last executing test programs:

4m7.475466299s ago: executing program 32 (id=183):
r0 = eventfd2(0x8, 0x0)
ppoll(&(0x7f0000000500)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r0, &(0x7f0000000480)=""/82, 0x52)

3m14.192611207s ago: executing program 33 (id=1094):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)

2m49.253056237s ago: executing program 34 (id=1579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001000010400000006000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000700001c001280090001007866726d000000000c00028008000200ea"], 0x74}}, 0x0)

2m18.063789491s ago: executing program 35 (id=2241):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0x2, 0x0, &(0x7f0000000380)="f6f4", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100091, 0x200000000400000, 0xfffffffe, 0x0, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r4, 0x0, 0x0)
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000380), 0x0, 0x1}}, 0x40)
openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)

2m3.144363948s ago: executing program 36 (id=2537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="a1ff000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0)

2m0.068518597s ago: executing program 37 (id=2592):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x8000, 0xffff, 0xfffd, 0x20})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01000000000000600000006000000007000000060000000000001004000000000000000600000d0000000004000000030000000d000000030000000a000000000000000d0400000380000004000000450000000600000002000000000000000000000300000000010000000400000004000000005f2e61c20000000000"], &(0x7f0000000180)=""/14, 0x7f, 0xe, 0x1, 0x4, 0x10000}, 0x28) (async)
syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000380)={[{@prjquota}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@auto_da_alloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") (async)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) (async)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) (async)
pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000006fe5e40cf1b400b3d550000000109021200014300a00009ac89a779981c5f69ae8704a600000e010000b18beebab4057565a9f628e745d0f81c32b2aa46dc1ef09562673f433c236783701f38d44d398938eefe56fabeb98028f3b96d0ddbb2671db5"], 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newtclass={0x24, 0x28, 0x4, 0x70bc26, 0x21dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0xe, 0xb}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="54000000100001042abd166c8b7c77091b230ab8", @ANYRES32=r3, @ANYBLOB="9980030000000000200012800b00010065727370616e0000100002800400120008001500d34706001400030073"], 0x54}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9) (async)
r10 = socket$unix(0x1, 0x1, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@delqdisc={0xcc, 0x25, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xc, 0x6}, {0xe, 0xfff6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x4, 0x3}}}}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x4, 0x3, 0x1, 0x6, 0xc55, 0x9}}, {0x16, 0x2, [0x7, 0xfff, 0x8, 0xed, 0x5, 0x4, 0x3, 0x6, 0x1000]}}, {{0x1c, 0x1, {0x9, 0xa7, 0x3b, 0x8, 0x2, 0x0, 0xf85a, 0x3}}, {0xa, 0x2, [0xffff, 0x2, 0x2]}}]}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x0, "0f99a8f6ebb205979775104453d48604"}}}, @TCA_RATE={0x6, 0x5, {0xde, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc804}, 0x20000804)

1m35.276914979s ago: executing program 38 (id=3076):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0)
lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8946, 0x0)

1m31.497081019s ago: executing program 4 (id=3144):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/43, &(0x7f0000000040)=0x2b)
r1 = syz_clone(0x800100, &(0x7f0000000080)="b460af0667941422566e9883a563db7adf38e89ec17dafbb68df3159055f620b370a10bedd1e1e2835dd09d04dbcef42ccbdf5cdafe0d112a32e0d531663ff94c1a6676943c38fba78ea3e0b0dab7225b926e8ca53284bfcc8ecbab88f6c80fa864b73f823e3fe7c18acabfdf7d47778325f571ef5c4df4309e31738bfd26810f37da97836f15aefa675750cb73a58afdb59b746fc1bd8bd3bd460e45df20590eaa32918170094a7e22ac83355b1831565832470dd17ee", 0xb7, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="6f061847f1e5dc0510f36628dacee02d99d1cb04913b1da0e383c5194fcf452b65f5ba17abd44fc846c8492bacddbf36a9be40572fb1ff2042808d096638bf3fbefb9b3028875f621777d5623dec7e08d790fa10ec522181608cd31cd6a3d02800eaabefa15613565f8eddbcda208a3fb16616eca5ec44b1d249c1efb8c8e4c404edae528ae5dc244931b3627ffdc02a1f63539eec058cb23e1eef4740ab7474b5ff13b6679915c4da39d084d794a05314469084dcd6e864f0ce92b995")
r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/ip6_tables_targets\x00')
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(r1, 0xd, 0x0, &(0x7f0000000400))
recvmmsg(r2, &(0x7f0000003880)=[{{&(0x7f0000000440)=@tipc=@id, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/76, 0x4c}], 0x5, &(0x7f00000008c0)}, 0x80000000}, {{0xffffffffffffffff, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)=""/20, 0x14}], 0x1}, 0x3723}, {{&(0x7f0000000980)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/42, 0x2a}, {&(0x7f0000000a80)=""/221, 0xdd}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/113, 0x71}, {&(0x7f0000000e00)=""/124, 0x7c}, {&(0x7f0000000e80)=""/160, 0xa0}, {&(0x7f0000000f40)=""/204, 0xcc}], 0x9, &(0x7f0000001100)=""/120, 0x78}, 0x4}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f00000011c0)=""/164, 0xa4}, {&(0x7f0000001280)=""/98, 0x62}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/2, 0x2}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/225, 0xe1}, 0xfffffa62}, {{&(0x7f00000034c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003540)=""/243, 0xf3}, {&(0x7f0000003640)=""/171, 0xab}, {&(0x7f0000003700)=""/189, 0xbd}, {&(0x7f00000037c0)=""/47, 0x2f}], 0x4, &(0x7f0000003840)=""/7, 0x7}, 0x7}], 0x5, 0x1, &(0x7f00000039c0))
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000003a00)={0xffffffffffffffff, 0x0, 0xf8, r3, 0xffffffff}, 0xc)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000003a40)={0x0, <r4=>0x0})
fcntl$lock(r0, 0x25, &(0x7f0000003ac0)={0x2, 0x4, 0x1c7b, 0xa4, r4})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000003b00))
r5 = accept4$phonet_pipe(r2, &(0x7f0000003d00), &(0x7f0000003d40)=0x10, 0x800)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000003d80)={'pim6reg\x00', 0x8})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003dc0)={'wg2\x00'})
syz_clone(0x2068080, &(0x7f0000003e00)="1d8b5e82e50ca903c73a0a98d13e9f2c07eda84e9899486dc144f836d10a0487251a7935605c272c8b03ceb92846cda538d8dd8a35d56dbdd3aee69b5af2dd2b99e03d359e6479bc820cbede7e59bee3742dfd52efe26651bdd7d8214f43bb720d352941e639ce0f7d13e994743e84b65f74bb9880743c8522128912abefbff00a0826a98dae72c11c0044b11065b3b8c5fbb1efd4028fa8a9298d5a44d877abc3bd07", 0xa3, &(0x7f0000003ec0), &(0x7f0000003f00), &(0x7f0000003f40))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000003f80)={0x6, 'veth1_vlan\x00', {0x8}, 0x3})
r6 = socket$netlink(0x10, 0x3, 0x12)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004000), r6)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000004140)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004100)={&(0x7f0000004040)={0x84, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe3d}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x832}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000004180), r6)
perf_event_open(&(0x7f00000041c0)={0x3, 0x80, 0x7, 0x7f, 0x80, 0x9, 0x0, 0xab, 0x60008, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x7fffffffffffffff}, 0x10044, 0xc, 0xdf, 0x1, 0x4, 0x5, 0x0, 0x0, 0x200, 0x0, 0x7}, r4, 0xc, 0xffffffffffffffff, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000004240)=0x8, 0x0, 0x4)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x13, r2, 0x3666a000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000042c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000004380)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1ff, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000043c0)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f00000044c0)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r2, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x11c, &(0x7f0000004500)=0xffffff7f, 0x0, 0x4)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000004540))

1m30.759653642s ago: executing program 4 (id=3150):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94)
mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000c00)={0x100001, 0x81, 0x100000}, 0x20)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x36}, 0x18, 0xffffffff, 'rr\x00', 0x39, 0x803, 0x2f}, 0x2c)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x0, 0x1c6, 0x4, {{0x27, 0x4, 0x1, 0xb, 0x9c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0x14, 0x9e, 0x0, 0xb, [0x80, 0x2, 0x4800000, 0x7e1]}, @rr={0x7, 0x27, 0xb8, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @multicast1, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102, @local]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xa5, [@rand_addr=0x64010100, @local, @local, @loopback, @local, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0xb7, [@private=0xa010100, @loopback, @private=0xa010100, @local, @broadcast, @loopback]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', <r2=>0x0, 0x8, 0x0, 0x1c6, 0x4, {{0x27, 0x4, 0x1, 0xb, 0x9c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0x14, 0x9e, 0x0, 0xb, [0x80, 0x2, 0x4800000, 0x7e1]}, @rr={0x7, 0x27, 0xb8, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @multicast1, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102, @local]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xa5, [@rand_addr=0x64010100, @local, @local, @loopback, @local, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0xb7, [@private=0xa010100, @loopback, @private=0xa010100, @local, @broadcast, @loopback]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}})
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r2, r4, 0x5, 0x3, 0x3}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r2, r4, 0x5, 0x3, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f000001"], 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r5}, 0x38)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x1}}, 0x44)

1m30.758661922s ago: executing program 4 (id=3154):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0x2, 0x0, &(0x7f0000000380)="f6f4", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='logfs\x00', 0x2040000, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)

1m30.756514422s ago: executing program 4 (id=3155):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001340)={0x0, 0x6, 0x0, [0x1, 0x6, 0xf, 0x5, 0x400], [0x4, 0x7, 0x401, 0x4, 0x7, 0x8, 0x6, 0xc, 0xffff, 0x80000000, 0x200, 0x4, 0x9, 0x2, 0x401, 0x1ff, 0x7, 0x8000000000000000, 0x0, 0x10000, 0x7, 0x8000000000000001, 0x9, 0x1, 0x200, 0x6, 0xffffffffffffff1c, 0xe, 0x77, 0x8, 0xd9c, 0x100, 0x1ff, 0xfffffffffffffff8, 0x2, 0x9, 0x0, 0x3ff, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x9, 0x7, 0x3, 0x8, 0x7f, 0x10001, 0x10000, 0x7, 0x7, 0x800, 0xbc7, 0x7, 0x0, 0xf0, 0xd, 0x6, 0xb, 0x1, 0xffff, 0x9, 0x7, 0x9caa, 0xfffffffffffffff9, 0xa, 0x0, 0x1, 0x0, 0x5, 0x6, 0x0, 0xffff, 0xa, 0x2, 0xcde, 0xb166, 0x401, 0x1, 0x200, 0x3, 0x6, 0xb2e, 0x5, 0x1, 0x5, 0xffff, 0x4, 0xcfb9, 0x2, 0x4, 0xfffffffffffffff9, 0x9, 0xd, 0x5, 0x60c7a9d9, 0x6, 0x2930, 0x6, 0x6, 0x6, 0x2, 0x7, 0x4, 0x6, 0x8000, 0x8, 0x10001, 0x4, 0x0, 0x9, 0x68f, 0x0, 0x6, 0xd, 0x7f, 0x100, 0x10, 0x2, 0xe96, 0x6, 0x3]})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
syz_clone(0xca886200, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={0x0, 0x4}, 0x80, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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")
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x80, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000680)}, {&(0x7f0000000500)}, {&(0x7f0000000580)="2da864e14941dcc72eb169997948f391baadf9ba7d", 0x15}, {&(0x7f0000000880)}, {&(0x7f0000000940)="61da5466ae4fc126d682cae615f60253efa51b0a6e16e14ba9fd4ce049f19b3d278e27fd10c61e44cdfbdebd87bba340115bc344bb3c841f591881c7fc140d3dd6d1893fa90d40b589ddde1128c2252eb0b44c7e092be6180f5d845f9b38a98232e52da440b01f3cd9634838a53ee5cbc3befd7d1295508bac8de3bfdcf6d4bbfbe4f0af57ddd523c88ed9b06e353eac544c489421668c82bc5cb8897090b25d4868c5fe922c6d1ce9eb31a952653c7e010777b6a0ed12fbb7fe", 0xba}], 0x6, &(0x7f0000000f80)=[{0x10, 0x10a, 0xfffffff9}, {0x30, 0x10c, 0x7, "a3f9e161c50c5afcc1dd92bdb4e0068c758ec18842556b734a438bfb"}], 0x40}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
close(0xffffffffffffffff)
r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r7, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0)

1m29.547967932s ago: executing program 4 (id=3170):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x100, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate\x00\x00,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYBLOB="dbebdec402a7b694b2b22189fe12bccd0da3a5fe7e5a", @ANYBLOB="2c636f64657061673835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c121f8030000000001009dba05feee081e91fc61a0fef55112510000"], 0x1, 0x238, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (fail_nth: 2)

1m28.536476061s ago: executing program 39 (id=3178):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r1, 0x0, 0x0)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000380), 0x0, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)

1m28.049078019s ago: executing program 4 (id=3183):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xe, 0x0, 0x3, 0x4, 0x8f23, 0x682}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', <r1=>0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0xb58, 0x978, 0xc8, 0x8, 0x978, 0x5803, 0xa88, 0x2e8, 0x2e8, 0xa88, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x948, 0x978, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0xff, 0x1}, {0xf113, 0x2}, {0xabb, 0x2}, {0x9, 0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x5}, {0xffffffff, 0x2}], [{0x401, 0x4d}, {0x7, 0x6}, {0x1, 0xfffffffb}, {0xcb, 0x622}, {0x8000, 0xfffffff3}, {0x4e, 0x10000}, {0x200}, {0x3, 0xdf}, {0x8, 0xfffff800}, {0x1, 0x2}, {0xe9b8, 0x9}], 0x3, 0x1a}, {[{0x0, 0x1}, {0x3, 0x1}, {0x2c, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x12}, {0x45cd}, {0x6}, {0x7, 0x1}, {0x80000000, 0x2}, {0x6a, 0x3}], [{0x1, 0xe}, {0xffff, 0x5}, {0x2, 0x401}, {0x2, 0x3}, {0xfffffffd}, {0x6, 0x8}, {0x100, 0x4ada}, {0x7ad, 0x2}, {0x7, 0x1}, {0xfffffffc, 0x10000}, {0x0, 0x10}], 0x8, 0x2}, {[{0x7, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x400}, {0x8}, {0x7ff, 0x2}, {}, {0x8}, {0x6, 0x1}, {0xae, 0x3}], [{0x7fff, 0x6}, {0x2, 0x5}, {0x80000001, 0x1}, {0x1aa, 0x3211}, {0x0, 0x2}, {0x8, 0x4}, {0x4, 0x2}, {0x3, 0x9}, {0x2a54, 0x5}, {0x5, 0x7f}, {0xf2c, 0x3}], 0x2, 0xa}, {[{0x8c}, {0xf}, {0x1, 0x2}, {0x80000001, 0x1}, {0x4, 0x1}, {}, {0x78f, 0x3}, {0x8000, 0x3}, {0x9, 0x1}, {0x5, 0x3}, {0x1, 0x3}], [{0x10001, 0x2}, {0x9, 0x7}, {0x8, 0xffff}, {0x10000, 0x9}, {0xffffffff, 0x1ff}, {0x4}, {0x7, 0x6}, {0x8000, 0x200}, {0x231, 0x4}, {0x7, 0x8}, {0x4, 0xf}], 0x3, 0xb}, {[{0x7, 0x2}, {0xb4e}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0xb, 0x3}, {0x3}, {0x10001, 0x1}, {0x4, 0x3}, {0x8, 0x3}], [{0x80000000, 0xc13}, {0xf, 0x9c1c}, {0xfffffdef, 0x6}, {0x7ff, 0x385}, {0xb271, 0x1a}, {0x7bd, 0x4}, {0x5ea, 0xf3}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x1}], 0x8, 0x8}, {[{0x4, 0x2}, {0x7fffffff, 0x1}, {0x1}, {0xda8}, {0x6}, {0x4}, {0xc3, 0x1}, {0x9}, {0x7fffffff, 0x2}, {0x5}, {0x2}], [{0x8, 0x9}, {0x3, 0x2}, {0xad, 0x8000}, {0x5, 0x8}, {0x24000, 0xfffeffff}, {0x40, 0x81}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x2c114d41, 0xb}, {0xc46, 0x9}], 0x6, 0x6}, {[{0x8000, 0x3}, {0x923, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x7f}, {0xffffffff}, {0x5}, {0xf3}, {0x7ff000, 0x2}, {0x2, 0x1}, {0x9}], [{0xf6, 0x3ff}, {0x0, 0x4}, {0xccd, 0x7}, {0x0, 0x40}, {0x0, 0x8001}, {0x3, 0x8000005}, {0xe, 0xffff5dfb}, {0x40, 0x2}, {0xd, 0x1}, {0xffff, 0x1}, {0x3, 0x4}], 0x3, 0x9}, {[{0x100, 0x2}, {0xe, 0x2}, {}, {0xca8, 0x3}, {0xdd11, 0x1}, {0x0, 0x3}, {0x4}, {0x4, 0x2}, {0x2, 0x1}, {0xfffffff7}, {0x200, 0x2}], [{0x8b58, 0xfff}, {0x8, 0x2}, {0x40, 0x9}, {0x5, 0x4}, {0xfffffffe, 0x9}, {0xce531f10, 0xf60}, {0xffff, 0x3}, {0x8, 0x6}, {0x2, 0x4}, {0x6, 0xa39}, {0x200, 0x1ff}], 0x3, 0x9}, {[{0x6, 0x3}, {0x4, 0x1}, {0x3b0e, 0x2}, {0x3ff}, {0xe4c}, {0x0, 0x2}, {0x7}, {0x5}, {0x2, 0x1}, {0x8}, {0xfff, 0x1}], [{0x7, 0x8000}, {0x6, 0x19}, {0x7, 0x4}, {0x9, 0x4}, {0xfffffffa, 0x1000}, {0x42b8, 0x1}, {0x1, 0xb8}, {0x6, 0x2}, {0x1, 0x2}, {0x5}, {0x6926, 0x1}], 0xa, 0x3}, {[{0x40}, {0x9}, {0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x78, 0x1}, {0xd, 0x1}, {0x242, 0x3}, {0x6}, {0x0, 0x1}], [{0x6, 0x3ff}, {0x6, 0x1d03}, {0x12, 0x8001}, {0xff, 0x80000000}, {0x52f, 0x10000}, {0x7fffffff, 0x1}, {0x10000, 0x4}, {0x7, 0x2}, {0x80000001, 0x3}, {0x6, 0x7a}, {0xfffffffd, 0x3}], 0x8, 0x2}, {[{0x7, 0x3}, {0x9e, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x9, 0x3}, {0xc85}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x8, 0x3}], [{0x64, 0x7fff}, {0x8, 0x2}, {0x1, 0x7fff}, {0xffffff00, 0x10}, {0xda, 0x2}, {0x5, 0xd686}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x7}, {0x8, 0x1}, {0x44, 0x2}], 0x6, 0x8}], 0x1, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x6, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x2b, 0x2, 0x9, 0x8, 0x51, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6037c9935d32088f, 0x7800, 0x381e5137}})
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7008fbdbdf25020000001400000000aa08000200070000009f0009e222d76934b9560054cc0989607a6bcca2dca12a07b794cb625208f2fd62edc7235e4198ce6e744c8591c0dd4f677cf8faefa6e0e10170a4396a67b8f2cca4baa563954d9d859a10030c8083bfd14e92"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0)

