS(0x36, 0x1d) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=0xffffffffffffffff) (async)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x2, 0x11, 0x7, 0x9}, {0xc, 0x6, 0x8, 0x384}, {0x6, 0x0, 0x0, 0x66a}]}) (async)
unshare(0x28000600)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x130)
copy_file_range(r6, 0x0, r6, 0x0, 0x9, 0x41) (async, rerun: 32)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (rerun: 32)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) (async)
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r9, 0x7}, &(0x7f00000001c0)=0x8)

1.155844965s ago: executing program 4 (id=2943):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

876.288494ms ago: executing program 2 (id=2944):
r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x4058, &(0x7f0000000500), 0x1, 0x502, &(0x7f0000000600)="$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")
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = gettid()
tkill(r1, 0x12)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, 0x0, 0x20000084)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=r3], 0x1, 0x255, &(0x7f0000001000)="$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")
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f0000001d80)={&(0x7f00000000c0)={0xa, 0x4e23, 0xff, @local, 0x400}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000002906000037000000870000000000000096b5c5860f8d7e463fc6e850c73ffb7ef19564e85361e53bbfb1a7d1ee6dcff67be6e365c69d9313c1c7233580df5870437d62bb066262426161fb6e4f2da35e74db1ce78696bb75dbce16b32e06c955b5c12485ef0ffc8b1ddee5e79a1340fb41f46f8296ebb69b09aaed5f345b14efe18a55b68a4dc4957a52521870a64d5bab5f3f70f11a437e5a73"], 0x18}, 0x10)
open_tree(0xffffffffffffffff, 0x0, 0x3901)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104a48fd119ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="003000000089000008000300", @ANYRES32=r7, @ANYBLOB="140012800b00010067656e657665000004000280"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff)
tkill(r1, 0x10)
creat(&(0x7f0000000040)='./file0/file1\x00', 0x122dfb579e447c3a)

870.216324ms ago: executing program 4 (id=2945):
ioprio_set$uid(0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68384, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7d, 0x2, @perf_config_ext={0x3, 0xa}, 0x10c8e8, 0x5, 0x0, 0x3, 0x7, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
openat(0xffffffffffffffff, &(0x7f0000019200)='./file0\x00', 0x200, 0x180)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=<r7=>0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=ANY=[@ANYRES64=r7, @ANYBLOB="edffccb7fb60d3639f1119e8801d34922f88aa47a807da004edc725188b501ee4e645a475ec8631db3714fb646cef3a7b90bb4362a56be9afc5cac3fdcc4c6b102f67102ec4853011a04ca1e4e55e2565ea432b855c9e2515b3caa89fa08abcb4e166fdfd72bf4081d86a8dccdbc4d81b683c99e3240afda9e9622f548c574fbca1eff3006752f0f56533151c61422862d09332936b7e212d258383e4e9eb45d53ae1bd3444754f00510fdd78042f56faead68b424d8c7ddca411b9b62ff8519a0e0d9215f678adb9a756cad4563adfb1330a9a2a51143a7126b7e7f63053e701c77d22697ce9ac2498a", @ANYRESHEX], 0x44}}, 0x4040840)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x3c}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000016010000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)

762.912288ms ago: executing program 5 (id=2946):
r0 = gettid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = perf_event_open(0x0, 0x0, 0x800, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000bc0)={0xffff, 0x7, 0xfffffffe, 0x0, 0x829, 0x7, 0x0, &(0x7f0000000b40)=[{0x2, 0x101, 0x3}, {0x12, 0x101, 0x5}, {0xa, 0xfe, 0x2}, {0x19, 0x101, 0xec}, {0xc, 0x1ff, 0x9}, {0xe257162f90733a3, 0xfe, 0x6}, {0x16, 0xfe, 0x9}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
tkill(r0, 0x14)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x4)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfc, 0x2000)
mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0xff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")
r6 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x95, 0x580)
wait4(r6, &(0x7f0000000640), 0x2, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/47, 0x2f}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/108, 0x6c}], 0x1, &(0x7f0000000440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x40016021, &(0x7f00000005c0)={0x77359400})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300000200000000000000fdffffff32c00450d683b4cea16fe6d907a85201"], 0x10}, 0x17, 0x7}, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0xfeaa)

746.166818ms ago: executing program 6 (id=2947):
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) (fail_nth: 14)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfe33)

150.687716ms ago: executing program 2 (id=2948):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x4040800)

132.161366ms ago: executing program 2 (id=2949):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x12, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0)
sendto(r0, &(0x7f0000000440)="36b2f6", 0x3, 0x4000080, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)={[{@gid}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@nojoliet}, {@map_off}], [{@flag='rw'}]}, 0x5, 0xa30, &(0x7f0000001a00)="$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")

87.961768ms ago: executing program 2 (id=2950):
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)

86.993028ms ago: executing program 2 (id=2951):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004800)
r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
sendfile(r0, r0, 0x0, 0xffffffffffffff80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0)

3.57194ms ago: executing program 2 (id=2952):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004800)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) (fail_nth: 1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0)

0s ago: executing program 4 (id=2953):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400) (async)
syz_emit_ethernet(0x2a, 0x0, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000002840)="6f380f", 0x3}], 0x1}, 0xe000800)

kernel console output (not intermixed with test programs):


