last executing test programs:

16.698302492s ago: executing program 0 (id=712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003300)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x8094)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d1000000000fff50000050000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)

16.638251844s ago: executing program 0 (id=715):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r1, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x8f, 0x0, 0x7, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ffff, 0x0, @perf_bp={0x0, 0x1}, 0x10d92, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500007001800000010190780a010102ac1414aa0b009078032c000045000000000000000089000000000000ac1414aa862a00000002000d5e0002000002000000000000054eb8a600129606053d0006ff003a0000b61af93a9389137be0000001e00000026401010100000000000000"], 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r4=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x100)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000280)="1c0000001a009b8a3c90f4ae0009042400000000ff02000000000000", 0x1c)
recvmmsg$unix(r7, &(0x7f0000006440), 0x0, 0x10002, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x200488c0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x20000000}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94)

16.301583905s ago: executing program 0 (id=719):
socket$key(0xf, 0x3, 0x2)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x74a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)

13.254823585s ago: executing program 0 (id=729):
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x200, 0x20000)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x8}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8)
ptrace(0x10, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x60}, 0x1, 0x7}, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000180)={0xffffffffffff7bdc, 0x5, 0x101, 0x10, 0xb})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r5, 0x1, 0xffffffffffffffff, 0x80003})
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setresuid(0x0, 0x0, 0xee00)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r6, r6, 0x0)
write$nci(0xffffffffffffffff, 0x0, 0x4)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r7, 0x0, 0x810)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)

13.083665131s ago: executing program 0 (id=734):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_usbip_server_init(0x1)
write$usbip_server(r0, &(0x7f00000000c0)=ANY=[], 0x35)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x1, 0x4}, &(0x7f0000000180)=0x18)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]})
pivot_root(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12.675932984s ago: executing program 0 (id=744):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat(r0, 0x0, 0x42001, 0x2c)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc)
bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00005ec000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000400)="dcef93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4015e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c000000000000", 0x98})
ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000200)={&(0x7f0000000140)="c945b941eb6a3f6dedf11f15", 0xc})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xab, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x7fff, 0x4, 0x1, 0x40000008, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x48084)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f})
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

12.675190894s ago: executing program 32 (id=744):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat(r0, 0x0, 0x42001, 0x2c)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc)
bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00005ec000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000400)="dcef93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4015e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c000000000000", 0x98})
ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000200)={&(0x7f0000000140)="c945b941eb6a3f6dedf11f15", 0xc})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xab, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x7fff, 0x4, 0x1, 0x40000008, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x48084)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f})
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

4.88002366s ago: executing program 4 (id=824):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x15388, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x22}, 0xfffffffd}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r7 = dup(r3)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x7, 0x3644, 0xf62, 0x4, 0x8}, 0x14)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaa589f21420970449ab4f167d89b19b208aabb08004500452c00000000002f9078ac1e0001e00000010000655800189078"], 0xfdef)
ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x4})
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x9, 0xffffffff, 0xffff, 0x400e0a, 0x1, "203c5e0000ff765e006690ffdfff61fffffff2", 0x80000000, 0x1ff})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @empty, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94)

4.26692529s ago: executing program 4 (id=830):
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x80}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x9, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet6(0xa, 0x80001, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r4, 0x0, 0x0, 0x2101, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000280))
r6 = gettid()
sched_setaffinity(r6, 0x3b, &(0x7f00000002c0)=0x200000697a)
bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x3}, 0x10)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @vsock={0x28, 0x0, 0xffffffff}, @phonet={0x23, 0xf, 0xb, 0x5}, @xdp={0x2c, 0x1, 0x0, 0x1e}, 0x1000, 0x0, 0x0, 0x0, 0xa75, &(0x7f0000000180)='pimreg\x00', 0xa, 0xef9, 0x2})

3.401578979s ago: executing program 4 (id=844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
modify_ldt$write(0x1, 0x0, 0x0)
syz_ublk_setup_io_uring(0x811, &(0x7f0000000540)={0x0, 0x124d, 0x400, 0x3, 0x18e}, &(0x7f00000005c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4000, 0x2, 0x0, 0x0, 0x1fffc00000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
set_mempolicy(0x0, &(0x7f00000000c0)=0xefa, 0x8)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000440))
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x10, 0x13, r3, 0xdb738000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/route\x00')
lseek(r4, 0x2000, 0x0)
close(0x3)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setreuid(0x0, 0x0)
sendmsg$inet(r5, 0x0, 0x0)
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)

3.297539642s ago: executing program 3 (id=846):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200447ac, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x14, 0x0, 0x3, 0x1bf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1af, 0x8, 0x6b80, 0x0, "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"}]}, 0xdf8}, 0x1, 0x7}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYBLOB="1dd5a74150ecd46cdad0901c7d49d395de43691c024eaae5b01e1b637cff60572c2077452bdcf5cd6c944a9fe9eefc61005603ac3c50c7fa4834e3d9aa61d443447229295891f68400a06841a228f549ca5bbe7a51885e5f9b87f5aaa5d6dccb795b8d48c844de6b5fd62b9e14d32db8f0b85a0701fa70149d57c702898b7ba0ffddf749ab1f5c9e38e36ccb8f3dde3118435a98d106d7343c59b812078e460a52c744dc82c95c296b1c8ebcdd5b0e7be328e3b2937a7062a5d8f67b187d2b84db9870ec0fdb07ef4a930a0c22b20d0ba4dff75d45760a39466d34", @ANYRES16=r2], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xfc, &(0x7f0000000440)=""/252, 0x0, 0x7c}, 0x94)

2.787609218s ago: executing program 4 (id=861):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone3(&(0x7f0000000200)={0x23800000, &(0x7f0000000380), 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080)
syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000100)='./file1\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x25, 0x363, &(0x7f0000000580)="$eJzs3T1sG+UbAPDHvSRO8v+XZECqYDJsSKhqghhgSlQVqSIDFFl8LVg05SM2lWJhKQxxvIAqJhALEkxsHWDsjBgQYmNgpUioBbHQraIRh84+f8U2TQaHVvx+Q/Xoed/n3ufOp94lSt681oyti7Nx6datGzE/X4iZtbNrcbsQy3EikujYi7E+nBufBwDucbfTNP5IO+4+++PFbuTZDwD3r/bz/42T/UTxCMVX/j+NlgCAKTvk1//Pjc1enlpbAMAUjTz/H434sz984Nv8M72fCQAA7l8vvPzKs+sbERdKpfmI2geNcqMcT/fH1y/FW1GNzTgTS7Ef0XlR6LwtZP8+c37j3JlS5uZylLOKRjmi1myUO28K60m7vhgrsRTLeX3aq0+y+pV2fSki9prt9aNWaJRnYzFf/6fF2IzVWIoHR+ojzm+cWy3lByjXuvXNiFbMd08i6/90LMUPr8flqMbFyGr7/e+ulEpn042h+sbVYnseAAAAAAAAAAAAAAAAAAAAAABMw+lSz3Jv/5u01my8f+HghN54sb2/T2c43x+o1dkfKC12d+e5khzcH2h4f55GeSZO/KtnDgAAAAAAAAAAAAAAAAAAAPeO+s5cVKrVze36zntbg0FzIPPOd19+sxDdoZm89O2kXxV5cug43YkDR06it0TaK0+ToTl5kER0J+9Vrl7rdTw4p9g7i5HyLCiODBXynirV6slHfvlsXNVfWbDXziQxclmGg0K+/sBQ7YEsMR8R+5OqJgerd5lzPU3TSeW7n/Yy3bbqUYiYiaO1cfNQk7+98eZDT9RPPdnOfJ1v+vDY40svXv/ki9+2KtVodVqoVue26/vppE8n/yyyTNbr6FrJwP1TyK9zYcydMD5o9TOt7fpOJfnx95ce/uj7A5OT8fdPOph5d/JaXx3MzHWCQsRy9yL8U6uzY27+8cGrd4au2Ng5/+tnFoaGTn2+Vrm2+/Ovh70TBv6TsFEHAAAAAAAAAAAAAAAAAAAci/4v/R6l6qnnp9cRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy//t//HwhaI5nDBHeaMTpU3NyuT1x84VhPFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7C/AwAA//9XBGzc")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x48, 0x2}, 0x104588, 0x0, 0x3, 0x3, 0x2, 0xfffffc00, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
tgkill(0x0, 0x0, 0x21)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}, 0x1101, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f0000000100)=""/3, &(0x7f0000000140)=0x3)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
truncate(&(0x7f0000000000)='./bus\x00', 0x9471)

2.690221132s ago: executing program 1 (id=862):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
setuid(0xee00)
r1 = msgget$private(0x0, 0x3ac)
msgrcv(r1, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r1, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x84, 0x8}, 0x0, 0x0, 0x568d, 0xfffffffffffffff8, 0x0, 0x9, 0x1, 0xad, 0xfffc, 0x40, 0xffffffffffffffff})
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
listen(r0, 0x3ff)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000120a01fa0000000000000000020000070900020073797a30000000002c000000030a010100000000000000000100fff90900010073797a30000000000900030073797a30000000006c000000060a01040000000000000000010000000400074048000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000100001800b0001007470726f787900000900010073797a3000130000140000001100010000000000000000000700000a"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c1000003c00070101000000fbdbdf25037c000004008c80131001"], 0x102c}}, 0x2404c002)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000240)={0xbf, 0xff})
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x10000, 0x7, 0x8, 0x109, 0x3, 0x5], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8)

2.600037845s ago: executing program 5 (id=863):
pause()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x409, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008040)

2.43183915s ago: executing program 3 (id=864):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000080))
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r6, 0x25, 0x0, @void}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100c5dc2f"], 0xdd12}], 0x1}, 0x20040890)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc68}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6006}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x802}, 0x460c1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a0104000000000000000001000000589e66467e49290208000a40000073797a32000000000900010073797a3000000000085e094f96e993bcffef05f7fa2c0005400000001f080003400000000714000000020a010200000000000000000000000914000000100001000000000000"], 0xa0}}, 0x40000)

1.819941731s ago: executing program 1 (id=866):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x7}, 0x11efa, 0x0, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0})
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58b, 0x830d}, 0x0, 0x3, 0x0, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8463, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r5, 0x0, 0x440e0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x90, @tick, 0x0, {0x6, 0x9}, 0x8a, 0x1, 0x1})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf2505fff8"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
close_range(r0, r1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r8 = socket$igmp(0x2, 0x3, 0x2)
syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x400000)
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=r9, @ANYBLOB=',gid=', @ANYRESDEC=r9, @ANYRESOCT=0x0], 0x0, 0xaa5, &(0x7f0000000c40)="$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")
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.636875467s ago: executing program 5 (id=867):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x7ff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa29"], 0xfdef)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x2205, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]})
inotify_init()

1.614869327s ago: executing program 1 (id=868):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x400, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c840}, 0x4040412)
r2 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x27, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
connect$qrtr(r3, &(0x7f0000000140)={0x2a, 0x4, 0x7fff}, 0xc)
open_tree(r3, &(0x7f00000001c0)='./cgroup\x00', 0x8901)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x7101})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x7fffffff, 0x5}, 0x0, 0x4, 0xfffffffe, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2d, 0xd, 0x78cc, {0x6, @ether_spec={@local, @local}, {0x0, @random="a2816e2665f5", 0x5, 0x1, [0x9, 0x8]}, @udp_ip4_spec={@multicast1, @local, 0x4e24, 0x4e22, 0x97}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7f}, 0x3, 0x96, [0x9, 0x59235512]}, 0xfbbd, 0x8}}})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x1})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_clone(0x331e0080, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r7, 0x0)
prlimit64(r7, 0x7, &(0x7f0000000180)={0x80000001, 0xae8}, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket(0x10, 0x3, 0x0)

1.406975394s ago: executing program 3 (id=869):
r0 = getpid()
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x40006, 0x6, 0x87, 0xffffffff, 0x2}) (async)
r1 = syz_pidfd_open(r0, 0x0)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) (async)
setns(r1, 0x2000000) (async)
lchown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee01) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x1, 0x8c, 0xbdbc, 0x6, 0x9, 0x982d, 0x89c}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x240}}, 0x60840) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="62000000000000000210b100000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)

1.397735474s ago: executing program 5 (id=870):
syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r1, 0xfffffff6, &(0x7f0000000140)={&(0x7f0000000800)=""/145, 0x86, 0x0, &(0x7f0000000500)=""/221, 0xdd}}, 0xb)
close(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01042bbd9700fddbdf2508000000140001800500b51745c10000"], 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x84)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040800)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(0x0, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0xc001)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.284018128s ago: executing program 3 (id=871):
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x8094)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d1000000000fff50000050000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48)