1m28.048457319s ago: executing program 40 (id=3183):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xe, 0x0, 0x3, 0x4, 0x8f23, 0x682}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', <r1=>0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0xb58, 0x978, 0xc8, 0x8, 0x978, 0x5803, 0xa88, 0x2e8, 0x2e8, 0xa88, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x948, 0x978, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0xff, 0x1}, {0xf113, 0x2}, {0xabb, 0x2}, {0x9, 0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x5}, {0xffffffff, 0x2}], [{0x401, 0x4d}, {0x7, 0x6}, {0x1, 0xfffffffb}, {0xcb, 0x622}, {0x8000, 0xfffffff3}, {0x4e, 0x10000}, {0x200}, {0x3, 0xdf}, {0x8, 0xfffff800}, {0x1, 0x2}, {0xe9b8, 0x9}], 0x3, 0x1a}, {[{0x0, 0x1}, {0x3, 0x1}, {0x2c, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x12}, {0x45cd}, {0x6}, {0x7, 0x1}, {0x80000000, 0x2}, {0x6a, 0x3}], [{0x1, 0xe}, {0xffff, 0x5}, {0x2, 0x401}, {0x2, 0x3}, {0xfffffffd}, {0x6, 0x8}, {0x100, 0x4ada}, {0x7ad, 0x2}, {0x7, 0x1}, {0xfffffffc, 0x10000}, {0x0, 0x10}], 0x8, 0x2}, {[{0x7, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x400}, {0x8}, {0x7ff, 0x2}, {}, {0x8}, {0x6, 0x1}, {0xae, 0x3}], [{0x7fff, 0x6}, {0x2, 0x5}, {0x80000001, 0x1}, {0x1aa, 0x3211}, {0x0, 0x2}, {0x8, 0x4}, {0x4, 0x2}, {0x3, 0x9}, {0x2a54, 0x5}, {0x5, 0x7f}, {0xf2c, 0x3}], 0x2, 0xa}, {[{0x8c}, {0xf}, {0x1, 0x2}, {0x80000001, 0x1}, {0x4, 0x1}, {}, {0x78f, 0x3}, {0x8000, 0x3}, {0x9, 0x1}, {0x5, 0x3}, {0x1, 0x3}], [{0x10001, 0x2}, {0x9, 0x7}, {0x8, 0xffff}, {0x10000, 0x9}, {0xffffffff, 0x1ff}, {0x4}, {0x7, 0x6}, {0x8000, 0x200}, {0x231, 0x4}, {0x7, 0x8}, {0x4, 0xf}], 0x3, 0xb}, {[{0x7, 0x2}, {0xb4e}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0xb, 0x3}, {0x3}, {0x10001, 0x1}, {0x4, 0x3}, {0x8, 0x3}], [{0x80000000, 0xc13}, {0xf, 0x9c1c}, {0xfffffdef, 0x6}, {0x7ff, 0x385}, {0xb271, 0x1a}, {0x7bd, 0x4}, {0x5ea, 0xf3}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x1}], 0x8, 0x8}, {[{0x4, 0x2}, {0x7fffffff, 0x1}, {0x1}, {0xda8}, {0x6}, {0x4}, {0xc3, 0x1}, {0x9}, {0x7fffffff, 0x2}, {0x5}, {0x2}], [{0x8, 0x9}, {0x3, 0x2}, {0xad, 0x8000}, {0x5, 0x8}, {0x24000, 0xfffeffff}, {0x40, 0x81}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x2c114d41, 0xb}, {0xc46, 0x9}], 0x6, 0x6}, {[{0x8000, 0x3}, {0x923, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x7f}, {0xffffffff}, {0x5}, {0xf3}, {0x7ff000, 0x2}, {0x2, 0x1}, {0x9}], [{0xf6, 0x3ff}, {0x0, 0x4}, {0xccd, 0x7}, {0x0, 0x40}, {0x0, 0x8001}, {0x3, 0x8000005}, {0xe, 0xffff5dfb}, {0x40, 0x2}, {0xd, 0x1}, {0xffff, 0x1}, {0x3, 0x4}], 0x3, 0x9}, {[{0x100, 0x2}, {0xe, 0x2}, {}, {0xca8, 0x3}, {0xdd11, 0x1}, {0x0, 0x3}, {0x4}, {0x4, 0x2}, {0x2, 0x1}, {0xfffffff7}, {0x200, 0x2}], [{0x8b58, 0xfff}, {0x8, 0x2}, {0x40, 0x9}, {0x5, 0x4}, {0xfffffffe, 0x9}, {0xce531f10, 0xf60}, {0xffff, 0x3}, {0x8, 0x6}, {0x2, 0x4}, {0x6, 0xa39}, {0x200, 0x1ff}], 0x3, 0x9}, {[{0x6, 0x3}, {0x4, 0x1}, {0x3b0e, 0x2}, {0x3ff}, {0xe4c}, {0x0, 0x2}, {0x7}, {0x5}, {0x2, 0x1}, {0x8}, {0xfff, 0x1}], [{0x7, 0x8000}, {0x6, 0x19}, {0x7, 0x4}, {0x9, 0x4}, {0xfffffffa, 0x1000}, {0x42b8, 0x1}, {0x1, 0xb8}, {0x6, 0x2}, {0x1, 0x2}, {0x5}, {0x6926, 0x1}], 0xa, 0x3}, {[{0x40}, {0x9}, {0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x78, 0x1}, {0xd, 0x1}, {0x242, 0x3}, {0x6}, {0x0, 0x1}], [{0x6, 0x3ff}, {0x6, 0x1d03}, {0x12, 0x8001}, {0xff, 0x80000000}, {0x52f, 0x10000}, {0x7fffffff, 0x1}, {0x10000, 0x4}, {0x7, 0x2}, {0x80000001, 0x3}, {0x6, 0x7a}, {0xfffffffd, 0x3}], 0x8, 0x2}, {[{0x7, 0x3}, {0x9e, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x9, 0x3}, {0xc85}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x8, 0x3}], [{0x64, 0x7fff}, {0x8, 0x2}, {0x1, 0x7fff}, {0xffffff00, 0x10}, {0xda, 0x2}, {0x5, 0xd686}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x7}, {0x8, 0x1}, {0x44, 0x2}], 0x6, 0x8}], 0x1, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x6, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x2b, 0x2, 0x9, 0x8, 0x51, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6037c9935d32088f, 0x7800, 0x381e5137}})
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7008fbdbdf25020000001400000000aa08000200070000009f0009e222d76934b9560054cc0989607a6bcca2dca12a07b794cb625208f2fd62edc7235e4198ce6e744c8591c0dd4f677cf8faefa6e0e10170a4396a67b8f2cca4baa563954d9d859a10030c8083bfd14e92"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0)

1m20.29898411s ago: executing program 6 (id=3262):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
getrandom(0x0, 0x0, 0x3)
r0 = fsopen(&(0x7f0000000100)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
write(r1, &(0x7f00000006c0)="2cd8", 0x2)
r3 = getpid()
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r3}}, 0x40)

1m20.187078717s ago: executing program 6 (id=3265):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = getpid()
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0xca2})
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0xc, 0x401})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x59, 0x0, &(0x7f00000001c0)="4f7e2cd1c5c3bcbfcf43c73e453d13a73598532fd4b28b4ee6520cd54f3d2344b3ed3e2461a1e2ebf2fa4395a04098f8139a0235ee38190604ab4b3a453782b8fb446f0309b69586378f45f37a70fa66205759082b606fd0b5", &(0x7f0000000240), 0x6c, 0x0, 0xd5, 0xeb, &(0x7f0000000540)="cbb1d42d66d027657a615b0c6ddf1d06a073d94a8cd947d9bd6767c33a4f47a4b633ccd3d144ac3f0c9a81d7355d959c7afdaedd27ffeaba274afb5c1d079ef74c4f011bb45867b8e825ecd45a16ee790491bb75b3896fce9959ba709f3d63e1ccd4127033c2d9a19ab5e6b593e3c8e8428abe02ebcdd5baba4e4d28865b663846ba8e7ba0afb5790dfca6d4abc07748b65d0a5dfed090c9fb2a195d05322ca5b46f9c3623f0df99f75ac62bf07a02c8649b5da6a2e1430b9a94c4ea707cd2b71319e84d0791d367b739baf93916a7586929eafe19", &(0x7f0000000640)="2e98921a98a0adcc622c9847a4671dfc393d405744e67b5277ae82a94c062084d62482d24d5456c42365c6365d2597c4d1846ccc17b1e7752e1d96f117581925d28468f927f4e879d76b9fef211bbd646c9c6ed46eead77d40c2a9727391a003fde049e8e10904aa01a97817d0b3b6a90d8dde56cee6a7d8306c718ea947ebf2e374ef807b6397a2501b4e72c7548abbdd3ffa107bd5335a17d046677c747931c3ecb7600d12430d12299e73c4f0cd6271fdc74c94d8e9ef526e4b634f498b6a61a3477a722fe5b5e23c475390d597043f34ab65a53e6cc74c6c6632bf311955e8fe3868db0cce235f44be", 0x0, 0x0, 0x7ff}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="8cbf8316ac3f0f377dc6718a4c5d180000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r8 = openat$cgroup(r2, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r8, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)

1m17.612341096s ago: executing program 6 (id=3297):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x666)
bind$802154_raw(r0, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2004, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r6, 0xa, 0xffffffffffffffff, 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10000000000003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x2, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000040000000000000001800000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000cae6367488172eb703000000000000850000007b00000095435c8e749d14a9cc50738de6c3dd7bfdfde250d794d9189240fb565339ab8387aa28eb96570508489ce6dd68097873b127e3fc652f0e"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844)
close(r3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3f01, 0x0)
ioctl$TUNSETLINK(r9, 0x400454cd, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)

1m17.355833591s ago: executing program 6 (id=3300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r2, 0x0)
munmap(&(0x7f000053c000/0x4000)=nil, 0x4000)
socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x286, &(0x7f0000000640)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e00)=@newtaction={0x14, 0x58, 0x284f, 0x0, 0x3}, 0x14}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000001100)=0xffffff6c)
unshare(0x2040400)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

1m17.084058217s ago: executing program 6 (id=3307):
syz_clone(0x40083380, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000400)={0x0, 0x3b, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x400001})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0)
r3 = accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80000)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
getdents64(r4, 0x0, 0x0)
r5 = getuid()
quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, r5, &(0x7f0000000380))
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r9, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00')
preadv(r10, &(0x7f0000000540)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1, 0xa3, 0x7)
getgid()
sendmmsg$unix(r3, &(0x7f0000000380)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000340), 0x0, 0x10}}], 0x1, 0x4000804)
pread64(r2, 0x0, 0xfffffea5, 0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
syz_clone(0x27a0d300, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/184, 0x1204000, 0x1000, 0x36b, 0x2}, 0x20)
r11 = getpgrp(0x0)
r12 = syz_pidfd_open(r11, 0x0)
process_madvise(r12, 0x0, 0x0, 0x19, 0x0)

1m16.085284205s ago: executing program 6 (id=3334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004400)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1280, 0xffffffff, 0xffffffff, 0x1280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'syz_tun\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x202c, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc43f}}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {0x80}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x200, 0xbc34, 0x7, 'snmp_trap\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x49, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0xff020000}, 0x50)

1m16.084965285s ago: executing program 41 (id=3334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004400)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1280, 0xffffffff, 0xffffffff, 0x1280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'syz_tun\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x202c, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc43f}}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {0x80}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x200, 0xbc34, 0x7, 'snmp_trap\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x49, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0xff020000}, 0x50)

47.917422773s ago: executing program 7 (id=3829):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x4b, &(0x7f00000000c0)=""/75, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xd, 0x50c8fe01, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x2, 0x1, 0x10, 0x5}, {0x5, 0x2, 0x4, 0xa}, {0x2, 0x3, 0x9, 0x3}], 0x10, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)

47.910084474s ago: executing program 7 (id=3830):
socket$kcm(0xa, 0x0, 0x106)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, r6, 0xee01}, {0x0, 0x0, 0xce56, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x800, 0xfffffffe, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x4d2, 0xff}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0x7}}, 0xe8)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close(r8)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x10001, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f00000002c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r11, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r12}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x330, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)

47.753384163s ago: executing program 7 (id=3833):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r1=>0xffffffffffffffff, 0x4, 0x3, 0x1})
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[], 0x20}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10)
sync_file_range(r3, 0x889, 0x8, 0x2)
r4 = accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0xfffffffffffffd9e)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4)

47.676488327s ago: executing program 7 (id=3837):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0xa, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r1 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x114)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0)
chroot(&(0x7f0000002040)='./file0/../file0/../file0\x00')
statx(r2, &(0x7f0000000280)='./file2\x00', 0x8d82b9cbf9d807a3, 0x1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000500)={0x3a, @multicast2, 0x4e22, 0x0, 'sed\x00', 0x0, 0x2, 0x5b}, 0x2c)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x8aea66e09aada5c5}, [{0x2, 0x2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x1, r4}], {0x10, 0x4}, {0x20, 0x2}}, 0x3c, 0x2)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x20)
syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x2008401, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="2c000ee8b23235b5454b844015c660ce4a6e03465062eb441c85708d5dbc4f4f7767ea"], 0x1, 0x6af, &(0x7f0000001340)="$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")

47.150132678s ago: executing program 7 (id=3847):
socket(0x2, 0xa, 0x300)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==")
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00')
r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r3, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

46.893323282s ago: executing program 7 (id=3854):
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000001000000080045100078006500000201907864010101ac1414bb030390780006001f470307ff00681c62d92f0e5800000000ac1414368611000000030709a88088bea18f92010244344c01e0000002000000097f000001000000057f000001000200057f00000100006345ac1414bb000003296401010200000004000000"], 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000001000000080045100078006500000201907864010101ac1414bb030390780006001f470307ff00681c62d92f0e5800000000ac1414368611000000030709a88088bea18f92010244344c01e0000002000000097f000001000000057f000001000200057f00000100006345ac1414bb000003296401010200000004000000"], 0x0) (async)

46.820861547s ago: executing program 42 (id=3854):
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000001000000080045100078006500000201907864010101ac1414bb030390780006001f470307ff00681c62d92f0e5800000000ac1414368611000000030709a88088bea18f92010244344c01e0000002000000097f000001000000057f000001000200057f00000100006345ac1414bb000003296401010200000004000000"], 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000001000000080045100078006500000201907864010101ac1414bb030390780006001f470307ff00681c62d92f0e5800000000ac1414368611000000030709a88088bea18f92010244344c01e0000002000000097f000001000000057f000001000200057f00000100006345ac1414bb000003296401010200000004000000"], 0x0) (async)

44.750686207s ago: executing program 2 (id=3893):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c00007d0c0000000400000002000000000000930100000000612e00"], &(0x7f0000001f40)=""/4089, 0x28, 0xff9, 0x9, 0x614fc9df}, 0x28) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000040000000c001a800800058004"], 0x2c}}, 0x800)
recvfrom$inet(r0, &(0x7f0000000180)=""/142, 0x8e, 0x0, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) (async)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000880)=""/4096, 0x80000000, 0x1000}, &(0x7f0000000040)={&(0x7f00000000c0)=""/188, 0x0, 0xbc})

43.814288241s ago: executing program 2 (id=3901):
r0 = socket$unix(0x1, 0x5, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async)
getrusage(0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (rerun: 32)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0xa002, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 64)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (rerun: 64)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00')
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[r2, r0, r1, r3], 0x4) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001600)={0x0, <r5=>0x0}, &(0x7f0000001640)=0xc)
setreuid(r5, r5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x26, 0x1, 0x6, &(0x7f0000000440)) (async)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc81, 0x400, 0x43a1bd77, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 64)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x180, 0x111, 0x4b4, 0x0, 0x700, 0x288, 0x278, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1ff0000fe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'geneve1\x00', 'vxcan1\x00', {}, {}, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1f, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

43.401889706s ago: executing program 2 (id=3910):
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)