[  316.363803][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  316.363822][   T28] audit: type=1400 audit(1779769987.716:3322): avc:  denied  { ioctl } for  pid=11528 comm="syz.2.2323" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  316.439549][T11530] lo speed is unknown, defaulting to 1000
[  316.780544][T11538] FAULT_INJECTION: forcing a failure.
[  316.780544][T11538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  316.823258][T11538] CPU: 0 UID: 0 PID: 11538 Comm: syz.6.2325 Not tainted syzkaller #0 PREEMPT(full) 
[  316.823321][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  316.823336][T11538] Call Trace:
[  316.823344][T11538]  <TASK>
[  316.823352][T11538]  __dump_stack+0x1d/0x30
[  316.823380][T11538]  dump_stack_lvl+0x95/0xd0
[  316.823404][T11538]  dump_stack+0x15/0x1b
[  316.823488][T11538]  should_fail_ex+0x263/0x280
[  316.823521][T11538]  should_fail+0xb/0x20
[  316.823545][T11538]  should_fail_usercopy+0x1a/0x20
[  316.823577][T11538]  _copy_from_user+0x1c/0xb0
[  316.823669][T11538]  ___sys_sendmsg+0xc1/0x1e0
[  316.823706][T11538]  __x64_sys_sendmsg+0xd4/0x160
[  316.823780][T11538]  x64_sys_call+0x194c/0x3020
[  316.823808][T11538]  do_syscall_64+0x12c/0x3b0
[  316.823980][T11538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.824000][T11538] RIP: 0033:0x7f78fab0ce59
[  316.824019][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.824056][T11538] RSP: 002b:00007f78f955f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.824111][T11538] RAX: ffffffffffffffda RBX: 00007f78fad85fa0 RCX: 00007f78fab0ce59
[  316.824125][T11538] RDX: 0000000000004014 RSI: 0000200000000000 RDI: 0000000000000004
[  316.824138][T11538] RBP: 00007f78f955f090 R08: 0000000000000000 R09: 0000000000000000
[  316.824151][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.824227][T11538] R13: 00007f78fad86038 R14: 00007f78fad85fa0 R15: 00007ffc31b297a8
[  316.824246][T11538]  </TASK>
[  317.149438][T11556] __nla_validate_parse: 1 callbacks suppressed
[  317.149458][T11556] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2331'.
[  317.209333][   T28] audit: type=1400 audit(1779769988.596:3323): avc:  denied  { watch } for  pid=11555 comm="syz.2.2331" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  317.230189][T11558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11558 comm=syz.5.2330
[  317.274911][T11548] lo speed is unknown, defaulting to 1000
[  317.301963][T11548] lo speed is unknown, defaulting to 1000
[  317.317616][T11548] lo speed is unknown, defaulting to 1000
[  317.377570][T11548] infiniband lyz2: set active
[  317.382564][ T3396] lo speed is unknown, defaulting to 1000
[  317.392583][T11548] infiniband lyz2: added lo
[  317.422466][T11548] RDS/IB: lyz2: added
[  317.429660][T11548] smc: adding ib device lyz2 with port count 1
[  317.437211][T11548] smc:    ib device lyz2 port 1 has no pnetid
[  317.444763][ T3396] lo speed is unknown, defaulting to 1000
[  317.450892][T11548] lo speed is unknown, defaulting to 1000
[  317.522473][T11573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.545897][T11572] tipc: Disabling bearer <eth:syzkaller0>
[  317.570676][T11548] lo speed is unknown, defaulting to 1000
[  317.597913][T11575] 9p: Could not find request transport: r
[  317.649908][T11548] lo speed is unknown, defaulting to 1000
[  317.729739][T11548] lo speed is unknown, defaulting to 1000
[  317.761543][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2340'.
[  317.819870][T11548] lo speed is unknown, defaulting to 1000
[  317.863508][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2341'.
[  317.948369][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'.
[  318.009706][T11599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11599 comm=syz.2.2344
[  318.047298][   T28] audit: type=1400 audit(1779769989.436:3324): avc:  denied  { write } for  pid=11598 comm="syz.2.2344" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  318.120059][T11607] 9p: Could not find request transport: r
[  318.133008][   T28] audit: type=1400 audit(1779769989.516:3325): avc:  denied  { getopt } for  pid=11611 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  318.158140][   T28] audit: type=1400 audit(1779769989.516:3326): avc:  denied  { write } for  pid=11611 comm="syz.3.2350" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  318.183433][   T28] audit: type=1400 audit(1779769989.516:3327): avc:  denied  { open } for  pid=11611 comm="syz.3.2350" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  318.209799][   T28] audit: type=1400 audit(1779769989.546:3328): avc:  denied  { ioctl } for  pid=11611 comm="syz.3.2350" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  318.249035][   T28] audit: type=1400 audit(1779769989.546:3329): avc:  denied  { audit_write } for  pid=11611 comm="syz.3.2350" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  318.265537][T11614] loop6: detected capacity change from 0 to 1024
[  318.289475][T11619] netlink: 368 bytes leftover after parsing attributes in process `syz.3.2353'.
[  318.297343][   T28] audit: type=1107 audit(1779769989.546:3330): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=']œťÎ."&aâěII=‚žtŽEç˜{'sŹťBëŕ qf#"|ďč\ŮÓç0ë×_ň9SˆŠ7óÉ­ňćGuÍכB9[N'
[  318.320116][   T28] audit: type=1400 audit(1779769989.546:3331): avc:  denied  { map } for  pid=11611 comm="syz.3.2350" path="socket:[35237]" dev="sockfs" ino=35237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  318.347430][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2353'.
[  318.358349][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2353'.
[  318.369463][T11619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2353'.
[  318.397979][T11614] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  318.414916][T11614] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  318.425962][T11614] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  318.438578][T11621] xfrm0 speed is unknown, defaulting to 1000
[  318.444832][T11614] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #5: comm syz.6.2351: unexpected bad inode w/o EXT4_IGET_BAD
[  318.466228][T11614] loop6: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  318.467339][T11614] EXT4-fs (loop6): no journal found
[  318.494868][T11614] EXT4-fs (loop6): can't get journal size
[  318.503735][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  318.510241][    C1] EXT4-fs (loop6): initial error at time 1779769989: ext4_get_journal_inode:5896: inode 5
[  318.520500][    C1] EXT4-fs (loop6): last error at time 1779769989: ext4_get_journal_inode:5896: inode 5
[  318.531449][T11614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  318.554323][T11621] lo speed is unknown, defaulting to 1000
[  318.593405][T11621] lo speed is unknown, defaulting to 1000
[  318.719574][T11614] EXT4-fs error (device loop6): __ext4_iget:5481: inode #15: block 1803188595: comm syz.6.2351: invalid block
[  318.733188][T11614] EXT4-fs error (device loop6): __ext4_iget:5481: inode #15: block 1803188595: comm syz.6.2351: invalid block
[  318.877760][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'.
[  318.912775][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.085114][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'.
[  319.111282][T11646] netlink: 'syz.5.2362': attribute type 4 has an invalid length.
[  319.206324][T11648] syzkaller0: entered promiscuous mode
[  319.227892][T11648] syzkaller0: entered allmulticast mode
[  319.298240][T11655] netlink: 'syz.4.2364': attribute type 21 has an invalid length.
[  319.769717][T11666] nft_compat: unsupported protocol 0
[  319.858068][T11668] FAULT_INJECTION: forcing a failure.
[  319.858068][T11668] name failslab, interval 1, probability 0, space 0, times 0
[  319.879860][T11668] CPU: 0 UID: 0 PID: 11668 Comm: syz.4.2367 Not tainted syzkaller #0 PREEMPT(full) 
[  319.879891][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  319.879911][T11668] Call Trace:
[  319.879920][T11668]  <TASK>
[  319.879929][T11668]  __dump_stack+0x1d/0x30
[  319.879953][T11668]  dump_stack_lvl+0x95/0xd0
[  319.880033][T11668]  dump_stack+0x15/0x1b
[  319.880054][T11668]  should_fail_ex+0x263/0x280
[  319.880085][T11668]  should_failslab+0x8c/0xb0
[  319.880156][T11668]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  319.880191][T11668]  ? __alloc_skb+0x2d6/0x690
[  319.880215][T11668]  __alloc_skb+0x2d6/0x690
[  319.880237][T11668]  ? __alloc_skb+0x200/0x690
[  319.880264][T11668]  netlink_ack+0xfd/0x500
[  319.880294][T11668]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  319.880324][T11668]  ? __pfx_nl802154_del_llsec_devkey+0x10/0x10
[  319.880405][T11668]  ? __pfx_nl802154_post_doit+0x10/0x10
[  319.880433][T11668]  netlink_rcv_skb+0x192/0x220
[  319.880461][T11668]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.880490][T11668]  genl_rcv+0x28/0x40
[  319.880559][T11668]  netlink_unicast+0x5a8/0x680
[  319.880584][T11668]  netlink_sendmsg+0x5c8/0x6f0
[  319.880613][T11668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.880692][T11668]  ____sys_sendmsg+0x563/0x5b0
[  319.880722][T11668]  ___sys_sendmsg+0x195/0x1e0
[  319.880817][T11668]  __x64_sys_sendmsg+0xd4/0x160
[  319.880843][T11668]  x64_sys_call+0x194c/0x3020
[  319.880868][T11668]  do_syscall_64+0x12c/0x3b0
[  319.880919][T11668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.880943][T11668] RIP: 0033:0x7f7877cdce59
[  319.881033][T11668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.881053][T11668] RSP: 002b:00007f787672f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.881077][T11668] RAX: ffffffffffffffda RBX: 00007f7877f55fa0 RCX: 00007f7877cdce59
[  319.881092][T11668] RDX: 0000000020000094 RSI: 0000200000000600 RDI: 0000000000000009
[  319.881107][T11668] RBP: 00007f787672f090 R08: 0000000000000000 R09: 0000000000000000
[  319.881177][T11668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.881190][T11668] R13: 00007f7877f56038 R14: 00007f7877f55fa0 R15: 00007ffd4b8da948
[  319.881211][T11668]  </TASK>
[  320.354673][T11682] loop6: detected capacity change from 0 to 8192
[  320.404547][T11682]  loop6: p1 < > p2 p4 < p5 >
[  320.410116][T11682] loop6: partition table partially beyond EOD, truncated
[  320.426841][T11682] loop6: p1 start 134217728 is beyond EOD, truncated
[  320.443524][T11682] loop6: p2 size 591360 extends beyond EOD, truncated
[  320.459434][T11682] loop6: p5 size 591360 extends beyond EOD, truncated
[  320.679399][T11712] netlink: 'syz.4.2381': attribute type 4 has an invalid length.
[  321.155415][T11738] nft_compat: unsupported protocol 0
[  321.373982][   T28] kauditd_printk_skb: 322 callbacks suppressed
[  321.373998][   T28] audit: type=1326 audit(1779769992.766:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.435312][   T28] audit: type=1326 audit(1779769992.796:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.490297][   T28] audit: type=1326 audit(1779769992.796:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.541109][   T28] audit: type=1326 audit(1779769992.796:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.570096][   T28] audit: type=1326 audit(1779769992.806:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.596082][   T28] audit: type=1326 audit(1779769992.806:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.629770][   T28] audit: type=1326 audit(1779769992.806:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.665572][   T28] audit: type=1326 audit(1779769992.806:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.696090][   T28] audit: type=1326 audit(1779769992.806:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.749836][   T28] audit: type=1326 audit(1779769992.806:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78faacd68e code=0x7ffc0000
[  321.822075][T11780] sctp: [Deprecated]: syz.4.2399 (pid 11780) Use of int in max_burst socket option.
[  321.822075][T11780] Use struct sctp_assoc_value instead
[  322.554330][T11799] loop6: detected capacity change from 0 to 764
[  322.787753][T11774] kexec: Could not allocate control_code_buffer
[  322.828859][T11812] FAULT_INJECTION: forcing a failure.
[  322.828859][T11812] name failslab, interval 1, probability 0, space 0, times 0
[  322.842232][T11812] CPU: 0 UID: 0 PID: 11812 Comm: syz.5.2411 Not tainted syzkaller #0 PREEMPT(full) 
[  322.842263][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  322.842274][T11812] Call Trace:
[  322.842283][T11812]  <TASK>
[  322.842292][T11812]  __dump_stack+0x1d/0x30
[  322.842387][T11812]  dump_stack_lvl+0x95/0xd0
[  322.842408][T11812]  dump_stack+0x15/0x1b
[  322.842430][T11812]  should_fail_ex+0x263/0x280
[  322.842464][T11812]  should_failslab+0x8c/0xb0
[  322.842509][T11812]  kmem_cache_alloc_noprof+0x66/0x3f0
[  322.842538][T11812]  ? skb_clone+0x151/0x1f0
[  322.842646][T11812]  skb_clone+0x151/0x1f0
[  322.842675][T11812]  packet_rcv+0x3b7/0xab0
[  322.842708][T11812]  ? __pfx_packet_rcv+0x10/0x10
[  322.842741][T11812]  deliver_skb+0xee/0x160
[  322.842840][T11812]  __netif_receive_skb_core+0x13b7/0x1950
[  322.842873][T11812]  ? tick_program_event+0x79/0xc0
[  322.842931][T11812]  ? __hrtimer_rearm_deferred+0x58d/0x670
[  322.842958][T11812]  ? irqentry_exit+0x55c/0x5d0
[  322.842985][T11812]  ? ktime_get+0x212/0x240
[  322.843091][T11812]  ? irqentry_exit+0x55c/0x5d0
[  322.843114][T11812]  ? tick_program_event+0x79/0xc0
[  322.843138][T11812]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  322.843204][T11812]  __netif_receive_skb_list_core+0x113/0x500
[  322.843309][T11812]  netif_receive_skb_list_internal+0x47d/0x5f0
[  322.843343][T11812]  netif_receive_skb_list+0x33/0x1c0
[  322.843374][T11812]  bpf_test_run_xdp_live+0x104c/0x1360
[  322.843406][T11812]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  322.843534][T11812]  ? 0xffffffffa0205240
[  322.843551][T11812]  ? bpf_test_run_xdp_live+0x434/0x1360
[  322.843628][T11812]  bpf_prog_test_run_xdp+0x57b/0xa10
[  322.843657][T11812]  ? __rcu_read_unlock+0x4e/0x70
[  322.843681][T11812]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  322.843726][T11812]  bpf_prog_test_run+0x204/0x340
[  322.843767][T11812]  __sys_bpf+0x52e/0x7e0
[  322.843799][T11812]  __x64_sys_bpf+0x41/0x50
[  322.843957][T11812]  x64_sys_call+0x10cb/0x3020
[  322.843987][T11812]  do_syscall_64+0x12c/0x3b0
[  322.844056][T11812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.844272][T11812] RIP: 0033:0x7f9347b4ce59
[  322.844292][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.844312][T11812] RSP: 002b:00007f934659f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  322.844338][T11812] RAX: ffffffffffffffda RBX: 00007f9347dc5fa0 RCX: 00007f9347b4ce59
[  322.844366][T11812] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  322.844382][T11812] RBP: 00007f934659f090 R08: 0000000000000000 R09: 0000000000000000
[  322.844396][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  322.844409][T11812] R13: 00007f9347dc6038 R14: 00007f9347dc5fa0 R15: 00007fff0ec4c988
[  322.844431][T11812]  </TASK>
[  323.488062][T11829] loop6: detected capacity change from 0 to 764
[  323.748174][T11848] FAULT_INJECTION: forcing a failure.
[  323.748174][T11848] name failslab, interval 1, probability 0, space 0, times 0
[  323.762002][T11848] CPU: 0 UID: 0 PID: 11848 Comm: syz.3.2420 Not tainted syzkaller #0 PREEMPT(full) 
[  323.762077][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  323.762088][T11848] Call Trace:
[  323.762095][T11848]  <TASK>
[  323.762102][T11848]  __dump_stack+0x1d/0x30
[  323.762125][T11848]  dump_stack_lvl+0x95/0xd0
[  323.762148][T11848]  dump_stack+0x15/0x1b
[  323.762248][T11848]  should_fail_ex+0x263/0x280
[  323.762274][T11848]  should_failslab+0x8c/0xb0
[  323.762344][T11848]  __kmalloc_noprof+0xb8/0x4d0
[  323.762381][T11848]  ? alloc_pipe_info+0x1c8/0x340
[  323.762438][T11848]  alloc_pipe_info+0x1c8/0x340
[  323.762514][T11848]  splice_direct_to_actor+0x591/0x670
[  323.762547][T11848]  ? __file_has_perm+0x3d9/0x430
[  323.762647][T11848]  ? __pfx_direct_splice_actor+0x10/0x10
[  323.762683][T11848]  ? selinux_file_permission+0x2ef/0x320
[  323.762741][T11848]  do_splice_direct+0x119/0x1a0
[  323.762794][T11848]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  323.762820][T11848]  do_sendfile+0x382/0x650