1.267946048s ago: executing program 3 (id=873):
memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}})
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x80, 0xe8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x72, 0x0, 0x1, {0x7, 0x25, 0x1, 0x4, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x4, 0xf, {0x7, 0x25, 0x1, 0x8, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r4, 0x6000809)
sendfile(r3, r4, 0x0, 0x7ffff004)

1.199982081s ago: executing program 1 (id=874):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0xc2, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x88, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1, [@dstopts={0x2c, 0x9, '\x00', [@generic={0x0, 0x19, "d7897ecdf7133b3e03ab65762dcf02a95b38f5f35b434e6b81"}, @generic={0x0, 0xe, "eb4422a287b5b723e69524086158"}, @jumbo, @hao={0xc9, 0x10, @mcast1}, @jumbo]}]}}}}}}}, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x278, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x8001, 0x7, 0x2, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x1}, {0x1, 0x6, 0x3}, {0xffffffffffffffff, 0x3, 0x6}, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x8, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)

1.151687532s ago: executing program 5 (id=875):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x15388, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x22}, 0xfffffffd}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r7 = dup(r3)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x7, 0x3644, 0xf62, 0x4, 0x8}, 0x14)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaa589f21420970449ab4f167d89b19b208aabb08004500452c00000000002f9078ac1e0001e00000010000655800189078"], 0xfdef)
ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x4})
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x9, 0xffffffff, 0xffff, 0x400e0a, 0x1, "203c5e0000ff765e006690ffdfff61fffffff2", 0x80000000, 0x1ff})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @empty, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="380100001a00070026bd700000000000fe800000000000000030cb0000000017fc020000000000000000000000000001ffff00004e22fffd0000002032000000f30911b6dfec4202cedde7d5e7dbeb746705587a5d9933305094fd3c6914968df5ead7ec08bf862df523c74a4db01b4dd0cac9d47cbe6d4ac8dbd21cb2609d4bb6a05365edf7daebcba8", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="64010101000000000000000000000000000004d63c000000fc0000000000000000000000000000005a0000000000000003b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000090000000000000000002000000000000700000000000000010000000000000000000400000000008000000000000000ffffffff020002006100000000000000480002007874732d63616d656c6c69612d61736d00"/240], 0x138}}, 0x4008194)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94)

1.093267504s ago: executing program 1 (id=876):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
setuid(0xee00)
r1 = msgget$private(0x0, 0x3ac)
msgrcv(r1, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r1, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x84, 0x8}, 0x0, 0x0, 0x568d, 0xfffffffffffffff8, 0x0, 0x9, 0x1, 0xad, 0xfffc, 0x40, 0xffffffffffffffff})
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
listen(r0, 0x3ff)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000120a01fa0000000000000000020000070900020073797a30000000002c000000030a010100000000000000000100fff90900010073797a30000000000900030073797a30000000006c000000060a01040000000000000000010000000400074048000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000100001800b0001007470726f787900000900010073797a3000130000140000001100010000000000000000000700000a"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c1000003c00070101000000fbdbdf25037c000004008c80131001"], 0x102c}}, 0x2404c002)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x10000, 0x7, 0x8, 0x109, 0x3, 0x5], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8)

942.501589ms ago: executing program 5 (id=877):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000680)=""/95, 0x0, 0x5f, 0x1, 0xfffffff1}, 0x28)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00')
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
io_uring_setup(0x1c27, &(0x7f0000000040)={0x0, 0x4ad2, 0x1000, 0x3, 0x191})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x60}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
syz_emit_ethernet(0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB="83fc77e0cebd42d7724a92c4f409803bc8bddace2355b7852139bedb621b17e14aa6cb548a7d089675e97d949615462f4f76bafae61852fc3c2c681d2b775dfadc872d9ed02a1a79f8f2231b866429bb9fc654a48a9a3b3c98f4da396906a9db5bacd8d044bf54755cd29e476e10fe4b790bcf4a46fee4efa89ba7c696fe8abaa8b0364725c8961a520586e7a92c76819fe06244c260f975295c5d0c1d03f0944061dd6dbe3e5eeae8ded50e92e17142e09280", @ANYRESOCT, @ANYRES8=r0, @ANYRES16=r4], 0x68}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

887.728901ms ago: executing program 4 (id=878):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f000000a9c0)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)
r2 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x378, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)

843.234473ms ago: executing program 4 (id=879):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000080))
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r6, 0x25, 0x0, @void}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100c5dc2f"], 0xdd12}], 0x1}, 0x20040890)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc68}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6006}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x802}, 0x460c1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a0104000000000000000001000000589e66467e49290208000a40000073797a32000000000900010073797a3000000000085e094f96e993bcffef05f7fa2c0005400000001f080003400000000714000000020a010200000000000000000000000914000000100001000000000000"], 0xa0}}, 0x40000)

819.457723ms ago: executing program 5 (id=880):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0xb}})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x3c}}, 0x0)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x3, 0x2a, &(0x7f0000000200)="9390c9e4bf49b1c5b0e85c28d6debfbd2c43a4b965b30f660ba541cf2263cc91777ebe57270034b43097", 0x1, 0x1}]})
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000280)=ANY=[])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000800)={<r8=>0x0, 0x9, 0xbf4dde9fbe6499ce, [0x4, 0x0, 0x9, 0x8, 0x7], [0x846, 0x86, 0xeab5, 0x24f, 0x700000000000000, 0xf, 0x40, 0x2, 0xa774, 0x5, 0x3, 0x64b, 0x8, 0x40, 0x1, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x80000001, 0x1307c000, 0x1a, 0x4, 0x10d1, 0x4, 0x3, 0x5, 0x8, 0x8, 0x4, 0x8, 0x7, 0xf, 0x8, 0x5, 0x7, 0x7fffffffffffffff, 0x200, 0x6439, 0x0, 0x3, 0x80000000, 0xfffffffffffffffe, 0x100, 0xffffffff, 0x3, 0x80, 0x96f, 0x1f, 0xb, 0x2, 0x8, 0x0, 0x0, 0xe83, 0x4, 0x8, 0x8fb5, 0x6, 0x46, 0x8, 0x8, 0x0, 0x5, 0x8, 0x800, 0x8, 0x9, 0xa, 0x7, 0x8, 0x5, 0x4, 0x50c, 0x9, 0x8000000000000001, 0x10, 0x8, 0xaa, 0x81, 0xe, 0x6, 0x40, 0x8, 0x6, 0x5, 0x6, 0xffffffffffffff80, 0x6, 0x1, 0x9, 0x6, 0x7, 0x0, 0x6, 0x70000, 0x8, 0x10001, 0x1, 0x9, 0x80f, 0x5c, 0x1, 0x6, 0x3, 0x55, 0x0, 0x800, 0xd, 0xfffffffffffffffd, 0x1, 0xcef, 0x8000000000000001, 0x1, 0x4, 0x200, 0x8, 0x43fa2e8a, 0x7fffffffffffffff, 0x101, 0x9, 0xe]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000c40)={{r3}, r7, 0xa, @unused=[0x8, 0x3, 0xd], @devid=r8})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000300)={<r9=>0x0, "b852f72b961e8a69381120ddacae35e7"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001300)={{r0}, r7, 0x8, @inherit={0x90, &(0x7f0000000240)={0x0, 0x9, 0x99a, 0xfffffffffffffffc, {0x17, 0x2, 0x1, 0xb, 0x7}, [0x1, 0x4, 0x3, 0xffffffff, 0x2d535d42, 0x10001, 0x70, 0x1, 0x1d]}}, @devid=r9})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r11, 0x0)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r12, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)

589.674131ms ago: executing program 3 (id=886):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r1, r4, 0x0)

323.590809ms ago: executing program 2 (id=891):
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
timerfd_create(0x0, 0x80000)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
fsmount(0xffffffffffffffff, 0x1, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r5 = dup(r4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)

195.744354ms ago: executing program 1 (id=892):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
modify_ldt$write(0x1, &(0x7f00000000c0), 0x10)
syz_ublk_setup_io_uring(0x811, 0x0, &(0x7f00000005c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4000, 0x2, 0x0, 0x0, 0x1fffc00000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
set_mempolicy(0x0, &(0x7f00000000c0)=0xefa, 0x8)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000440))
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x10, 0x13, r3, 0xdb738000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/route\x00')
lseek(r4, 0x2000, 0x0)
close(0x3)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setreuid(0x0, 0x0)
sendmsg$inet(r5, 0x0, 0x0)
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)

181.851444ms ago: executing program 2 (id=893):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_settime(0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b400000000000000791090000000000067000000000000009500000000000000ee029c83b03bde0a8316e5a8f1c7b96a6e7a4f6b9beab5e53912d306"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x16, @multicast2, 0x4e24, 0x800002, 'nq\x00', 0x0, 0x4000003, 0x18}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0xfffd, 0x0, 0xa, 0x9, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
statx(r1, 0x0, 0x1000, 0x7ff, &(0x7f0000000540))
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000028000000000000000000000008"], 0x48}, 0x0)
syz_emit_ethernet(0x68, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)

83.791427ms ago: executing program 2 (id=894):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x28004010)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000050)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r3 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000008, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, &(0x7f0000000040))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xb7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="000500000001000000009d", 0xb}], 0x1}, 0x24000008)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0)

31.461179ms ago: executing program 2 (id=895):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsmount(r0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000300)=0x8)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x26)
getdents64(r2, &(0x7f0000000f80)=""/4087, 0xff7)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)

13.31694ms ago: executing program 2 (id=896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003300)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x8094)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48)

0s ago: executing program 2 (id=897):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x7896fd5091e3c800)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r1, &(0x7f0000000040)='.\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu!=-||!')
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
quotactl_fd$Q_GETINFO(r3, 0xffffffff80000502, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd704547e1ffff04000000080009"], 0x24}}, 0x20)

kernel console output (not intermixed with test programs):

 batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.367295][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.395564][ T4321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   64.455560][ T4333] netlink: 'syz.2.266': attribute type 1 has an invalid length.
[   64.486456][ T4333] bond1: entered promiscuous mode
[   64.491866][ T4333] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.503277][ T4333] __nla_validate_parse: 13 callbacks suppressed
[   64.503295][ T4333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'.
[   64.525894][ T4333] bond1: (slave bridge1): making interface the new active one
[   64.533515][ T4333] bridge1: entered promiscuous mode
[   64.540612][ T4333] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   64.552765][ T4337] loop4: detected capacity change from 0 to 512
[   64.573786][ T4337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.603989][ T4337] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.642266][ T4337] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks
[   64.652476][ T4337] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   64.697138][ T4344] loop0: detected capacity change from 0 to 136
[   64.725827][ T4344] sctp: [Deprecated]: syz.0.270 (pid 4344) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.725827][ T4344] Use struct sctp_sack_info instead
[   64.755353][ T4344] sctp: [Deprecated]: syz.0.270 (pid 4344) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.755353][ T4344] Use struct sctp_sack_info instead
[   64.982716][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   64.998653][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   65.020164][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   65.039502][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   65.231344][ T4358] loop3: detected capacity change from 0 to 512
[   65.240438][ T4358] EXT4-fs (loop3): 1 truncate cleaned up
[   65.246808][ T4360] tipc: Failed to remove unknown binding: 66,0,0/0:3921400315/3921400316
[   65.256199][ T4358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.312020][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.366523][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.574772][ T4366] ext4: Unknown parameter 'euid<00000000000000000000'
[   65.608711][ T4366] netlink: 'syz.3.277': attribute type 12 has an invalid length.
[   65.623182][ T4366] netlink: 'syz.3.277': attribute type 29 has an invalid length.
[   65.632458][ T4366] netlink: 148 bytes leftover after parsing attributes in process `syz.3.277'.
[   65.632609][ T4366] netlink: 59 bytes leftover after parsing attributes in process `syz.3.277'.
[   65.679513][ T4373] FAULT_INJECTION: forcing a failure.
[   65.679513][ T4373] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   65.691251][ T4344] syz.0.270 (4344) used greatest stack depth: 8616 bytes left
[   65.708484][ T4373] CPU: 1 UID: 0 PID: 4373 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(lazy) 
[   65.708578][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   65.708592][ T4373] Call Trace:
[   65.708598][ T4373]  <TASK>
[   65.708606][ T4373]  __dump_stack+0x1d/0x30
[   65.708668][ T4373]  dump_stack_lvl+0x95/0xd0
[   65.708687][ T4373]  dump_stack+0x15/0x1b
[   65.708706][ T4373]  should_fail_ex+0x263/0x280
[   65.708729][ T4373]  should_fail_alloc_page+0xf2/0x100
[   65.708823][ T4373]  __alloc_frozen_pages_noprof+0x108/0x350
[   65.708848][ T4373]  alloc_pages_mpol+0xb3/0x260
[   65.708873][ T4373]  alloc_pages_noprof+0x8f/0x140
[   65.708903][ T4373]  get_free_pages_noprof+0xc/0x40
[   65.708977][ T4373]  vcs_read+0x43/0xa10
[   65.709000][ T4373]  ? kstrtouint_from_user+0xa8/0xf0
[   65.709095][ T4373]  ? avc_policy_seqno+0x15/0x30
[   65.709123][ T4373]  ? selinux_file_permission+0x1e1/0x320
[   65.709196][ T4373]  ? __pfx_vcs_read+0x10/0x10
[   65.709237][ T4373]  vfs_read+0x1ab/0x7f0
[   65.709262][ T4373]  ? __rcu_read_unlock+0x4e/0x70
[   65.709283][ T4373]  ? __fget_files+0x184/0x1c0
[   65.709307][ T4373]  ksys_read+0xdc/0x1a0
[   65.709386][ T4373]  __x64_sys_read+0x40/0x50
[   65.709418][ T4373]  x64_sys_call+0x2886/0x3020
[   65.709447][ T4373]  do_syscall_64+0x12c/0x3b0
[   65.709481][ T4373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.709511][ T4373] RIP: 0033:0x7fbd84a2ce59
[   65.709529][ T4373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.709578][ T4373] RSP: 002b:00007fbd83487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.709602][ T4373] RAX: ffffffffffffffda RBX: 00007fbd84ca5fa0 RCX: 00007fbd84a2ce59
[   65.709617][ T4373] RDX: 0000000000001000 RSI: 0000200000001380 RDI: 0000000000000003
[   65.709633][ T4373] RBP: 00007fbd83487090 R08: 0000000000000000 R09: 0000000000000000
[   65.709648][ T4373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.709663][ T4373] R13: 00007fbd84ca6038 R14: 00007fbd84ca5fa0 R15: 00007ffecc3d37b8
[   65.709683][ T4373]  </TASK>
[   66.044981][ T4378] EXT4-fs (loop1): 1 truncate cleaned up
[   66.057502][ T4378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.278871][ T4384] sctp: [Deprecated]: syz.0.283 (pid 4384) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.278871][ T4384] Use struct sctp_sack_info instead
[   66.401432][ T4378] Set syz1 is full, maxelem 6117 reached
[   66.681969][ T4392] EXT4-fs (loop4): 1 truncate cleaned up
[   66.688150][ T4392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.715839][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.726990][ T4397] EXT4-fs (loop0): 1 truncate cleaned up
[   66.733728][ T4397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.775100][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.827067][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.053637][   T28] kauditd_printk_skb: 28 callbacks suppressed
[   67.053660][   T28] audit: type=1400 audit(1781257661.334:348): avc:  denied  { write } for  pid=4409 comm="syz.2.291" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   67.256320][ T4411] bridge_slave_0: left allmulticast mode
[   67.262769][ T4411] bridge_slave_0: left promiscuous mode
[   67.269973][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.324119][ T4411] bridge_slave_1: left allmulticast mode
[   67.330349][ T4411] bridge_slave_1: left promiscuous mode
[   67.337800][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.372780][ T4411] bond0: (slave bond_slave_0): Releasing backup interface
[   67.418439][ T4411] bond0: (slave bond_slave_1): Releasing backup interface
[   67.491920][   T28] audit: type=1400 audit(1781257661.774:349): avc:  denied  { append } for  pid=4409 comm="syz.2.291" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   67.504582][ T4411] team0: Port device team_slave_0 removed
[   67.517900][ T4413] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.291' sets config #-1
[   67.559307][ T4411] team0: Port device team_slave_1 removed
[   67.582377][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.589987][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.606761][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.615508][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.649638][ T4411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   67.783895][ T4428] FAULT_INJECTION: forcing a failure.
[   67.783895][ T4428] name failslab, interval 1, probability 0, space 0, times 0
[   67.809398][ T4428] CPU: 1 UID: 0 PID: 4428 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(lazy) 
[   67.809430][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   67.809489][ T4428] Call Trace:
[   67.809497][ T4428]  <TASK>
[   67.809504][ T4428]  __dump_stack+0x1d/0x30
[   67.809532][ T4428]  dump_stack_lvl+0x95/0xd0
[   67.809556][ T4428]  dump_stack+0x15/0x1b
[   67.809626][ T4428]  should_fail_ex+0x263/0x280
[   67.809646][ T4428]  should_failslab+0x8c/0xb0
[   67.809676][ T4428]  kmem_cache_alloc_node_noprof+0x6d/0x450
[   67.809708][ T4428]  ? __alloc_skb+0x2d6/0x690
[   67.809786][ T4428]  __alloc_skb+0x2d6/0x690
[   67.809806][ T4428]  ? __alloc_skb+0x200/0x690
[   67.809830][ T4428]  netlink_alloc_large_skb+0xbf/0xf0
[   67.809932][ T4428]  netlink_sendmsg+0x40c/0x6f0
[   67.809990][ T4428]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.810026][ T4428]  ____sys_sendmsg+0x563/0x5b0
[   67.810105][ T4428]  ___sys_sendmsg+0x195/0x1e0
[   67.810143][ T4428]  __x64_sys_sendmsg+0xd4/0x160
[   67.810172][ T4428]  x64_sys_call+0x194c/0x3020
[   67.810237][ T4428]  do_syscall_64+0x12c/0x3b0
[   67.810267][ T4428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.810292][ T4428] RIP: 0033:0x7fbd84a2ce59
[   67.810309][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.810326][ T4428] RSP: 002b:00007fbd83487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.810374][ T4428] RAX: ffffffffffffffda RBX: 00007fbd84ca5fa0 RCX: 00007fbd84a2ce59
[   67.810390][ T4428] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000004
[   67.810405][ T4428] RBP: 00007fbd83487090 R08: 0000000000000000 R09: 0000000000000000
[   67.810486][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.810498][ T4428] R13: 00007fbd84ca6038 R14: 00007fbd84ca5fa0 R15: 00007ffecc3d37b8
[   67.810515][ T4428]  </TASK>
[   68.037509][ T4435] set_capacity_and_notify: 5 callbacks suppressed
[   68.037527][ T4435] loop1: detected capacity change from 0 to 512
[   68.049902][   T28] audit: type=1400 audit(1781257662.324:350): avc:  denied  { write } for  pid=4431 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   68.085784][   T28] audit: type=1400 audit(1781257662.354:351): avc:  denied  { getopt } for  pid=4431 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   68.108913][ T4435] EXT4-fs (loop1): 1 truncate cleaned up
[   68.127312][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.160469][   T28] audit: type=1400 audit(1781257662.414:352): avc:  denied  { name_bind } for  pid=4429 comm="syz.0.298" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   68.275503][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.344968][   T28] audit: type=1400 audit(1781257662.614:353): avc:  denied  { allowed } for  pid=4458 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   68.364517][ T4460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'.
[   68.487124][ T4460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'.
[   68.580636][   T28] audit: type=1400 audit(1781257662.854:354): avc:  denied  { create } for  pid=4458 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   69.540631][   T28] audit: type=1400 audit(1781257663.814:355): avc:  denied  { append } for  pid=4483 comm="syz.3.316" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   69.563928][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   69.776089][ T4491] loop3: detected capacity change from 0 to 512
[   70.313321][ T4511] netlink: 48 bytes leftover after parsing attributes in process `syz.4.322'.
[   70.365281][ T4513] loop0: detected capacity change from 0 to 164
[   70.499441][ T4504] loop1: detected capacity change from 0 to 8192
[   70.567499][ T4521] netlink: 316 bytes leftover after parsing attributes in process `syz.0.324'.
[   70.578354][ T4504]  loop1: p1 < > p2 p4 < p5 >
[   70.600266][ T4504] loop1: partition table partially beyond EOD, truncated
[   70.610284][ T4521] netlink: 316 bytes leftover after parsing attributes in process `syz.0.324'.
[   70.624303][ T4504] loop1: p1 start 134217728 is beyond EOD, truncated
[   70.638993][ T4504] loop1: p2 size 591360 extends beyond EOD, truncated
[   70.662397][ T4504] loop1: p5 size 591360 extends beyond EOD, truncated
[   70.707678][   T28] audit: type=1326 audit(1781257664.984:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.0.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a6e2ce59 code=0x7fc00000
[   70.741908][ T3305] rock: directory entry would overflow storage
[   70.759151][ T3305] rock: sig=0x4f50, size=4, remaining=3
[   70.795138][ T3305] iso9660: Corrupted directory entry in block 5 of inode 1792
[   70.813301][   T28] audit: type=1400 audit(1781257665.084:357): avc:  denied  { write } for  pid=4535 comm="syz.1.328" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.851002][ T3305] iso9660: Corrupted directory entry in block 5 of inode 1792
[   71.383678][ T4550] loop4: detected capacity change from 0 to 8192
[   71.443798][ T4550]  loop4: p1 < > p2 p4 < p5 >
[   71.449988][ T4550] loop4: partition table partially beyond EOD, truncated
[   71.467605][ T4550] loop4: p1 start 134217728 is beyond EOD, truncated
[   71.485570][ T4550] loop4: p2 size 591360 extends beyond EOD, truncated
[   71.510268][ T4550] loop4: p5 size 591360 extends beyond EOD, truncated
[   71.596619][ T4561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.337'.
[   71.734439][ T4576] loop0: detected capacity change from 0 to 512
[   71.781885][ T4576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.819469][ T4569] loop4: detected capacity change from 0 to 512
[   71.846191][ T4569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.859109][ T4569] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.875277][ T4576] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.900286][ T4581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'.
[   71.913883][ T4576] EXT4-fs (loop0): resizing filesystem from 128 to 2 blocks
[   71.929902][ T4576] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   71.963769][ T4588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'.
[   71.998417][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.287584][ T4602] syzkaller1: entered promiscuous mode
[   72.293210][ T4602] syzkaller1: entered allmulticast mode
[   72.936844][ T4607] loop2: detected capacity change from 0 to 512
[   72.995830][ T4607] ext4: Unknown parameter 'noacl'
[   73.129660][ T4607] xt_hashlimit: max too large, truncated to 1048576
[   73.253650][ T4611] loop3: detected capacity change from 0 to 1764
[   73.260972][ T4611] iso9660: Unknown parameter 'euid'
[   73.501629][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   73.501715][   T28] audit: type=1400 audit(1781257667.594:361): avc:  denied  { firmware_load } for  pid=4608 comm="syz.3.354" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   73.659113][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.716600][ T4618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'.