43.308743451s ago: executing program 2 (id=3912):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0xa, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r1 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x114)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0)
chroot(&(0x7f0000002040)='./file0/../file0/../file0\x00')
statx(r2, &(0x7f0000000280)='./file2\x00', 0x8d82b9cbf9d807a3, 0x1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000500)={0x3a, @multicast2, 0x4e22, 0x0, 'sed\x00', 0x0, 0x2, 0x5b}, 0x2c)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x8aea66e09aada5c5}, [{0x2, 0x2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x1, r4}], {0x10, 0x4}, {0x20, 0x2}}, 0x3c, 0x2)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x20)
syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x2008401, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="2c000ee8b23235b5454b844015c660ce4a6e03465062eb441c85708d5dbc4f4f7767ea"], 0x1, 0x6af, &(0x7f0000001340)="$eJzs3e9vE/cZAPDHlIwom9i0TQghSq+wSSDRYDslKOqbes4ludbxWXdOBa86VJIKEdoNOmnwqrzpNmn7I/p2f8T2F1V7u3dMPttgyA8HCglDn48F9/Xdc/d9vhfrHl3iuwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIGrt5Xq9UYtO1t24nuytvVzk6/ssH2/v389M9uk3ojb4F7OzcXo46/Svny4+NfjvfJwdvjsbs4PJbDz86alffPSr48fG6++T0KG4/+DhnZvb25v39gr4ecSRJ/karabdrMyz9dZqmmRlniwtLtavrK2UyUrWScsbZT9dT9pF2urnRXKxfSlpLC0tJOn8jXyju7rc6qTjmdc+aNbri8kn8720VZR598on82V7Let0su5qFTNYPIi5Nvggfpr1k37aWk+SrdvbmwvTkhwENQ4S1JwW1Kw3m41Gs9lYvLp09Vq9fnzHjPpzYkfE0X9oOVqv+AgOL+/YqP5HJ7LoxkZcj2TXVzuWo4g81vdYPjKu/7+9kg5b3+7e72T9H1f5008Xn4mq/p8bvju3V/3fI5fDe92PB/Ew7sTN2I7t2Ix7R57R4b5WI41uZFFGHlmsR6uak4zmJLEUi7EY9fg81mIlykhiJbLoRBpl3Igy+pFWn6h2FJFGK/qRRxFJXIx2XIokGrEUS7EQSaQxHzcij43oxmosR6vaylbcrvb7wj45PglqHCSouU+Q+s+Lmt0x5/UcyOElPB7XfwAAAOCtVat++z44/5+Jd6vWStZJ60edFgAAAPAKVX/5PzuYzAxa70bN+T8AAAC8bWrVNXa1iJiL94at8ZVQ418CzBxxigAAAMCPVP39/9xgMjdovRe1Hef/AAAAwP+5v069x/5s70TtX/+JopipPepd/03tbmsQ17r7znC9avLfx0ODdn/lTO3kaCPVZPH46F07PVsb3f3yyU0wR18u+GFrWh61fROYtHcC8fd4fxjz/q3h9NZ4ybCXuZWsk863885HjWi1Th7rp9f7f/rq9p+jGv7fuusna7F1e3tz/ouvt29VuTwabOXR3dENFHfcR3GXXMaLvqnut1Bdc7HriGeqCzFG/c4N+61Pjv/YcPVjLzD+7+L8MOb8XDw+ERFzz45/dtBnY36v0Y+yaFRZzD7T6UFG/jSLC8OYCxcvDCfPZPGziOikzWlZNCf3/0vti32zGO6LhWlZLPzILACOytaUKlTbWfhf4ih3ONX9u7g4jLl4pjqwHj+zyxG9Pu2IXn/Juj7u659xaRhzaRy8V40d9PuP56rq94MVvt+z37LTrA124Tvf3P1DnLr/4OEHt+/e/HLzy82vms2FxfqH9frVZsxUwxhN1B4AdjH9GTtTI2ofTjmr/uWTrxTMxxfxdWzHrbhcXW1QfeNgl60ej7nY+jhGX0O4PHHWWnnurHVu4gkvl6ec1c1NPOjl4LELh/CTAIDDc37fOnyw+n95ynn33MRXCi9POTuerOUAwOuRFj/U5vp/qRVF1vu8sbTUaPXX0qTI258mRba8miZZt58W7bVWdzVNekXez9t5Z9D4LFtOy6Tc6PXyop+s5EXSy8vsevXk92T06PcyXW91+1m77HXSVpkm7bzbb7X7yXJWtpPexu86WbmWFtXKZS9tZytZu9XP8m5S5htFO51PkjJNJwKz5bTbz1ayQbOb9IpsvVXcSD7LOxvrabKclu0i6/Xz4QbHfWXdlbxYrzY7f9Q7GwDeEPcfPLxzc3t7895rbMSJox4lADBpokoDAAAAAAAAAAAAAABvqMO4/u8tbPxxvOs+Hu3HNyWxgzROvILtzETEGzKcF2n8ZPTjelPyee2X3u4c6be/H+6Caasf1REJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb2vwAAAP//5l5PMA==")

42.748748664s ago: executing program 2 (id=3921):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff03feff0008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0)

42.497726238s ago: executing program 2 (id=3925):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

42.450103621s ago: executing program 43 (id=3925):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

41.049141603s ago: executing program 8 (id=3949):
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x286, &(0x7f0000000640)="$eJzs2s9rHGUYB/BnYkw3LelG/EUL4ose1MvQ5OyhRSKIAUWNUAXp1GzsmnE3ZJbAipic9Oqf4Fk8ehOkRy+5+Bd48JZLjj2IK7O7iZsSaqxtUsrnc0geZua7M/O+sy/PwO69/t0X62tVvlb0YirLYupq7MSdLOZjKg7sxGuvXP/1hfevf/T2teXlxnjrYkrp4ou/fPzVjy/d7l348KeLP5+L3flP9vYX/9h9bvfS3l8f3GpXqV2lTrdXf1a32ytulq202q7W85TeLVtF1UrtTtXa7KUi3TzYv1Z2Nzb6qeiszp3f2GxVVSo6/bTe6qdeN/U2+6n4rGh3Up7nae58MHTr/mIrP9wZDGJ/8OSNGAwGs9/Hhdsx93s0I3sqZU9fzZ69kT2/k13aHwyad0dnH8BVc+buNf/nxsccO/88FsaL+tJ7KTUiym+3VrZWRv/rvY24thbtKKMVV2I2/oz6MRkb1W++tbx0JQ3Nxzfl9ji/vbXyREQMn6BRfiGaMX98fmGUTwf5OlX/rVf3w/MvRjOeOT6/eDQ/Mzp/I159eSKfRzN++zS6UcZq1NnYHg/B0tcLKb3xznI6ev2Xh8cBADxu8nSo7t/qpm2if4vI8yP7J/qjUX6iP2xO9Iczx/SHd/VX03F5+mzvnYiq/+V6UZatzfoFb1gcbjlBcfCG+N9SD7+Y+T/x2clhuWcRkU2O5cO7r6kjc3bKgzl9wtFQjIrskfs63FcR8flpLkSciX8m/V8PbZzKBQEAAAAAAAAAAHAip/FzwrO+RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH2dwAAAP//NLm0Nw==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x288480, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwritev2(r1, &(0x7f0000000c00)=[{&(0x7f0000000000)="58ac30", 0x3}, {&(0x7f0000002d00)="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", 0x1bd}], 0x2, 0x41, 0x6, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x100000001, 0x8, 0x6, 0x89, 0x6, 0x0, [{0x8000000000000001, 0x100000000, 0x10, '\x00', 0x180c}, {0x9, 0xc75e, 0x7}, {0x5, 0x2, 0x8, '\x00', 0x209}, {0x1, 0x401, 0x100, '\x00', 0x1c00}, {0xff, 0x3, 0x1, '\x00', 0x480}, {0x25a6, 0x2, 0x5, '\x00', 0x100}]})
syz_io_uring_setup(0x4885, &(0x7f0000000a40)={0x0, 0x38ff, 0x100, 0x0, 0x1de, 0x0, r1}, &(0x7f0000000600)=<r2=>0x0, &(0x7f0000000ac0))
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x4010, r1, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
r5 = getpgrp(0x0)
prlimit64(r5, 0x1, &(0x7f0000000240)={0x200000000000008, 0x7fffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2f, 0x1, 0xfffffffd, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}}, 0x1)

40.947688909s ago: executing program 8 (id=3951):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0xfffffff5, 0x3)

40.594847819s ago: executing program 8 (id=3953):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0xfffffffe, 0x1ff, 0x10000, 0xf}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x1, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xd12, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
write(r0, &(0x7f0000000100)="21d7f07cb8a6b4d19345abaefca14ec2de43aedb48fcc05fca4d6f6f5e1cadbf262d1bd64ae3fe9df2", 0x29)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0x3ff, 0x9a14, 0xfffffffffffff801, 0x1, <r2=>r1})
prlimit64(r2, 0x1, &(0x7f00000001c0)={0x8, 0x4}, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af3fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff"], 0x0, 0x2}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040881)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x8, 0x6, 0x20000006)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000105000000010fdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0120000000000000180012800900010069706970000000000800028004001300"], 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010400000000ffdbdf2500000000", @ANYBLOB="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", @ANYBLOB="132a0e3a018001001c0012800900010069706970000008000c00028008001400ff01000041c67745cc9728ed3843a456c7cd91eab0e4ff26f092327b6320d97e382e547c284ce2327843c2b71cabadb2bf8fd063f001ac84c44dce91ba28c887f3cbd1916d0f38940705b6b6c12b42917a4f44c04a02a8fd89f2f93b833133a33ca29771e3c9224f0c80308cad1b0ccacc64abd4b432802225fc1a69f690"], 0x3c}}, 0x20004040)
futex(&(0x7f00000003c0), 0xa, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x800003, 0x0, 0x0, 0x2)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='scalable', 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="130000004200010a"], 0x14}}, 0x0)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)

39.36922376s ago: executing program 8 (id=3962):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0xa, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r0 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x114)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x4000)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0)
chroot(&(0x7f0000002040)='./file0/../file0/../file0\x00')
statx(r1, &(0x7f0000000280)='./file2\x00', 0x8d82b9cbf9d807a3, 0x1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000500)={0x3a, @multicast2, 0x4e22, 0x0, 'sed\x00', 0x0, 0x2, 0x5b}, 0x2c)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x8aea66e09aada5c5}, [{0x2, 0x2}, {0x2, 0x2, r2}], {0x4, 0x2}, [{0x8, 0x1, r3}], {0x10, 0x4}, {0x20, 0x2}}, 0x3c, 0x2)

38.651435222s ago: executing program 8 (id=3964):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000740)={0xc, 0x624, 0x3, 0x9, 0x1, 0x0, [{0x101, 0xb7f9, 0x4, '\x00', 0x800}]})

38.33313399s ago: executing program 8 (id=3967):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

38.321766321s ago: executing program 44 (id=3967):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

6.843863282s ago: executing program 3 (id=4498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004800)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000240)="80000010000000000000cd7a000000008100", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)

6.664813622s ago: executing program 3 (id=4503):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = io_uring_setup(0x7a52, &(0x7f0000000240)={0x0, 0xf103, 0x40, 0x0, 0x1ff})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x4fc5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000})
close(r2)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x16}], 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='s', 0x1}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000002080))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.302988793s ago: executing program 3 (id=4512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000100000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r1, @ANYBLOB="08000a00fe"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

6.145487072s ago: executing program 3 (id=4517):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet(0x2, 0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0x3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@sysvgroups}, {@grpjquota, 0x32}, {@mblk_io_submit}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4)
sendmmsg$sock(r0, &(0x7f0000003300)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001700)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x1, 0x800)

5.559756836s ago: executing program 3 (id=4523):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_setup(0x7a52, &(0x7f0000000240)={0x0, 0xf103, 0x40, 0x0, 0x1ff})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x4fc5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000})
close(r1)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='s', 0x1}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190da)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000002080))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.3229097s ago: executing program 3 (id=4529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000120000007f00000001c439ec73dff9a97ab4c42d16466cfc57157be2e49889483e84caf33b8a6fb4eb3c1a60a0db3193fda62d0700000000000000fe1e98806734f2e5d5e8ce5e2b64844c184fa636b77bd8547dd395b18bbca9199c173195655f1509dd60053f87253a00a170b8dfd0ecc49e211fb8e88d85"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x3, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, r1, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="13646f74732c6e69643d", @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,nodots,check=relaxed,showexec,nodots,dos1xfloppy,dots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000a40)="$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")
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000e99ab44d363810800460000200000fffd01029078ac1414bbac1414aa940400401210907800000000"], 0x0)
setreuid(0x0, 0xee00)
keyctl$clear(0x7, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9625, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x9, 0x0, 0x6, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@loopback, @rand_addr, <r9=>0x0}, &(0x7f0000000280)=0xc)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91})
r10 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000040)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x30)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r13, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getsockopt$inet6_int(r13, 0x29, 0x3a, 0x0, &(0x7f0000000140))

3.0891833s ago: executing program 5 (id=4558):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffff5a}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4)
sendmsg$sock(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="67f1", 0xff65}], 0x1}, 0x40840)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7, 0x8000}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

3.08878007s ago: executing program 5 (id=4559):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x4, 0xfffffe2f, 0x9}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
eventfd2(0x0, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000)

3.060244122s ago: executing program 5 (id=4560):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[], 0x20}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2.696937082s ago: executing program 5 (id=4568):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0xc0)

2.636819716s ago: executing program 5 (id=4570):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x4, 0xfffffe2f, 0x9}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
eventfd2(0x0, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000)

2.350431613s ago: executing program 5 (id=4574):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x12)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x3, 0xfffffffe, 0x40, 0xfffffff3, 0x20000})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0x2f8d, &(0x7f0000010400)={0x0, 0x86e5, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000080))
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[], 0xe01, 0x1)
llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
syz_io_uring_setup(0x94d, &(0x7f00000000c0)={0x0, 0xd858, 0x40024, 0x3, 0x1d1, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000180))
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "ca1368d6ba5028709abb17cd2b67a393"})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
ioctl$TIOCSIG(r2, 0x40045436, 0xe)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @local})

2.348097863s ago: executing program 9 (id=4576):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x4000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2.307491795s ago: executing program 9 (id=4577):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580), 0x1, 0x45c, &(0x7f00000015c0)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1020000, &(0x7f0000000880)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000})
syz_io_uring_setup(0x680b, &(0x7f00000000c0)={0x0, 0x101, 0x100, 0x2, 0x21b, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000140))
epoll_create(0xff)
r5 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28)
r7 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)

1.778568956s ago: executing program 1 (id=4581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0x10}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000ff1000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.680407462s ago: executing program 1 (id=4582):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) (async)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
read(r2, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8000f28, 0x0)
splice(r3, 0x0, r1, 0x0, 0x7f, 0xe)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x7, 0x10000)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8a, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) (async)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8a, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa})
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8044) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8044)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x40000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.317015513s ago: executing program 9 (id=4583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xf8, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x808d}, 0x2400c000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x482, &(0x7f00000004c0)="$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")
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

1.137972133s ago: executing program 9 (id=4584):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1)
r3 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty, 0x8}, 0x1c)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x104, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x104}}, 0x20040084)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x1000, 0x140e, 0x81, 0x2, 0x10001, <r6=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0xa78472a963866823, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x164, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6a, 0xa8, @random="e36f9405564a3f59c89242be81f2ca473c94525684c499c7c169448e02478a1fa9444c3fa062800cf8adeb11998dcf92310c04c1a853b8456b8a08d1df233e79cf0798a275a742f6cb6f1bc0f8dd4b2321a83f811769c09598b31fbef295e8b5ce61026be316"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8d, 0xa8, @random="d17a22c8b1e08a65e35f1e6b50ea82ea29f3d4adb7e25d67fa07b31be30f2afca342a347bed662fe7c722b78ea49f384b2d634b6ebe22de517033e2b00f33f0c69e7c5ae349b20ad25759d6f01dd195f541fa4382e822bcf229cfb8149cbf8416a8959aa189247ac09865498ff73b269a957787ebb39538a1e9b319a395522082a27bd16e8b51ec314"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x49, 0xa8, @random="e811511ebc76026c52e9cd79a720c762ee53fcd5b2dba5bf4c08c3b5ad660b73118dc0cf11ce98861958286a605828c171fca8db594985ffceb4c49046c55469590bcee419"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x48000}, 0x4004)

1.011786731s ago: executing program 0 (id=4585):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4004}}, {@errors_remount}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nogrpid}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'journal_path'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor}, {@smackfsdef={'smackfsdef', 0x3d, 'stripe'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '*+'}}]}, 0x3, 0x43d, &(0x7f0000000880)="$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")
r1 = syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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")
statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/104)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', r2, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x0, 0x4, 0x3ffd, 0x7})

1.011170251s ago: executing program 1 (id=4586):
r0 = socket(0xa, 0x3, 0x6)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0xfb, 0x0, 0x223d}, 0xc)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x10000, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x20282, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/resume_offset', 0x8501, 0x16)
write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[], 0x4a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xf0, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}, {0xd8, 0x1, [@m_simple={0xd4, 0x2, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa4, 0x3, '\xbb\xbb\x9b\xbb\xbb\xbbk\xf4\x92\x87#2S\x80\xc3\xf7\x8c\x1e\xba9\xaf}i\x9a\x01\x9f\x19\xe3\xbcw\x94\xb4\xef\x15\xc4\xd7b\xad N\xfe\xae\x01n\x98P\xb8\x12\x1d$\xb2\rF\xccW\x15\xf3\xcc\xb4\x15\a\xf1u\x88\xbc\xbb\xae\xfb\v A\x8aT\xdaD\x80\xddC\xedm4\xcb1\xde\x14\f\x15\xe6\x93\xb5v_\xcb\xf8\xf8a\xaa8\x8ba\xab\x94e\a\xa4\xc5\xdev#\x03e\xd1\xf2\x02\x82\xde~=\x87\x80g\x9c(\xf7\xf4\xe6\xd2\xdf\xd3%\xec\x8c\b6&\xa3\xad\x83\xae\x92\x14\xabh\xef\xdf\xd8gF\xd6\xc1-\xfbt\x13\x028\xda\xfb\\\xbc'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0x50, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa5f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x53}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x710a0000000000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x424}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000010)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$TIOCEXCL(r2, 0x540c)

947.214184ms ago: executing program 9 (id=4587):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000080))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x40040001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r2}, 0x38)
r6 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x9ac8e2a423508d1d, 0x7f9}}], 0x18, 0x8000}, 0x4000004)
r7 = openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f00000000c0)={'some', 0x20, 0x5, 0x20, 0x1062759397}, 0x2f)

918.251596ms ago: executing program 9 (id=4588):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
close(0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001040)={0xf, 0x5, 0xfffffffa, 0x3, 0x7, 0x433})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r8, &(0x7f0000002c00)=""/4082, 0xff2, 0x7)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100))