[  323.762903][T11848]  __x64_sys_sendfile64+0x105/0x150
[  323.762935][T11848]  x64_sys_call+0x2dc4/0x3020
[  323.762963][T11848]  do_syscall_64+0x12c/0x3b0
[  323.763012][T11848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.763032][T11848] RIP: 0033:0x7ffa4acace59
[  323.763048][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.763120][T11848] RSP: 002b:00007ffa496bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  323.763141][T11848] RAX: ffffffffffffffda RBX: 00007ffa4af26180 RCX: 00007ffa4acace59
[  323.763154][T11848] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a
[  323.763166][T11848] RBP: 00007ffa496bd090 R08: 0000000000000000 R09: 0000000000000000
[  323.763178][T11848] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001
[  323.763190][T11848] R13: 00007ffa4af26218 R14: 00007ffa4af26180 R15: 00007fffc11b25d8
[  323.763270][T11848]  </TASK>
[  324.205789][T11856] netlink: 'syz.6.2424': attribute type 4 has an invalid length.
[  324.236833][T11859] x_tables: duplicate underflow at hook 2
[  324.492259][T11869] __nla_validate_parse: 6 callbacks suppressed
[  324.492278][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'.
[  324.513370][T11867] xfrm0 speed is unknown, defaulting to 1000
[  324.642264][T11867] lo speed is unknown, defaulting to 1000
[  324.814461][T11867] lo speed is unknown, defaulting to 1000
[  325.129226][T11875] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2428'.
[  325.138932][T11875] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2428'.
[  325.345692][T11894] nft_compat: unsupported protocol 0
[  325.660800][T11917] pim6reg: entered allmulticast mode
[  325.699714][T11921] pim6reg: left allmulticast mode
[  325.945713][T11915] netlink: 'syz.3.2441': attribute type 4 has an invalid length.
[  326.341579][T11933] x_tables: duplicate underflow at hook 1
[  326.519474][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  326.519496][   T28] audit: type=1400 audit(1779769997.716:3730): avc:  denied  { mounton } for  pid=11926 comm="syz.5.2443" path="/" dev="tmpfs" ino=1771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  327.047858][T11941] loop6: detected capacity change from 0 to 512
[  327.088471][T11941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.103795][T11941] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.196328][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.299369][T11954] sg_write: data in/out 745472/136 bytes for SCSI command 0x0-- guessing data in;
[  327.299369][T11954]    program syz.5.2452 not setting count and/or reply_len properly
[  327.357171][   T28] audit: type=1400 audit(1779769998.746:3731): avc:  denied  { ioctl } for  pid=11952 comm="syz.6.2449" path="socket:[36072]" dev="sockfs" ino=36072 ioctlcmd=0x8929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  329.215021][T11964] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  329.231437][T11964] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  329.266836][T11978] nft_compat: unsupported protocol 0
[  329.760355][   T28] audit: type=1400 audit(1779770001.146:3732): avc:  denied  { getopt } for  pid=11999 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  329.824830][   T28] audit: type=1400 audit(1779770001.196:3733): avc:  denied  { mount } for  pid=11999 comm="syz.3.2462" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  329.902128][T11985] xfrm0 speed is unknown, defaulting to 1000
[  329.967114][T11985] lo speed is unknown, defaulting to 1000
[  330.040014][T11985] lo speed is unknown, defaulting to 1000
[  330.220776][T12015] syzkaller0: entered promiscuous mode
[  330.246749][T12015] syzkaller0: entered allmulticast mode
[  330.616818][T12040] netlink: 1972 bytes leftover after parsing attributes in process `syz.2.2473'.
[  330.655492][T12040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2473'.
[  330.727148][T12051] nft_compat: unsupported protocol 0
[  330.855784][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'.
[  331.003389][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2482'.
[  331.067217][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2482'.
[  331.390641][T12090] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2487'.
[  331.585193][T12077] xfrm0 speed is unknown, defaulting to 1000
[  331.650310][T12077] lo speed is unknown, defaulting to 1000
[  331.690288][T12077] lo speed is unknown, defaulting to 1000
[  331.839299][T12104] syzkaller0: entered promiscuous mode
[  331.853793][T12104] syzkaller0: entered allmulticast mode
[  332.063267][   T28] audit: type=1400 audit(1779770003.446:3734): avc:  denied  { setopt } for  pid=12113 comm="syz.4.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  332.209712][   T28] audit: type=1400 audit(1779770003.596:3735): avc:  denied  { read } for  pid=12121 comm="syz.6.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  332.943691][   T28] audit: type=1400 audit(1779770004.326:3736): avc:  denied  { mount } for  pid=12146 comm="syz.4.2502" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  332.970724][   T28] audit: type=1400 audit(1779770004.326:3737): avc:  denied  { remount } for  pid=12146 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  332.992595][   T28] audit: type=1400 audit(1779770004.326:3738): avc:  denied  { write } for  pid=12146 comm="syz.4.2502" lport=52382 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  333.041167][   T28] audit: type=1400 audit(1779770004.426:3739): avc:  denied  { getopt } for  pid=12144 comm="syz.2.2501" lport=8720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  334.028459][   T28] audit: type=1400 audit(1779770004.516:3740): avc:  denied  { setattr } for  pid=12153 comm="syz.2.2505" path="net:[4026532410]" dev="nsfs" ino=4026532410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  334.392814][   T28] audit: type=1400 audit(1779770005.726:3741): avc:  denied  { unmount } for  pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  334.447974][T12171] loop6: detected capacity change from 0 to 4096
[  334.485405][T12170] syzkaller0: entered promiscuous mode
[  334.526460][T12171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.549670][T12170] syzkaller0: entered allmulticast mode
[  334.647590][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.263743][   T28] audit: type=1400 audit(1779770005.816:3742): avc:  denied  { create } for  pid=12169 comm="syz.5.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  335.283957][   T28] audit: type=1400 audit(1779770005.856:3743): avc:  denied  { ioctl } for  pid=12167 comm="syz.2.2510" path="socket:[36376]" dev="sockfs" ino=36376 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  335.421500][T12213] loop6: detected capacity change from 0 to 128
[  335.455873][T12213] netlink: 1972 bytes leftover after parsing attributes in process `syz.6.2514'.
[  335.474961][T12217] nft_compat: unsupported protocol 0
[  335.777150][T12225] tipc: Can't bind to reserved service type 0
[  336.635639][T12233] syzkaller0: entered promiscuous mode
[  336.641416][T12233] syzkaller0: entered allmulticast mode
[  337.551312][T12246] FAULT_INJECTION: forcing a failure.
[  337.551312][T12246] name failslab, interval 1, probability 0, space 0, times 0
[  337.579161][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.5.2533 Not tainted syzkaller #0 PREEMPT(full) 
[  337.579189][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  337.579201][T12246] Call Trace:
[  337.579216][T12246]  <TASK>
[  337.579225][T12246]  __dump_stack+0x1d/0x30
[  337.579253][T12246]  dump_stack_lvl+0x95/0xd0
[  337.579303][T12246]  dump_stack+0x15/0x1b
[  337.579320][T12246]  should_fail_ex+0x263/0x280
[  337.579349][T12246]  ? ipv6_flowlabel_opt+0x13fc/0x1a00
[  337.579506][T12246]  should_failslab+0x8c/0xb0
[  337.579535][T12246]  __kmalloc_cache_noprof+0x5f/0x400
[  337.579567][T12246]  ipv6_flowlabel_opt+0x13fc/0x1a00
[  337.579651][T12246]  ? __rcu_read_unlock+0x4e/0x70
[  337.579676][T12246]  ? terminate_walk+0x1e6/0x210
[  337.579696][T12246]  ? path_openat+0x1ab2/0x2050
[  337.579822][T12246]  ? lock_sock_nested+0x84/0x110
[  337.579879][T12246]  do_ipv6_setsockopt+0xb4e/0x2130
[  337.579901][T12246]  ? kstrtoull+0x111/0x140
[  337.579923][T12246]  ? avc_has_perm_noaudit+0xab/0x130
[  337.580027][T12246]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  337.580051][T12246]  ipv6_setsockopt+0x59/0x130
[  337.580105][T12246]  udpv6_setsockopt+0x89/0xa0
[  337.580137][T12246]  sock_common_setsockopt+0x69/0x80
[  337.580177][T12246]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  337.580207][T12246]  __sys_setsockopt+0x184/0x200
[  337.580231][T12246]  __x64_sys_setsockopt+0x64/0x80
[  337.580326][T12246]  x64_sys_call+0x2327/0x3020
[  337.580353][T12246]  do_syscall_64+0x12c/0x3b0
[  337.580421][T12246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.580495][T12246] RIP: 0033:0x7f9347b4ce59
[  337.580510][T12246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  337.580527][T12246] RSP: 002b:00007f934659f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  337.580549][T12246] RAX: ffffffffffffffda RBX: 00007f9347dc5fa0 RCX: 00007f9347b4ce59
[  337.580624][T12246] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  337.580637][T12246] RBP: 00007f934659f090 R08: 0000000000000020 R09: 0000000000000000
[  337.580649][T12246] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  337.580662][T12246] R13: 00007f9347dc6038 R14: 00007f9347dc5fa0 R15: 00007fff0ec4c988
[  337.580684][T12246]  </TASK>
[  338.081083][T12243] FAULT_INJECTION: forcing a failure.
[  338.081083][T12243] name failslab, interval 1, probability 0, space 0, times 0
[  338.144215][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz.2.2532 Not tainted syzkaller #0 PREEMPT(full) 
[  338.144243][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  338.144255][T12243] Call Trace:
[  338.144263][T12243]  <TASK>
[  338.144272][T12243]  __dump_stack+0x1d/0x30
[  338.144369][T12243]  dump_stack_lvl+0x95/0xd0
[  338.144394][T12243]  dump_stack+0x15/0x1b
[  338.144446][T12243]  should_fail_ex+0x263/0x280
[  338.144471][T12243]  should_failslab+0x8c/0xb0
[  338.144507][T12243]  kmem_cache_alloc_noprof+0x66/0x3f0
[  338.144606][T12243]  ? taskstats_exit+0x297/0x6b0
[  338.144633][T12243]  taskstats_exit+0x297/0x6b0
[  338.144657][T12243]  ? acct_update_integrals+0x1b0/0x1e0
[  338.144763][T12243]  do_exit+0x41f/0x1530
[  338.144797][T12243]  do_group_exit+0xfe/0x140
[  338.144865][T12243]  ? get_signal+0xe28/0xf20
[  338.144939][T12243]  get_signal+0xe30/0xf20
[  338.144985][T12243]  arch_do_signal_or_restart+0x96/0x480
[  338.145022][T12243]  exit_to_user_mode_loop+0x6f/0x820
[  338.145050][T12243]  do_syscall_64+0x232/0x3b0
[  338.145159][T12243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.145185][T12243] RIP: 0033:0x7fbad88bce59
[  338.145205][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.145239][T12243] RSP: 002b:00007fbad7317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  338.145259][T12243] RAX: fffffffffffffe00 RBX: 00007fbad8b35fa0 RCX: 00007fbad88bce59
[  338.145276][T12243] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  338.145292][T12243] RBP: 00007fbad7317090 R08: 0000000000000000 R09: 0000000000000000
[  338.145307][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.145336][T12243] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  338.145354][T12243]  </TASK>
[  339.421991][T12264] nft_compat: unsupported protocol 0
[  339.588929][T12271] loop6: detected capacity change from 0 to 512
[  339.654574][T12271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  339.676693][T12271] System zones: 1-12
[  339.688749][T12271] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2540: corrupted in-inode xattr: e_value size too large
[  339.735289][T12271] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  339.735533][T12271] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2540: couldn't read orphan inode 15 (err -117)
[  339.744726][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  339.744746][    C1] EXT4-fs (loop6): initial error at time 1779770011: ext4_iget_extra_inode:5128: inode 15
[  339.744778][    C1] EXT4-fs (loop6): last error at time 1779770011: ext4_iget_extra_inode:5128: inode 15
[  339.882642][T12271] loop6: lost filesystem error report for type 5 error -117
[  339.884229][T12271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.948991][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  339.949009][   T28] audit: type=1400 audit(1779770011.336:3748): avc:  denied  { write } for  pid=12270 comm="syz.6.2540" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  339.981031][T12271] FAULT_INJECTION: forcing a failure.
[  339.981031][T12271] name failslab, interval 1, probability 0, space 0, times 0
[  340.019795][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.6.2540 Not tainted syzkaller #0 PREEMPT(full) 
[  340.019823][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  340.019837][T12271] Call Trace:
[  340.019846][T12271]  <TASK>
[  340.019856][T12271]  __dump_stack+0x1d/0x30
[  340.019881][T12271]  dump_stack_lvl+0x95/0xd0
[  340.019973][T12271]  dump_stack+0x15/0x1b
[  340.019995][T12271]  should_fail_ex+0x263/0x280
[  340.020023][T12271]  ? __pfx_ext4_alloc_inode+0x10/0x10
[  340.020052][T12271]  should_failslab+0x8c/0xb0
[  340.020147][T12271]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  340.020184][T12271]  ? ext4_alloc_inode+0x38/0x330
[  340.020207][T12271]  ? __pfx_ext4_alloc_inode+0x10/0x10
[  340.020284][T12271]  ext4_alloc_inode+0x38/0x330
[  340.020305][T12271]  ? __pfx_ext4_alloc_inode+0x10/0x10
[  340.020402][T12271]  alloc_inode+0x40/0x170
[  340.020422][T12271]  iget_locked+0x101/0x440
[  340.020453][T12271]  __ext4_iget+0x152/0x23f0
[  340.020527][T12271]  ? kmem_cache_alloc_lru_noprof+0x1eb/0x400
[  340.020558][T12271]  ? __d_alloc+0x37/0x340
[  340.020619][T12271]  ext4_lookup+0x173/0x3a0
[  340.020650][T12271]  lookup_one_qstr_excl+0xc7/0x240
[  340.020675][T12271]  __start_renaming+0xff/0x2a0
[  340.020700][T12271]  filename_renameat2+0x2d0/0x6e0
[  340.020795][T12271]  __se_sys_rename+0x4a/0x1c0
[  340.020819][T12271]  __x64_sys_rename+0x31/0x40
[  340.020838][T12271]  x64_sys_call+0x2b3/0x3020
[  340.020863][T12271]  do_syscall_64+0x12c/0x3b0
[  340.020900][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.020926][T12271] RIP: 0033:0x7f78fab0ce59
[  340.020945][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.020966][T12271] RSP: 002b:00007f78f955f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  340.020987][T12271] RAX: ffffffffffffffda RBX: 00007f78fad85fa0 RCX: 00007f78fab0ce59
[  340.021001][T12271] RDX: 0000000000000000 RSI: 0000200000001900 RDI: 0000200000000140
[  340.021021][T12271] RBP: 00007f78f955f090 R08: 0000000000000000 R09: 0000000000000000
[  340.021033][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.021046][T12271] R13: 00007f78fad86038 R14: 00007f78fad85fa0 R15: 00007ffc31b297a8
[  340.021068][T12271]  </TASK>
[  340.273348][   T28] audit: type=1400 audit(1779770011.336:3749): avc:  denied  { write } for  pid=12270 comm="syz.6.2540" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  340.348262][   T28] audit: type=1400 audit(1779770011.336:3750): avc:  denied  { write } for  pid=12270 comm="syz.6.2540" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  340.438558][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.634213][   T28] audit: type=1400 audit(1779770012.026:3751): avc:  denied  { getopt } for  pid=12278 comm="syz.2.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  340.826842][T12292] xfrm0 speed is unknown, defaulting to 1000
[  340.865023][T12301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2549'.
[  340.969614][T12292] lo speed is unknown, defaulting to 1000
[  341.023667][T12312] nft_compat: unsupported protocol 0
[  341.058197][T12310] SELinux:  Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped).
[  341.114181][T12292] lo speed is unknown, defaulting to 1000
[  341.134008][   T28] audit: type=1400 audit(1779770012.496:3752): avc:  denied  { relabelto } for  pid=12309 comm="syz.4.2552" name=".log" dev="tmpfs" ino=2713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0"