[   73.942213][ T4623] loop4: detected capacity change from 0 to 512
[   74.019820][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.032527][ T4623] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.092940][   T28] audit: type=1400 audit(1781257668.374:362): avc:  denied  { read } for  pid=4638 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   74.093748][ T4642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'.
[   74.122469][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.198611][ T4652] loop2: detected capacity change from 0 to 128
[   74.216150][ T4652] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.239314][ T4652] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   74.266164][ T4660] loop4: detected capacity change from 0 to 128
[   74.289871][   T28] audit: type=1400 audit(1781257668.564:363): avc:  denied  { remount } for  pid=4659 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   74.375177][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.386699][ T4672] loop1: detected capacity change from 0 to 256
[   74.425159][ T4665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'.
[   74.451388][   T28] audit: type=1400 audit(1781257668.734:364): avc:  denied  { watch watch_reads } for  pid=4675 comm="syz.1.381" path="/77/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   74.478007][ T4676] process 'syz.1.381' launched './file0' with NULL argv: empty string added
[   74.500015][   T28] audit: type=1400 audit(1781257668.754:365): avc:  denied  { execute } for  pid=4675 comm="syz.1.381" name="file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   74.540935][ T4676] loop1: detected capacity change from 0 to 512
[   74.555047][ T4676] EXT4-fs: Ignoring removed i_version option
[   74.569878][   T28] audit: type=1400 audit(1781257668.774:366): avc:  denied  { write } for  pid=4677 comm="syz.0.382" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   74.601776][   T28] audit: type=1400 audit(1781257668.774:367): avc:  denied  { open } for  pid=4677 comm="syz.0.382" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   74.647339][   T28] audit: type=1400 audit(1781257668.814:368): avc:  denied  { execute_no_trans } for  pid=4675 comm="syz.1.381" path="/77/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   74.655895][ T4676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.683203][ T4676] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.699564][   T28] audit: type=1400 audit(1781257668.874:369): avc:  denied  { getopt } for  pid=4686 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.719202][   T28] audit: type=1400 audit(1781257668.874:370): avc:  denied  { ioctl } for  pid=4685 comm="syz.2.383" path="socket:[9491]" dev="sockfs" ino=9491 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   74.757403][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.807375][ T4704] loop0: detected capacity change from 0 to 256
[   74.838419][ T4704] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   74.845004][ T4704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   74.896885][ T4704] vhci_hcd vhci_hcd.0: Device attached
[   74.914484][ T4708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.394'.
[   74.932966][ T4716] vhci_hcd vhci_hcd.0: port 0 already used
[   74.995842][ T4704] loop0: detected capacity change from 0 to 512
[   75.003560][ T4704] EXT4-fs: Ignoring removed nobh option
[   75.018328][ T4704] EXT4-fs (loop0): orphan cleanup on readonly fs
[   75.039126][ T4704] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.393: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   75.055464][ T4704] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   75.057380][ T4704] EXT4-fs (loop0): Remounting filesystem read-only
[   75.066637][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   75.066664][    C0] EXT4-fs (loop0): initial error at time 1781257669: ext4_xattr_inode_update_ref:1037: inode 11
[   75.066720][    C0] EXT4-fs (loop0): last error at time 1781257669: ext4_xattr_inode_update_ref:1037: inode 11
[   75.102669][ T4704] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.393: ea_inode dec ref err=-117
[   75.115605][ T4704] EXT4-fs (loop0): 1 orphan inode deleted
[   75.122568][ T4704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   75.149218][ T4734] netlink: 'syz.1.403': attribute type 29 has an invalid length.
[   75.171097][   T35] usb 2-1: SetAddress Request (2) to port 0
[   75.177043][   T35] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd
[   75.190853][ T4734] batadv1: entered promiscuous mode
[   75.196392][ T4734] batadv1: entered allmulticast mode
[   75.207891][ T4737] netlink: 'syz.4.404': attribute type 1 has an invalid length.
[   75.242873][ T4735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.399'.
[   75.262617][ T4738] netlink: 'syz.1.403': attribute type 29 has an invalid length.
[   75.275627][ T4737] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.290815][ T4742] bond1: (slave gretap1): making interface the new active one
[   75.299868][ T4742] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   75.637497][ T4754] loop2: detected capacity change from 0 to 512
[   75.655328][ T4709] vhci_hcd: connection reset by peer
[   75.661145][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.672117][   T12] vhci_hcd vhci_hcd.0: stop threads
[   75.679961][   T12] vhci_hcd vhci_hcd.0: release socket
[   75.692279][   T12] vhci_hcd vhci_hcd.0: disconnect device
[   75.812853][ T4763] loop0: detected capacity change from 0 to 512
[   75.851901][ T4763] EXT4-fs (loop0): 1 truncate cleaned up
[   75.867789][ T4763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.957399][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.997457][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'.
[   76.009357][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'.
[   76.096170][ T4778] xt_hashlimit: size too large, truncated to 1048576
[   76.313873][ T4790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.330059][ T4790] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.368395][ T4790] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks
[   76.407136][ T4790] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   76.482689][ T4801] EXT4-fs (loop4): 1 truncate cleaned up
[   76.500237][ T4801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.560172][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.586074][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'.
[   76.691911][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'.
[   76.865430][ T4827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.988161][ T4837] FAULT_INJECTION: forcing a failure.
[   76.988161][ T4837] name failslab, interval 1, probability 0, space 0, times 0
[   77.018690][ T4830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.027413][ T4837] CPU: 0 UID: 0 PID: 4837 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(lazy) 
[   77.027443][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   77.027484][ T4837] Call Trace:
[   77.027492][ T4837]  <TASK>
[   77.027501][ T4837]  __dump_stack+0x1d/0x30
[   77.027576][ T4837]  dump_stack_lvl+0x95/0xd0
[   77.027598][ T4837]  dump_stack+0x15/0x1b
[   77.027658][ T4837]  should_fail_ex+0x263/0x280
[   77.027681][ T4837]  should_failslab+0x8c/0xb0
[   77.027714][ T4837]  kmem_cache_alloc_noprof+0x66/0x3f0
[   77.027813][ T4837]  ? ext4_init_io_end+0x31/0xb0
[   77.027844][ T4837]  ext4_init_io_end+0x31/0xb0
[   77.027926][ T4837]  ext4_do_writepages+0x6d9/0x2770
[   77.027966][ T4837]  ? xa_load+0xb1/0xe0
[   77.028041][ T4837]  ? memcg_list_lru_alloc+0xd0/0x4f0
[   77.028066][ T4837]  ? __account_obj_stock+0x3ba/0x5f0
[   77.028094][ T4837]  ? xas_load+0x413/0x430
[   77.028203][ T4837]  ? __rcu_read_unlock+0x4e/0x70
[   77.028226][ T4837]  ? xa_load+0xb1/0xe0
[   77.028295][ T4837]  ? memcg_list_lru_alloc+0xd0/0x4f0
[   77.028319][ T4837]  ? set_normalized_timespec64+0xe0/0x110
[   77.028343][ T4837]  ? __account_obj_stock+0x3ba/0x5f0
[   77.028428][ T4837]  ? __account_obj_stock+0x3ba/0x5f0
[   77.028454][ T4837]  ext4_writepages+0x18f/0x320
[   77.028482][ T4837]  ? __pfx_ext4_writepages+0x10/0x10
[   77.028507][ T4837]  do_writepages+0x1c6/0x310
[   77.028534][ T4837]  ? inode_to_bdi+0x47/0xa0
[   77.028570][ T4837]  ? _raw_spin_unlock+0x9/0x30
[   77.028592][ T4837]  ? wbc_attach_and_unlock_inode+0x91/0x2b0
[   77.028622][ T4837]  file_write_and_wait_range+0x178/0x2f0
[   77.028698][ T4837]  mmb_fsync_noflush+0x48/0x140
[   77.028722][ T4837]  ext4_sync_file+0x1f1/0x6b0
[   77.028756][ T4837]  ? __pfx_ext4_sync_file+0x10/0x10
[   77.028796][ T4837]  __x64_sys_fdatasync+0x83/0xe0
[   77.028821][ T4837]  x64_sys_call+0x2d1f/0x3020
[   77.028872][ T4837]  do_syscall_64+0x12c/0x3b0
[   77.028927][ T4837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.028951][ T4837] RIP: 0033:0x7f8bba83ce59
[   77.028968][ T4837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.029024][ T4837] RSP: 002b:00007f8bb9276028 EFLAGS: 00000246 ORIG_RAX: 000000000000004b
[   77.029046][ T4837] RAX: ffffffffffffffda RBX: 00007f8bbaab6090 RCX: 00007f8bba83ce59
[   77.029062][ T4837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   77.029075][ T4837] RBP: 00007f8bb9276090 R08: 0000000000000000 R09: 0000000000000000
[   77.029089][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.029103][ T4837] R13: 00007f8bbaab6128 R14: 00007f8bbaab6090 R15: 00007ffd937699a8
[   77.029168][ T4837]  </TASK>
[   77.029975][ T4839] EXT4-fs (loop0): 1 truncate cleaned up
[   77.031510][ T4830] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.051295][ T4839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.178580][ T4843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'.
[   77.332881][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.349325][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.388029][ T4848] FAULT_INJECTION: forcing a failure.
[   77.388029][ T4848] name failslab, interval 1, probability 0, space 0, times 0
[   77.419414][ T4848] CPU: 0 UID: 0 PID: 4848 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(lazy) 
[   77.419486][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   77.419501][ T4848] Call Trace:
[   77.419509][ T4848]  <TASK>
[   77.419517][ T4848]  __dump_stack+0x1d/0x30
[   77.419540][ T4848]  dump_stack_lvl+0x95/0xd0
[   77.419559][ T4848]  dump_stack+0x15/0x1b
[   77.419585][ T4848]  should_fail_ex+0x263/0x280
[   77.419609][ T4848]  should_failslab+0x8c/0xb0
[   77.419681][ T4848]  kmem_cache_alloc_noprof+0x66/0x3f0
[   77.419733][ T4848]  ? do_getname+0x2e/0x1c0
[   77.419756][ T4848]  do_getname+0x2e/0x1c0
[   77.419775][ T4848]  getname_flags+0x1d/0x30
[   77.419792][ T4848]  __se_sys_acct+0x7a/0x500
[   77.419851][ T4848]  __x64_sys_acct+0x1f/0x30
[   77.419872][ T4848]  x64_sys_call+0x2e7f/0x3020
[   77.419904][ T4848]  do_syscall_64+0x12c/0x3b0
[   77.419989][ T4848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.420011][ T4848] RIP: 0033:0x7f8bba83ce59
[   77.420105][ T4848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.420126][ T4848] RSP: 002b:00007f8bb9297028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[   77.420146][ T4848] RAX: ffffffffffffffda RBX: 00007f8bbaab5fa0 RCX: 00007f8bba83ce59
[   77.420215][ T4848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   77.420230][ T4848] RBP: 00007f8bb9297090 R08: 0000000000000000 R09: 0000000000000000
[   77.420245][ T4848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.420259][ T4848] R13: 00007f8bbaab6038 R14: 00007f8bbaab5fa0 R15: 00007ffd937699a8
[   77.420277][ T4848]  </TASK>
[   77.603059][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.620603][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'.
[   77.645039][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'.
[   77.665921][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.706862][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'.
[   77.747639][ T4862] EXT4-fs (loop3): 1 truncate cleaned up
[   77.753768][ T4862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.789335][ T4862] Set syz1 is full, maxelem 6117 reached
[   77.827686][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.023347][ T4875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.036129][ T4875] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.048598][ T4875] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks
[   78.056088][ T4875] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   78.563450][ T4887] set_capacity_and_notify: 8 callbacks suppressed
[   78.563467][ T4887] loop1: detected capacity change from 0 to 512
[   78.631028][ T4887] EXT4-fs (loop1): 1 truncate cleaned up
[   78.645995][ T4887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.680060][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   78.680076][   T28] audit: type=1400 audit(1781257672.954:385): avc:  denied  { watch watch_reads } for  pid=4882 comm="syz.0.450" path="/proc/264/net" dev="proc" ino=9877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   78.756312][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.807556][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.071841][ T4895] loop4: detected capacity change from 0 to 128
[   79.122363][ T4895] ext4: Unknown parameter 'euid<00000000000000000000'
[   79.622489][ T4895] netlink: 'syz.4.453': attribute type 12 has an invalid length.
[   79.634981][ T4895] netlink: 'syz.4.453': attribute type 29 has an invalid length.
[   80.173792][   T28] audit: type=1400 audit(1781257674.454:386): avc:  denied  { create } for  pid=4919 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   80.269992][   T28] audit: type=1400 audit(1781257674.474:387): avc:  denied  { write } for  pid=4919 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   80.289359][   T35] usb 2-1: device descriptor read/8, error -110
[   80.369814][   T28] audit: type=1400 audit(1781257674.474:388): avc:  denied  { append } for  pid=4919 comm="syz.0.460" name="pfkey" dev="proc" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   80.412346][   T35] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd
[   80.441903][   T35] usb 2-1: enqueue for inactive port 0
[   80.461128][   T35] usb 2-1: enqueue for inactive port 0
[   80.483294][ T4930] FAULT_INJECTION: forcing a failure.