801.198423ms ago: executing program 0 (id=4589):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
syz_emit_ethernet(0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500640601fe8000000000000000000000000000aafe8000000000000000000003000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000080a00000002000098ca04020303d72212910bdb835cfbe48eb10a29d0eb29928013128098cf093cc9cd7b8ec814f9bcfdfea9051a00000008fffffffe200000"], 0x0)

796.561593ms ago: executing program 0 (id=4590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000a1ff00000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0)

715.020688ms ago: executing program 0 (id=4591):
add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
io_submit(0x0, 0xfffffffffffffecc, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb20000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

615.204494ms ago: executing program 0 (id=4592):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x207, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x80ffffff}, 0x4008080)

568.651696ms ago: executing program 0 (id=4593):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580), 0x1, 0x45c, &(0x7f00000015c0)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1020000, &(0x7f0000000880)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000})
syz_io_uring_setup(0x680b, &(0x7f00000000c0)={0x0, 0x101, 0x100, 0x2, 0x21b, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000140))
epoll_create(0xff)
r5 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28)
r7 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)

63.608326ms ago: executing program 1 (id=4594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x0, {0xa}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008864}, 0x800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x1, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="18003d6c2269010400000000141a000001cb6de1de98d9f4"], 0x18}}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000108fc883e990000000000000000", @ANYRES32=0x0, @ANYBLOB="2b200000000000001400030076657468305f746f5f6261746164760014001680100001800c0005"], 0x48}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000)

371.9µs ago: executing program 1 (id=4595):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x3000000}}, {}, [@printk={@li}], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

0s ago: executing program 1 (id=4596):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001000010400000006000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d"], 0x74}}, 0x0)

kernel console output (not intermixed with test programs):