[  341.216682][   T28] audit: type=1400 audit(1779770012.496:3753): avc:  denied  { associate } for  pid=12309 comm="syz.4.2552" name=".log" dev="tmpfs" ino=2713 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:vhost_device_t:s0"
[  341.309067][   T28] audit: type=1400 audit(1779770012.636:3754): avc:  denied  { cpu } for  pid=12317 comm="syz.4.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  341.606961][T12332] netlink: 'syz.6.2558': attribute type 2 has an invalid length.
[  341.617217][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2558'.
[  341.752158][   T28] audit: type=1326 audit(1779770013.136:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.6.2558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fab0ce59 code=0x7ffc0000
[  341.786258][   T28] audit: type=1326 audit(1779770013.146:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.6.2558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fab0ce59 code=0x7ffc0000
[  341.840673][   T28] audit: type=1326 audit(1779770013.146:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.6.2558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f78fab0ce59 code=0x7ffc0000
[  341.905595][T12347] FAULT_INJECTION: forcing a failure.
[  341.905595][T12347] name failslab, interval 1, probability 0, space 0, times 0
[  341.932886][T12350] block device autoloading is deprecated and will be removed.
[  341.945570][T12349] block device autoloading is deprecated and will be removed.
[  341.953589][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2563'.
[  341.973319][T12347] CPU: 1 UID: 0 PID: 12347 Comm: syz.3.2561 Not tainted syzkaller #0 PREEMPT(full) 
[  341.973348][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  341.973361][T12347] Call Trace:
[  341.973369][T12347]  <TASK>
[  341.973377][T12347]  __dump_stack+0x1d/0x30
[  341.973414][T12347]  dump_stack_lvl+0x95/0xd0
[  341.973433][T12347]  dump_stack+0x15/0x1b
[  341.973521][T12347]  should_fail_ex+0x263/0x280
[  341.973564][T12347]  ? __pfx_sock_alloc_inode+0x10/0x10
[  341.973593][T12347]  should_failslab+0x8c/0xb0
[  341.973620][T12347]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  341.973670][T12347]  ? sock_alloc_inode+0x36/0xf0
[  341.973706][T12347]  ? selinux_socket_create+0xfd/0x180
[  341.973765][T12347]  ? __pfx_sock_alloc_inode+0x10/0x10
[  341.973872][T12347]  sock_alloc_inode+0x36/0xf0
[  341.973971][T12347]  alloc_inode+0x40/0x170
[  341.973988][T12347]  __sock_create+0x120/0x580
[  341.974005][T12347]  ? mutex_lock+0x57/0x90
[  341.974088][T12347]  ? mutex_unlock+0x4e/0x90
[  341.974112][T12347]  ? fput+0x8f/0xc0
[  341.974147][T12347]  __sys_socket+0xaf/0x180
[  341.974185][T12347]  __x64_sys_socket+0x3f/0x50
[  341.974204][T12347]  x64_sys_call+0x11fc/0x3020
[  341.974230][T12347]  do_syscall_64+0x12c/0x3b0
[  341.974343][T12347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.974366][T12347] RIP: 0033:0x7ffa4acace59
[  341.974385][T12347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.974406][T12347] RSP: 002b:00007ffa496de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  341.974478][T12347] RAX: ffffffffffffffda RBX: 00007ffa4af26090 RCX: 00007ffa4acace59
[  341.974549][T12347] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a
[  341.974562][T12347] RBP: 00007ffa496de090 R08: 0000000000000000 R09: 0000000000000000
[  341.974576][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.974590][T12347] R13: 00007ffa4af26128 R14: 00007ffa4af26090 R15: 00007fffc11b25d8
[  341.974671][T12347]  </TASK>
[  341.979153][T12352] xt_hashlimit: size too large, truncated to 1048576
[  342.002292][T12347] socket: no more sockets
[  342.021429][T12354] team0: No ports can be present during mode change
[  342.345393][T12361] xfrm0 speed is unknown, defaulting to 1000
[  342.396750][T12367] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[  342.469364][T12361] lo speed is unknown, defaulting to 1000
[  342.539058][T12361] lo speed is unknown, defaulting to 1000
[  342.623658][T12379] syzkaller1: tun_chr_ioctl cmd 1074025680
[  342.631358][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  342.647607][T12379] loop6: detected capacity change from 0 to 2048
[  342.718753][T12387] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  342.743240][T12379]  loop6: p2 < > p4
[  342.749635][T12379] loop6: p4 size 262144 extends beyond EOD, truncated
[  342.808656][T12393] FAULT_INJECTION: forcing a failure.
[  342.808656][T12393] name failslab, interval 1, probability 0, space 0, times 0
[  342.821752][T12393] CPU: 1 UID: 0 PID: 12393 Comm: syz.2.2580 Not tainted syzkaller #0 PREEMPT(full) 
[  342.821787][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  342.821802][T12393] Call Trace:
[  342.821810][T12393]  <TASK>
[  342.821820][T12393]  __dump_stack+0x1d/0x30
[  342.821846][T12393]  dump_stack_lvl+0x95/0xd0
[  342.822004][T12393]  dump_stack+0x15/0x1b
[  342.822022][T12393]  should_fail_ex+0x263/0x280
[  342.822056][T12393]  ? simple_xattrs_alloc+0x2f/0xa0
[  342.822152][T12393]  should_failslab+0x8c/0xb0
[  342.822180][T12393]  __kmalloc_cache_noprof+0x5f/0x400
[  342.822241][T12393]  ? security_sid_to_context_force+0x2a/0x40
[  342.822265][T12393]  simple_xattrs_alloc+0x2f/0xa0
[  342.822351][T12393]  shmem_initxattrs+0x42/0x3d0
[  342.822447][T12393]  security_inode_init_security+0x249/0x320
[  342.822484][T12393]  ? __pfx_shmem_initxattrs+0x10/0x10
[  342.822522][T12393]  shmem_mknod+0xaa/0x170
[  342.822547][T12393]  shmem_create+0x34/0x50
[  342.822575][T12393]  ? __pfx_shmem_create+0x10/0x10
[  342.822604][T12393]  path_openat+0xd75/0x2050
[  342.822656][T12393]  do_file_open+0x16c/0x290
[  342.822755][T12393]  do_sys_openat2+0x94/0x130
[  342.822785][T12393]  __x64_sys_openat+0xf2/0x120
[  342.822880][T12393]  x64_sys_call+0x1e39/0x3020
[  342.822908][T12393]  do_syscall_64+0x12c/0x3b0
[  342.822946][T12393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.822971][T12393] RIP: 0033:0x7fbad88bce59
[  342.823003][T12393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.823025][T12393] RSP: 002b:00007fbad7317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  342.823121][T12393] RAX: ffffffffffffffda RBX: 00007fbad8b35fa0 RCX: 00007fbad88bce59
[  342.823138][T12393] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  342.823154][T12393] RBP: 00007fbad7317090 R08: 0000000000000000 R09: 0000000000000000
[  342.823170][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  342.823193][T12393] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  342.823223][T12393]  </TASK>
[  343.909894][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2583'.
[  343.963397][T12413] ipt_REJECT: TCP_RESET invalid for non-tcp
[  344.225143][T12416] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  345.850418][T12436] SELinux: failed to load policy
[  345.851733][T12444] FAULT_INJECTION: forcing a failure.
[  345.851733][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  345.855760][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  345.855889][   T28] audit: type=1400 audit(1779770017.236:3769): avc:  denied  { load_policy } for  pid=12435 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  345.899006][T12444] CPU: 0 UID: 0 PID: 12444 Comm: syz.5.2594 Not tainted syzkaller #0 PREEMPT(full) 
[  345.899037][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  345.899050][T12444] Call Trace:
[  345.899056][T12444]  <TASK>
[  345.899065][T12444]  __dump_stack+0x1d/0x30
[  345.899152][T12444]  dump_stack_lvl+0x95/0xd0
[  345.899252][T12444]  dump_stack+0x15/0x1b
[  345.899278][T12444]  should_fail_ex+0x263/0x280
[  345.899335][T12444]  should_fail+0xb/0x20
[  345.899410][T12444]  should_fail_usercopy+0x1a/0x20
[  345.899440][T12444]  _copy_to_user+0x20/0xa0
[  345.899497][T12444]  simple_read_from_buffer+0xb5/0x130
[  345.899533][T12444]  proc_fail_nth_read+0x10e/0x150
[  345.899578][T12444]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  345.899608][T12444]  vfs_read+0x1ab/0x7f0
[  345.899705][T12444]  ? __rcu_read_unlock+0x4e/0x70
[  345.899730][T12444]  ? __fget_files+0x184/0x1c0
[  345.899752][T12444]  ? mutex_lock+0x57/0x90
[  345.899805][T12444]  ksys_read+0xdc/0x1a0
[  345.899835][T12444]  __x64_sys_read+0x40/0x50
[  345.899863][T12444]  x64_sys_call+0x2886/0x3020
[  345.899921][T12444]  do_syscall_64+0x12c/0x3b0
[  345.899954][T12444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.899979][T12444] RIP: 0033:0x7f9347b0d68e
[  345.900067][T12444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  345.900087][T12444] RSP: 002b:00007f934659efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  345.900108][T12444] RAX: ffffffffffffffda RBX: 00007f934659f6c0 RCX: 00007f9347b0d68e
[  345.900131][T12444] RDX: 000000000000000f RSI: 00007f934659f0a0 RDI: 0000000000000006
[  345.900205][T12444] RBP: 00007f934659f090 R08: 0000000000000000 R09: 0000000000000000
[  345.900220][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  345.900234][T12444] R13: 00007f9347dc6038 R14: 00007f9347dc5fa0 R15: 00007fff0ec4c988
[  345.900255][T12444]  </TASK>
[  346.151842][T12456] FAULT_INJECTION: forcing a failure.
[  346.151842][T12456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  346.184744][T12456] CPU: 0 UID: 0 PID: 12456 Comm: syz.3.2598 Not tainted syzkaller #0 PREEMPT(full) 
[  346.184850][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.184864][T12456] Call Trace:
[  346.184873][T12456]  <TASK>
[  346.184882][T12456]  __dump_stack+0x1d/0x30
[  346.184905][T12456]  dump_stack_lvl+0x95/0xd0
[  346.184923][T12456]  dump_stack+0x15/0x1b
[  346.184959][T12456]  should_fail_ex+0x263/0x280
[  346.184993][T12456]  should_fail+0xb/0x20
[  346.185022][T12456]  should_fail_usercopy+0x1a/0x20
[  346.185053][T12456]  _copy_to_user+0x20/0xa0
[  346.185198][T12456]  bpf_verifier_vlog+0x2c5/0x5a0
[  346.185240][T12456]  __btf_verifier_log+0x7f/0xb0
[  346.185264][T12456]  __btf_verifier_log_type+0x22f/0x330
[  346.185290][T12456]  ? __pfx_btf_sec_info_cmp+0x10/0x10
[  346.185354][T12456]  btf_func_proto_check_meta+0xc6/0xf0
[  346.185381][T12456]  btf_parse_type_sec+0x2a4/0x1570
[  346.185416][T12456]  ? btf_parse_hdr+0x440/0x450
[  346.185466][T12456]  ? btf_parse_str_sec+0x1ae/0x1b0
[  346.185499][T12456]  btf_new_fd+0x303/0x740
[  346.185547][T12456]  bpf_btf_load+0x112/0x130
[  346.185577][T12456]  __sys_bpf+0x3d8/0x7e0
[  346.185638][T12456]  __x64_sys_bpf+0x41/0x50
[  346.185664][T12456]  x64_sys_call+0x10cb/0x3020
[  346.185692][T12456]  do_syscall_64+0x12c/0x3b0
[  346.185730][T12456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.185876][T12456] RIP: 0033:0x7ffa4acace59
[  346.185891][T12456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.185907][T12456] RSP: 002b:00007ffa496ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  346.185927][T12456] RAX: ffffffffffffffda RBX: 00007ffa4af25fa0 RCX: 00007ffa4acace59
[  346.186011][T12456] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  346.186028][T12456] RBP: 00007ffa496ff090 R08: 0000000000000000 R09: 0000000000000000
[  346.186043][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  346.186057][T12456] R13: 00007ffa4af26038 R14: 00007ffa4af25fa0 R15: 00007fffc11b25d8
[  346.186075][T12456]  </TASK>
[  346.455083][T12471] loop6: detected capacity change from 0 to 512
[  346.463674][T12462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=12462 comm=syz.4.2597
[  346.478279][T12472] sctp: [Deprecated]: syz.3.2600 (pid 12472) Use of int in maxseg socket option.
[  346.478279][T12472] Use struct sctp_assoc_value instead
[  346.496401][T12471] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  346.511521][T12471] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2603: corrupted in-inode xattr: e_value size too large
[  346.531854][T12471] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  346.532017][T12471] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2603: couldn't read orphan inode 15 (err -117)
[  346.541383][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  346.541403][    C0] EXT4-fs (loop6): initial error at time 1779770017: ext4_iget_extra_inode:5128: inode 15
[  346.541440][    C0] EXT4-fs (loop6): last error at time 1779770017: ext4_iget_extra_inode:5128: inode 15
[  346.587680][T12465] ------------[ cut here ]------------
[  346.593162][T12465] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.3.2600/12465
[  346.603013][T12465] Modules linked in:
[  346.607005][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.3.2600 Not tainted syzkaller #0 PREEMPT(full) 
[  346.616384][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.626440][T12465] RIP: 0010:do_notify_parent+0x5c3/0x600
[  346.632262][T12465] Code: 8b 05 e1 a8 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 48 5f 04 cc e8 3e 1c 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 30 1c 1e 00 90 0f 0b 90 e9 af fa ff ff
[  346.651876][T12465] RSP: 0018:ffffc9000fb1fdd8 EFLAGS: 00010093
[  346.658057][T12465] RAX: ffffffff813b1762 RBX: ffff88810173e600 RCX: ffff88810173e600
[  346.666142][T12465] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040
[  346.674208][T12465] RBP: 0000000000000080 R08: ffff88810173f100 R09: 0000000000000000
[  346.682192][T12465] R10: ffffc9000fb1fdf0 R11: 0001c9000fb1fdf0 R12: ffff88810173e600
[  346.690173][T12465] R13: ffff88810173ee28 R14: ffff888104fed210 R15: 0000000000000080
[  346.698683][T12465] FS:  0000000000000000(0000) GS:ffff8882ae8f8000(0000) knlGS:0000000000000000
[  346.707641][T12465] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  346.714247][T12465] CR2: 00007ffa4aefe700 CR3: 0000000130b04000 CR4: 00000000003506f0
[  346.722373][T12465] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000
[  346.730524][T12465] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  346.738543][T12465] Call Trace:
[  346.741907][T12465]  <TASK>
[  346.745133][T12465]  ? _raw_spin_lock_irqsave+0x57/0xb0
[  346.750719][T12465]  ? __list_add_valid_or_report+0x38/0xe0
[  346.756542][T12465]  do_exit+0xc13/0x1530
[  346.760730][T12465]  ? switch_fpu_return+0xe7/0x1b0
[  346.765812][T12465]  __x64_sys_exit+0x1f/0x20
[  346.770412][T12465]  x64_sys_call+0x301d/0x3020
[  346.775109][T12465]  do_syscall_64+0x12c/0x3b0
[  346.779714][T12465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.785689][T12465] RIP: 0033:0x7ffa4acace59
[  346.790268][T12465] Code: Unable to access opcode bytes at 0x7ffa4acace2f.
[  346.798278][T12465] RSP: 002b:00007ffa496fefd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  346.806833][T12465] RAX: ffffffffffffffda RBX: 00007ffa4af25fa0 RCX: 00007ffa4acace59
[  346.814850][T12465] RDX: 00007ffa496ff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[  346.822917][T12465] RBP: 00007ffa4ad42d6f R08: 0000000000000000 R09: 0000000000000000
[  346.831163][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.839146][T12465] R13: 00007ffa4af26038 R14: 00007ffa4af25fa0 R15: 00007fffc11b25d8
[  346.847130][T12465]  </TASK>
[  346.850217][T12465] ---[ end trace 0000000000000000 ]---
[  346.868994][T12471] loop6: lost filesystem error report for type 5 error -117
[  346.918652][T12471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.981577][T12486] FAULT_INJECTION: forcing a failure.
[  346.981577][T12486] name failslab, interval 1, probability 0, space 0, times 0
[  346.994773][T12486] CPU: 1 UID: 0 PID: 12486 Comm: syz.5.2606 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  346.994808][T12486] Tainted: [W]=WARN
[  346.994816][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.994828][T12486] Call Trace:
[  346.994835][T12486]  <TASK>
[  346.994845][T12486]  __dump_stack+0x1d/0x30
[  346.994869][T12486]  dump_stack_lvl+0x95/0xd0
[  346.994889][T12486]  dump_stack+0x15/0x1b
[  346.994908][T12486]  should_fail_ex+0x263/0x280
[  346.994937][T12486]  should_failslab+0x8c/0xb0
[  346.994970][T12486]  kmem_cache_alloc_noprof+0x66/0x3f0
[  346.995003][T12486]  ? vm_area_alloc+0x2c/0xb0
[  346.995037][T12486]  vm_area_alloc+0x2c/0xb0
[  346.995069][T12486]  mmap_region+0x1172/0x20d0
[  346.995100][T12486]  ? avc_has_perm+0x101/0x190
[  346.995161][T12486]  do_mmap+0x9b2/0xbd0
[  346.995184][T12486]  ? selinux_mmap_file+0x5d/0x70
[  346.995209][T12486]  vm_mmap_pgoff+0x183/0x2d0