[   80.483294][ T4930] name failslab, interval 1, probability 0, space 0, times 0
[   80.497949][ T4917] loop4: detected capacity change from 0 to 8192
[   80.504744][   T35] usb 2-1: enqueue for inactive port 0
[   80.513786][   T28] audit: type=1400 audit(1781257674.484:389): avc:  denied  { ioctl } for  pid=4919 comm="syz.0.460" path="socket:[10638]" dev="sockfs" ino=10638 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   80.554451][ T4930] CPU: 1 UID: 0 PID: 4930 Comm: syz.0.464 Not tainted syzkaller #0 PREEMPT(lazy) 
[   80.554499][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   80.554514][ T4930] Call Trace:
[   80.554523][ T4930]  <TASK>
[   80.554532][ T4930]  __dump_stack+0x1d/0x30
[   80.554558][ T4930]  dump_stack_lvl+0x95/0xd0
[   80.554577][ T4930]  dump_stack+0x15/0x1b
[   80.554595][ T4930]  should_fail_ex+0x263/0x280
[   80.554664][ T4930]  ? tcp_sendmsg_fastopen+0x172/0x520
[   80.554688][ T4930]  should_failslab+0x8c/0xb0
[   80.554724][ T4930]  __kmalloc_cache_noprof+0x5f/0x400
[   80.554792][ T4930]  tcp_sendmsg_fastopen+0x172/0x520
[   80.554883][ T4930]  tcp_sendmsg_locked+0x2819/0x2cc0
[   80.554906][ T4930]  ? tcp_sendmsg_locked+0x181/0x2cc0
[   80.554940][ T4930]  ? terminate_walk+0x1e6/0x210
[   80.554966][ T4930]  ? path_openat+0x1ab2/0x2050
[   80.554997][ T4930]  ? path_openat+0x1b01/0x2050
[   80.555100][ T4930]  ? __rcu_read_unlock+0x4e/0x70
[   80.555132][ T4930]  ? avc_has_perm_noaudit+0xab/0x130
[   80.555171][ T4930]  ? avc_has_perm+0x101/0x190
[   80.555269][ T4930]  ? selinux_socket_sendmsg+0x1ab/0x1e0
[   80.555302][ T4930]  ? __pfx_tcp_sendmsg+0x10/0x10
[   80.555328][ T4930]  ? __pfx_inet6_sendmsg+0x10/0x10
[   80.555349][ T4930]  tcp_sendmsg+0x2f/0x50
[   80.555471][ T4930]  inet6_sendmsg+0x76/0xd0
[   80.555491][ T4930]  __sys_sendto+0x325/0x490
[   80.555537][ T4930]  __x64_sys_sendto+0x76/0x90
[   80.555558][ T4930]  x64_sys_call+0x2d35/0x3020
[   80.555611][ T4930]  do_syscall_64+0x12c/0x3b0
[   80.555650][ T4930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.555675][ T4930] RIP: 0033:0x7ff2a6e2ce59
[   80.555692][ T4930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.555709][ T4930] RSP: 002b:00007ff2a5887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   80.555755][ T4930] RAX: ffffffffffffffda RBX: 00007ff2a70a5fa0 RCX: 00007ff2a6e2ce59
[   80.555771][ T4930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   80.555785][ T4930] RBP: 00007ff2a5887090 R08: 00002000000001c0 R09: 000000000000001c
[   80.555871][ T4930] R10: 0000000024008084 R11: 0000000000000246 R12: 0000000000000001
[   80.555883][ T4930] R13: 00007ff2a70a6038 R14: 00007ff2a70a5fa0 R15: 00007ffd6c5a1368
[   80.555904][ T4930]  </TASK>
[   80.802972][ T4917]  loop4: p1 < > p2 p4 < p5 >
[   80.807697][ T4917] loop4: partition table partially beyond EOD, truncated
[   80.814852][ T4917] loop4: p1 start 134217728 is beyond EOD, truncated
[   80.825841][ T4917] loop4: p2 size 591360 extends beyond EOD, truncated
[   80.842671][ T4917] loop4: p5 size 591360 extends beyond EOD, truncated
[   80.852879][ T4934] __nla_validate_parse: 6 callbacks suppressed
[   80.852944][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'.
[   80.885202][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'.
[   80.897458][   T28] audit: type=1400 audit(1781257675.174:390): avc:  denied  { listen } for  pid=4937 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.025529][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   81.035457][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   81.046498][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[   81.143540][ T4957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.471'.
[   81.168456][ T4944] loop4: detected capacity change from 0 to 128
[   81.189391][ T4960] loop3: detected capacity change from 0 to 512
[   81.202011][ T4944] ext4: Unknown parameter 'euid<00000000000000000000'
[   81.225935][ T4960] EXT4-fs (loop3): 1 truncate cleaned up
[   81.237933][ T4960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.269856][   T28] audit: type=1400 audit(1781257675.544:391): avc:  denied  { read } for  pid=4964 comm="syz.1.478" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   81.302966][ T4944] netlink: 'syz.4.469': attribute type 12 has an invalid length.
[   81.315579][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'.
[   81.326992][ T4944] netlink: 'syz.4.469': attribute type 29 has an invalid length.
[   81.338677][ T4944] netlink: 148 bytes leftover after parsing attributes in process `syz.4.469'.
[   81.369511][ T4944] netlink: 59 bytes leftover after parsing attributes in process `syz.4.469'.
[   81.429308][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.555745][   T28] audit: type=1400 audit(1781257675.834:392): avc:  denied  { read write } for  pid=4974 comm="syz.3.481" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   81.593059][ T4975] xt_policy: neither incoming nor outgoing policy selected
[   81.603678][   T28] audit: type=1400 audit(1781257675.834:393): avc:  denied  { open } for  pid=4974 comm="syz.3.481" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   81.702648][   T35] usb usb2-port1: attempt power cycle
[   81.702981][ T4971] loop1: detected capacity change from 0 to 8192
[   81.782510][ T4971]  loop1: p1 < > p2 p4 < p5 >
[   81.794762][ T4971] loop1: partition table partially beyond EOD, truncated
[   81.812052][ T4971] loop1: p1 start 134217728 is beyond EOD, truncated
[   81.826409][ T4971] loop1: p2 size 591360 extends beyond EOD, truncated
[   81.842919][ T4989] loop3: detected capacity change from 0 to 512
[   81.850649][ T4971] loop1: p5 size 591360 extends beyond EOD, truncated
[   81.896682][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.952526][ T4989] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.004750][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   82.029355][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   82.042755][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   82.082447][ T4957] Process accounting paused
[   82.122875][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.204908][   T28] audit: type=1400 audit(1781257676.484:394): avc:  denied  { bind } for  pid=5003 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   82.246238][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'.
[   82.298415][ T5012] FAULT_INJECTION: forcing a failure.
[   82.298415][ T5012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   82.342505][ T5012] CPU: 1 UID: 0 PID: 5012 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(lazy) 
[   82.342535][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   82.342547][ T5012] Call Trace:
[   82.342554][ T5012]  <TASK>
[   82.342630][ T5012]  __dump_stack+0x1d/0x30
[   82.342652][ T5012]  dump_stack_lvl+0x95/0xd0
[   82.342671][ T5012]  dump_stack+0x15/0x1b
[   82.342695][ T5012]  should_fail_ex+0x263/0x280
[   82.342799][ T5012]  should_fail+0xb/0x20
[   82.342817][ T5012]  should_fail_usercopy+0x1a/0x20
[   82.342839][ T5012]  _copy_to_user+0x20/0xa0
[   82.342881][ T5012]  simple_read_from_buffer+0xb5/0x130
[   82.342992][ T5012]  proc_fail_nth_read+0x10e/0x150
[   82.343019][ T5012]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   82.343048][ T5012]  vfs_read+0x1ab/0x7f0
[   82.343074][ T5012]  ? __rcu_read_unlock+0x4e/0x70
[   82.343168][ T5012]  ? __fget_files+0x184/0x1c0
[   82.343190][ T5012]  ? mutex_lock+0x57/0x90
[   82.343261][ T5012]  ksys_read+0xdc/0x1a0
[   82.343313][ T5012]  __x64_sys_read+0x40/0x50
[   82.343378][ T5012]  x64_sys_call+0x2886/0x3020
[   82.343404][ T5012]  do_syscall_64+0x12c/0x3b0
[   82.343438][ T5012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.343459][ T5012] RIP: 0033:0x7f4229dfd68e
[   82.343509][ T5012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   82.343526][ T5012] RSP: 002b:00007f4228896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   82.343561][ T5012] RAX: ffffffffffffffda RBX: 00007f42288976c0 RCX: 00007f4229dfd68e
[   82.343578][ T5012] RDX: 000000000000000f RSI: 00007f42288970a0 RDI: 0000000000000006
[   82.343593][ T5012] RBP: 00007f4228897090 R08: 0000000000000000 R09: 0000000000000000
[   82.343607][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.343620][ T5012] R13: 00007f422a0b6038 R14: 00007f422a0b5fa0 R15: 00007ffda7ed5ae8
[   82.343638][ T5012]  </TASK>
[   82.706345][ T5009] loop0: detected capacity change from 0 to 128
[   82.715484][ T5020] loop4: detected capacity change from 0 to 512
[   82.744121][ T5020] EXT4-fs (loop4): 1 truncate cleaned up
[   82.757221][ T5020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.773864][ T5009] ext4: Unknown parameter 'euid<00000000000000000000'
[   82.797646][ T5014] loop2: detected capacity change from 0 to 8192
[   82.820269][ T5024] EXT4-fs (loop1): 1 truncate cleaned up
[   82.839883][ T5024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.873545][ T5020] Set syz1 is full, maxelem 6117 reached
[   82.881381][ T5014]  loop2: p1 < > p2 p4 < p5 >
[   82.891840][ T5014] loop2: partition table partially beyond EOD, truncated
[   82.899094][ T5014] loop2: p1 start 134217728 is beyond EOD, truncated
[   82.906084][ T5014] loop2: p2 size 591360 extends beyond EOD, truncated
[   82.917591][ T5014] loop2: p5 size 591360 extends beyond EOD, truncated
[   82.937219][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.007505][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.084446][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   83.086679][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   83.095265][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   83.187083][ T5028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.222645][ T5028] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.462076][ T5056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   83.468625][ T5056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   83.478553][ T5058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.500262][ T5063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   83.515117][ T5063] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.502: bad orphan inode 131083
[   83.525467][ T5063] loop2: lost filesystem error report for type 5 error -117
[   83.536291][ T5063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.594153][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.610748][ T5058] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.736629][ T5056] vhci_hcd vhci_hcd.0: Device attached
[   83.828942][ T5058] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks
[   83.892073][ T5058] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   83.906605][ T5069] set_capacity_and_notify: 4 callbacks suppressed
[   83.906620][ T5069] loop0: detected capacity change from 0 to 1024
[   83.928364][ T5069] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.941627][   T35] usb usb2-port1: unable to enumerate USB device
[   84.150478][ T3393] usb 3-1: new low-speed USB device number 2 using vhci_hcd
[   84.158248][ T5069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.178210][ T5070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'.
[   84.202261][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   84.202275][   T28] audit: type=1400 audit(1781257678.484:399): avc:  denied  { write } for  pid=5067 comm="syz.0.508" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.242871][ T5057] vhci_hcd: connection closed
[   84.244469][ T5060] vhci_hcd: sendmsg failed!, ret=-32 for 48
[   84.256202][   T12] vhci_hcd vhci_hcd.1: stop threads
[   84.261879][   T12] vhci_hcd vhci_hcd.1: release socket
[   84.267423][   T12] vhci_hcd vhci_hcd.1: disconnect device
[   84.276038][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.323259][ T5074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.510'.
[   84.353620][   T28] audit: type=1400 audit(1781257678.634:400): avc:  denied  { read append } for  pid=5067 comm="syz.0.508" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.433917][   T28] audit: type=1400 audit(1781257678.634:401): avc:  denied  { open } for  pid=5067 comm="syz.0.508" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.513130][   T28] audit: type=1326 audit(1781257678.684:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.575546][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.591175][   T28] audit: type=1326 audit(1781257678.684:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.630974][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.673334][   T28] audit: type=1326 audit(1781257678.684:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.698983][   T28] audit: type=1326 audit(1781257678.684:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.737286][   T28] audit: type=1326 audit(1781257678.684:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.763237][   T28] audit: type=1326 audit(1781257678.684:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.843838][ T5085] loop3: detected capacity change from 0 to 512
[   84.867436][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'.
[   84.893154][   T28] audit: type=1326 audit(1781257678.684:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   84.939984][ T5082] loop0: detected capacity change from 0 to 128
[   84.983720][ T5082] ext4: Unknown parameter 'euid<00000000000000000000'
[   85.058723][ T5105] loop2: detected capacity change from 0 to 512
[   85.088957][ T5108] loop1: detected capacity change from 0 to 512
[   85.128554][ T5105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.153458][ T5105] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.175261][ T5105] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks
[   85.199000][ T5105] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   85.226905][ T5108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.249042][ T5108] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.294616][ T5120] loop4: detected capacity change from 0 to 512
[   85.320776][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.853994][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.160594][ T5139] __nla_validate_parse: 3 callbacks suppressed
[   86.160611][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'.
[   86.214309][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'.
[   86.243938][ T5144] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.533'.