red forwarding state
[  245.964404][T11948] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.971582][T11948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.981937][T17107] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  246.001540][T17107] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  246.025174][T17107] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #11: comm syz.9.3896: corrupted inode contents
[  246.042305][T16957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  246.052744][T16957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  246.059923][T17107] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #11: comm syz.9.3896: mark_inode_dirty error
[  246.092339][T17107] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3896: invalid indirect mapped block 1 (level 1)
[  246.109296][T17107] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #11: comm syz.9.3896: corrupted inode contents
[  246.123007][T17119] netlink: 'syz.5.3897': attribute type 13 has an invalid length.
[  246.128421][T17107] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  246.145453][T17107] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #11: comm syz.9.3896: corrupted inode contents
[  246.159603][T17107] EXT4-fs error (device loop9): ext4_truncate:4635: inode #11: comm syz.9.3896: mark_inode_dirty error
[  246.171108][T17107] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[  246.186110][T17107] EXT4-fs (loop9): 1 truncate cleaned up
[  246.192423][T17107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.210802][T17107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.253776][T16957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.306836][T17131] EXT4-fs: Ignoring removed i_version option
[  246.312914][T17131] EXT4-fs: Ignoring removed bh option
[  246.356634][T17131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.383535][T17134] FAULT_INJECTION: forcing a failure.
[  246.383535][T17134] name failslab, interval 1, probability 0, space 0, times 0
[  246.399509][T17134] CPU: 0 UID: 0 PID: 17134 Comm: syz.5.3900 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  246.399571][T17134] Tainted: [W]=WARN
[  246.399578][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  246.399590][T17134] Call Trace:
[  246.399596][T17134]  <TASK>
[  246.399603][T17134]  __dump_stack+0x1d/0x30
[  246.399632][T17134]  dump_stack_lvl+0x95/0xd0
[  246.399731][T17134]  dump_stack+0x15/0x1b
[  246.399758][T17134]  should_fail_ex+0x263/0x280
[  246.399808][T17134]  should_failslab+0x8c/0xb0
[  246.399836][T17134]  kmem_cache_alloc_noprof+0x68/0x490
[  246.399859][T17134]  ? dst_alloc+0xbd/0x100
[  246.399932][T17134]  dst_alloc+0xbd/0x100
[  246.399961][T17134]  ipv4_blackhole_route+0x2f/0x330
[  246.400036][T17134]  xfrm_lookup_route+0xc7/0x110
[  246.400070][T17134]  ip_route_output_flow+0xdb/0x110
[  246.400100][T17134]  udp_sendmsg+0x13c3/0x15d0
[  246.400131][T17134]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  246.400166][T17134]  ? avc_has_perm+0x101/0x190
[  246.400210][T17134]  ? __pfx_udp_sendmsg+0x10/0x10
[  246.400321][T17134]  inet_sendmsg+0xac/0xd0
[  246.400344][T17134]  ____sys_sendmsg+0x53a/0x600
[  246.400368][T17134]  ___sys_sendmsg+0x195/0x1e0
[  246.400399][T17134]  __sys_sendmmsg+0x185/0x320
[  246.400435][T17134]  __x64_sys_sendmmsg+0x57/0x70
[  246.400467][T17134]  x64_sys_call+0x1e28/0x3000
[  246.400496][T17134]  do_syscall_64+0xc0/0x2a0
[  246.400534][T17134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.400561][T17134] RIP: 0033:0x7f8ea4feaeb9
[  246.400638][T17134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.400660][T17134] RSP: 002b:00007f8ea3a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  246.400684][T17134] RAX: ffffffffffffffda RBX: 00007f8ea5265fa0 RCX: 00007f8ea4feaeb9
[  246.400734][T17134] RDX: 07fffffffffffd33 RSI: 0000200000004d00 RDI: 0000000000000006
[  246.400746][T17134] RBP: 00007f8ea3a47090 R08: 0000000000000000 R09: 0000000000000000
[  246.400776][T17134] R10: 0000000020000890 R11: 0000000000000246 R12: 0000000000000002
[  246.400792][T17134] R13: 00007f8ea5266038 R14: 00007f8ea5265fa0 R15: 00007fff83ddc4c8
[  246.400817][T17134]  </TASK>
[  246.711749][T11643] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.730413][T17158] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  246.803227][T16957] veth0_vlan: entered promiscuous mode
[  246.831540][T16957] veth1_vlan: entered promiscuous mode
[  246.842740][T17173] netlink: 'syz.5.3904': attribute type 27 has an invalid length.
[  246.869240][T16957] veth0_macvtap: entered promiscuous mode
[  246.882031][T17173] gtp0: left promiscuous mode
[  246.886790][T17173] gtp0: left allmulticast mode
[  246.895744][T16957] veth1_macvtap: entered promiscuous mode
[  246.913549][T16957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.945652][T16957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.966252][T11944] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.980266][T11944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.995925][T13259] kernel write not supported for file /snd/seq (pid: 13259 comm: kworker/1:18)
[  247.021998][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.037062][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.064706][T17191] syzkaller0: entered promiscuous mode
[  247.070540][T17191] syzkaller0: entered allmulticast mode
[  247.120165][T17199] EXT4-fs: Ignoring removed i_version option
[  247.126256][T17199] EXT4-fs: Ignoring removed bh option
[  247.165149][T15571] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  247.168728][ T6045] Bluetooth: hci0: command 0x1003 tx timeout
[  247.198114][T17199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.226802][T17208] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3913'.
[  247.277915][T16957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.456093][T17239] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3916'.
[  247.491213][T17239] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  247.520411][T17240] netlink: 'syz.9.3918': attribute type 1 has an invalid length.
[  247.528252][T17240] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3918'.
[  247.563034][T17225] netlink: 'syz.3.3915': attribute type 1 has an invalid length.
[  247.570824][T17225] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3915'.
[  247.637483][T17257] set_capacity_and_notify: 7 callbacks suppressed
[  247.637500][T17257] loop9: detected capacity change from 0 to 1024
[  247.671053][T17257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.863515][T11643] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.970414][ T3838] kernel write not supported for file /snd/seq (pid: 3838 comm: kworker/0:11)
[  248.241657][T17326] loop3: detected capacity change from 0 to 4096
[  248.257344][T17326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.283123][   T12] bridge_slave_1: left allmulticast mode
[  248.288911][   T12] bridge_slave_1: left promiscuous mode
[  248.294557][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.306386][   T12] bridge_slave_0: left allmulticast mode
[  248.312143][   T12] bridge_slave_0: left promiscuous mode
[  248.317797][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.333923][T17326] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3931: corrupted inode contents
[  248.369599][T17326] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3931: mark_inode_dirty error
[  248.371204][ T3838] kernel write not supported for file /snd/seq (pid: 3838 comm: kworker/0:11)
[  248.394543][T17326] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3931: corrupted inode contents
[  248.413885][T17326] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.3931: mark_inode_dirty error
[  248.435096][T17326] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3931: corrupted inode contents
[  248.441296][ T3838] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[  248.476659][T17326] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.3931: mark_inode_dirty error
[  248.519083][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  248.519099][   T29] audit: type=1326 audit(240.497:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.548288][   T29] audit: type=1326 audit(240.497:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.571297][   T29] audit: type=1326 audit(240.497:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.594376][   T29] audit: type=1326 audit(240.497:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.608253][T17326] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3931: corrupted inode contents
[  248.617483][   T29] audit: type=1326 audit(240.497:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.652258][   T29] audit: type=1326 audit(240.497:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.652286][T17326] EXT4-fs error (device loop3): ext4_truncate:4635: inode #15: comm syz.3.3931: mark_inode_dirty error
[  248.652611][T17326] EXT4-fs error (device loop3) in ext4_setattr:6035: Corrupt filesystem
[  248.675159][   T29] audit: type=1326 audit(240.497:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.717671][   T29] audit: type=1326 audit(240.497:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.740683][   T29] audit: type=1326 audit(240.497:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.763650][   T29] audit: type=1326 audit(240.497:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17350 comm="syz.8.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661cbaeb9 code=0x7ffc0000
[  248.768902][T17342] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3931: corrupted inode contents
[  248.853485][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.943132][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.964077][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.973195][   T12] bond0 (unregistering): Released all slaves
[  249.011539][T17314] lo speed is unknown, defaulting to 1000
[  249.049527][   T12] hsr_slave_0: left promiscuous mode
[  249.055411][   T12] hsr_slave_1: left promiscuous mode
[  249.072990][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.082862][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.118854][T17390] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3942'.
[  249.141327][T17384] vcan0: tx drop: invalid sa for name 0x0000000000000104
[  249.189708][T17396] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3943'.
[  249.248976][T17400] 9p: Bad value for 'rfdno'
[  249.255485][T17314] lo speed is unknown, defaulting to 1000
[  249.321622][T17409] futex_wake_op: syz.5.3948 tries to shift op by -1; fix this program
[  249.391117][T17417] loop8: detected capacity change from 0 to 128
[  249.417914][T17409] xt_hashlimit: overflow, try lower: 6/0
[  249.453512][T17410] loop5: detected capacity change from 0 to 8192
[  249.518952][T17314] chnl_net:caif_netlink_parms(): no params data found
[  249.603625][T17432] loop8: detected capacity change from 0 to 4096
[  249.610223][T17314] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.617338][T17314] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.624660][T17314] bridge_slave_0: entered allmulticast mode
[  249.631208][T17314] bridge_slave_0: entered promiscuous mode
[  249.640654][T17314] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.647916][T17314] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.655602][T17314] bridge_slave_1: entered allmulticast mode
[  249.656438][T17432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.663334][T17314] bridge_slave_1: entered promiscuous mode
[  249.696597][T17314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.707316][T17314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.731572][T17314] team0: Port device team_slave_0 added
[  249.738351][T17314] team0: Port device team_slave_1 added
[  249.762364][T17314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.769514][T17314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.795464][T17314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.808003][T17314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.812236][T16957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.815101][T17314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.850054][T17314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.877452][T17314] hsr_slave_0: entered promiscuous mode
[  249.883862][T17314] hsr_slave_1: entered promiscuous mode
[  249.889774][T17314] debugfs: 'hsr0' already exists in 'hsr'
[  249.895545][T17314] Cannot create hsr debugfs directory
[  250.102237][T17444] __nla_validate_parse: 1 callbacks suppressed
[  250.102326][T17444] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3953'.
[  250.157502][T17451] loop3: detected capacity change from 0 to 764
[  250.200947][T17430] loop9: detected capacity change from 0 to 1024
[  250.220658][T17458] 9p: Bad value for 'rfdno'
[  250.300210][T17314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  250.316152][T17314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  250.329393][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  250.341860][T17314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  250.374880][T17465] loop5: detected capacity change from 0 to 512
[  250.381883][T17314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  250.398782][T17465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.472379][T17314] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.488004][T17314] 8021q: adding VLAN 0 to HW filter on device team0
[  250.514020][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.537699][T11944] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.544850][T11944] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.576794][T11944] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.583959][T11944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.787244][T17314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.005117][T17314] veth0_vlan: entered promiscuous mode
[  251.022974][T17314] veth1_vlan: entered promiscuous mode
[  251.065968][T17314] veth0_macvtap: entered promiscuous mode
[  251.112216][T17314] veth1_macvtap: entered promiscuous mode
[  251.145143][T17314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.172310][T17314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.210010][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.229868][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.255447][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.275894][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.325563][T17541] netlink: 'syz.0.3926': attribute type 13 has an invalid length.
[  251.420048][T17541] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.427343][T17541] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.548612][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.582813][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.677932][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.687045][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.751869][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.760929][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.792278][T17562] loop5: detected capacity change from 0 to 512
[  251.854546][T17562] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3963: bg 0: block 248: padding at end of block bitmap is not set
[  251.879754][T17562] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3963: Failed to acquire dquot type 1
[  251.897870][T17562] EXT4-fs (loop5): 1 truncate cleaned up
[  252.023346][T11948] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.083790][T11948] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.155033][T17602] loop3: detected capacity change from 0 to 512
[  252.164629][T11948] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.177985][T17602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  252.197729][T17602] EXT4-fs (loop3): 1 truncate cleaned up
[  252.224546][T11948] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.420574][T11948] bridge_slave_1: left allmulticast mode
[  252.426444][T11948] bridge_slave_1: left promiscuous mode
[  252.432108][T11948] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.528175][T11948] bridge_slave_0: left allmulticast mode
[  252.534051][T11948] bridge_slave_0: left promiscuous mode
[  252.539794][T11948] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.773318][T11948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.828711][T11948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.869270][T11948] bond0 (unregistering): Released all slaves
[  252.944553][T17610] lo speed is unknown, defaulting to 1000
[  252.971642][T17610] lo speed is unknown, defaulting to 1000
[  253.025579][T11948] hsr_slave_0: left promiscuous mode
[  253.031363][T11948] hsr_slave_1: left promiscuous mode
[  253.042853][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.050298][T11948] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.070056][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.077549][T11948] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.097739][T11948] veth1_macvtap: left promiscuous mode
[  253.103726][T11948] veth0_macvtap: left promiscuous mode
[  253.110106][T11948] veth1_vlan: left promiscuous mode
[  253.115466][T11948] veth0_vlan: left promiscuous mode
[  253.273420][T11948] team0 (unregistering): Port device team_slave_1 removed
[  253.298738][T11948] team0 (unregistering): Port device team_slave_0 removed
[  253.425517][T17682] loop0: detected capacity change from 0 to 764
[  253.482845][T17610] chnl_net:caif_netlink_parms(): no params data found
[  253.539202][T17610] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.546425][T17610] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.554443][T17610] bridge_slave_0: entered allmulticast mode
[  253.565386][T17610] bridge_slave_0: entered promiscuous mode
[  253.576774][T17610] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.583950][T17610] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.592236][T17610] bridge_slave_1: entered allmulticast mode
[  253.608165][T17610] bridge_slave_1: entered promiscuous mode
[  253.628618][T17610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.641983][T17610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.674276][T17610] team0: Port device team_slave_0 added
[  253.689271][T17610] team0: Port device team_slave_1 added
[  253.714770][T17610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.721789][T17610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.747802][T17610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.761700][T17610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.764446][T17661] loop3: detected capacity change from 0 to 1024
[  253.768716][T17610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.768748][T17610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.816435][T17682] iso9660: Unknown parameter '0x000000000000000300000000000000000000017777777777777777777770x0000000000000000'
[  253.838616][T17610] hsr_slave_0: entered promiscuous mode
[  253.844716][T17610] hsr_slave_1: entered promiscuous mode
[  253.851340][T17610] debugfs: 'hsr0' already exists in 'hsr'
[  253.857088][T17610] Cannot create hsr debugfs directory
[  253.924796][T17710] netlink: 'syz.5.3977': attribute type 32 has an invalid length.
[  254.005389][T17716] loop5: detected capacity change from 0 to 736
[  254.068361][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'.
[  254.077299][T17725] netlink: 'syz.0.3978': attribute type 1 has an invalid length.
[  254.103516][T15571] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  254.208542][T17740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17740 comm=syz.9.3980
[  254.248098][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3982'.
[  254.257209][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3982'.
[  254.305583][T17745] syz_tun: entered promiscuous mode
[  254.317701][T17745] syz_tun: left promiscuous mode
[  254.326124][T17740] loop9: detected capacity change from 0 to 512
[  254.359331][T17740] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #11: block 530: comm syz.9.3980: lblock 4 mapped to illegal pblock 530 (length 1)
[  254.383418][T17757] loop5: detected capacity change from 0 to 512
[  254.386360][T17740] EXT4-fs (loop9): 1 orphan inode deleted
[  254.404558][T17740] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  254.412765][T17757] EXT4-fs: Ignoring removed i_version option
[  254.418874][T17757] EXT4-fs: Ignoring removed bh option
[  254.524284][T17767] loop0: detected capacity change from 0 to 512
[  254.575558][T17610] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  254.599542][T17610] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  254.627619][T17610] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  254.638839][T17610] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  254.732501][T17610] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.751098][T17792] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3990'.
[  254.783500][T17610] 8021q: adding VLAN 0 to HW filter on device team0
[  254.810992][T17798] loop9: detected capacity change from 0 to 256
[  254.833043][T17801] loop0: detected capacity change from 0 to 512
[  254.841908][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.849014][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.865331][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.872741][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.882852][T17801] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  254.887595][T17798] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  254.892974][T17801] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  254.902649][T17798] bridge4: entered promiscuous mode
[  254.951495][T17807] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  254.960424][T17807] FAT-fs (loop9): Filesystem has been set read-only
[  255.005355][T17807] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  255.022798][T17807] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  255.062641][T17610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.121954][T17821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17821 comm=syz.9.3994
[  255.252686][T17836] netlink: 'syz.9.3995': attribute type 27 has an invalid length.
[  255.266793][T17836] bridge2: left promiscuous mode
[  255.271847][T17836] bridge2: left allmulticast mode
[  255.279738][T17836] bridge4: left promiscuous mode
[  255.293602][T11941] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.306041][T17610] veth0_vlan: entered promiscuous mode
[  255.317123][T11941] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.319157][T17841] loop0: detected capacity change from 0 to 512
[  255.331187][T17610] veth1_vlan: entered promiscuous mode
[  255.338250][T11941] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.348132][T17841] EXT4-fs: Ignoring removed i_version option
[  255.354207][T17841] EXT4-fs: Ignoring removed bh option
[  255.368836][T11941] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.396359][T17844] loop9: detected capacity change from 0 to 512
[  255.412369][T17610] veth0_macvtap: entered promiscuous mode
[  255.425590][T17610] veth1_macvtap: entered promiscuous mode
[  255.438960][T17610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.447921][T17610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.485987][T11944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.504978][T11944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.513845][T11944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.538293][T11944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.585612][T17856] netlink: 'syz.9.3999': attribute type 4 has an invalid length.
[  255.593549][T17856] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3999'.
[  255.617079][T17856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  255.625827][T17863] EXT4-fs: Ignoring removed i_version option
[  255.638747][T17863] EXT4-fs: Ignoring removed bh option
[  255.652003][T17864] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  255.725759][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4001'.
[  255.749469][   T29] kauditd_printk_skb: 136 callbacks suppressed
[  255.749545][   T29] audit: type=1400 audit(247.254:7311): avc:  denied  { listen } for  pid=17862 comm="syz.1.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  255.764995][T17875] 8021q: adding VLAN 0 to HW filter on device bond3
[  255.778107][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4001'.
[  255.791002][T17877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4001'.
[  255.810846][T17885] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.3998: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0
[  255.834136][   T29] audit: type=1326 audit(247.338:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  255.857121][   T29] audit: type=1326 audit(247.338:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  255.894167][T17885] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3998: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  255.940527][T17885] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3998: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  255.972980][   T29] audit: type=1326 audit(247.338:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  255.996060][   T29] audit: type=1326 audit(247.338:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  256.019119][   T29] audit: type=1326 audit(247.338:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  256.140049][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4007'.
[  256.161284][T17908] EXT4-fs: Ignoring removed i_version option
[  256.167464][T17908] EXT4-fs: Ignoring removed bh option
[  256.198655][T17904] EXT4-fs: Ignoring removed i_version option
[  256.204798][T17904] EXT4-fs: Ignoring removed bh option
[  256.256478][   T29] audit: type=1326 audit(247.721:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  256.279688][   T29] audit: type=1326 audit(247.721:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  256.544443][T17934] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  256.568243][T17943] netlink: 'syz.1.4013': attribute type 27 has an invalid length.
[  256.590395][T17934] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4012'.