[  346.995245][T12486]  ksys_mmap_pgoff+0x267/0x310
[  346.995268][T12486]  x64_sys_call+0x14df/0x3020
[  346.995293][T12486]  do_syscall_64+0x12c/0x3b0
[  346.995327][T12486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.995349][T12486] RIP: 0033:0x7f9347b4ce59
[  346.995366][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.995385][T12486] RSP: 002b:00007f934659f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  346.995408][T12486] RAX: ffffffffffffffda RBX: 00007f9347dc5fa0 RCX: 00007f9347b4ce59
[  346.995422][T12486] RDX: 000000000200000b RSI: 0000000000b36000 RDI: 0000200000000000
[  346.995437][T12486] RBP: 00007f934659f090 R08: 0000000000000003 R09: 0000000000000000
[  346.995450][T12486] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001
[  346.995463][T12486] R13: 00007f9347dc6038 R14: 00007f9347dc5fa0 R15: 00007fff0ec4c988
[  346.995483][T12486]  </TASK>
[  347.198537][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.265879][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2608'.
[  347.269584][T12496] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  347.285402][T12494] netlink: 'syz.6.2607': attribute type 4 has an invalid length.
[  347.337826][T12502] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2614'.
[  347.405204][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2615'.
[  347.760920][T12532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12532 comm=syz.5.2620
[  347.774343][T12532] netlink: 'syz.5.2620': attribute type 2 has an invalid length.
[  347.782191][T12532] netlink: 'syz.5.2620': attribute type 1 has an invalid length.
[  347.791116][T12532] netlink: 'syz.5.2620': attribute type 8 has an invalid length.
[  347.800253][T12532] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2620'.
[  348.166645][T12539] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  349.019256][T12553] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2626'.
[  349.177770][   T28] audit: type=1400 audit(1779770020.556:3770): avc:  denied  { read } for  pid=12554 comm="syz.4.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  349.631174][T12562] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  349.642307][T12562] tipc: Enabled bearer <udp:syz2>, priority 10
[  349.650379][T12562] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2635'.
[  349.662150][T12562] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2635'.
[  349.678110][T12565] sctp: [Deprecated]: syz.2.2636 (pid 12565) Use of struct sctp_assoc_value in delayed_ack socket option.
[  349.678110][T12565] Use struct sctp_sack_info instead
[  349.747829][   T28] audit: type=1400 audit(1779770021.126:3771): avc:  denied  { getopt } for  pid=12572 comm="syz.3.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  349.768990][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  349.839795][T12584] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2643'.
[  349.934891][T12602] 9p: Bad value for 'rfdno'
[  349.937348][T12604] FAULT_INJECTION: forcing a failure.
[  349.937348][T12604] name failslab, interval 1, probability 0, space 0, times 0
[  349.969583][T12604] CPU: 1 UID: 0 PID: 12604 Comm: syz.2.2651 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  349.969729][T12604] Tainted: [W]=WARN
[  349.969736][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  349.969747][T12604] Call Trace:
[  349.969754][T12604]  <TASK>
[  349.969769][T12604]  __dump_stack+0x1d/0x30
[  349.969794][T12604]  dump_stack_lvl+0x95/0xd0
[  349.969814][T12604]  dump_stack+0x15/0x1b
[  349.969834][T12604]  should_fail_ex+0x263/0x280
[  349.969933][T12604]  should_failslab+0x8c/0xb0
[  349.969966][T12604]  kmem_cache_alloc_noprof+0x66/0x3f0
[  349.970015][T12604]  ? security_inode_alloc+0x37/0x100
[  349.970119][T12604]  security_inode_alloc+0x37/0x100
[  349.970144][T12604]  inode_init_always_gfp+0x4a0/0x4e0
[  349.970177][T12604]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  349.970217][T12604]  alloc_inode+0x58/0x170
[  349.970236][T12604]  new_inode+0x1d/0xe0
[  349.970258][T12604]  shmem_get_inode+0x25a/0x790
[  349.970285][T12604]  __shmem_file_setup+0x14f/0x260
[  349.970345][T12604]  shmem_file_setup+0x3b/0x50
[  349.970363][T12604]  memfd_alloc_file+0x4e/0x300
[  349.970390][T12604]  __se_sys_memfd_create+0x2e1/0x3b0
[  349.970421][T12604]  __x64_sys_memfd_create+0x31/0x40
[  349.970524][T12604]  x64_sys_call+0x1f22/0x3020
[  349.970550][T12604]  do_syscall_64+0x12c/0x3b0
[  349.970583][T12604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.970608][T12604] RIP: 0033:0x7fbad88bce59
[  349.970624][T12604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.970640][T12604] RSP: 002b:00007fbad7316e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  349.970660][T12604] RAX: ffffffffffffffda RBX: 00000000000006a1 RCX: 00007fbad88bce59
[  349.970729][T12604] RDX: 00007fbad7316ee0 RSI: 0000000000000000 RDI: 00007fbad8952f4f
[  349.970743][T12604] RBP: 00002000000029c0 R08: 00000000ffffffff R09: 0000000000000000
[  349.970757][T12604] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140
[  349.970772][T12604] R13: 00007fbad7316ee0 R14: 00007fbad7316ea0 R15: 0000200000000300
[  349.970792][T12604]  </TASK>
[  350.208671][T12599] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2649'.
[  350.224926][T12611] loop6: detected capacity change from 0 to 256
[  350.236450][T12611] vfat: Unknown parameter '0xffffffffffffffff˙˙˙01777777777777777777777˙˙˙˙˙˙˙˙'
[  350.283269][T12612] SELinux:  policydb magic number 0xf00 does not match expected magic number 0xf97cff8c
[  350.303444][T12612] SELinux: failed to load policy
[  350.348675][T12628] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2657'.
[  350.441090][T12641] FAULT_INJECTION: forcing a failure.
[  350.441090][T12641] name failslab, interval 1, probability 0, space 0, times 0
[  350.491094][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz.2.2661 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  350.491134][T12641] Tainted: [W]=WARN
[  350.491142][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  350.491156][T12641] Call Trace:
[  350.491163][T12641]  <TASK>
[  350.491171][T12641]  __dump_stack+0x1d/0x30
[  350.491194][T12641]  dump_stack_lvl+0x95/0xd0
[  350.491216][T12641]  dump_stack+0x15/0x1b
[  350.491237][T12641]  should_fail_ex+0x263/0x280
[  350.491267][T12641]  should_failslab+0x8c/0xb0
[  350.491301][T12641]  kmem_cache_alloc_noprof+0x66/0x3f0
[  350.491331][T12641]  ? mas_alloc_nodes+0x1a2/0x210
[  350.491358][T12641]  mas_alloc_nodes+0x1a2/0x210
[  350.491388][T12641]  mas_preallocate+0x2ca/0x510
[  350.491429][T12641]  __split_vma+0x240/0x640
[  350.491457][T12641]  ? __rcu_read_unlock+0x4e/0x70
[  350.491475][T12641]  ? should_fail_ex+0x30/0x280
[  350.491501][T12641]  vms_gather_munmap_vmas+0x184/0x850
[  350.491532][T12641]  ? avc_has_perm+0x101/0x190
[  350.491563][T12641]  do_vmi_align_munmap+0x1e1/0x400
[  350.491600][T12641]  do_vmi_munmap+0x1da/0x220
[  350.491631][T12641]  do_munmap+0x8d/0xc0
[  350.491655][T12641]  mremap_to+0x1a3/0x460
[  350.491685][T12641]  ? mas_walk+0x254/0x370
[  350.491713][T12641]  ? check_prep_vma+0x49b/0x660
[  350.491749][T12641]  __se_sys_mremap+0x89e/0xc40
[  350.491788][T12641]  ? ksys_write+0x194/0x1a0
[  350.491821][T12641]  __x64_sys_mremap+0x67/0x80
[  350.491849][T12641]  x64_sys_call+0x29db/0x3020
[  350.491871][T12641]  do_syscall_64+0x12c/0x3b0
[  350.491906][T12641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.491931][T12641] RIP: 0033:0x7fbad88bce59
[  350.491955][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.491972][T12641] RSP: 002b:00007fbad7317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  350.491991][T12641] RAX: ffffffffffffffda RBX: 00007fbad8b35fa0 RCX: 00007fbad88bce59
[  350.492006][T12641] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000678000
[  350.492021][T12641] RBP: 00007fbad7317090 R08: 000020000084c000 R09: 0000000000000000
[  350.492034][T12641] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  350.492046][T12641] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  350.492063][T12641]  </TASK>
[  350.956663][T12664] FAULT_INJECTION: forcing a failure.
[  350.956663][T12664] name failslab, interval 1, probability 0, space 0, times 0
[  350.985105][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.3.2667 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  350.985151][T12664] Tainted: [W]=WARN
[  350.985159][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  350.985242][T12664] Call Trace:
[  350.985250][T12664]  <TASK>
[  350.985259][T12664]  __dump_stack+0x1d/0x30
[  350.985286][T12664]  dump_stack_lvl+0x95/0xd0
[  350.985310][T12664]  dump_stack+0x15/0x1b
[  350.985330][T12664]  should_fail_ex+0x263/0x280
[  350.985388][T12664]  should_failslab+0x8c/0xb0
[  350.985421][T12664]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  350.985580][T12664]  ? __d_alloc+0x37/0x340
[  350.985607][T12664]  __d_alloc+0x37/0x340
[  350.985631][T12664]  ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0
[  350.985671][T12664]  ? set_normalized_timespec64+0xe0/0x110
[  350.985695][T12664]  d_alloc_pseudo+0x1e/0x80
[  350.985721][T12664]  alloc_file_pseudo+0x91/0x190
[  350.985747][T12664]  create_pipe_files+0x1c3/0x440
[  350.985855][T12664]  __do_pipe_flags+0x44/0x140
[  350.985949][T12664]  do_pipe2+0x61/0x140
[  350.985981][T12664]  ? ksys_write+0x194/0x1a0
[  350.986012][T12664]  __x64_sys_pipe+0x21/0x30
[  350.986049][T12664]  x64_sys_call+0x3a6/0x3020
[  350.986076][T12664]  do_syscall_64+0x12c/0x3b0
[  350.986154][T12664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.986176][T12664] RIP: 0033:0x7ffa4acace59
[  350.986193][T12664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.986247][T12664] RSP: 002b:00007ffa496de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  350.986273][T12664] RAX: ffffffffffffffda RBX: 00007ffa4af26090 RCX: 00007ffa4acace59
[  350.986289][T12664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  350.986303][T12664] RBP: 00007ffa496de090 R08: 0000000000000000 R09: 0000000000000000
[  350.986323][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.986337][T12664] R13: 00007ffa4af26128 R14: 00007ffa4af26090 R15: 00007fffc11b25d8
[  350.986358][T12664]  </TASK>
[  351.431811][T12683] loop6: detected capacity change from 0 to 512
[  351.451270][T12683] EXT4-fs: Ignoring removed bh option
[  351.461931][T12683] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  351.488148][T12683] EXT4-fs (loop6): 1 truncate cleaned up
[  351.494466][T12683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.933481][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.119272][T12751] xfrm0 speed is unknown, defaulting to 1000
[  352.326195][T12751] lo speed is unknown, defaulting to 1000
[  352.364914][T12751] lo speed is unknown, defaulting to 1000
[  352.409789][   T28] audit: type=1400 audit(1779770023.796:3772): avc:  denied  { accept } for  pid=12734 comm="syz.5.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  352.658773][T12779] __nla_validate_parse: 6 callbacks suppressed
[  352.658792][T12779] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2681'.
[  352.907329][T12786] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  352.918134][T12786] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98
[  353.685750][ T3396] page_pool_release_retry() stalled pool shutdown: id 54, 1 inflight 61 sec
[  354.096782][T12794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2685'.
[  354.726213][T12796] netlink: 'syz.2.2686': attribute type 4 has an invalid length.
[  355.148289][T12800] nft_compat: unsupported protocol 0
[  356.668885][T12835] netlink: 'syz.6.2695': attribute type 10 has an invalid length.
[  356.725565][T12835] veth0_macvtap: left promiscuous mode
[  357.291458][T12844] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2701'.
[  357.437356][T12850] netlink: 'syz.3.2703': attribute type 4 has an invalid length.
[  358.018958][T12859] nft_compat: unsupported protocol 0
[  358.196848][T12862] FAULT_INJECTION: forcing a failure.
[  358.196848][T12862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  358.240743][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.2.2707 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  358.240776][T12862] Tainted: [W]=WARN
[  358.240782][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  358.240796][T12862] Call Trace:
[  358.240804][T12862]  <TASK>
[  358.240813][T12862]  __dump_stack+0x1d/0x30
[  358.240891][T12862]  dump_stack_lvl+0x95/0xd0
[  358.240921][T12862]  dump_stack+0x15/0x1b
[  358.240994][T12862]  should_fail_ex+0x263/0x280
[  358.241025][T12862]  should_fail+0xb/0x20
[  358.241053][T12862]  should_fail_usercopy+0x1a/0x20
[  358.241164][T12862]  _copy_from_user+0x1c/0xb0
[  358.241193][T12862]  ___sys_sendmsg+0xc1/0x1e0
[  358.241226][T12862]  __x64_sys_sendmsg+0xd4/0x160
[  358.241347][T12862]  x64_sys_call+0x194c/0x3020
[  358.241374][T12862]  do_syscall_64+0x12c/0x3b0
[  358.241404][T12862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.241505][T12862] RIP: 0033:0x7fbad88bce59
[  358.241545][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.241566][T12862] RSP: 002b:00007fbad7317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  358.241591][T12862] RAX: ffffffffffffffda RBX: 00007fbad8b35fa0 RCX: 00007fbad88bce59
[  358.241607][T12862] RDX: 00000000000000c0 RSI: 00002000000002c0 RDI: 0000000000000004
[  358.241622][T12862] RBP: 00007fbad7317090 R08: 0000000000000000 R09: 0000000000000000
[  358.241663][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.241675][T12862] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  358.241695][T12862]  </TASK>
[  359.096849][   T28] audit: type=1400 audit(1779770030.486:3773): avc:  denied  { append } for  pid=12888 comm="syz.3.2716" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  359.172060][ T3374] kernel read not supported for file /eth0 (pid: 3374 comm: kworker/1:3)
[  359.294884][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'.
[  359.308302][   T28] audit: type=1400 audit(1779770030.696:3774): avc:  denied  { listen } for  pid=12895 comm="syz.3.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  359.426556][T12910] netlink: 'syz.5.2721': attribute type 4 has an invalid length.
[  359.805208][T12915] nft_compat: unsupported protocol 0
[  359.820969][T12916] netlink: 'syz.2.2722': attribute type 10 has an invalid length.
[  359.835122][T12916] veth0_macvtap: left promiscuous mode
[  360.564628][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2728'.
[  361.012530][T12960] netlink: 'syz.3.2740': attribute type 4 has an invalid length.
[  361.086630][T12969] nft_compat: unsupported protocol 0
[  363.033874][T12995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12995 comm=syz.4.2749
[  363.046572][T12995] netlink: 'syz.4.2749': attribute type 2 has an invalid length.
[  363.054420][T12995] netlink: 'syz.4.2749': attribute type 1 has an invalid length.
[  363.062333][T12995] netlink: 'syz.4.2749': attribute type 8 has an invalid length.
[  363.070169][T12995] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2749'.
[  364.710107][T13006] xfrm0 speed is unknown, defaulting to 1000
[  365.157895][T13006] lo speed is unknown, defaulting to 1000
[  365.166280][T13018] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.2758'.
[  365.192173][T13010] xfrm0 speed is unknown, defaulting to 1000
[  365.327413][   T28] audit: type=1400 audit(1779770036.706:3775): avc:  denied  { setopt } for  pid=13017 comm="syz.2.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  365.781241][T13006] lo speed is unknown, defaulting to 1000
[  365.792192][T13010] lo speed is unknown, defaulting to 1000
[  365.822751][T13024] nft_compat: unsupported protocol 0
[  366.036169][T13010] lo speed is unknown, defaulting to 1000
[  366.917264][T13043] syz.5.2762 (13043): attempted to duplicate a private mapping with mremap.  This is not supported.
[  367.029682][   T28] audit: type=1326 audit(1779770038.406:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4acace59 code=0x7ffc0000
[  367.062873][   T28] audit: type=1326 audit(1779770038.406:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa4aca6bd7 code=0x7ffc0000
[  367.083524][T13043] 