[   86.271092][ T5145] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.533'.
[   86.334315][ T5152] loop3: detected capacity change from 0 to 512
[   86.379882][ T5152] EXT4-fs (loop3): 1 truncate cleaned up
[   86.386075][ T5152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.448924][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.542324][ T5154] loop1: detected capacity change from 0 to 128
[   86.577063][ T5154] ext4: Unknown parameter 'euid<00000000000000000000'
[   86.695356][ T5154] netlink: 'syz.1.537': attribute type 12 has an invalid length.
[   86.714044][ T5154] netlink: 'syz.1.537': attribute type 29 has an invalid length.
[   86.749601][ T5154] netlink: 148 bytes leftover after parsing attributes in process `syz.1.537'.
[   86.764558][ T5163] netlink: 72 bytes leftover after parsing attributes in process `syz.3.540'.
[   86.782651][ T5158] loop0: detected capacity change from 0 to 8192
[   86.789705][ T5154] netlink: 59 bytes leftover after parsing attributes in process `syz.1.537'.
[   86.825547][ T5158]  loop0: p1 < > p2 p4 < p5 >
[   86.837351][ T5158] loop0: partition table partially beyond EOD, truncated
[   86.851336][ T5158] loop0: p1 start 134217728 is beyond EOD, truncated
[   86.865590][ T5158] loop0: p2 size 591360 extends beyond EOD, truncated
[   86.876556][ T5158] loop0: p5 size 591360 extends beyond EOD, truncated
[   86.982894][ T5175] netlink: 'syz.3.541': attribute type 21 has an invalid length.
[   87.010011][ T5177] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[   87.020650][ T5177] bond2: entered allmulticast mode
[   87.026322][ T5175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.541'.
[   87.028309][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   87.049134][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   87.068456][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   87.189630][ T5184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'.
[   87.200713][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'.
[   87.210143][ T5184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.229200][ T5170] loop3: detected capacity change from 0 to 2048
[   87.295519][ T5170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.428615][ T5170] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.448526][ T5196] EXT4-fs (loop2): 1 truncate cleaned up
[   87.457267][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.547211][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.572517][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.696476][ T5213] EXT4-fs (loop2): 1 truncate cleaned up
[   87.769908][ T5217] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   87.820448][ T5205] ext4: Unknown parameter 'euid<00000000000000000000'
[   87.842416][ T5205] netlink: 'syz.1.556': attribute type 12 has an invalid length.
[   87.851301][ T5205] netlink: 'syz.1.556': attribute type 29 has an invalid length.
[   88.260370][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.269424][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.300538][ T5226] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.324730][ T5226] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks
[   88.339581][ T5226] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   88.475465][ T5238] dvmrp1: entered allmulticast mode
[   88.787841][ T5261] 9p: Could not find request transport: fd0x0000000000000005
[   88.914248][ T5266] set_capacity_and_notify: 5 callbacks suppressed
[   88.914266][ T5266] loop3: detected capacity change from 0 to 512
[   88.930324][ T5266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   88.943370][ T5266] EXT4-fs (loop3): orphan file too big: 4294967295
[   88.954857][ T5266] EXT4-fs (loop3): mount failed
[   88.956479][ T5264] loop2: detected capacity change from 0 to 128
[   88.972143][ T5264] ext4: Unknown parameter 'euid<00000000000000000000'
[   89.073103][ T5270] loop3: detected capacity change from 0 to 512
[   89.191759][ T5275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5275 comm=syz.3.581
[   89.321651][ T3393] usb 3-1: enqueue for inactive port 0
[   89.329148][ T3393] usb 3-1: enqueue for inactive port 0
[   89.401005][ T3393] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   89.615369][ T5292] loop4: detected capacity change from 0 to 512
[   89.642232][ T5292] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.744397][ T5320] loop0: detected capacity change from 0 to 256
[   89.756404][   T28] kauditd_printk_skb: 70 callbacks suppressed
[   89.756420][   T28] audit: type=1400 audit(1781257684.034:479): avc:  denied  { create } for  pid=5316 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   89.797588][   T28] audit: type=1400 audit(1781257684.034:480): avc:  denied  { bind } for  pid=5316 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   89.817270][   T28] audit: type=1400 audit(1781257684.034:481): avc:  denied  { name_bind } for  pid=5316 comm="syz.3.597" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   89.888078][   T28] audit: type=1400 audit(1781257684.034:482): avc:  denied  { node_bind } for  pid=5316 comm="syz.3.597" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   89.913530][ T5328] macvtap1: entered promiscuous mode
[   89.919064][   T28] audit: type=1326 audit(1781257684.154:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.4.601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   89.921323][ T5328] macvtap1: entered allmulticast mode
[   89.972001][ T5328] veth1_vlan: entered allmulticast mode
[   89.986235][   T28] audit: type=1326 audit(1781257684.154:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.4.601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   90.042149][   T28] audit: type=1326 audit(1781257684.154:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.4.601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   90.076980][   T28] audit: type=1326 audit(1781257684.154:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.4.601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   90.102601][   T28] audit: type=1326 audit(1781257684.154:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.4.601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   90.128457][   T28] audit: type=1326 audit(1781257684.154:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.4.601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4229e3ce59 code=0x7ffc0000
[   90.158642][ T5332] openvswitch: netlink: Key type 30 is not supported
[   90.285242][ T5343] loop4: detected capacity change from 0 to 128
[   90.299730][ T5343] ext4: Unknown parameter 'euid<00000000000000000000'
[   90.320641][ T5343] netlink: 'syz.4.605': attribute type 12 has an invalid length.
[   90.328952][ T5343] netlink: 'syz.4.605': attribute type 29 has an invalid length.
[   90.870789][ T5361] FAULT_INJECTION: forcing a failure.
[   90.870789][ T5361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.889151][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.0.614 Not tainted syzkaller #0 PREEMPT(lazy) 
[   90.889185][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   90.889198][ T5361] Call Trace:
[   90.889204][ T5361]  <TASK>
[   90.889211][ T5361]  __dump_stack+0x1d/0x30
[   90.889234][ T5361]  dump_stack_lvl+0x95/0xd0
[   90.889278][ T5361]  dump_stack+0x15/0x1b
[   90.889407][ T5361]  should_fail_ex+0x263/0x280
[   90.889428][ T5361]  should_fail+0xb/0x20
[   90.889448][ T5361]  should_fail_usercopy+0x1a/0x20
[   90.889473][ T5361]  _copy_from_iter+0xcf/0xea0
[   90.889569][ T5361]  ? _copy_from_iter+0x13e/0xea0
[   90.889594][ T5361]  copy_page_from_iter+0x161/0x1f0
[   90.889616][ T5361]  skb_copy_datagram_from_iter+0x22d/0x480
[   90.889693][ T5361]  unix_stream_sendmsg+0x642/0xbb0
[   90.889754][ T5361]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[   90.889776][ T5361]  ____sys_sendmsg+0x563/0x5b0
[   90.889880][ T5361]  ___sys_sendmsg+0x195/0x1e0
[   90.889921][ T5361]  __x64_sys_sendmsg+0xd4/0x160
[   90.889955][ T5361]  x64_sys_call+0x194c/0x3020
[   90.890081][ T5361]  do_syscall_64+0x12c/0x3b0
[   90.890110][ T5361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.890134][ T5361] RIP: 0033:0x7ff2a6e2ce59
[   90.890178][ T5361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.890212][ T5361] RSP: 002b:00007ff2a5887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.890231][ T5361] RAX: ffffffffffffffda RBX: 00007ff2a70a5fa0 RCX: 00007ff2a6e2ce59
[   90.890246][ T5361] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[   90.890316][ T5361] RBP: 00007ff2a5887090 R08: 0000000000000000 R09: 0000000000000000
[   90.890374][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.890387][ T5361] R13: 00007ff2a70a6038 R14: 00007ff2a70a5fa0 R15: 00007ffd6c5a1368
[   90.890408][ T5361]  </TASK>
[   91.081829][ T5361] loop0: detected capacity change from 0 to 512
[   91.089930][ T5361] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   91.108639][ T5361] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.614: invalid indirect mapped block 32768 (level 2)
[   91.122213][ T5361] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   91.122371][ T5361] EXT4-fs (loop0): Remounting filesystem read-only
[   91.131499][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   91.131518][    C0] EXT4-fs (loop0): initial error at time 1781257685: ext4_free_branches:1023: inode 16
[   91.131544][    C0] EXT4-fs (loop0): last error at time 1781257685: ext4_free_branches:1023: inode 16
[   91.165341][ T5361] EXT4-fs (loop0): 1 orphan inode deleted
[   91.171145][ T5361] EXT4-fs (loop0): 1 truncate cleaned up
[   91.175661][ T5363] __nla_validate_parse: 18 callbacks suppressed
[   91.175686][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'.
[   91.180920][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'.
[   91.303052][ T5376] loop4: detected capacity change from 0 to 512
[   91.313336][ T5376] EXT4-fs (loop4): 1 truncate cleaned up
[   91.443142][ T5372] netlink: 27 bytes leftover after parsing attributes in process `syz.1.618'.
[   91.463873][ T5385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65305 sclass=netlink_route_socket pid=5385 comm=syz.3.616
[   91.534253][ T5389] netlink: 'syz.2.622': attribute type 21 has an invalid length.
[   91.751190][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[   91.810201][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[   92.055133][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'.
[   92.110122][ T5407] loop2: detected capacity change from 0 to 512
[   92.123402][ T5404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'.
[   92.384881][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'.
[   93.037712][ T5435] loop1: detected capacity change from 0 to 512
[   93.092443][ T5435] EXT4-fs (loop1): 1 truncate cleaned up
[   93.131985][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'.
[   93.170181][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'.
[   93.282996][ T5439]  loop3: p1 < > p2 p4 < p5 >
[   93.296760][ T5439] loop3: partition table partially beyond EOD, truncated
[   93.315764][ T5439] loop3: p1 start 134217728 is beyond EOD, truncated
[   93.325733][ T5439] loop3: p2 size 591360 extends beyond EOD, truncated
[   93.341344][ T5439] loop3: p5 size 591360 extends beyond EOD, truncated
[   93.516654][ T5452] EXT4-fs (loop3): 1 truncate cleaned up
[   93.675529][ T5457] EXT4-fs: inline encryption not supported
[   93.681609][ T5457] EXT4-fs: Ignoring removed orlov option
[   93.706402][ T5457] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   93.833412][ T5443]  loop2: p1 < > p2 p4 < p5 >
[   93.838350][ T5443] loop2: partition table partially beyond EOD, truncated
[   93.849872][ T5443] loop2: p1 start 134217728 is beyond EOD, truncated
[   93.871654][ T5443] loop2: p2 size 591360 extends beyond EOD, truncated
[   93.905685][ T5443] loop2: p5 size 591360 extends beyond EOD, truncated
[   93.988709][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   93.992919][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   94.006310][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   94.364140][ T5494] set_capacity_and_notify: 4 callbacks suppressed
[   94.364155][ T5494] loop4: detected capacity change from 0 to 512
[   94.643328][ T5490] loop0: detected capacity change from 0 to 8192
[   94.712037][ T5498] loop1: detected capacity change from 0 to 512
[   94.734997][ T5490]  loop0: p1 < > p2 p4 < p5 >
[   94.742316][ T5498] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.771660][ T5490] loop0: partition table partially beyond EOD, truncated
[   94.814133][ T5490] loop0: p1 start 134217728 is beyond EOD, truncated
[   94.852859][ T5490] loop0: p2 size 591360 extends beyond EOD, truncated
[   94.884290][ T5490] loop0: p5 size 591360 extends beyond EOD, truncated
[   95.029024][   T28] kauditd_printk_skb: 79 callbacks suppressed
[   95.029038][   T28] audit: type=1400 audit(1781257689.304:568): avc:  denied  { create } for  pid=5518 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   95.063643][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   95.073595][ T5522] loop3: detected capacity change from 0 to 512
[   95.075593][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   95.089824][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   95.117994][ T5522] EXT4-fs (loop3): 1 truncate cleaned up
[   95.489237][ T5561] loop3: detected capacity change from 0 to 2048
[   95.561775][ T5561]  loop3: p2 p3 < > p4 < p5 >
[   95.566653][ T5561] loop3: partition table partially beyond EOD, truncated
[   95.577492][ T5561] loop3: p3 start 4284289 is beyond EOD, truncated
[   95.623396][ T5566] loop1: detected capacity change from 0 to 4096
[   95.662915][ T5566] ext3: Unknown parameter 'noacl'
[   95.670189][ T5553] loop4: detected capacity change from 0 to 1024
[   95.702969][ T5553] loop4: detected capacity change from 0 to 512
[   95.729968][ T5553] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[   95.769179][ T4467] IPVS: starting estimator thread 0...
[   95.856577][ T5566] loop1: detected capacity change from 0 to 512
[   95.865094][ T5562] loop2: detected capacity change from 0 to 8192
[   95.869919][ T5566] ext4: Unknown parameter 'nobarrier.resuid'
[   95.879338][ T5572] IPVS: using max 2352 ests per chain, 117600 per kthread