[  256.601624][   T29] audit: type=1400 audit(248.049:7319): avc:  denied  { append } for  pid=17933 comm="syz.0.4012" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  256.653660][T17943] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.661030][T17943] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.701547][T17943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.712908][T17943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.811924][T17948] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.827080][T17957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4014'.
[  256.837967][T17948] 8021q: adding VLAN 0 to HW filter on device team0
[  256.851596][T17948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.869863][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.881997][T17957] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  256.895874][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.936877][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.960157][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.063162][T17961] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.4015: inode #0: comm syz.0.4015: iget: illegal inode #
[  257.079771][T17961] EXT4-fs (loop0): get orphan inode failed
[  257.089774][T17961] EXT4-fs (loop0): mount failed
[  257.215595][   T29] audit: type=1400 audit(248.638:7320): avc:  denied  { mount } for  pid=17982 comm="syz.1.4018" name="/" dev="autofs" ino=57685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  257.823685][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'.
[  257.838642][T18043] FAULT_INJECTION: forcing a failure.
[  257.838642][T18043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  257.852004][T18043] CPU: 1 UID: 0 PID: 18043 Comm: syz.5.4030 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  257.852044][T18043] Tainted: [W]=WARN
[  257.852070][T18043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  257.852087][T18043] Call Trace:
[  257.852096][T18043]  <TASK>
[  257.852106][T18043]  __dump_stack+0x1d/0x30
[  257.852130][T18043]  dump_stack_lvl+0x95/0xd0
[  257.852154][T18043]  dump_stack+0x15/0x1b
[  257.852240][T18043]  should_fail_ex+0x263/0x280
[  257.852277][T18043]  should_fail+0xb/0x20
[  257.852386][T18043]  should_fail_usercopy+0x1a/0x20
[  257.852573][T18043]  _copy_to_user+0x20/0xa0
[  257.852673][T18043]  simple_read_from_buffer+0xb5/0x130
[  257.852720][T18043]  proc_fail_nth_read+0x10e/0x150
[  257.852754][T18043]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  257.852873][T18043]  vfs_read+0x1ab/0x7f0
[  257.852896][T18043]  ? __rcu_read_unlock+0x4e/0x70
[  257.853015][T18043]  ? __fget_files+0x184/0x1c0
[  257.853043][T18043]  ? mutex_lock+0x57/0x90
[  257.853072][T18043]  ksys_read+0xdc/0x1a0
[  257.853097][T18043]  __x64_sys_read+0x40/0x50
[  257.853168][T18043]  x64_sys_call+0x2889/0x3000
[  257.853200][T18043]  do_syscall_64+0xc0/0x2a0
[  257.853268][T18043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.853343][T18043] RIP: 0033:0x7f8ea4fab78e
[  257.853361][T18043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  257.853384][T18043] RSP: 002b:00007f8ea3a46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  257.853410][T18043] RAX: ffffffffffffffda RBX: 00007f8ea3a476c0 RCX: 00007f8ea4fab78e
[  257.853427][T18043] RDX: 000000000000000f RSI: 00007f8ea3a470a0 RDI: 0000000000000004
[  257.853444][T18043] RBP: 00007f8ea3a47090 R08: 0000000000000000 R09: 0000000000000000
[  257.853530][T18043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.853547][T18043] R13: 00007f8ea5266038 R14: 00007f8ea5265fa0 R15: 00007fff83ddc4c8
[  257.853639][T18043]  </TASK>
[  258.260313][T18061] hub 6-0:1.0: USB hub found
[  258.276000][T18061] hub 6-0:1.0: 8 ports detected
[  258.323594][T18074] gtp0: entered promiscuous mode
[  258.328687][T18074] gtp0: entered allmulticast mode
[  258.650892][T18123] syzkaller0: entered promiscuous mode
[  258.656423][T18123] syzkaller0: entered allmulticast mode
[  258.663287][T18122] syzkaller0: entered promiscuous mode
[  258.668837][T18122] syzkaller0: entered allmulticast mode
[  258.860469][T18147] SELinux:  policydb magic number 0x160002 does not match expected magic number 0xf97cff8c
[  258.870636][T18147] SELinux: failed to load policy
[  258.977705][T18161] SELinux:  policydb magic number 0x160002 does not match expected magic number 0xf97cff8c
[  258.987859][T18161] SELinux: failed to load policy
[  259.044311][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4053'.
[  259.138847][T18198] set_capacity_and_notify: 11 callbacks suppressed
[  259.138865][T18198] loop3: detected capacity change from 0 to 512
[  259.152343][T18198] ext4: Unknown parameter 'fowner>00000000000000000000'
[  259.301142][T18216] loop3: detected capacity change from 0 to 2048
[  259.480474][T15571] Bluetooth: hci0: command 0x1003 tx timeout
[  259.486585][ T6045] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  259.839474][T18237] netlink: 'syz.9.4061': attribute type 1 has an invalid length.
[  259.847377][T18237] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4061'.
[  259.903019][T18241] loop0: detected capacity change from 0 to 512
[  259.914957][T18241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  260.059012][T18246] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  260.068112][T18246] SELinux:  Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped).
[  260.103405][T18226] loop5: detected capacity change from 0 to 1024
[  260.262652][T18251] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  260.386032][T18257] loop3: detected capacity change from 0 to 512
[  260.444566][T18230] loop1: detected capacity change from 0 to 1024
[  261.173423][T18276] Cannot find set identified by id 65535 to match
[  261.248037][T18284] xt_TCPMSS: Only works on TCP SYN packets
[  261.322694][T18286] batadv_slave_0: entered promiscuous mode
[  261.393460][T18288] loop9: detected capacity change from 0 to 512
[  261.405430][T18285] batadv_slave_0: left promiscuous mode
[  261.487645][T18292] loop0: detected capacity change from 0 to 4096
[  261.573429][T18300] loop9: detected capacity change from 0 to 128
[  261.585751][T18302] __nla_validate_parse: 1 callbacks suppressed
[  261.585768][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'.
[  261.614566][T18300] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  261.629963][T18302] vlan0: entered promiscuous mode
[  261.695768][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4088'.
[  261.705656][T18311] loop5: detected capacity change from 0 to 1024
[  261.729836][T18311] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  261.801525][T18320] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  261.855463][T18315] lo speed is unknown, defaulting to 1000
[  261.861653][T18315] lo speed is unknown, defaulting to 1000
[  261.908780][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  261.908793][   T29] audit: type=1400 audit(253.025:7326): avc:  denied  { watch watch_reads } for  pid=18328 comm="syz.0.4095" path="/37/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  261.967698][   T29] audit: type=1400 audit(253.025:7327): avc:  denied  { connect } for  pid=18314 comm="syz.1.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  261.986803][   T29] audit: type=1400 audit(253.053:7328): avc:  denied  { mounton } for  pid=18328 comm="syz.0.4095" path="/37/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  262.034886][T18342] rock: directory entry would overflow storage
[  262.041141][T18342] rock: sig=0x4654, size=5, remaining=4
[  262.065093][T15082] EXT4-fs unmount: 41 callbacks suppressed
[  262.065110][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.083746][T18343] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  262.111015][T18342] isofs: Unable to find the ".." directory for NFS.
[  262.112731][T18343] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  262.133241][T18342] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4098' sets config #1
[  262.144326][T18343] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.4097: corrupted inode contents
[  262.178191][T18343] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #11: comm syz.5.4097: mark_inode_dirty error
[  262.207511][T18343] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4097: invalid indirect mapped block 1 (level 1)
[  262.278819][T18343] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.4097: corrupted inode contents
[  262.279082][T18343] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  262.279208][T18343] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.4097: corrupted inode contents
[  262.279365][T18343] EXT4-fs error (device loop5): ext4_truncate:4635: inode #11: comm syz.5.4097: mark_inode_dirty error
[  262.279488][T18343] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  262.279733][T18343] EXT4-fs (loop5): 1 truncate cleaned up
[  262.280211][T18343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.280888][T18343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.295584][T18350] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.4101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  262.295800][T18350] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.4101: Bad quota inode: 3, type: 0
[  262.295998][T18350] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  262.296087][T18350] EXT4-fs (loop1): mount failed
[  262.377711][T18355] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4102'.
[  262.397737][T18356] netlink: 'syz.5.4103': attribute type 1 has an invalid length.
[  262.423570][T18356] 8021q: adding VLAN 0 to HW filter on device bond4
[  262.435916][T18356] bond4: (slave gretap1): making interface the new active one
[  262.436638][T18356] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  262.438074][T18356] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  262.628211][T18369] netlink: zone id is out of range
[  262.645813][   T29] audit: type=1400 audit(253.699:7329): avc:  denied  { ioctl } for  pid=18367 comm="syz.9.4108" path="ipc:[4026532375]" dev="nsfs" ino=4026532375 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  262.748865][T18371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.840606][T11643] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.975832][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4115'.
[  263.283313][T18403] EXT4-fs: Ignoring removed i_version option
[  263.289488][T18403] EXT4-fs: Ignoring removed bh option
[  263.319734][T18403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.476465][   T29] audit: type=1326 audit(254.484:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18402 comm="syz.3.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  263.499677][   T29] audit: type=1326 audit(254.484:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18402 comm="syz.3.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  263.517624][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4127'.
[  263.541584][   T29] audit: type=1326 audit(254.540:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18402 comm="syz.3.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  263.564636][   T29] audit: type=1326 audit(254.540:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18402 comm="syz.3.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  263.587628][   T29] audit: type=1326 audit(254.540:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18402 comm="syz.3.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  263.610727][   T29] audit: type=1326 audit(254.540:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18402 comm="syz.3.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  263.639995][T18424] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.653600][T18424] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  263.691685][   T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  263.726693][T18426] tipc: Started in network mode
[  263.731605][T18426] tipc: Node identity de4722b79d5c, cluster identity 4711
[  263.738889][T18426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.748491][T18426] syzkaller0: entered promiscuous mode
[  263.753988][T18426] syzkaller0: entered allmulticast mode
[  263.761648][T18426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4129'.
[  263.772019][T18426] tipc: Resetting bearer <eth:syzkaller0>
[  263.789880][T18430] netlink: 'syz.5.4131': attribute type 1 has an invalid length.
[  263.804501][T18430] 8021q: adding VLAN 0 to HW filter on device bond5
[  263.817364][T18430] vlan0: entered allmulticast mode
[  263.823472][T18430] bond5: (slave vlan0): Opening slave failed
[  263.878882][T18425] tipc: Resetting bearer <eth:syzkaller0>
[  263.886220][T18425] tipc: Disabling bearer <eth:syzkaller0>
[  263.970373][T18435] SELinux:  policydb magic number 0x160002 does not match expected magic number 0xf97cff8c
[  263.980519][T18435] SELinux: failed to load policy
[  264.018326][T18439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.057191][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.143062][T18454] Cannot find add_set index 0 as target
[  264.152608][T18455] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4141'.
[  264.184474][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.208137][T18447] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.4138: inode #0: comm syz.5.4138: iget: illegal inode #
[  264.233908][T18458] syzkaller0: entered promiscuous mode
[  264.239675][T18458] syzkaller0: entered allmulticast mode
[  264.253602][T18447] EXT4-fs (loop5): get orphan inode failed
[  264.297547][T18447] EXT4-fs (loop5): mount failed
[  264.389256][T18475] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4150'.
[  264.426046][T18471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.483806][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.516170][T18447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  264.524612][T18447] System zones: 1-12
[  264.541657][T18447] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4138: invalid indirect mapped block 1819239214 (level 1)
[  264.561412][T18447] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4138: bg 0: block 361: padding at end of block bitmap is not set
[  264.580330][T18447] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  264.599624][T18496] set_capacity_and_notify: 15 callbacks suppressed
[  264.599642][T18496] loop1: detected capacity change from 0 to 1024
[  264.602721][T18447] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4138: attempt to clear invalid blocks 33619980 len 1
[  264.606906][T18496] EXT4-fs: Ignoring removed nobh option
[  264.607024][T18496] EXT4-fs: Ignoring removed nomblk_io_submit option
[  264.649662][T18447] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4138: invalid indirect mapped block 1819239214 (level 0)
[  264.650324][T18496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.679328][T18447] EXT4-fs (loop5): 1 truncate cleaned up
[  264.696146][T18447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.719266][T18506] EXT4-fs (loop1): Online resizing not supported with bigalloc
[  264.742822][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.776371][T18521] syzkaller0: entered promiscuous mode
[  264.781947][T18521] syzkaller0: entered allmulticast mode
[  264.800508][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.835507][T18526] hub 6-0:1.0: USB hub found
[  264.842173][T18526] hub 6-0:1.0: 8 ports detected
[  264.880881][T18529] loop5: detected capacity change from 0 to 8192
[  264.908302][T18529] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2
[  264.963605][T18536] loop1: detected capacity change from 0 to 512
[  264.987242][T18536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.013991][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.084329][T18546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4166'.
[  265.094717][T18546] loop3: detected capacity change from 0 to 128
[  265.115594][T18547] loop1: detected capacity change from 0 to 128
[  265.289037][T18557] loop5: detected capacity change from 0 to 512
[  265.292662][T18559] FAULT_INJECTION: forcing a failure.
[  265.292662][T18559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.296299][T18557] EXT4-fs: Ignoring removed oldalloc option
[  265.308660][T18559] CPU: 1 UID: 0 PID: 18559 Comm: syz.3.4170 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  265.308734][T18559] Tainted: [W]=WARN
[  265.308767][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  265.308826][T18559] Call Trace:
[  265.308858][T18559]  <TASK>
[  265.308884][T18559]  __dump_stack+0x1d/0x30
[  265.308966][T18559]  dump_stack_lvl+0x95/0xd0
[  265.309038][T18559]  dump_stack+0x15/0x1b
[  265.309130][T18559]  should_fail_ex+0x263/0x280
[  265.309223][T18559]  should_fail+0xb/0x20
[  265.309396][T18559]  should_fail_usercopy+0x1a/0x20
[  265.309554][T18559]  _copy_to_user+0x20/0xa0
[  265.309618][T18559]  simple_read_from_buffer+0xb5/0x130
[  265.309733][T18559]  proc_fail_nth_read+0x10e/0x150
[  265.309848][T18559]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  265.309931][T18559]  vfs_read+0x1ab/0x7f0
[  265.309987][T18559]  ? __rcu_read_unlock+0x4e/0x70
[  265.310086][T18559]  ? __fget_files+0x184/0x1c0
[  265.310164][T18559]  ? mutex_lock+0x57/0x90
[  265.310328][T18559]  ksys_read+0xdc/0x1a0
[  265.310441][T18559]  __x64_sys_read+0x40/0x50
[  265.310504][T18559]  x64_sys_call+0x2889/0x3000
[  265.310577][T18559]  do_syscall_64+0xc0/0x2a0
[  265.310704][T18559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.310774][T18559] RIP: 0033:0x7f94f538b78e
[  265.310821][T18559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  265.310871][T18559] RSP: 002b:00007f94f3e26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  265.310978][T18559] RAX: ffffffffffffffda RBX: 00007f94f3e276c0 RCX: 00007f94f538b78e
[  265.311023][T18559] RDX: 000000000000000f RSI: 00007f94f3e270a0 RDI: 0000000000000004
[  265.311070][T18559] RBP: 00007f94f3e27090 R08: 0000000000000000 R09: 0000000000000000
[  265.311089][T18559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.311114][T18559] R13: 00007f94f5646038 R14: 00007f94f5645fa0 R15: 00007fffdb8e1038
[  265.311181][T18559]  </TASK>
[  265.532203][T18564] loop9: detected capacity change from 0 to 256
[  265.540204][T18557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4169: Parent and EA inode have the same ino 15
[  265.578275][T18557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4169: Parent and EA inode have the same ino 15
[  265.591269][T18557] EXT4-fs (loop5): 1 orphan inode deleted
[  265.645097][T18570] loop0: detected capacity change from 0 to 512
[  265.653550][T18557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.696122][T18570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.739753][T17314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.758646][T18579] FAULT_INJECTION: forcing a failure.
[  265.758646][T18579] name failslab, interval 1, probability 0, space 0, times 0
[  265.771414][T18579] CPU: 0 UID: 0 PID: 18579 Comm: syz.9.4177 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  265.771453][T18579] Tainted: [W]=WARN
[  265.771498][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  265.771514][T18579] Call Trace:
[  265.771522][T18579]  <TASK>
[  265.771530][T18579]  __dump_stack+0x1d/0x30
[  265.771562][T18579]  dump_stack_lvl+0x95/0xd0
[  265.771589][T18579]  dump_stack+0x15/0x1b
[  265.771613][T18579]  should_fail_ex+0x263/0x280
[  265.771661][T18579]  should_failslab+0x8c/0xb0
[  265.771691][T18579]  __kmalloc_cache_noprof+0x64/0x4a0
[  265.771754][T18579]  ? init_srcu_struct_fields+0x57/0x600
[  265.771798][T18579]  init_srcu_struct_fields+0x57/0x600
[  265.771893][T18579]  ? __kmalloc_noprof+0x4a3/0x580
[  265.771924][T18579]  ? hci_alloc_dev_priv+0x24/0xe70
[  265.771959][T18579]  init_srcu_struct+0x23/0x30
[  265.772060][T18579]  hci_alloc_dev_priv+0x35/0xe70
[  265.772094][T18579]  hci_uart_tty_ioctl+0x28b/0x5c0
[  265.772135][T18579]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  265.772167][T18579]  tty_ioctl+0x83e/0xb80
[  265.772201][T18579]  ? __pfx_tty_ioctl+0x10/0x10
[  265.772233][T18579]  __se_sys_ioctl+0xce/0x140
[  265.772313][T18579]  __x64_sys_ioctl+0x43/0x50
[  265.772381][T18579]  x64_sys_call+0x14b0/0x3000
[  265.772406][T18579]  do_syscall_64+0xc0/0x2a0
[  265.772459][T18579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.772487][T18579] RIP: 0033:0x7f19d45faeb9
[  265.772507][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.772529][T18579] RSP: 002b:00007f19d3057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  265.772591][T18579] RAX: ffffffffffffffda RBX: 00007f19d4875fa0 RCX: 00007f19d45faeb9
[  265.772605][T18579] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000005
[  265.772619][T18579] RBP: 00007f19d3057090 R08: 0000000000000000 R09: 0000000000000000
[  265.772636][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.772653][T18579] R13: 00007f19d4876038 R14: 00007f19d4875fa0 R15: 00007ffd870a9ef8
[  265.772679][T18579]  </TASK>
[  265.772771][T18579] Bluetooth: Can't allocate HCI device
[  265.806219][T18557] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  265.941103][T18587] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4169'.
[  266.160429][T18601] netlink: 'syz.3.4181': attribute type 1 has an invalid length.
[  266.229375][T18599] loop1: detected capacity change from 0 to 512
[  266.265926][T18512] Bluetooth: hci0: Frame reassembly failed (-84)
[  266.274528][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop1
[  266.288035][T18606] loop3: detected capacity change from 0 to 136
[  266.290649][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.299980][T18606] ISOFS: Logical zone size(768) < hardware blocksize(1024)
[  266.310916][T18599] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  266.327000][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop1
[  266.424210][T18611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.465424][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.674467][T18633] EXT4-fs (loop1): bad geometry: first data block 2 is beyond end of filesystem (0)
[  266.750193][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  266.858827][T18646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.873008][T18646] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4200: corrupted inode contents
[  266.885001][T18646] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.4200: mark_inode_dirty error
[  266.896540][T18646] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4200: corrupted inode contents
[  266.908444][T18646] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4200: mark_inode_dirty error
[  266.923949][T18646] Invalid ELF header len 5
[  267.109240][T18660] EXT4-fs: dax option not supported
[  267.160440][T18664] xt_TCPMSS: Only works on TCP SYN packets
[  267.263851][   T29] kauditd_printk_skb: 629 callbacks suppressed
[  267.263872][   T29] audit: type=1326 audit(258.039:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.293481][   T29] audit: type=1326 audit(258.039:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.316436][   T29] audit: type=1326 audit(258.039:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.339469][   T29] audit: type=1326 audit(258.039:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.362489][   T29] audit: type=1326 audit(258.039:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.385817][   T29] audit: type=1326 audit(258.039:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.408790][   T29] audit: type=1326 audit(258.039:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.431781][   T29] audit: type=1326 audit(258.039:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.454785][   T29] audit: type=1326 audit(258.039:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.477843][   T29] audit: type=1326 audit(258.039:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18608 comm="syz.5.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ea4fab78e code=0x7ffc0000
[  267.715991][T18675] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  267.742548][T18675] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  267.766354][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.799269][T18678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18678 comm=syz.1.4213
[  267.814988][T18679] __nla_validate_parse: 3 callbacks suppressed
[  267.815005][T18679] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4214'.
[  267.830356][T18679] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4214'.
[  267.846028][T18678] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #11: block 530: comm syz.1.4213: lblock 4 mapped to illegal pblock 530 (length 1)
[  267.861300][T18678] EXT4-fs (loop1): 1 orphan inode deleted
[  267.868945][T18679] syz_tun: entered promiscuous mode
[  267.874769][T18678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.887690][T18679] syz_tun: left promiscuous mode
[  267.898264][T18678] tipc: Enabled bearer <udp:s>, priority 10
[  267.932850][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.996952][T18690] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4215'.
[  268.108194][T18703] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  268.136112][T18703] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  268.186768][T18708] FAULT_INJECTION: forcing a failure.
[  268.186768][T18708] name failslab, interval 1, probability 0, space 0, times 0
[  268.199503][T18708] CPU: 1 UID: 0 PID: 18708 Comm: syz.9.4223 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  268.199623][T18708] Tainted: [W]=WARN
[  268.199633][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  268.199696][T18708] Call Trace:
[  268.199781][T18708]  <TASK>
[  268.199792][T18708]  __dump_stack+0x1d/0x30
[  268.199882][T18708]  dump_stack_lvl+0x95/0xd0
[  268.199918][T18708]  dump_stack+0x15/0x1b
[  268.199944][T18708]  should_fail_ex+0x263/0x280
[  268.200040][T18708]  should_failslab+0x8c/0xb0
[  268.200071][T18708]  kmem_cache_alloc_noprof+0x68/0x490
[  268.200101][T18708]  ? getname_flags+0x7f/0x3b0
[  268.200204][T18708]  getname_flags+0x7f/0x3b0
[  268.200238][T18708]  __x64_sys_renameat2+0x5f/0x90
[  268.200283][T18708]  x64_sys_call+0x35f/0x3000
[  268.200317][T18708]  do_syscall_64+0xc0/0x2a0
[  268.200360][T18708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.200421][T18708] RIP: 0033:0x7f19d45faeb9
[  268.200520][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.200545][T18708] RSP: 002b:00007f19d3057028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  268.200572][T18708] RAX: ffffffffffffffda RBX: 00007f19d4875fa0 RCX: 00007f19d45faeb9
[  268.200652][T18708] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c