: option downdelay: invalid value (18446744073709547007)
[  367.098540][T13043] 

: option downdelay: allowed values 0 - 2147483647
[  367.107376][   T28] audit: type=1326 audit(1779770038.406:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa4ac4e1d9 code=0x7ffc0000
[  367.134491][   T28] audit: type=1326 audit(1779770038.406:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa4aca6bd7 code=0x7ffc0000
[  367.163540][T13043] 

 (unregistering): Released all slaves
[  367.170599][   T28] audit: type=1326 audit(1779770038.406:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa4ac4e1d9 code=0x7ffc0000
[  367.199814][T13050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2768'.
[  367.204644][   T28] audit: type=1326 audit(1779770038.406:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa4aca6bd7 code=0x7ffc0000
[  367.243172][T13050] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2768'.
[  367.285321][   T28] audit: type=1326 audit(1779770038.406:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa4ac4e1d9 code=0x7ffc0000
[  367.311551][   T28] audit: type=1326 audit(1779770038.406:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa4aca6bd7 code=0x7ffc0000
[  367.402093][   T28] audit: type=1326 audit(1779770038.406:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.3.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa4ac4e1d9 code=0x7ffc0000
[  368.310374][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13073 comm=syz.6.2774
[  368.323267][T13073] netlink: 'syz.6.2774': attribute type 2 has an invalid length.
[  368.331268][T13073] netlink: 'syz.6.2774': attribute type 1 has an invalid length.
[  368.339345][T13073] netlink: 'syz.6.2774': attribute type 8 has an invalid length.
[  368.347884][T13073] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2774'.
[  368.438146][T13074] loop6: detected capacity change from 0 to 512
[  368.446188][T13074] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  368.477562][T13074] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2774: corrupted inode contents
[  368.489963][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.490912][T13074] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.2774: mark_inode_dirty error
[  368.500459][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  368.500477][    C1] EXT4-fs (loop6): initial error at time 1779770039: ext4_do_update_inode:5690: inode 16
[  368.500511][    C1] EXT4-fs (loop6): last error at time 1779770039: ext4_do_update_inode:5690: inode 16
[  368.538721][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.542161][T13074] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2774: corrupted inode contents
[  368.563330][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.563917][T13074] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2774: mark_inode_dirty error
[  368.585079][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.585728][T13074] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2774: corrupted inode contents
[  368.607357][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.607936][T13074] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  368.625807][T13074] loop6: lost filesystem error report for type 5 error -117
[  368.626354][T13074] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2774: corrupted inode contents
[  368.645689][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.648991][T13074] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.2774: mark_inode_dirty error
[  368.670085][T13074] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  368.673732][T13074] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  368.692198][T13074] loop6: lost filesystem error report for type 5 error -117
[  368.693505][T13074] EXT4-fs (loop6): 1 truncate cleaned up
[  368.708219][T13074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.721396][T13074] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.199011][T12742] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:16: Failed to release dquot type 1
[  369.782001][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'.
[  369.835429][T13086] nft_compat: unsupported protocol 0
[  370.264942][T13093] FAULT_INJECTION: forcing a failure.
[  370.264942][T13093] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.377026][T13093] CPU: 1 UID: 0 PID: 13093 Comm: syz.3.2781 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  370.377066][T13093] Tainted: [W]=WARN
[  370.377074][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  370.377149][T13093] Call Trace:
[  370.377155][T13093]  <TASK>
[  370.377163][T13093]  __dump_stack+0x1d/0x30
[  370.377190][T13093]  dump_stack_lvl+0x95/0xd0
[  370.377214][T13093]  dump_stack+0x15/0x1b
[  370.377232][T13093]  should_fail_ex+0x263/0x280
[  370.377285][T13093]  should_fail+0xb/0x20
[  370.377313][T13093]  should_fail_usercopy+0x1a/0x20
[  370.377400][T13093]  _copy_to_user+0x20/0xa0
[  370.377430][T13093]  simple_read_from_buffer+0xb5/0x130
[  370.377551][T13093]  proc_fail_nth_read+0x10e/0x150
[  370.377580][T13093]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  370.377607][T13093]  vfs_read+0x1ab/0x7f0
[  370.377711][T13093]  ? __rcu_read_unlock+0x4e/0x70
[  370.377736][T13093]  ? __fget_files+0x184/0x1c0
[  370.377760][T13093]  ? mutex_lock+0x57/0x90
[  370.377782][T13093]  ksys_read+0xdc/0x1a0
[  370.377846][T13093]  __x64_sys_read+0x40/0x50
[  370.377878][T13093]  x64_sys_call+0x2886/0x3020
[  370.377904][T13093]  do_syscall_64+0x12c/0x3b0
[  370.377946][T13093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.377967][T13093] RIP: 0033:0x7ffa4ac6d68e
[  370.377986][T13093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  370.378007][T13093] RSP: 002b:00007ffa496fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  370.378108][T13093] RAX: ffffffffffffffda RBX: 00007ffa496ff6c0 RCX: 00007ffa4ac6d68e
[  370.378123][T13093] RDX: 000000000000000f RSI: 00007ffa496ff0a0 RDI: 0000000000000006
[  370.378142][T13093] RBP: 00007ffa496ff090 R08: 0000000000000000 R09: 0000000000000000
[  370.378154][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.378187][T13093] R13: 00007ffa4af26038 R14: 00007ffa4af25fa0 R15: 00007fffc11b25d8
[  370.378210][T13093]  </TASK>
[  370.610887][T13090] batadv0: entered promiscuous mode
[  370.646367][T13090] macvlan2: entered allmulticast mode
[  370.653442][T13090] batadv0: entered allmulticast mode
[  370.666688][T13090] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  370.675138][T13090] batadv0: left allmulticast mode
[  370.688992][T13090] batadv0: left promiscuous mode
[  370.751178][T13095] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  370.895174][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'.
[  371.018980][T12729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.111427][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'.
[  371.125423][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.154282][T12729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.247361][T12729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.490763][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2795'.
[  371.512550][T13130] loop6: detected capacity change from 0 to 764
[  371.542640][T12729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.560038][T13130] Symlink component flag not implemented
[  371.565705][T13130] Symlink component flag not implemented
[  371.656036][T13130] xfrm0 speed is unknown, defaulting to 1000
[  371.774585][T13130] lo speed is unknown, defaulting to 1000
[  371.891956][T13130] lo speed is unknown, defaulting to 1000
[  372.410681][T13113] xfrm0 speed is unknown, defaulting to 1000
[  372.461345][T13141] FAULT_INJECTION: forcing a failure.
[  372.461345][T13141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  372.572853][T13141] CPU: 0 UID: 0 PID: 13141 Comm: syz.6.2797 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  372.572961][T13141] Tainted: [W]=WARN
[  372.572968][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  372.572981][T13141] Call Trace:
[  372.572989][T13141]  <TASK>
[  372.572998][T13141]  __dump_stack+0x1d/0x30
[  372.573021][T13141]  dump_stack_lvl+0x95/0xd0
[  372.573040][T13141]  dump_stack+0x15/0x1b
[  372.573150][T13141]  should_fail_ex+0x263/0x280
[  372.573178][T13141]  should_fail+0xb/0x20
[  372.573204][T13141]  should_fail_usercopy+0x1a/0x20
[  372.573301][T13141]  _copy_from_user+0x1c/0xb0
[  372.573333][T13141]  ____sys_sendmsg+0x1e2/0x5b0
[  372.573372][T13141]  ___sys_sendmsg+0x195/0x1e0
[  372.573400][T13141]  ? path_openat+0x1b01/0x2050
[  372.573443][T13141]  __sys_sendmmsg+0x185/0x320
[  372.573560][T13141]  __x64_sys_sendmmsg+0x57/0x70
[  372.573644][T13141]  x64_sys_call+0x27aa/0x3020
[  372.573672][T13141]  do_syscall_64+0x12c/0x3b0
[  372.573733][T13141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.573759][T13141] RIP: 0033:0x7f78fab0ce59
[  372.573776][T13141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.573793][T13141] RSP: 002b:00007f78f955f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  372.573813][T13141] RAX: ffffffffffffffda RBX: 00007f78fad85fa0 RCX: 00007f78fab0ce59
[  372.573830][T13141] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003
[  372.573893][T13141] RBP: 00007f78f955f090 R08: 0000000000000000 R09: 0000000000000000
[  372.573906][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.573919][T13141] R13: 00007f78fad86038 R14: 00007f78fad85fa0 R15: 00007ffc31b297a8
[  372.574011][T13141]  </TASK>
[  372.828277][T13113] lo speed is unknown, defaulting to 1000
[  372.860055][T12729] bridge_slave_1: left allmulticast mode
[  372.883423][T12729] bridge_slave_1: left promiscuous mode
[  372.913347][T12729] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.962422][T12729] bridge_slave_0: left allmulticast mode
[  372.991823][T12729] bridge_slave_0: left promiscuous mode
[  373.032855][T12729] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.162388][   T28] kauditd_printk_skb: 4073 callbacks suppressed
[  373.162407][   T28] audit: type=1400 audit(2000000000.960:7857): avc:  denied  { write } for  pid=13145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.480320][T13168] loop6: detected capacity change from 0 to 1764
[  373.756881][   T28] audit: type=1400 audit(2000000001.550:7858): avc:  denied  { write } for  pid=13166 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  373.891078][T12729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.965410][T12729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.029852][T12729] bond0 (unregistering): Released all slaves
[  374.113669][T12729] bond1 (unregistering): Released all slaves
[  374.143206][T13113] lo speed is unknown, defaulting to 1000
[  374.155508][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9
[  374.190885][T12729] tipc: Left network mode
[  374.223027][T13175] bond0: (slave netdevsim0): Error: Device can not be enslaved while up
[  374.346066][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2804'.
[  375.586138][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2806'.
[  376.786737][   T28] audit: type=1400 audit(2000000004.590:7859): avc:  denied  { write } for  pid=13177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.240626][   T28] audit: type=1400 audit(2000000005.040:7860): avc:  denied  { write } for  pid=13212 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.267647][T13214] nft_compat: unsupported protocol 0
[  377.308142][T12729] hsr_slave_0: left promiscuous mode
[  377.326812][T12729] hsr_slave_1: left promiscuous mode
[  377.349743][T12729] veth1_macvtap: left promiscuous mode
[  377.355432][T12729] veth0_macvtap: left promiscuous mode
[  377.360956][T12729] veth1_vlan: left promiscuous mode
[  377.366268][T12729] veth0_vlan: left promiscuous mode
[  377.538188][T12729] pim6reg (unregistering): left allmulticast mode
[  377.610420][T12729] team0 (unregistering): Port device team_slave_1 removed
[  377.630347][T12729] team0 (unregistering): Port device team_slave_0 removed
[  377.676149][T13204] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  377.686421][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10
[  377.693677][T13204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  377.796502][T13235] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2814'.
[  377.956595][T13247] xt_hashlimit: size too large, truncated to 1048576
[  378.824184][T13113] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.942507][T13113] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.968333][   T28] audit: type=1400 audit(2000000006.770:7861): avc:  denied  { write } for  pid=13228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.981801][T13113] bridge_slave_0: entered allmulticast mode
[  379.034061][T13113] bridge_slave_0: entered promiscuous mode
[  379.140726][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2817'.
[  379.168060][T13113] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.192810][T13113] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.214895][   T28] audit: type=1400 audit(2000000007.020:7862): avc:  denied  { name_bind } for  pid=13269 comm="syz.5.2820" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  379.239575][T13113] bridge_slave_1: entered allmulticast mode
[  379.260541][T13113] bridge_slave_1: entered promiscuous mode
[  379.334204][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.381508][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.411725][T12729] IPVS: stop unused estimator thread 0...
[  379.455169][T13113] team0: Port device team_slave_0 added
[  379.489988][T13113] team0: Port device team_slave_1 added
[  379.611056][   T28] audit: type=1400 audit(2000000007.410:7863): avc:  denied  { setopt } for  pid=13280 comm="syz.6.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  379.664372][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.697797][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.796685][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.841494][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.876347][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.987771][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.000871][   T28] audit: type=1400 audit(2000000007.800:7864): avc:  denied  { write } for  pid=13263 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.085390][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11
[  380.155085][T13113] hsr_slave_0: entered promiscuous mode
[  380.174207][T13113] hsr_slave_1: entered promiscuous mode
[  380.191837][T13113] debugfs: 'hsr0' already exists in 'hsr'
[  380.203871][T13113] Cannot create hsr debugfs directory
[  380.226908][T13298] team0: Device gtp0 is of different type
[  380.248819][T13290] loop6: detected capacity change from 0 to 32768
[  380.305691][T13290]  loop6: p1 p3 < p5 p6 >
[  380.399589][T13319] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  380.406251][T13319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  380.435573][T13319] vhci_hcd vhci_hcd.0: Device attached
[  380.470698][T13328] loop6: detected capacity change from 0 to 128
[  380.479849][T13319] IPVS: Unknown mcast interface: pimreg0
[  380.487632][   T28] audit: type=1400 audit(2000000008.300:7865): avc:  denied  { write } for  pid=13306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.514198][T13320] vhci_hcd: connection closed
[  380.515164][T13113] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  380.522953][T12740] vhci_hcd vhci_hcd.5: stop threads
[  380.539152][T10942] udevd[10942]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  380.540307][T10941] udevd[10941]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  380.550943][T10940] udevd[10940]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  380.563498][T12740] vhci_hcd vhci_hcd.5: release socket