[   95.922907][ T5562]  loop2: p1 < > p2 p4 < p5 >
[   95.929277][ T5579] EXT4-fs (loop4): 1 truncate cleaned up
[   95.946158][ T5562] loop2: partition table partially beyond EOD, truncated
[   95.963627][ T5562] loop2: p1 start 134217728 is beyond EOD, truncated
[   95.976119][ T5562] loop2: p2 size 591360 extends beyond EOD, truncated
[   95.990332][ T5562] loop2: p5 size 591360 extends beyond EOD, truncated
[   96.068934][ T5584] EXT4-fs: quotafile must be on filesystem root
[   96.072932][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   96.079989][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   96.087048][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   96.144625][   T28] audit: type=1400 audit(1781257690.414:569): avc:  denied  { bind } for  pid=5583 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.198921][   T28] audit: type=1400 audit(1781257690.454:570): avc:  denied  { setopt } for  pid=5583 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.558623][ T5609] FAULT_INJECTION: forcing a failure.
[   96.558623][ T5609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.714274][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.1.693 Not tainted syzkaller #0 PREEMPT(lazy) 
[   96.714366][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   96.714391][ T5609] Call Trace:
[   96.714399][ T5609]  <TASK>
[   96.714407][ T5609]  __dump_stack+0x1d/0x30
[   96.714429][ T5609]  dump_stack_lvl+0x95/0xd0
[   96.714451][ T5609]  dump_stack+0x15/0x1b
[   96.714511][ T5609]  should_fail_ex+0x263/0x280
[   96.714535][ T5609]  should_fail+0xb/0x20
[   96.714556][ T5609]  should_fail_usercopy+0x1a/0x20
[   96.714578][ T5609]  _copy_to_user+0x20/0xa0
[   96.714658][ T5609]  simple_read_from_buffer+0xb5/0x130
[   96.714696][ T5609]  proc_fail_nth_read+0x10e/0x150
[   96.714723][ T5609]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   96.714757][ T5609]  vfs_read+0x1ab/0x7f0
[   96.714789][ T5609]  ? __rcu_read_unlock+0x4e/0x70
[   96.714849][ T5609]  ? __fget_files+0x184/0x1c0
[   96.714871][ T5609]  ? mutex_lock+0x57/0x90
[   96.714897][ T5609]  ksys_read+0xdc/0x1a0
[   96.714923][ T5609]  __x64_sys_read+0x40/0x50
[   96.715033][ T5609]  x64_sys_call+0x2886/0x3020
[   96.715089][ T5609]  do_syscall_64+0x12c/0x3b0
[   96.715123][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.715144][ T5609] RIP: 0033:0x7ff6b1a2d68e
[   96.715160][ T5609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   96.715208][ T5609] RSP: 002b:00007ff6b04c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   96.715229][ T5609] RAX: ffffffffffffffda RBX: 00007ff6b04c76c0 RCX: 00007ff6b1a2d68e
[   96.715243][ T5609] RDX: 000000000000000f RSI: 00007ff6b04c70a0 RDI: 0000000000000004
[   96.715299][ T5609] RBP: 00007ff6b04c7090 R08: 0000000000000000 R09: 0000000000000000
[   96.715318][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.715329][ T5609] R13: 00007ff6b1ce6038 R14: 00007ff6b1ce5fa0 R15: 00007fff06af7c28
[   96.715348][ T5609]  </TASK>
[   96.964622][ T5617] EXT4-fs (loop2): 1 truncate cleaned up
[   96.971047][ T5617] EXT4-fs mount: 24 callbacks suppressed
[   96.971061][ T5617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.001142][ T5619] __nla_validate_parse: 13 callbacks suppressed
[   97.001158][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[   97.026746][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[   97.147713][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.166241][ T5628] EXT4-fs (loop4): 1 truncate cleaned up
[   97.181338][ T5628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.289809][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.309848][ T5634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.330437][ T5634] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.348342][ T5615]  loop0: p1 < > p2 p4 < p5 >
[   97.367721][ T5615] loop0: partition table partially beyond EOD, truncated
[   97.391514][ T5615] loop0: p1 start 134217728 is beyond EOD, truncated
[   97.402503][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'.
[   97.412782][ T5615] loop0: p2 size 591360 extends beyond EOD, truncated
[   97.416857][ T5631] ext4: Unknown parameter 'euid<00000000000000000000'
[   97.426751][ T5615] loop0: p5 size 591360 extends beyond EOD, truncated
[   97.439199][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.448471][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.517463][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   97.522218][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.597532][ T5645] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   97.624982][ T5645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.628467][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[   97.655409][   T28] audit: type=1400 audit(1781257691.934:571): avc:  denied  { write } for  pid=5644 comm="syz.3.704" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.740933][   T28] audit: type=1400 audit(1781257691.934:572): avc:  denied  { write } for  pid=5644 comm="syz.3.704" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.763852][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'.
[   97.793908][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.812828][   T28] audit: type=1400 audit(1781257692.094:573): avc:  denied  { bind } for  pid=5655 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   97.834007][ T5656] FAULT_INJECTION: forcing a failure.
[   97.834007][ T5656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.854687][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.4.709 Not tainted syzkaller #0 PREEMPT(lazy) 
[   97.854718][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   97.854741][ T5656] Call Trace:
[   97.854748][ T5656]  <TASK>
[   97.854755][ T5656]  __dump_stack+0x1d/0x30
[   97.854782][ T5656]  dump_stack_lvl+0x95/0xd0
[   97.854847][ T5656]  dump_stack+0x15/0x1b
[   97.854869][ T5656]  should_fail_ex+0x263/0x280
[   97.854957][ T5656]  should_fail+0xb/0x20
[   97.855027][ T5656]  should_fail_usercopy+0x1a/0x20
[   97.855079][ T5656]  _copy_from_user+0x1c/0xb0
[   97.855107][ T5656]  bpf_test_init+0xb9/0x130
[   97.855138][ T5656]  bpf_prog_test_run_xdp+0x306/0xa10
[   97.855187][ T5656]  ? __rcu_read_unlock+0x4e/0x70
[   97.855214][ T5656]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   97.855247][ T5656]  bpf_prog_test_run+0x204/0x340
[   97.855276][ T5656]  __sys_bpf+0x52e/0x7e0
[   97.855365][ T5656]  __x64_sys_bpf+0x41/0x50
[   97.855386][ T5656]  x64_sys_call+0x10cb/0x3020
[   97.855490][ T5656]  do_syscall_64+0x12c/0x3b0
[   97.855523][ T5656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.855545][ T5656] RIP: 0033:0x7f4229e3ce59
[   97.855560][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.855620][ T5656] RSP: 002b:00007f4228897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   97.855642][ T5656] RAX: ffffffffffffffda RBX: 00007f422a0b5fa0 RCX: 00007f4229e3ce59
[   97.855659][ T5656] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   97.855673][ T5656] RBP: 00007f4228897090 R08: 0000000000000000 R09: 0000000000000000
[   97.855750][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.855767][ T5656] R13: 00007f422a0b6038 R14: 00007f422a0b5fa0 R15: 00007ffda7ed5ae8
[   97.855788][ T5656]  </TASK>
[   97.878958][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.708'.
[   98.094084][ T5664] EXT4-fs (loop4): 1 truncate cleaned up
[   98.101854][ T5664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.138415][ T5671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'.
[   98.162883][   T28] audit: type=1326 audit(1781257692.424:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[   98.188431][   T28] audit: type=1326 audit(1781257692.424:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[   98.232142][   T28] audit: type=1326 audit(1781257692.424:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[   98.258336][   T28] audit: type=1326 audit(1781257692.424:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[   98.310060][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.008623][ T5697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.372505][ T5697] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.470417][ T5712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'.
[   99.548806][ T5716] set_capacity_and_notify: 11 callbacks suppressed
[   99.548822][ T5716] loop1: detected capacity change from 0 to 512
[   99.563319][ T5716] EXT4-fs: Ignoring removed oldalloc option
[   99.576493][ T5716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[   99.585272][ T5716] EXT4-fs (loop1): orphan cleanup on readonly fs
[   99.591983][ T5716] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   99.606909][ T5716] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   99.613756][ T5716] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.725: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   99.631950][ T5716] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.632103][ T5716] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.725: couldn't read orphan inode 13 (err -117)
[   99.641242][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   99.641258][    C0] EXT4-fs (loop1): last error at time 1781257693: ext4_ext_check_inode:521: inode 13
[   99.670676][ T5716] loop1: lost filesystem error report for type 5 error -117
[   99.671297][ T5716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.695480][ T5716] FAULT_INJECTION: forcing a failure.
[   99.695480][ T5716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.709364][ T5716] CPU: 0 UID: 0 PID: 5716 Comm: syz.1.725 Not tainted syzkaller #0 PREEMPT(lazy) 
[   99.709391][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   99.709413][ T5716] Call Trace:
[   99.709419][ T5716]  <TASK>
[   99.709428][ T5716]  __dump_stack+0x1d/0x30
[   99.709487][ T5716]  dump_stack_lvl+0x95/0xd0
[   99.709506][ T5716]  dump_stack+0x15/0x1b
[   99.709525][ T5716]  should_fail_ex+0x263/0x280
[   99.709548][ T5716]  should_fail+0xb/0x20
[   99.709565][ T5716]  should_fail_usercopy+0x1a/0x20
[   99.709613][ T5716]  _copy_from_user+0x1c/0xb0
[   99.709639][ T5716]  copy_from_sockptr_offset+0x66/0xa0
[   99.709664][ T5716]  do_ip6t_set_ctl+0x61b/0x8f0
[   99.709764][ T5716]  ? sysvec_apic_timer_interrupt+0x44/0x80
[   99.709801][ T5716]  nf_setsockopt+0x199/0x1b0
[   99.709830][ T5716]  ipv6_setsockopt+0x11a/0x130
[   99.709853][ T5716]  udpv6_setsockopt+0x89/0xa0
[   99.709886][ T5716]  sock_common_setsockopt+0x69/0x80
[   99.709935][ T5716]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   99.710040][ T5716]  __sys_setsockopt+0x184/0x200
[   99.710067][ T5716]  __x64_sys_setsockopt+0x64/0x80
[   99.710095][ T5716]  x64_sys_call+0x2327/0x3020
[   99.710183][ T5716]  do_syscall_64+0x12c/0x3b0
[   99.710216][ T5716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.710262][ T5716] RIP: 0033:0x7ff6b1a6ce59
[   99.710277][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.710294][ T5716] RSP: 002b:00007ff6b04c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.710313][ T5716] RAX: ffffffffffffffda RBX: 00007ff6b1ce5fa0 RCX: 00007ff6b1a6ce59
[   99.710373][ T5716] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008
[   99.710386][ T5716] RBP: 00007ff6b04c7090 R08: 0000000000000540 R09: 0000000000000000
[   99.710399][ T5716] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[   99.710411][ T5716] R13: 00007ff6b1ce6038 R14: 00007ff6b1ce5fa0 R15: 00007fff06af7c28
[   99.710431][ T5716]  </TASK>
[   99.918064][ T5716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  101.445182][ T5716] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  101.455872][ T5716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002]
[  101.483456][ T5716] System zones: 0-2, 18-18, 34-34
[  101.487690][ T5725] loop3: detected capacity change from 0 to 512
[  101.492384][ T5716] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  101.515308][ T5725] EXT4-fs (loop3): 1 truncate cleaned up
[  101.521659][ T5725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.559920][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.561615][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'.
[  101.569336][ T5728] loop0: detected capacity change from 0 to 164
[  101.588075][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.600248][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.639593][ T3305] rock: directory entry would overflow storage
[  101.649372][ T3305] rock: sig=0x4f50, size=4, remaining=3
[  101.655033][ T3305] iso9660: Corrupted directory entry in block 5 of inode 1792
[  101.663719][ T3305] iso9660: Corrupted directory entry in block 5 of inode 1792
[  101.697650][ T5737] FAULT_INJECTION: forcing a failure.
[  101.697650][ T5737] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.709193][   T28] kauditd_printk_skb: 81 callbacks suppressed
[  101.709209][   T28] audit: type=1400 audit(1781257695.974:659): avc:  denied  { setopt } for  pid=5738 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  101.747384][   T28] audit: type=1400 audit(1781257696.014:660): avc:  denied  { read } for  pid=5738 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  101.768601][ T5739] netlink: 'syz.2.736': attribute type 11 has an invalid length.
[  101.772625][ T5737] CPU: 1 UID: 0 PID: 5737 Comm: syz.3.732 Not tainted syzkaller #0 PREEMPT(lazy) 
[  101.772655][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  101.772721][ T5737] Call Trace:
[  101.772729][ T5737]  <TASK>
[  101.772737][ T5737]  __dump_stack+0x1d/0x30
[  101.772764][ T5737]  dump_stack_lvl+0x95/0xd0
[  101.772786][ T5737]  dump_stack+0x15/0x1b
[  101.772857][ T5737]  should_fail_ex+0x263/0x280
[  101.772944][ T5737]  should_fail+0xb/0x20
[  101.773025][ T5737]  should_fail_usercopy+0x1a/0x20
[  101.773048][ T5737]  _copy_from_user+0x1c/0xb0
[  101.773134][ T5737]  do_handle_open+0x40b/0x7b0
[  101.773168][ T5737]  __x64_sys_open_by_handle_at+0x44/0x50
[  101.773202][ T5737]  x64_sys_call+0x153d/0x3020
[  101.773239][ T5737]  do_syscall_64+0x12c/0x3b0
[  101.773369][ T5737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.773393][ T5737] RIP: 0033:0x7f8bba83ce59
[  101.773411][ T5737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.773483][ T5737] RSP: 002b:00007f8bb9297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  101.773505][ T5737] RAX: ffffffffffffffda RBX: 00007f8bbaab5fa0 RCX: 00007f8bba83ce59