[  268.200671][T18708] RBP: 00007f19d3057090 R08: 0000000000000004 R09: 0000000000000000
[  268.200689][T18708] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  268.200733][T18708] R13: 00007f19d4876038 R14: 00007f19d4875fa0 R15: 00007ffd870a9ef8
[  268.200760][T18708]  </TASK>
[  268.201465][T18703] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.4221: corrupted inode contents
[  268.378463][T18706] lo speed is unknown, defaulting to 1000
[  268.384213][T18703] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.4221: mark_inode_dirty error
[  268.395961][T18706] lo speed is unknown, defaulting to 1000
[  268.404126][T18703] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4221: invalid indirect mapped block 1 (level 1)
[  268.439990][T18703] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.4221: corrupted inode contents
[  268.452336][T18703] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  268.463190][T18703] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.4221: corrupted inode contents
[  268.471826][ T6045] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  268.506693][T18703] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.4221: mark_inode_dirty error
[  268.527010][T18703] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  268.555937][T18703] EXT4-fs (loop1): 1 truncate cleaned up
[  268.568063][T18715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4226'.
[  268.577478][T18703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.605336][T18703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.622312][T18717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.680404][T18717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.798816][T18706] veth0: entered promiscuous mode
[  268.804204][T18706] veth0: entered allmulticast mode
[  268.869263][T18735] EXT4-fs: Ignoring removed i_version option
[  268.899406][T18735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.022064][T17314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.060628][T18746] msdos: Unknown parameter 'nodotsDdots'
[  269.097182][T18748] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  269.106424][ T3836] tipc: Node number set to 1125851831
[  269.116500][T18748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4235: bg 0: block 255: padding at end of block bitmap is not set
[  269.142941][T18748] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  269.157801][T18748] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4235: invalid indirect mapped block 1 (level 1)
[  269.171350][T18748] EXT4-fs (loop0): 1 truncate cleaned up
[  269.177392][T18748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.219584][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'.
[  269.383842][T18779] EXT4-fs: Ignoring removed bh option
[  269.389442][T18779] EXT4-fs: Ignoring removed mblk_io_submit option
[  269.396819][T18779] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  269.424906][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'.
[  269.443594][T18779] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  269.453575][T18779] EXT4-fs (loop5): orphan cleanup on readonly fs
[  269.460619][T18779] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4247: Failed to acquire dquot type 1
[  269.474679][T18779] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4247: Invalid block bitmap block 0 in block_group 0
[  269.497953][T18779] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4247: Invalid block bitmap block 0 in block_group 0
[  269.515252][T18779] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4247: Invalid block bitmap block 0 in block_group 0
[  269.530655][T18779] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4247: Failed to acquire dquot type 1
[  269.553817][T18779] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4247: Failed to acquire dquot type 1
[  269.565910][T18779] EXT4-fs (loop5): 1 orphan inode deleted
[  269.575235][T18779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  269.592211][T18792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18792 comm=syz.9.4251
[  269.605299][T18792] netlink: 'syz.9.4251': attribute type 1 has an invalid length.
[  269.626767][T18779] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.4247: deleted inode referenced: 12
[  269.639293][T18779] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.4247: iget: bad i_size value: 360287970189639690
[  269.659396][T18795] lo speed is unknown, defaulting to 1000
[  269.672103][T18798] netlink: 'syz.3.4254': attribute type 1 has an invalid length.
[  269.675365][T18795] lo speed is unknown, defaulting to 1000
[  269.686205][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.713433][T18798] 8021q: adding VLAN 0 to HW filter on device bond4
[  269.774311][T18798] vlan0: entered allmulticast mode
[  269.780690][T18798] bond4: (slave vlan0): Opening slave failed
[  269.818086][T18808] smc: net device bond0 applied user defined pnetid SYZ0
[  269.857602][T18810] FAULT_INJECTION: forcing a failure.
[  269.857602][T18810] name failslab, interval 1, probability 0, space 0, times 0
[  269.870440][T18810] CPU: 1 UID: 0 PID: 18810 Comm: syz.3.4258 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  269.870477][T18810] Tainted: [W]=WARN
[  269.870549][T18810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  269.870645][T18810] Call Trace:
[  269.870651][T18810]  <TASK>
[  269.870658][T18810]  __dump_stack+0x1d/0x30
[  269.870752][T18810]  dump_stack_lvl+0x95/0xd0
[  269.870778][T18810]  dump_stack+0x15/0x1b
[  269.870802][T18810]  should_fail_ex+0x263/0x280
[  269.870834][T18810]  should_failslab+0x8c/0xb0
[  269.870877][T18810]  __kmalloc_noprof+0xb8/0x580
[  269.870904][T18810]  ? iovec_from_user+0x84/0x200
[  269.870928][T18810]  ? __rcu_read_unlock+0x4e/0x70
[  269.870958][T18810]  iovec_from_user+0x84/0x200
[  269.871028][T18810]  __import_iovec+0xf3/0x530
[  269.871054][T18810]  ? __rcu_read_unlock+0x4e/0x70
[  269.871100][T18810]  import_iovec+0x60/0x80
[  269.871122][T18810]  __se_sys_vmsplice+0x15a/0xf90
[  269.871170][T18810]  ? kstrtouint+0x76/0xc0
[  269.871204][T18810]  ? kstrtouint_from_user+0xa8/0xf0
[  269.871243][T18810]  ? get_pid_task+0x96/0xd0
[  269.871307][T18810]  ? __fget_files+0x184/0x1c0
[  269.871333][T18810]  ? mutex_lock+0x57/0x90
[  269.871409][T18810]  ? mutex_unlock+0x4e/0x90
[  269.871436][T18810]  ? fput+0x8f/0xc0
[  269.871528][T18810]  __x64_sys_vmsplice+0x55/0x70
[  269.871552][T18810]  x64_sys_call+0x2344/0x3000
[  269.871630][T18810]  do_syscall_64+0xc0/0x2a0
[  269.871731][T18810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.871759][T18810] RIP: 0033:0x7f94f53caeb9
[  269.871779][T18810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.871802][T18810] RSP: 002b:00007f94f3e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  269.871849][T18810] RAX: ffffffffffffffda RBX: 00007f94f5645fa0 RCX: 00007f94f53caeb9
[  269.871942][T18810] RDX: 100000000000000c RSI: 0000200000000040 RDI: 0000000000000004
[  269.871957][T18810] RBP: 00007f94f3e27090 R08: 0000000000000000 R09: 0000000000000000
[  269.872012][T18810] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  269.872027][T18810] R13: 00007f94f5646038 R14: 00007f94f5645fa0 R15: 00007fffdb8e1038
[  269.872053][T18810]  </TASK>
[  270.094684][T18795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4253'.
[  270.179333][T17314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.211675][T18826] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  270.266737][T18833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.281207][T18826] set_capacity_and_notify: 17 callbacks suppressed
[  270.281223][T18826] loop1: detected capacity change from 0 to 2048
[  270.314160][T18826] EXT4-fs: Ignoring removed bh option
[  270.327069][T18833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.344833][T18845] loop5: detected capacity change from 0 to 512
[  270.352233][T18826] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[  270.367761][T18845] ext4: Unknown parameter 'pcr'
[  270.402618][T18833] loop0: detected capacity change from 0 to 128
[  270.455551][T18853] loop3: detected capacity change from 0 to 128
[  270.579718][T18870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4269'.
[  270.595231][T11944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.602868][T11944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.624064][ T3832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.646517][T18875] loop3: detected capacity change from 0 to 512
[  270.659965][T18875] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.666780][ T3832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.682000][T18875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006]
[  270.705959][T18875] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4270: Invalid inode bitmap blk 4 in block_group 0
[  270.747536][T18875] EXT4-fs (loop3): Remounting filesystem read-only
[  270.766945][T18875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.804387][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.942591][T18907] loop1: detected capacity change from 0 to 512
[  270.989928][T18907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.048502][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.102016][T18921] hub 6-0:1.0: USB hub found
[  271.107560][T18921] hub 6-0:1.0: 8 ports detected
[  271.142332][T18931] netlink: 'syz.0.4281': attribute type 27 has an invalid length.
[  271.161592][T18931] gtp0: left promiscuous mode
[  271.166352][T18931] gtp0: left allmulticast mode
[  271.172098][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4273'.
[  271.287667][T18937] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.296101][T18937] 8021q: adding VLAN 0 to HW filter on device team0
[  271.315003][T18937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.369276][T18950] netlink: 92 bytes leftover after parsing attributes in process `syz.9.4286'.
[  271.384407][T18958] loop1: detected capacity change from 0 to 512
[  271.410267][T18960] loop3: detected capacity change from 0 to 512
[  271.437748][T18958] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  271.462922][T18958] EXT4-fs (loop1): mount failed
[  271.524355][T18972] loop1: detected capacity change from 0 to 1024
[  271.541562][T18972] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.543812][T18960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.568572][T18972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  271.580420][T18972] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  271.602700][T18972] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4293: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  271.625762][ T3832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.637263][T18972] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4293: couldn't read orphan inode 11 (err -117)
[  271.668832][T18972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.714265][T15082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.725268][T18972] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4293: Invalid block bitmap block 0 in block_group 0
[  271.743123][T18972] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4293: Failed to acquire dquot type 0
[  271.849710][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.867926][T18998] loop0: detected capacity change from 0 to 512
[  271.917789][T18998] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  271.935825][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop0
[  271.975160][ T3303] udevd[3303]: incorrect ext4 checksum on /dev/loop0
[  272.082591][T19035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.180006][T19045] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  272.198488][T19035] FAULT_INJECTION: forcing a failure.
[  272.198488][T19035] name failslab, interval 1, probability 0, space 0, times 0
[  272.211240][T19035] CPU: 1 UID: 0 PID: 19035 Comm: syz.5.4306 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  272.211304][T19035] Tainted: [W]=WARN
[  272.211349][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  272.211439][T19035] Call Trace:
[  272.211446][T19035]  <TASK>
[  272.211487][T19035]  __dump_stack+0x1d/0x30
[  272.211514][T19035]  dump_stack_lvl+0x95/0xd0
[  272.211591][T19035]  dump_stack+0x15/0x1b
[  272.211613][T19035]  should_fail_ex+0x263/0x280
[  272.211724][T19035]  should_failslab+0x8c/0xb0
[  272.211750][T19035]  kmem_cache_alloc_lru_noprof+0x6c/0x490
[  272.211843][T19035]  ? __d_alloc+0x37/0x340
[  272.211874][T19035]  __d_alloc+0x37/0x340
[  272.211904][T19035]  d_alloc_parallel+0x54/0xce0
[  272.211945][T19035]  ? lockref_get_not_dead+0x120/0x1c0
[  272.211970][T19035]  ? __rcu_read_unlock+0x4e/0x70
[  272.212002][T19035]  ? try_to_unlazy+0x3c0/0x5b0
[  272.212109][T19035]  __lookup_slow+0x96/0x260
[  272.212141][T19035]  lookup_slow+0x3c/0x60
[  272.212190][T19035]  path_lookupat+0x2f7/0x500
[  272.212221][T19035]  filename_lookup+0x190/0x390
[  272.212293][T19035]  path_listxattrat+0xd1/0x2b0
[  272.212324][T19035]  __x64_sys_llistxattr+0x4d/0x60
[  272.212352][T19035]  x64_sys_call+0xb12/0x3000
[  272.212394][T19035]  do_syscall_64+0xc0/0x2a0
[  272.212477][T19035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.212497][T19035] RIP: 0033:0x7f8ea4feaeb9
[  272.212515][T19035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.212596][T19035] RSP: 002b:00007f8ea3a47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3
[  272.212619][T19035] RAX: ffffffffffffffda RBX: 00007f8ea5265fa0 RCX: 00007f8ea4feaeb9
[  272.212635][T19035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  272.212649][T19035] RBP: 00007f8ea3a47090 R08: 0000000000000000 R09: 0000000000000000
[  272.212662][T19035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.212675][T19035] R13: 00007f8ea5266038 R14: 00007f8ea5265fa0 R15: 00007fff83ddc4c8
[  272.212715][T19035]  </TASK>
[  272.444585][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.454024][T19045] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4308: casefold flag without casefold feature
[  272.468792][T19055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.506779][T19045] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4308: couldn't read orphan inode 15 (err -117)
[  272.519868][T17314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.539820][T19073] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  272.556146][T19045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.699937][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.741010][T19106] EXT4-fs (loop5): 1 truncate cleaned up
[  272.766001][T19106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.806425][T19105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.863915][T19113] EXT4-fs (loop1): 1 truncate cleaned up
[  272.875923][T19106] EXT4-fs (loop5): shut down requested (0)
[  272.886512][T19110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.895318][T19113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.934435][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.961702][T19110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.981585][T19117] netlink: 'syz.9.4326': attribute type 13 has an invalid length.
[  272.992311][   T29] kauditd_printk_skb: 71 callbacks suppressed
[  272.992324][   T29] audit: type=1400 audit(263.389:8037): avc:  denied  { accept } for  pid=19118 comm="syz.5.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  273.066038][T19105] sctp: [Deprecated]: syz.0.4322 (pid 19105) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.066038][T19105] Use struct sctp_sack_info instead
[  273.084900][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.132869][T17314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.234428][T19136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.322952][T11643] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.515902][T19157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=19157 comm=syz.5.4339
[  273.556279][T19157] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #11: block 530: comm syz.5.4339: lblock 4 mapped to illegal pblock 530 (length 1)
[  273.581783][T19157] EXT4-fs (loop5): 1 orphan inode deleted
[  273.588329][T19157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.618575][T19157] tipc: Started in network mode
[  273.623551][T19157] tipc: Node identity ac1414aa, cluster identity 4711
[  273.632059][T19157] tipc: Enabled bearer <udp:s>, priority 10
[  273.763382][T13118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.124086][T19179] ext2: Unknown parameter 'fowner<00000000000000000000'
[  274.490596][T19192] FAULT_INJECTION: forcing a failure.
[  274.490596][T19192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.503807][T19192] CPU: 0 UID: 0 PID: 19192 Comm: syz.9.4351 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  274.503949][T19192] Tainted: [W]=WARN
[  274.503957][T19192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  274.503974][T19192] Call Trace:
[  274.503982][T19192]  <TASK>
[  274.503992][T19192]  __dump_stack+0x1d/0x30
[  274.504019][T19192]  dump_stack_lvl+0x95/0xd0
[  274.504045][T19192]  dump_stack+0x15/0x1b
[  274.504097][T19192]  should_fail_ex+0x263/0x280
[  274.504232][T19192]  should_fail+0xb/0x20
[  274.504302][T19192]  should_fail_usercopy+0x1a/0x20
[  274.504359][T19192]  strncpy_from_user+0x27/0x250
[  274.504386][T19192]  getname_flags+0xad/0x3b0
[  274.504448][T19192]  __x64_sys_renameat2+0x5f/0x90
[  274.504469][T19192]  x64_sys_call+0x35f/0x3000
[  274.504491][T19192]  do_syscall_64+0xc0/0x2a0
[  274.504520][T19192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.504610][T19192] RIP: 0033:0x7f19d45faeb9
[  274.504660][T19192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.504678][T19192] RSP: 002b:00007f19d3057028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  274.504697][T19192] RAX: ffffffffffffffda RBX: 00007f19d4875fa0 RCX: 00007f19d45faeb9
[  274.504761][T19192] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c
[  274.504773][T19192] RBP: 00007f19d3057090 R08: 0000000000000004 R09: 0000000000000000
[  274.504785][T19192] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  274.504800][T19192] R13: 00007f19d4876038 R14: 00007f19d4875fa0 R15: 00007ffd870a9ef8
[  274.504820][T19192]  </TASK>
[  274.751499][T11952] Bluetooth: hci0: Frame reassembly failed (-84)
[  274.795672][T19203] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4354: corrupted inode contents
[  274.807902][T19203] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.4354: mark_inode_dirty error
[  274.819575][T19203] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4354: corrupted inode contents
[  274.831481][T11368] tipc: Node number set to 2886997162
[  274.843441][T19203] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.4354: mark_inode_dirty error
[  274.855075][T19203] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4354: corrupted inode contents
[  274.867662][T19203] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  274.876638][T19203] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4354: corrupted inode contents
[  274.885789][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.889138][T19203] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.4354: mark_inode_dirty error
[  274.907965][T19203] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  274.917395][T19203] EXT4-fs (loop0): 1 truncate cleaned up
[  274.924455][T19203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.937136][T11952] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  274.946918][T11952] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 1
[  275.014321][T17314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.467065][T19235] __nla_validate_parse: 5 callbacks suppressed
[  275.467078][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4364'.
[  276.100587][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4371'.
[  276.111172][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4371'.
[  276.120065][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'.
[  276.622334][T19274] 9pnet_fd: Insufficient options for proto=fd
[  276.664883][T19276] netlink: 'syz.3.4378': attribute type 1 has an invalid length.
[  276.679472][T19276] 8021q: adding VLAN 0 to HW filter on device bond5
[  276.692018][T19276] vlan0: entered allmulticast mode
[  276.699112][T19276] bond5: (slave vlan0): Opening slave failed
[  276.730311][   T29] audit: type=1400 audit(266.888:8038): avc:  denied  { append } for  pid=19277 comm="syz.1.4379" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  276.798789][T19287] FAULT_INJECTION: forcing a failure.
[  276.798789][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.812027][T19287] CPU: 1 UID: 0 PID: 19287 Comm: syz.3.4382 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  276.812113][T19287] Tainted: [W]=WARN
[  276.812119][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  276.812131][T19287] Call Trace:
[  276.812138][T19287]  <TASK>
[  276.812144][T19287]  __dump_stack+0x1d/0x30
[  276.812233][T19287]  dump_stack_lvl+0x95/0xd0
[  276.812260][T19287]  dump_stack+0x15/0x1b
[  276.812342][T19287]  should_fail_ex+0x263/0x280
[  276.812379][T19287]  should_fail+0xb/0x20
[  276.812444][T19287]  should_fail_usercopy+0x1a/0x20
[  276.812543][T19287]  _copy_to_user+0x20/0xa0
[  276.812567][T19287]  simple_read_from_buffer+0xb5/0x130
[  276.812688][T19287]  proc_fail_nth_read+0x10e/0x150
[  276.812855][T19287]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  276.812879][T19287]  vfs_read+0x1ab/0x7f0
[  276.812895][T19287]  ? __rcu_read_unlock+0x4e/0x70
[  276.812948][T19287]  ? __fget_files+0x184/0x1c0
[  276.812975][T19287]  ? mutex_lock+0x57/0x90
[  276.813000][T19287]  ksys_read+0xdc/0x1a0
[  276.813040][T19287]  __x64_sys_read+0x40/0x50
[  276.813081][T19287]  x64_sys_call+0x2889/0x3000
[  276.813144][T19287]  do_syscall_64+0xc0/0x2a0
[  276.813176][T19287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.813195][T19287] RIP: 0033:0x7f94f538b78e
[  276.813258][T19287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  276.813274][T19287] RSP: 002b:00007f94f3e26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  276.813292][T19287] RAX: ffffffffffffffda RBX: 00007f94f3e276c0 RCX: 00007f94f538b78e
[  276.813371][T19287] RDX: 000000000000000f RSI: 00007f94f3e270a0 RDI: 0000000000000005
[  276.813386][T19287] RBP: 00007f94f3e27090 R08: 0000000000000000 R09: 0000000000000000
[  276.813418][T19287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.813434][T19287] R13: 00007f94f5646038 R14: 00007f94f5645fa0 R15: 00007fffdb8e1038
[  276.813454][T19287]  </TASK>
[  276.889362][T19289] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4381'.
[  276.938649][T15571] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  276.942028][ T6045] Bluetooth: hci0: command 0x1003 tx timeout
[  277.118572][T19291] tipc: Started in network mode
[  277.123521][T19291] tipc: Node identity ac14140f, cluster identity 4711
[  277.130800][T19291] tipc: New replicast peer: 255.255.255.255
[  277.136999][T19291] tipc: Enabled bearer <udp:sy>, priority 10
[  277.159393][T19293] xt_addrtype: ipv6 does not support BROADCAST matching
[  277.190867][T19293] set_capacity_and_notify: 13 callbacks suppressed
[  277.190883][T19293] loop5: detected capacity change from 0 to 512
[  277.209083][T19293] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  277.219287][T19293] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  277.230241][T19293] EXT4-fs (loop5): group descriptors corrupted!
[  277.237713][T19293] xt_addrtype: ipv6 does not support BROADCAST matching
[  277.599921][T19317] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4395'.
[  277.668353][T19319] loop1: detected capacity change from 0 to 128
[  277.693773][T19303] loop9: detected capacity change from 0 to 1024
[  277.748576][T19307] loop0: detected capacity change from 0 to 1024
[  278.043845][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'.
[  278.091194][   T29] audit: type=1326 audit(268.150:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.114366][   T29] audit: type=1326 audit(268.150:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.137203][   T29] audit: type=1326 audit(268.150:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.160219][   T29] audit: type=1326 audit(268.150:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.164338][T19328] loop5: detected capacity change from 0 to 8192
[  278.183124][   T29] audit: type=1326 audit(268.150:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.183154][   T29] audit: type=1326 audit(268.150:8044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.183181][   T29] audit: type=1326 audit(268.150:8045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d081aaeb9 code=0x7ffc0000
[  278.328993][T11368] tipc: Node number set to 2886997007
[  278.508952][T19341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.517689][T19341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.527214][T19341] loop3: detected capacity change from 0 to 128
[  278.600090][T19345] loop1: detected capacity change from 0 to 512
[  278.665254][T19345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.743938][T17610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.013334][T19358] netlink: 'syz.0.4409': attribute type 27 has an invalid length.
[  279.123686][T19359] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.146066][T19359] 8021q: adding VLAN 0 to HW filter on device team0
[  279.176169][T19359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  279.253993][T19365] loop3: detected capacity change from 0 to 128
[  279.307014][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'.
[  279.505958][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4421'.
[  279.515768][T19387] loop9: detected capacity change from 0 to 1764
[  279.530849][T19387] ISOFS: unable to read i-node block
[  279.574450][T19387] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4420'.
[  279.612251][T19391] netlink: 'syz.0.4422': attribute type 39 has an invalid length.
[  279.640242][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  279.640260][   T29] audit: type=1400 audit(269.600:8065): avc:  denied  { ioctl } for  pid=19392 comm="syz.9.4423" path="socket:[61310]" dev="sockfs" ino=61310 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  279.670635][   T29] audit: type=1400 audit(269.600:8066): avc:  denied  { getattr } for  pid=19392 comm="syz.9.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  279.723032][T19397] loop9: detected capacity change from 0 to 8192
[  279.763715][ T3303]  loop9: p1 p2 p4