[  380.586530][T13332] udevd[13332]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  380.588516][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  380.606215][   T28] audit: type=1400 audit(2000000008.390:7866): avc:  denied  { write } for  pid=13331 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.628522][T12740] vhci_hcd vhci_hcd.5: disconnect device
[  380.645301][ T3374] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  380.645531][T13113] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  380.665381][T13328] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  380.678990][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  380.687780][T13328] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  380.711251][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12
[  380.724875][T13113] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  380.736454][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  380.749914][T13328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  380.751901][T13113] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  380.775057][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  380.872839][T13113] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.887119][T13113] 8021q: adding VLAN 0 to HW filter on device team0
[  380.942855][T12740] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.950159][T12740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.015389][T12740] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.022537][T12740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.042284][T13358] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  382.076030][T13358] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  382.086964][T13113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  382.449020][T13396] loop6: detected capacity change from 0 to 128
[  382.553066][   T28] audit: type=1400 audit(2000000010.350:7867): avc:  denied  { remount } for  pid=13390 comm="syz.6.2847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  382.618225][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.009684][T13113] veth0_vlan: entered promiscuous mode
[  383.038361][T13113] veth1_vlan: entered promiscuous mode
[  383.098539][T13113] veth0_macvtap: entered promiscuous mode
[  383.120660][T13113] veth1_macvtap: entered promiscuous mode
[  383.138409][T13113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.156150][T13113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.189247][T12731] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.258303][T12740] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.274044][   T28] audit: type=1400 audit(2000000011.070:7868): avc:  denied  { accept } for  pid=13435 comm="syz.5.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  383.477110][T12740] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.602846][T12740] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.249748][   T28] audit: type=1400 audit(2000000011.370:7869): avc:  denied  { mount } for  pid=13113 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  384.272731][   T28] audit: type=1400 audit(2000000011.390:7870): avc:  denied  { mounton } for  pid=13113 comm="syz-executor" path="/root/syzkaller.rfnRc4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  384.519702][T13458] xfrm0 speed is unknown, defaulting to 1000
[  384.769304][T13458] lo speed is unknown, defaulting to 1000
[  384.792304][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2863'.
[  384.837734][T13471] netlink: 'syz.5.2863': attribute type 5 has an invalid length.
[  384.871446][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2863'.
[  384.913496][T13458] lo speed is unknown, defaulting to 1000
[  385.004482][   T28] audit: type=1400 audit(2000000011.400:7871): avc:  denied  { mount } for  pid=13113 comm="syz-executor" name="/" dev="gadgetfs" ino=4883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  385.042808][T13472] rdma_rxe: rxe_newlink: failed to add xfrm0
[  385.133805][T12729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.144256][T12729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.243146][T13458] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.250540][T13458] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.257839][T13458] bridge_slave_0: entered allmulticast mode
[  385.264569][T13458] bridge_slave_0: entered promiscuous mode
[  385.271612][T13458] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.278917][T13458] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.286263][T13458] bridge_slave_1: entered allmulticast mode
[  385.292785][T13458] bridge_slave_1: entered promiscuous mode
[  385.310583][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.326314][T12729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.338850][T12729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.357123][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.389593][T13458] team0: Port device team_slave_0 added
[  385.396287][T13458] team0: Port device team_slave_1 added
[  385.412593][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.419959][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.446894][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.458529][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.465592][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.495556][T13494] sctp: [Deprecated]: syz.6.2868 (pid 13494) Use of int in max_burst socket option.
[  385.495556][T13494] Use struct sctp_assoc_value instead
[  385.516236][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.549419][T12729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.571558][T12729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.601026][T13486] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2865'.
[  385.602962][T13494] loop6: detected capacity change from 0 to 512
[  385.613941][T13486] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2865'.
[  385.637372][T13486] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2865'.
[  385.666095][T13458] hsr_slave_0: entered promiscuous mode
[  385.672468][T13458] hsr_slave_1: entered promiscuous mode
[  385.678816][T13458] debugfs: 'hsr0' already exists in 'hsr'
[  385.684681][T13458] Cannot create hsr debugfs directory
[  385.702118][T12729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.713609][T12729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.734241][T13496] syzkaller0: entered promiscuous mode
[  385.748426][T13496] syzkaller0: entered allmulticast mode
[  385.795046][T13496] tc action pedit offset must be on 32 bit boundaries
[  385.843111][   T28] audit: type=1400 audit(2000000013.640:7872): avc:  denied  { validate_trans } for  pid=13505 comm="syz.5.2872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  386.003036][T12729] batadv1: left allmulticast mode
[  386.022807][T12729] batadv1: left promiscuous mode
[  386.046816][T12729] bridge0: port 3(batadv1) entered disabled state
[  386.075333][T12729] bridge_slave_1: left promiscuous mode
[  386.090566][T12729] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.241371][T12729] bridge_slave_0: left allmulticast mode
[  386.254781][T12729] bridge_slave_0: left promiscuous mode
[  386.265383][T12729] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.265979][   T28] audit: type=1400 audit(2000000014.070:7873): avc:  denied  { execute } for  pid=13521 comm="syz.5.2875" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  386.329478][   T28] audit: type=1400 audit(2000000014.130:7874): avc:  denied  { write } for  pid=13510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  386.367859][T12745] smc: removing ib device syz0
[  386.374635][T13529] usb usb7: usbfs: process 13529 (syz.5.2875) did not claim interface 0 before use
[  386.424221][   T28] audit: type=1400 audit(2000000014.200:7875): avc:  denied  { write } for  pid=13530 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  386.637287][T12729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  386.647331][T12729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.648624][T12729] bond0 (unregistering): Released all slaves
[  386.664401][T12729] bond1 (unregistering): Released all slaves
[  386.689361][ T3078] xfrm0 speed is unknown, defaulting to 1000
[  386.696089][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13
[  386.702929][ T3078] syz0: Port: 1 Link DOWN
[  386.825193][T13544] gre0 speed is unknown, defaulting to 1000
[  386.831422][T12729] tipc: Disabling bearer <udp:syz2>
[  386.838630][T13544] gre0 speed is unknown, defaulting to 1000
[  386.846529][T12729] tipc: Left network mode
[  386.862184][T13544] gre0 speed is unknown, defaulting to 1000
[  386.877843][   T28] audit: type=1400 audit(2000000014.680:7876): avc:  denied  { write } for  pid=13547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  386.945857][T13559] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.953100][T13559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.958952][   T28] audit: type=1400 audit(2000000014.750:7877): avc:  denied  { write } for  pid=13561 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  386.960556][T13559] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.990283][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.116046][   T28] audit: type=1400 audit(2000000014.910:7878): avc:  denied  { map } for  pid=13542 comm="syz.2.2881" path="socket:[41816]" dev="sockfs" ino=41816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  387.171961][T13559] 8021q: adding VLAN 0 to HW filter on device eth0
[  387.176254][T13544] infiniband syz1: set active
[  387.183087][T13559] 8021q: adding VLAN 0 to HW filter on device eth1
[  387.193382][T13559] 8021q: adding VLAN 0 to HW filter on device eth2
[  387.193433][T13544] infiniband syz1: added gre0
[  387.205511][T13559] 8021q: adding VLAN 0 to HW filter on device eth3
[  387.215960][T13559] geneve2: left promiscuous mode
[  387.223352][T13559] bond1: left promiscuous mode
[  387.229761][T13559] gre1: left promiscuous mode
[  387.237855][T13559] vlan2: left promiscuous mode
[  387.242721][T13559] bridge0: left promiscuous mode
[  387.250801][T13559] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  387.255623][T13544] RDS/IB: syz1: added
[  387.260377][T13559] team1: left promiscuous mode
[  387.263121][T13544] smc: adding ib device syz1 with port count 1
[  387.268967][T13559] team2: left promiscuous mode
[  387.274989][T13544] smc:    ib device syz1 port 1 has no pnetid
[  387.280708][T13559] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  387.299327][   T23] team_slave_0: entered promiscuous mode
[  387.305121][   T23] team_slave_1: entered promiscuous mode
[  387.322661][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.331495][T12729] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.350619][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.359677][T12729] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.369731][T12729] veth1_macvtap: left promiscuous mode
[  387.375369][T12729] veth1_vlan: left promiscuous mode
[  387.475581][T12729] team0 (unregistering): Port device team_slave_1 removed
[  387.493514][T12729] team0 (unregistering): Port device team_slave_0 removed
[  387.593783][ T3078] gre0 speed is unknown, defaulting to 1000
[  387.599913][ T3409] gre0 speed is unknown, defaulting to 1000
[  387.606050][T13544] gre0 speed is unknown, defaulting to 1000
[  387.733478][T13544] gre0 speed is unknown, defaulting to 1000
[  387.778852][T13571] lo speed is unknown, defaulting to 1000
[  387.800564][T13586] FAULT_INJECTION: forcing a failure.
[  387.800564][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.822034][T13586] CPU: 1 UID: 0 PID: 13586 Comm: syz.6.2885 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  387.822068][T13586] Tainted: [W]=WARN
[  387.822074][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  387.822087][T13586] Call Trace:
[  387.822095][T13586]  <TASK>
[  387.822139][T13586]  __dump_stack+0x1d/0x30
[  387.822168][T13586]  dump_stack_lvl+0x95/0xd0
[  387.822190][T13586]  dump_stack+0x15/0x1b
[  387.822212][T13586]  should_fail_ex+0x263/0x280
[  387.822321][T13586]  should_fail+0xb/0x20
[  387.822361][T13586]  should_fail_usercopy+0x1a/0x20
[  387.822393][T13586]  _copy_from_user+0x1c/0xb0
[  387.822424][T13586]  do_ipv6_setsockopt+0x124/0x2130
[  387.822478][T13586]  ? kstrtoull+0x111/0x140
[  387.822503][T13586]  ? __rcu_read_unlock+0x4e/0x70
[  387.822526][T13586]  ? avc_has_perm_noaudit+0xab/0x130
[  387.822563][T13586]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  387.822590][T13586]  ipv6_setsockopt+0x59/0x130
[  387.822612][T13586]  tcp_setsockopt+0x98/0xb0
[  387.822682][T13586]  sock_common_setsockopt+0x69/0x80
[  387.822720][T13586]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  387.822807][T13586]  __sys_setsockopt+0x184/0x200
[  387.822864][T13586]  __x64_sys_setsockopt+0x64/0x80
[  387.822958][T13586]  x64_sys_call+0x2327/0x3020
[  387.822982][T13586]  do_syscall_64+0x12c/0x3b0
[  387.823016][T13586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.823087][T13586] RIP: 0033:0x7f78fab0ce59
[  387.823105][T13586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.823123][T13586] RSP: 002b:00007f78f955f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  387.823159][T13586] RAX: ffffffffffffffda RBX: 00007f78fad85fa0 RCX: 00007f78fab0ce59
[  387.823175][T13586] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  387.823189][T13586] RBP: 00007f78f955f090 R08: 0000000000000388 R09: 0000000000000000
[  387.823204][T13586] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001
[  387.823218][T13586] R13: 00007f78fad86038 R14: 00007f78fad85fa0 R15: 00007ffc31b297a8
[  387.823304][T13586]  </TASK>
[  388.101149][T13458] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  388.142871][T13458] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  388.152609][T13458] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  388.163275][T13458] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  388.175616][T13544] gre0 speed is unknown, defaulting to 1000
[  388.175758][T13571] lo speed is unknown, defaulting to 1000
[  388.189953][T12729] IPVS: stop unused estimator thread 0...
[  388.264798][T13458] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  388.305562][T13458] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  388.326833][T13571] gre0 speed is unknown, defaulting to 1000
[  388.333202][T13458] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  388.342553][T13458] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  389.149963][T13639] loop6: detected capacity change from 0 to 512
[  389.157298][T13639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  389.219115][T13639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.232905][T13639] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  389.351843][T13544] gre0 speed is unknown, defaulting to 1000
[  389.461601][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  389.461616][   T28] audit: type=1400 audit(2000000017.260:7887): avc:  denied  { write } for  pid=13640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  389.511003][T13544] gre0 speed is unknown, defaulting to 1000
[  389.564974][   T28] audit: type=1400 audit(2000000017.300:7888): avc:  denied  { write } for  pid=13659 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  389.631611][T13458] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.641993][T13458] 8021q: adding VLAN 0 to HW filter on device team0
[  389.658808][T13458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  389.669547][T13458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.684362][T12742] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.691544][T12742] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.700954][T12742] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.708210][T12742] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.969937][   T28] audit: type=1400 audit(2000000017.770:7889): avc:  denied  { write } for  pid=13661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.069454][   T28] audit: type=1400 audit(2000000017.870:7890): avc:  denied  { write } for  pid=13684 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.099142][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.203548][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.334826][   T28] audit: type=1400 audit(2000000018.110:7891): avc:  denied  { write } for  pid=13690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.434874][   T28] audit: type=1400 audit(2000000018.230:7892): avc:  denied  { write } for  pid=13720 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  391.368919][T13458] veth0_vlan: entered promiscuous mode
[  391.606824][T13458] veth1_vlan: entered promiscuous mode
[  391.632336][T13458] veth0_macvtap: entered promiscuous mode
[  392.598632][T13458] veth1_macvtap: entered promiscuous mode
[  392.622421][T13458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.361261][   T28] audit: type=1400 audit(2000000021.160:7893): avc:  denied  { write } for  pid=13732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.436368][T13771] loop6: detected capacity change from 0 to 512
[  393.493666][   T28] audit: type=1400 audit(2000000021.270:7894): avc:  denied  { write } for  pid=13772 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.528211][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2910'.
[  393.593322][T13771] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  393.609112][T13458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.647177][T12731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.688342][T12731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.733608][   T28] audit: type=1400 audit(2000000021.530:7895): avc:  denied  { write } for  pid=13775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.771622][T12731] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.812598][T13794] loop6: detected capacity change from 0 to 512
[  393.834424][T12731] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.881356][T13794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.921397][   T28] audit: type=1400 audit(2000000021.720:7896): avc:  denied  { write } for  pid=13795 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  393.948861][T13794] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  394.023424][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.025621][T13816] FAULT_INJECTION: forcing a failure.
[  394.025621][T13816] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.075156][T13816] CPU: 0 UID: 0 PID: 13816 Comm: syz.4.2861 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  394.075191][T13816] Tainted: [W]=WARN
[  394.075197][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  394.075210][T13816] Call Trace:
[  394.075218][T13816]  <TASK>
[  394.075226][T13816]  __dump_stack+0x1d/0x30
[  394.075277][T13816]  dump_stack_lvl+0x95/0xd0
[  394.075302][T13816]  dump_stack+0x15/0x1b
[  394.075324][T13816]  should_fail_ex+0x263/0x280
[  394.075365][T13816]  should_fail+0xb/0x20
[  394.075387][T13816]  should_fail_usercopy+0x1a/0x20
[  394.075417][T13816]  _copy_from_iter+0xcf/0xea0
[  394.075448][T13816]  ? __alloc_skb+0x4f6/0x690
[  394.075485][T13816]  ? __alloc_skb+0x200/0x690
[  394.075511][T13816]  netlink_sendmsg+0x4ae/0x6f0
[  394.075547][T13816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  394.075724][T13816]  ____sys_sendmsg+0x563/0x5b0
[  394.075756][T13816]  ___sys_sendmsg+0x195/0x1e0
[  394.075859][T13816]  __x64_sys_sendmsg+0xd4/0x160
[  394.075891][T13816]  x64_sys_call+0x194c/0x3020
[  394.075929][T13816]  do_syscall_64+0x12c/0x3b0
[  394.076030][T13816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.076055][T13816] RIP: 0033:0x7fa54820ce59
[  394.076074][T13816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.076235][T13816] RSP: 002b:00007fa546c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.076261][T13816] RAX: ffffffffffffffda RBX: 00007fa548485fa0 RCX: 00007fa54820ce59
[  394.076278][T13816] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  394.076293][T13816] RBP: 00007fa546c5f090 R08: 0000000000000000 R09: 0000000000000000
[  394.076308][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.076322][T13816] R13: 00007fa548486038 R14: 00007fa548485fa0 R15: 00007ffccfe2cf98
[  394.076370][T13816]  </TASK>
[  394.513776][T13847] netlink: 'syz.4.2921': attribute type 2 has an invalid length.
[  394.521747][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2921'.
[  394.566863][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  394.566881][   T28] audit: type=1326 audit(2000000022.370:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.606821][   T28] audit: type=1326 audit(2000000022.370:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.634308][   T28] audit: type=1326 audit(2000000022.370:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.634346][   T28] audit: type=1326 audit(2000000022.370:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.634375][   T28] audit: type=1326 audit(2000000022.370:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.634403][   T28] audit: type=1326 audit(2000000022.370:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5481cd68e code=0x7ffc0000
[  394.634439][   T28] audit: type=1326 audit(2000000022.400:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.634464][   T28] audit: type=1400 audit(2000000022.410:7906): avc:  denied  { write } for  pid=13845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  394.634569][   T28] audit: type=1326 audit(2000000022.420:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  394.634596][   T28] audit: type=1326 audit(2000000022.420:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54820ce59 code=0x7ffc0000
[  395.019990][T13898] sctp: [Deprecated]: syz.5.2926 (pid 13898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  395.019990][T13898] Use struct sctp_sack_info instead
[  395.645074][T13934] FAULT_INJECTION: forcing a failure.
[  395.645074][T13934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.660070][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.2.2939 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  395.660102][T13934] Tainted: [W]=WARN
[  395.660110][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  395.660131][T13934] Call Trace:
[  395.660139][T13934]  <TASK>
[  395.660147][T13934]  __dump_stack+0x1d/0x30
[  395.660172][T13934]  dump_stack_lvl+0x95/0xd0
[  395.660226][T13934]  dump_stack+0x15/0x1b
[  395.660246][T13934]  should_fail_ex+0x263/0x280
[  395.660278][T13934]  should_fail+0xb/0x20
[  395.660355][T13934]  should_fail_usercopy+0x1a/0x20
[  395.660444][T13934]  _copy_to_user+0x20/0xa0
[  395.660493][T13934]  simple_read_from_buffer+0xb5/0x130
[  395.660528][T13934]  proc_fail_nth_read+0x10e/0x150
[  395.660559][T13934]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  395.660634][T13934]  vfs_read+0x1ab/0x7f0
[  395.660662][T13934]  ? __rcu_read_unlock+0x4e/0x70
[  395.660685][T13934]  ? __fget_files+0x184/0x1c0
[  395.660784][T13934]  ? mutex_lock+0x57/0x90
[  395.660808][T13934]  ksys_read+0xdc/0x1a0
[  395.660837][T13934]  __x64_sys_read+0x40/0x50
[  395.660903][T13934]  x64_sys_call+0x2886/0x3020
[  395.660938][T13934]  do_syscall_64+0x12c/0x3b0
[  395.660970][T13934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.661041][T13934] RIP: 0033:0x7fbad887d68e
[  395.661059][T13934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  395.661078][T13934] RSP: 002b:00007fbad7316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  395.661102][T13934] RAX: ffffffffffffffda RBX: 00007fbad73176c0 RCX: 00007fbad887d68e
[  395.661117][T13934] RDX: 000000000000000f RSI: 00007fbad73170a0 RDI: 0000000000000004
[  395.661131][T13934] RBP: 00007fbad7317090 R08: 0000000000000000 R09: 0000000000000000
[  395.661215][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.661228][T13934] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  395.661248][T13934]  </TASK>
[  395.862638][T13941] loop6: detected capacity change from 0 to 512
[  395.902017][T13944] program syz.2.2942 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.916022][T13944] FAULT_INJECTION: forcing a failure.
[  395.916022][T13944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.930389][T13944] CPU: 1 UID: 0 PID: 13944 Comm: syz.2.2942 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  395.930504][T13944] Tainted: [W]=WARN
[  395.930512][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  395.930525][T13944] Call Trace:
[  395.930532][T13944]  <TASK>
[  395.930540][T13944]  __dump_stack+0x1d/0x30
[  395.930563][T13944]  dump_stack_lvl+0x95/0xd0
[  395.930627][T13944]  dump_stack+0x15/0x1b
[  395.930649][T13944]  should_fail_ex+0x263/0x280
[  395.930680][T13944]  should_fail+0xb/0x20
[  395.930709][T13944]  should_fail_usercopy+0x1a/0x20
[  395.930811][T13944]  _copy_to_user+0x20/0xa0
[  395.930841][T13944]  simple_read_from_buffer+0xb5/0x130
[  395.930899][T13944]  proc_fail_nth_read+0x10e/0x150
[  395.930932][T13944]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  395.931000][T13944]  vfs_read+0x1ab/0x7f0
[  395.931024][T13944]  ? __rcu_read_unlock+0x4e/0x70
[  395.931046][T13944]  ? __fget_files+0x184/0x1c0
[  395.931097][T13944]  ? mutex_lock+0x57/0x90
[  395.931128][T13944]  ksys_read+0xdc/0x1a0
[  395.931154][T13944]  __x64_sys_read+0x40/0x50
[  395.931179][T13944]  x64_sys_call+0x2886/0x3020
[  395.931282][T13944]  do_syscall_64+0x12c/0x3b0
[  395.931310][T13944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.931412][T13944] RIP: 0033:0x7fbad887d68e
[  395.931431][T13944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  395.931452][T13944] RSP: 002b:00007fbad7316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  395.931490][T13944] RAX: ffffffffffffffda RBX: 00007fbad73176c0 RCX: 00007fbad887d68e
[  395.931506][T13944] RDX: 000000000000000f RSI: 00007fbad73170a0 RDI: 0000000000000005
[  395.931521][T13944] RBP: 00007fbad7317090 R08: 0000000000000000 R09: 0000000000000000
[  395.931536][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.931548][T13944] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  395.931622][T13944]  </TASK>
[  396.152887][T13941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.166018][T13941] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.972897][T13999] ieee802154 phy0 wpan0: encryption failed: -22
[  397.026552][ T6096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.060945][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2947'.
[  397.078825][T14007] FAULT_INJECTION: forcing a failure.
[  397.078825][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.093754][    C1] ==================================================================
[  397.101971][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  397.109387][    C1] 
[  397.111808][    C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0:
[  397.120488][    C1]  wq_worker_tick+0x64/0x240
[  397.125201][    C1]  sched_tick+0xbc/0x1f0
[  397.129548][    C1]  update_process_times+0x15e/0x190
[  397.134757][    C1]  tick_nohz_handler+0x275/0x3d0
[  397.139802][    C1]  __hrtimer_run_queues+0x276/0x4f0
[  397.145108][    C1]  hrtimer_interrupt+0x261/0x850
[  397.150086][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  397.156896][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  397.162817][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  397.168912][    C1]  crng_make_state+0xc1/0x200
[  397.173693][    C1]  _get_random_bytes+0x85/0x1b0
[  397.178679][    C1]  get_random_bytes+0x1d/0x30
[  397.183396][    C1]  nsim_dev_trap_report_work+0x492/0x640
[  397.189150][    C1]  process_scheduled_works+0x4f0/0x9c0
[  397.194756][    C1]  worker_thread+0x58a/0x780
[  397.199449][    C1]  kthread+0x22a/0x280
[  397.203796][    C1]  ret_from_fork+0x146/0x330
[  397.208511][    C1]  ret_from_fork_asm+0x1a/0x30
[  397.213379][    C1] 
[  397.215819][    C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1:
[  397.224518][    C1]  wq_worker_tick+0x64/0x240
[  397.229417][    C1]  sched_tick+0xbc/0x1f0
[  397.233759][    C1]  update_process_times+0x15e/0x190
[  397.238974][    C1]  tick_nohz_handler+0x275/0x3d0
[  397.244391][    C1]  __hrtimer_run_queues+0x276/0x4f0
[  397.249628][    C1]  hrtimer_interrupt+0x261/0x850
[  397.254590][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  397.260596][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  397.266348][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  397.272436][    C1]  __sanitizer_cov_trace_const_cmp1+0x0/0x90
[  397.278437][    C1]  in_aton+0x209/0x2c0
[  397.282517][    C1]  nsim_dev_trap_report_work+0x31e/0x640
[  397.288254][    C1]  process_scheduled_works+0x4f0/0x9c0
[  397.293812][    C1]  worker_thread+0x58a/0x780
[  397.298432][    C1]  kthread+0x22a/0x280
[  397.302604][    C1]  ret_from_fork+0x146/0x330
[  397.307210][    C1]  ret_from_fork_asm+0x1a/0x30
[  397.311985][    C1] 
[  397.314323][    C1] value changed: 0x0000000000142440 -> 0x0000000000144b50
[  397.321434][    C1] 
[  397.323848][    C1] Reported by Kernel Concurrency Sanitizer on:
[  397.330008][    C1] CPU: 1 UID: 0 PID: 12731 Comm: kworker/u8:14 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  397.341324][    C1] Tainted: [W]=WARN
[  397.345660][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  397.355926][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  397.362900][    C1] ==================================================================
[  397.388628][T14007] CPU: 1 UID: 0 PID: 14007 Comm: syz.2.2952 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  397.388667][T14007] Tainted: [W]=WARN
[  397.388675][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  397.388763][T14007] Call Trace:
[  397.388770][T14007]  <TASK>
[  397.388778][T14007]  __dump_stack+0x1d/0x30
[  397.388805][T14007]  dump_stack_lvl+0x95/0xd0
[  397.388829][T14007]  dump_stack+0x15/0x1b
[  397.388849][T14007]  should_fail_ex+0x263/0x280
[  397.388927][T14007]  should_fail+0xb/0x20
[  397.388949][T14007]  should_fail_usercopy+0x1a/0x20
[  397.389017][T14007]  _copy_from_user+0x1c/0xb0
[  397.389061][T14007]  __sys_bpf+0x183/0x7e0
[  397.389088][T14007]  __x64_sys_bpf+0x41/0x50
[  397.389108][T14007]  x64_sys_call+0x10cb/0x3020
[  397.389177][T14007]  do_syscall_64+0x12c/0x3b0
[  397.389212][T14007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.389234][T14007] RIP: 0033:0x7fbad88bce59
[  397.389324][T14007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.389344][T14007] RSP: 002b:00007fbad7317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  397.389365][T14007] RAX: ffffffffffffffda RBX: 00007fbad8b35fa0 RCX: 00007fbad88bce59
[  397.389378][T14007] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  397.389391][T14007] RBP: 00007fbad7317090 R08: 0000000000000000 R09: 0000000000000000
[  397.389453][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.389466][T14007] R13: 00007fbad8b36038 R14: 00007fbad8b35fa0 R15: 00007ffc26950838
[  397.389487][T14007]  </TASK>
[  399.352246][T13939] Set syz1 is full, maxelem 65536 reached