[  279.774453][ T3303] loop9: p1 start 2130708480 is beyond EOD, truncated
[  279.781267][ T3303] loop9: p2 size 8388608 extends beyond EOD, truncated
[  279.791650][ T3303] loop9: p4 size 262144 extends beyond EOD, truncated
[  279.801252][T19400] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  279.816337][T19397]  loop9: p1 p2 p4
[  279.820337][T19397] loop9: p1 start 2130708480 is beyond EOD, truncated
[  279.827155][T19397] loop9: p2 size 8388608 extends beyond EOD, truncated
[  279.834929][T19397] loop9: p4 size 262144 extends beyond EOD, truncated
[  279.847685][T19394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19394 comm=syz.9.4423
[  279.872480][T19394] netlink: 'syz.9.4423': attribute type 13 has an invalid length.
[  279.886005][   T29] audit: type=1400 audit(269.834:8067): avc:  denied  { validate_trans } for  pid=19392 comm="syz.9.4423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  279.917461][T19404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.930913][T19404] FAULT_INJECTION: forcing a failure.
[  279.930913][T19404] name failslab, interval 1, probability 0, space 0, times 0
[  279.943608][T19404] CPU: 0 UID: 0 PID: 19404 Comm: syz.3.4425 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  279.943641][T19404] Tainted: [W]=WARN
[  279.943649][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  279.943664][T19404] Call Trace:
[  279.943678][T19404]  <TASK>
[  279.943687][T19404]  __dump_stack+0x1d/0x30
[  279.943717][T19404]  dump_stack_lvl+0x95/0xd0
[  279.943798][T19404]  dump_stack+0x15/0x1b
[  279.943818][T19404]  should_fail_ex+0x263/0x280
[  279.943849][T19404]  should_failslab+0x8c/0xb0
[  279.943908][T19404]  __kmalloc_noprof+0xb8/0x580
[  279.943934][T19404]  ? ext4_find_extent+0x16b/0x7a0
[  279.944013][T19404]  ext4_find_extent+0x16b/0x7a0
[  279.944043][T19404]  ext4_ext_map_blocks+0x128/0x38a0
[  279.944073][T19404]  ? _prb_read_valid+0x8f5/0x950
[  279.944102][T19404]  ? refill_stock+0x40c/0x490
[  279.944206][T19404]  ? try_charge_memcg+0x8d5/0xa10
[  279.944227][T19404]  ? xas_load+0x413/0x430
[  279.944313][T19404]  ? xas_load+0x413/0x430
[  279.944406][T19404]  ext4_map_query_blocks+0xae/0x550
[  279.944444][T19404]  ? ext4_es_lookup_extent+0x3ac/0x540
[  279.944485][T19404]  ext4_map_blocks+0x398/0xd70
[  279.944560][T19404]  ext4_getblk+0x128/0x530
[  279.944628][T19404]  ext4_bread_batch+0x5c/0x320
[  279.944712][T19404]  __ext4_find_entry+0x852/0xdf0
[  279.944789][T19404]  ? kmem_cache_alloc_lru_noprof+0x2bb/0x490
[  279.944824][T19404]  ? __rcu_read_unlock+0x4e/0x70
[  279.944861][T19404]  ? d_alloc_parallel+0xc01/0xce0
[  279.944943][T19404]  ext4_lookup+0xcd/0x3a0
[  279.944967][T19404]  __lookup_slow+0x19d/0x260
[  279.945064][T19404]  lookup_slow+0x3c/0x60
[  279.945091][T19404]  path_lookupat+0x2f7/0x500
[  279.945119][T19404]  filename_lookup+0x190/0x390
[  279.945187][T19404]  path_listxattrat+0xd1/0x2b0
[  279.945297][T19404]  __x64_sys_llistxattr+0x4d/0x60
[  279.945324][T19404]  x64_sys_call+0xb12/0x3000
[  279.945348][T19404]  do_syscall_64+0xc0/0x2a0
[  279.945490][T19404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.945516][T19404] RIP: 0033:0x7f94f53caeb9
[  279.945534][T19404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.945551][T19404] RSP: 002b:00007f94f3e27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3
[  279.945569][T19404] RAX: ffffffffffffffda RBX: 00007f94f5645fa0 RCX: 00007f94f53caeb9
[  279.945650][T19404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  279.945665][T19404] RBP: 00007f94f3e27090 R08: 0000000000000000 R09: 0000000000000000
[  279.945682][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.945695][T19404] R13: 00007f94f5646038 R14: 00007f94f5645fa0 R15: 00007fffdb8e1038
[  279.945721][T19404]  </TASK>
[  279.950977][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  279.955706][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  280.247299][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  280.258388][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  280.506249][T19434] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  280.551815][T19429] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  280.563851][T19429] bond0: (slave lo): Error: Device type is different from other slaves
[  280.756149][T19455] Cannot find set identified by id 65535 to match
[  280.836797][   T29] audit: type=1400 audit(270.723:8068): avc:  denied  { read write } for  pid=19468 comm="syz.3.4447" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  280.861823][   T29] audit: type=1400 audit(270.723:8069): avc:  denied  { open } for  pid=19468 comm="syz.3.4447" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  280.933654][T19480] __nla_validate_parse: 4 callbacks suppressed
[  280.933671][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4450'.
[  280.952491][T19480] EXT4-fs: Ignoring removed i_version option
[  280.958731][T19480] EXT4-fs: Ignoring removed bh option
[  281.040962][T19484] EXT4-fs: Ignoring removed oldalloc option
[  281.168257][T19484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=19484 comm=syz.3.4451
[  281.234724][T19489] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  281.310064][   T29] audit: type=1326 audit(271.162:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.3.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  281.333449][   T29] audit: type=1326 audit(271.162:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.3.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  281.360573][   T29] audit: type=1326 audit(271.219:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.3.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  281.383742][   T29] audit: type=1326 audit(271.219:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19498 comm="syz.3.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94f538b78e code=0x7ffc0000
[  281.406787][   T29] audit: type=1326 audit(271.219:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19494 comm="syz.3.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f53caeb9 code=0x7ffc0000
[  281.448696][T19504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=19504 comm=syz.3.4457
[  281.468594][T19504] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #11: block 530: comm syz.3.4457: lblock 4 mapped to illegal pblock 530 (length 1)
[  281.483782][T19504] EXT4-fs (loop3): 1 orphan inode deleted
[  281.500746][T19507] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4458'.
[  281.502431][T19504] tipc: Enabled bearer <udp:s>, priority 10
[  281.509815][T19507] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4458'.
[  281.536120][T19507] syz_tun: entered promiscuous mode
[  281.549585][T19507] syz_tun: left promiscuous mode
[  281.559068][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4459'.
[  281.739028][T19529] xt_TCPMSS: Only works on TCP SYN packets
[  282.402144][T19546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4471'.
[  282.497432][T19549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  282.520454][T19549] EXT4-fs (loop3): 1 truncate cleaned up
[  282.645692][T19563] FAULT_INJECTION: forcing a failure.
[  282.645692][T19563] name failslab, interval 1, probability 0, space 0, times 0
[  282.658516][T19563] CPU: 0 UID: 0 PID: 19563 Comm: syz.3.4477 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  282.658638][T19563] Tainted: [W]=WARN
[  282.658648][T19563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  282.658665][T19563] Call Trace:
[  282.658674][T19563]  <TASK>
[  282.658684][T19563]  __dump_stack+0x1d/0x30
[  282.658733][T19563]  dump_stack_lvl+0x95/0xd0
[  282.658782][T19563]  dump_stack+0x15/0x1b
[  282.658842][T19563]  should_fail_ex+0x263/0x280
[  282.658893][T19563]  should_failslab+0x8c/0xb0
[  282.658923][T19563]  kmem_cache_alloc_noprof+0x68/0x490
[  282.658978][T19563]  ? getname_flags+0x7f/0x3b0
[  282.659071][T19563]  getname_flags+0x7f/0x3b0
[  282.659211][T19563]  __x64_sys_renameat2+0x6c/0x90
[  282.659328][T19563]  x64_sys_call+0x35f/0x3000
[  282.659361][T19563]  do_syscall_64+0xc0/0x2a0
[  282.659447][T19563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.659477][T19563] RIP: 0033:0x7f94f53caeb9
[  282.659494][T19563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.659512][T19563] RSP: 002b:00007f94f3e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  282.659552][T19563] RAX: ffffffffffffffda RBX: 00007f94f5645fa0 RCX: 00007f94f53caeb9
[  282.659571][T19563] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c
[  282.659591][T19563] RBP: 00007f94f3e27090 R08: 0000000000000004 R09: 0000000000000000
[  282.659608][T19563] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  282.659626][T19563] R13: 00007f94f5646038 R14: 00007f94f5645fa0 R15: 00007fffdb8e1038
[  282.659653][T19563]  </TASK>
[  282.856393][T19568] netlink: 'syz.5.4481': attribute type 6 has an invalid length.
[  283.086684][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.086836][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.088103][T19592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4489'.
[  283.104284][T19595] set_capacity_and_notify: 10 callbacks suppressed
[  283.104298][T19595] loop9: detected capacity change from 0 to 512
[  283.105648][T19589] loop5: detected capacity change from 0 to 512
[  283.106092][T19589] EXT4-fs: Ignoring removed nobh option
[  283.106734][T19595] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  283.106757][T19595] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  283.110028][T19592] loop1: detected capacity change from 0 to 1024
[  283.118371][T19589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  283.120318][T19592] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  283.120515][T19595] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.4490: Invalid inode table block 1 in block_group 0
[  283.123922][T19595] EXT4-fs (loop9): Remounting filesystem read-only
[  283.123946][T19595] EXT4-fs (loop9): get root inode failed
[  283.123957][T19595] EXT4-fs (loop9): mount failed
[  283.130576][T19592] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.4489: lblock 1 mapped to illegal pblock 1 (length 1)
[  283.130734][T19592] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4489: Failed to acquire dquot type 0
[  283.131350][T19589] EXT4-fs (loop5): 1 truncate cleaned up
[  283.131520][T19592] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.4489: Freeing blocks not in datazone - block = 0, count = 4096
[  283.131908][T19592] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4489: Invalid inode bitmap blk 0 in block_group 0
[  283.131992][T19592] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  283.132073][T19592] EXT4-fs (loop1): 1 orphan inode deleted
[  283.152384][T18522] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1)
[  283.192038][T18522] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:35: Failed to release dquot type 0
[  283.417456][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'.
[  283.515101][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4494'.
[  283.532746][T19611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4494'.
[  283.653239][T19621] syzkaller0: entered promiscuous mode
[  283.658785][T19621] syzkaller0: entered allmulticast mode
[  283.659184][T19619] loop0: detected capacity change from 0 to 512
[  283.707442][T19619] EXT4-fs: Ignoring removed i_version option
[  283.713504][T19619] EXT4-fs: Ignoring removed bh option
[  283.763193][T19629] loop9: detected capacity change from 0 to 128
[  283.855123][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  283.922377][T19644] netlink: 'syz.9.4506': attribute type 1 has an invalid length.
[  283.949951][T19644] 8021q: adding VLAN 0 to HW filter on device bond1
[  283.960080][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4506'.
[  284.058380][T19646] SELinux:  policydb magic number 0x160002 does not match expected magic number 0xf97cff8c
[  284.120258][T19646] SELinux: failed to load policy
[  284.204495][T19679] netlink: 'syz.5.4513': attribute type 1 has an invalid length.
[  284.339077][T19691] FAULT_INJECTION: forcing a failure.
[  284.339077][T19691] name failslab, interval 1, probability 0, space 0, times 0
[  284.339153][T19691] CPU: 0 UID: 0 PID: 19691 Comm: syz.1.4516 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  284.339196][T19691] Tainted: [W]=WARN
[  284.339227][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  284.339306][T19691] Call Trace:
[  284.339314][T19691]  <TASK>
[  284.339322][T19691]  __dump_stack+0x1d/0x30
[  284.339349][T19691]  dump_stack_lvl+0x95/0xd0
[  284.339430][T19691]  dump_stack+0x15/0x1b
[  284.339554][T19691]  should_fail_ex+0x263/0x280
[  284.339638][T19691]  should_failslab+0x8c/0xb0
[  284.339709][T19691]  kmem_cache_alloc_noprof+0x68/0x490
[  284.339773][T19691]  ? dst_alloc+0xbd/0x100
[  284.339946][T19691]  dst_alloc+0xbd/0x100
[  284.340093][T19691]  xfrm_lookup_with_ifid+0x8b9/0x1590
[  284.340235][T19691]  xfrm_lookup_route+0x3a/0x110
[  284.340331][T19691]  ip_route_output_flow+0xdb/0x110
[  284.340455][T19691]  udp_sendmsg+0x13c3/0x15d0
[  284.340525][T19691]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  284.340596][T19691]  ? avc_has_perm+0x101/0x190
[  284.340699][T19691]  ? __pfx_udp_sendmsg+0x10/0x10
[  284.340785][T19691]  inet_sendmsg+0xac/0xd0
[  284.340896][T19691]  ____sys_sendmsg+0x53a/0x600
[  284.340916][T19691]  ___sys_sendmsg+0x195/0x1e0
[  284.341029][T19691]  __sys_sendmmsg+0x185/0x320
[  284.341121][T19691]  __x64_sys_sendmmsg+0x57/0x70
[  284.341184][T19691]  x64_sys_call+0x1e28/0x3000
[  284.341307][T19691]  do_syscall_64+0xc0/0x2a0
[  284.341392][T19691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.341450][T19691] RIP: 0033:0x7f7d081aaeb9
[  284.341495][T19691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.341547][T19691] RSP: 002b:00007f7d06c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  284.341591][T19691] RAX: ffffffffffffffda RBX: 00007f7d08425fa0 RCX: 00007f7d081aaeb9
[  284.341628][T19691] RDX: 07fffffffffffd33 RSI: 0000200000004d00 RDI: 0000000000000006
[  284.341742][T19691] RBP: 00007f7d06c07090 R08: 0000000000000000 R09: 0000000000000000
[  284.341777][T19691] R10: 0000000020000890 R11: 0000000000000246 R12: 0000000000000002
[  284.341813][T19691] R13: 00007f7d08426038 R14: 00007f7d08425fa0 R15: 00007fff34e33768
[  284.341918][T19691]  </TASK>
[  284.432781][T19697] loop3: detected capacity change from 0 to 512
[  284.433143][T19697] EXT4-fs: Ignoring removed bh option
[  284.433178][T19697] EXT4-fs: Ignoring removed mblk_io_submit option
[  284.475337][T19697] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  284.475874][T19697] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  284.476087][T19697] EXT4-fs (loop3): orphan cleanup on readonly fs
[  284.489953][T19697] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4517: Failed to acquire dquot type 1
[  284.490232][T19697] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4517: Invalid block bitmap block 0 in block_group 0
[  284.490494][T19697] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4517: Invalid block bitmap block 0 in block_group 0
[  284.490648][T19697] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4517: Invalid block bitmap block 0 in block_group 0
[  284.490803][T19697] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4517: Failed to acquire dquot type 1
[  284.491060][T19697] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4517: Failed to acquire dquot type 1
[  284.491189][T19697] EXT4-fs (loop3): 1 orphan inode deleted
[  284.587230][T19697] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.4517: deleted inode referenced: 12
[  284.851467][T19709] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.4517: iget: bad i_size value: 360287970189639690
[  284.994302][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  284.994391][   T29] audit: type=1400 audit(274.614:8083): avc:  denied  { execstack } for  pid=19720 comm="syz.9.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  285.031671][T19717] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  285.045383][T19722] loop1: detected capacity change from 0 to 512
[  285.052753][T19722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  285.077380][T19717] SELinux: failed to load policy
[  285.107297][T19726] loop9: detected capacity change from 0 to 512
[  285.405204][T19742] loop1: detected capacity change from 0 to 512
[  285.411984][T19742] EXT4-fs: Ignoring removed bh option
[  285.417505][T19742] EXT4-fs: Ignoring removed mblk_io_submit option
[  285.444010][T19730] loop3: detected capacity change from 0 to 256
[  285.456824][T19742] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  285.468018][T19742] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  285.487276][T19742] EXT4-fs (loop1): orphan cleanup on readonly fs
[  285.497414][T19742] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4
[  285.498211][T19730] msdos: Bad value for 'uid'
[  285.507887][T19742] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  285.524939][T19730] msdos: Bad value for 'uid'
[  285.533528][   T29] audit: type=1326 audit(275.100:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.544351][T19742] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4534: Failed to acquire dquot type 1
[  285.556640][   T29] audit: type=1326 audit(275.100:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.590985][   T29] audit: type=1326 audit(275.100:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.614050][   T29] audit: type=1326 audit(275.100:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.637026][   T29] audit: type=1326 audit(275.100:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.660477][   T29] audit: type=1326 audit(275.100:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.683624][   T29] audit: type=1326 audit(275.100:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.5.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea4feaeb9 code=0x7ffc0000
[  285.689306][T19742] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4534: Invalid block bitmap block 0 in block_group 0
[  285.720631][T19742] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4534: Invalid block bitmap block 0 in block_group 0
[  285.738082][T19742] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4534: Invalid block bitmap block 0 in block_group 0
[  285.751918][T19742] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4534: Failed to acquire dquot type 1
[  285.776325][T19742] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4534: Failed to acquire dquot type 1
[  285.788035][T19742] EXT4-fs (loop1): 1 orphan inode deleted
[  285.804627][T19742] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.4534: deleted inode referenced: 12
[  286.019189][T19763] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2
[  286.381224][T19767] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  286.392285][T19767] SELinux: failed to load policy
[  286.762536][T19792] EXT4-fs: Ignoring removed nobh option
[  286.833753][T19797] EXT4-fs: Ignoring removed bh option
[  286.839255][T19797] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.846949][T19797] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  286.858745][T19797] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  286.868314][T19797] EXT4-fs (loop5): orphan cleanup on readonly fs
[  286.875724][T19797] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4551: Failed to acquire dquot type 1
[  286.887485][T19797] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4551: Invalid block bitmap block 0 in block_group 0
[  286.902135][T19797] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4551: Invalid block bitmap block 0 in block_group 0
[  286.916003][T19797] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4551: Invalid block bitmap block 0 in block_group 0
[  286.930028][T19797] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4551: Failed to acquire dquot type 1
[  286.942146][T19790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.951034][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.959315][T19797] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4551: Failed to acquire dquot type 1
[  286.973374][T19797] EXT4-fs (loop5): 1 orphan inode deleted
[  286.986906][T19797] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.4551: deleted inode referenced: 12
[  287.049908][T19802] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  287.059934][T19802] SELinux: failed to load policy
[  287.089832][T19804] __nla_validate_parse: 9 callbacks suppressed
[  287.089847][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4553'.
[  287.428572][T19824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  287.437092][T19824] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  287.447923][T19824] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0
[  287.468000][T19823] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  287.498227][T19823] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  287.506795][T19823] EXT4-fs (loop5): 1 truncate cleaned up
[  287.530853][T19829] Cannot find set identified by id 65535 to match
[  287.580759][T19823] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  287.747708][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4568'.
[  287.956937][T19850] netlink: 'syz.9.4571': attribute type 1 has an invalid length.
[  287.964939][T19850] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4571'.
[  288.097248][T19858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.105940][T19858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.179867][T19865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4575'.
[  288.199622][T19865] bond0: entered promiscuous mode
[  288.204720][T19865] bond_slave_0: entered promiscuous mode
[  288.210678][T19865] bond_slave_1: entered promiscuous mode
[  288.232234][T19865] bond0: left promiscuous mode
[  288.237047][T19865] bond_slave_0: left promiscuous mode
[  288.242552][T19865] bond_slave_1: left promiscuous mode
[  288.263312][T19863] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  288.285280][T19863] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.4575: corrupted in-inode xattr: e_value out of bounds
[  288.345592][T19863] EXT4-fs (loop0): Remounting filesystem read-only
[  288.421582][T19866] EXT4-fs error (device loop9): ext4_init_orphan_info:583: comm syz.9.4577: inode #0: comm syz.9.4577: iget: illegal inode #
[  288.451222][T19866] EXT4-fs (loop9): get orphan inode failed
[  288.468133][T19866] EXT4-fs (loop9): mount failed
[  288.745464][T19866] set_capacity_and_notify: 9 callbacks suppressed
[  288.745482][T19866] loop9: detected capacity change from 0 to 512
[  288.756090][T19860] loop5: detected capacity change from 0 to 1024
[  289.156452][T19886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=19886 comm=syz.9.4583
[  289.195955][T19886] loop9: detected capacity change from 0 to 512
[  289.223137][T19886] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #11: block 530: comm syz.9.4583: lblock 4 mapped to illegal pblock 530 (length 1)
[  289.282077][T19886] EXT4-fs (loop9): 1 orphan inode deleted
[  289.296109][T19886] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  289.350556][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4584'.
[  289.414503][T19892] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4584'.
[  289.433824][T19893] loop0: detected capacity change from 0 to 512
[  289.452091][T19893] journal_path: not usable as path
[  289.457405][T19893] EXT4-fs: error: could not find journal device path
[  289.472033][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4586'.
[  289.481170][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4586'.
[  289.494817][T19893] loop0: detected capacity change from 0 to 1024
[  289.626748][T18512] Bluetooth: hci0: Frame reassembly failed (-84)
[  289.676144][T19907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4590'.
[  290.062706][T19913] loop0: detected capacity change from 0 to 512
[  290.133775][T19913] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.4593: inode #0: comm syz.0.4593: iget: illegal inode #
[  290.165510][T19913] EXT4-fs (loop0): get orphan inode failed
[  290.183650][T19913] EXT4-fs (loop0): mount failed
[  290.391160][T19913] loop0: detected capacity change from 0 to 512
[  290.505683][T19922] ==================================================================
[  290.513823][T19922] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  290.521158][T19922] 
[  290.523504][T19922] write to 0xffff888104aae700 of 8 bytes by task 19919 on cpu 1:
[  290.531245][T19922]  mas_wmb_replace+0x20d/0x1610
[  290.536137][T19922]  mas_wr_store_entry+0x16b6/0x2e70
[  290.541369][T19922]  mas_store_prealloc+0x72e/0xa60
[  290.546433][T19922]  vma_complete+0x3f7/0x820
[  290.550980][T19922]  __split_vma+0x5e3/0x660
[  290.555418][T19922]  vma_modify+0xbcb/0xd30
[  290.560290][T19922]  vma_modify_flags+0x182/0x210
[  290.565166][T19922]  mprotect_fixup+0x30e/0x5e0
[  290.569866][T19922]  do_mprotect_pkey+0x67b/0x920
[  290.574750][T19922]  __x64_sys_mprotect+0x48/0x60
[  290.579623][T19922]  x64_sys_call+0x2c3b/0x3000
[  290.584337][T19922]  do_syscall_64+0xc0/0x2a0
[  290.588872][T19922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.594792][T19922] 
[  290.597136][T19922] read to 0xffff888104aae700 of 8 bytes by task 19922 on cpu 0:
[  290.604787][T19922]  mas_state_walk+0x485/0x650
[  290.609490][T19922]  mas_walk+0x60/0x150
[  290.613584][T19922]  lock_vma_under_rcu+0xc9/0x210
[  290.618574][T19922]  do_user_addr_fault+0x232/0x1050
[  290.623715][T19922]  exc_page_fault+0x62/0xa0
[  290.628248][T19922]  asm_exc_page_fault+0x26/0x30
[  290.633121][T19922] 
[  290.635458][T19922] value changed: 0xffff88810e0df301 -> 0xffff888104aae700
[  290.642583][T19922] 
[  290.644925][T19922] Reported by Kernel Concurrency Sanitizer on:
[  290.651093][T19922] CPU: 0 UID: 0 PID: 19922 Comm: syz.1.4596 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  290.662494][T19922] Tainted: [W]=WARN
[  290.666317][T19922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  290.676389][T19922] ==================================================================
[  291.808862][ T6045] Bluetooth: hci0: command 0x1003 tx timeout
[  291.808889][T15571] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  299.591711][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  300.275875][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!