[  101.773521][ T5737] RDX: 0200000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  101.773536][ T5737] RBP: 00007f8bb9297090 R08: 0000000000000000 R09: 0000000000000000
[  101.773569][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.773583][ T5737] R13: 00007f8bbaab6038 R14: 00007f8bbaab5fa0 R15: 00007ffd937699a8
[  101.773603][ T5737]  </TASK>
[  101.839540][ T5742] netlink: 56 bytes leftover after parsing attributes in process `syz.4.737'.
[  101.851277][ T5739] netlink: 'syz.2.736': attribute type 11 has an invalid length.
[  101.999018][ T5750] loop1: detected capacity change from 0 to 2048
[  102.033129][ T5750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.052674][   T28] audit: type=1400 audit(1781257696.334:661): avc:  denied  { write } for  pid=5749 comm="syz.1.739" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  102.116999][   T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.134148][ T5766] loop2: detected capacity change from 0 to 512
[  102.142852][  T154] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.159512][ T5768] loop3: detected capacity change from 0 to 160
[  102.166334][ T5766] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  102.182681][   T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.185639][  T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  102.212531][  T154] EXT4-fs (loop1): This should not happen!! Data will be lost
[  102.212531][  T154] 
[  102.224775][  T154] EXT4-fs (loop1): Total free blocks count 0
[  102.230851][  T154] EXT4-fs (loop1): Free/Dirty block details
[  102.231970][ T5766] EXT4-fs (loop2): 1 truncate cleaned up
[  102.236821][  T154] EXT4-fs (loop1): free_blocks=2415919104
[  102.248227][  T154] EXT4-fs (loop1): dirty_blocks=0
[  102.253288][  T154] EXT4-fs (loop1): Block reservation details
[  102.255358][ T5766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.259284][  T154] EXT4-fs (loop1): i_reserved_data_blocks=0
[  102.259620][ T3300] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  102.288949][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.303757][ T5766] IPVS: fo: FWM 3 0x00000003 - no destination available
[  102.310756][   T35] IPVS: starting estimator thread 0...
[  102.344892][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.356671][   T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.377173][   T28] audit: type=1326 audit(1781257696.654:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.402513][ T5775] IPVS: using max 2592 ests per chain, 129600 per kthread
[  102.403255][   T28] audit: type=1326 audit(1781257696.654:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.443818][   T28] audit: type=1326 audit(1781257696.654:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.568350][   T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.585877][   T28] audit: type=1326 audit(1781257696.654:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.593776][ T5791] __nla_validate_parse: 3 callbacks suppressed
[  102.593808][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'.
[  102.611470][   T28] audit: type=1326 audit(1781257696.654:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.619797][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'.
[  102.626954][   T28] audit: type=1326 audit(1781257696.654:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.721269][   T28] audit: type=1326 audit(1781257696.654:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b1a6ce59 code=0x7ffc0000
[  102.749021][ T5797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  102.755614][ T5797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.765291][ T5797] vhci_hcd vhci_hcd.0: Device attached
[  102.773497][ T5802] FAULT_INJECTION: forcing a failure.
[  102.773497][ T5802] name failslab, interval 1, probability 0, space 0, times 0
[  102.786356][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: syz.3.755 Not tainted syzkaller #0 PREEMPT(lazy) 
[  102.786385][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  102.786398][ T5802] Call Trace:
[  102.786404][ T5802]  <TASK>
[  102.786411][ T5802]  __dump_stack+0x1d/0x30
[  102.786501][ T5802]  dump_stack_lvl+0x95/0xd0
[  102.786522][ T5802]  dump_stack+0x15/0x1b
[  102.786583][ T5802]  should_fail_ex+0x263/0x280
[  102.786605][ T5802]  should_failslab+0x8c/0xb0
[  102.786652][ T5802]  kmem_cache_alloc_noprof+0x66/0x3f0
[  102.786693][ T5802]  ? sctp_get_port_local+0x438/0xae0
[  102.786729][ T5802]  sctp_get_port_local+0x438/0xae0
[  102.786753][ T5802]  sctp_do_bind+0x398/0x4b0
[  102.786821][ T5802]  sctp_setsockopt_bindx+0x1c9/0x2c0
[  102.786852][ T5802]  sctp_setsockopt+0x7de/0xea0
[  102.786893][ T5802]  sock_common_setsockopt+0x69/0x80
[  102.786969][ T5802]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  102.787008][ T5802]  __sys_setsockopt+0x184/0x200
[  102.787037][ T5802]  __x64_sys_setsockopt+0x64/0x80
[  102.787109][ T5802]  x64_sys_call+0x2327/0x3020
[  102.787135][ T5802]  do_syscall_64+0x12c/0x3b0
[  102.787190][ T5802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.787214][ T5802] RIP: 0033:0x7f8bba83ce59
[  102.787233][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.787295][ T5802] RSP: 002b:00007f8bb9297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.787314][ T5802] RAX: ffffffffffffffda RBX: 00007f8bbaab5fa0 RCX: 00007f8bba83ce59
[  102.787327][ T5802] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000005
[  102.787340][ T5802] RBP: 00007f8bb9297090 R08: 000000000000001c R09: 0000000000000000
[  102.787356][ T5802] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  102.787371][ T5802] R13: 00007f8bbaab6038 R14: 00007f8bbaab5fa0 R15: 00007ffd937699a8
[  102.787406][ T5802]  </TASK>
[  102.788437][ T5799] usbip_core: unknown command
[  102.897604][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.946569][ T5799] vhci_hcd: unknown pdu 0
[  102.952158][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.984065][ T5799] usbip_core: unknown command
[  102.996011][ T5763] bridge_slave_0: entered allmulticast mode
[  103.013484][ T4467] usb 3-1: new low-speed USB device number 3 using vhci_hcd
[  103.023611][ T5813] FAULT_INJECTION: forcing a failure.
[  103.023611][ T5813] name failslab, interval 1, probability 0, space 0, times 0
[  103.036829][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: syz.3.757 Not tainted syzkaller #0 PREEMPT(lazy) 
[  103.036854][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  103.036945][ T5813] Call Trace:
[  103.036953][ T5813]  <TASK>
[  103.036961][ T5813]  __dump_stack+0x1d/0x30
[  103.036987][ T5813]  dump_stack_lvl+0x95/0xd0
[  103.037028][ T5813]  dump_stack+0x15/0x1b
[  103.037073][ T5813]  should_fail_ex+0x263/0x280
[  103.037093][ T5813]  should_failslab+0x8c/0xb0
[  103.037127][ T5813]  kmem_cache_alloc_noprof+0x66/0x3f0
[  103.037160][ T5813]  ? create_new_namespaces+0x3c/0x440
[  103.037221][ T5813]  create_new_namespaces+0x3c/0x440
[  103.037365][ T5813]  unshare_nsproxy_namespaces+0x115/0x150
[  103.037397][ T5813]  ksys_unshare+0x402/0x740
[  103.037422][ T5813]  ? ksys_write+0x161/0x1a0
[  103.037517][ T5813]  __x64_sys_unshare+0x1f/0x30
[  103.037544][ T5813]  x64_sys_call+0x1cef/0x3020
[  103.037570][ T5813]  do_syscall_64+0x12c/0x3b0
[  103.037606][ T5813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.037671][ T5813] RIP: 0033:0x7f8bba83ce59
[  103.037687][ T5813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.037752][ T5813] RSP: 002b:00007f8bb9297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  103.037775][ T5813] RAX: ffffffffffffffda RBX: 00007f8bbaab5fa0 RCX: 00007f8bba83ce59
[  103.037789][ T5813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000
[  103.037804][ T5813] RBP: 00007f8bb9297090 R08: 0000000000000000 R09: 0000000000000000
[  103.037820][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.037835][ T5813] R13: 00007f8bbaab6038 R14: 00007f8bbaab5fa0 R15: 00007ffd937699a8
[  103.037856][ T5813]  </TASK>
[  103.216583][ T5763] bridge_slave_0: entered promiscuous mode
[  103.225238][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.232538][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.239957][ T5763] bridge_slave_1: entered allmulticast mode
[  103.247374][ T5763] bridge_slave_1: entered promiscuous mode
[  103.295881][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.308241][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.356082][ T5763] team0: Port device team_slave_0 added
[  103.402659][ T5763] team0: Port device team_slave_1 added
[  103.468608][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'.
[  103.486931][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.497448][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.631495][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.643909][ T5822] loop4: detected capacity change from 0 to 512
[  103.657897][ T5822] EXT4-fs: Ignoring removed i_version option
[  103.668771][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.676772][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.703216][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.743020][ T5763] hsr_slave_0: entered promiscuous mode
[  103.749812][ T5763] hsr_slave_1: entered promiscuous mode
[  103.756510][ T5763] debugfs: 'hsr0' already exists in 'hsr'
[  103.762864][ T5763] Cannot create hsr debugfs directory
[  103.784642][ T5400] vhci_hcd vhci_hcd.1: stop threads
[  103.887532][ T5822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.902445][   T40] dvmrp1: left allmulticast mode
[  103.941323][ T5400] vhci_hcd vhci_hcd.1: release socket
[  103.984222][ T5400] vhci_hcd vhci_hcd.1: disconnect device
[  104.012166][ T5822] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.175912][ T5830] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.760: iget: bad i_size value: 2533275932231680
[  104.190954][ T5830] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.760: iget: bad i_size value: 2533275932231680
[  104.787988][ T5844] loop1: detected capacity change from 0 to 128
[  104.806335][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.808438][ T5844] FAT-fs (loop1): Directory bread(block 32) failed
[  104.822109][ T5844] FAT-fs (loop1): Directory bread(block 33) failed
[  104.826354][   T40] bond0 (unregistering): Released all slaves
[  104.828771][ T5844] FAT-fs (loop1): Directory bread(block 34) failed
[  104.842013][ T5844] FAT-fs (loop1): Directory bread(block 35) failed
[  104.848569][ T5844] FAT-fs (loop1): Directory bread(block 36) failed
[  104.857176][ T5844] FAT-fs (loop1): Directory bread(block 37) failed
[  104.904033][ T5844] FAT-fs (loop1): Directory bread(block 38) failed
[  104.924938][   T40] IPVS: stopping master sync thread 3690 ...
[  104.931452][ T5844] FAT-fs (loop1): Directory bread(block 39) failed
[  104.951156][ T5844] FAT-fs (loop1): Directory bread(block 40) failed
[  104.959659][ T5844] FAT-fs (loop1): Directory bread(block 41) failed
[  104.969355][   T40] hsr_slave_0: left promiscuous mode
[  104.977576][   T40] hsr_slave_1: left promiscuous mode
[  104.999073][   T40] veth1_macvtap: left promiscuous mode
[  105.004662][   T40] veth0_macvtap: left promiscuous mode
[  105.012542][   T40] veth1_vlan: left promiscuous mode
[  105.120648][ T5869] FAT-fs (loop1): Filesystem has been set read-only
[  105.330716][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2
[  105.333930][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'.
[  105.423325][ T5763] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.435768][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.444025][ T5763] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.459541][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.470223][ T5763] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.487416][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.495282][ T5763] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.506560][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.552061][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3
[  105.612268][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.628059][ T5763] 8021q: adding VLAN 0 to HW filter on device team0
[  105.638185][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.645281][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.656608][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'.
[  105.669911][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.677009][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.103457][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.140479][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1
[  106.327099][ T5763] veth0_vlan: entered promiscuous mode
[  106.339612][ T5763] veth1_vlan: entered promiscuous mode
[  106.350106][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4
[  106.370470][ T5763] veth0_macvtap: entered promiscuous mode
[  106.381154][ T5763] veth1_macvtap: entered promiscuous mode
[  106.392089][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.406426][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.429636][  T416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.442526][  T416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.451444][  T416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.460417][  T416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.612075][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'.
[  106.635519][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'.
[  106.659804][ T5982] FAULT_INJECTION: forcing a failure.
[  106.659804][ T5982] name failslab, interval 1, probability 0, space 0, times 0
[  106.663655][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'.
[  106.683193][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.1.778 Not tainted syzkaller #0 PREEMPT(lazy) 
[  106.683223][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  106.683235][ T5982] Call Trace:
[  106.683241][ T5982]  <TASK>
[  106.683293][ T5982]  __dump_stack+0x1d/0x30
[  106.683317][ T5982]  dump_stack_lvl+0x95/0xd0
[  106.683373][ T5982]  dump_stack+0x15/0x1b
[  106.683392][ T5982]  should_fail_ex+0x263/0x280
[  106.683441][ T5982]  should_failslab+0x8c/0xb0
[  106.683471][ T5982]  kmem_cache_alloc_noprof+0x66/0x3f0
[  106.683568][ T5982]  ? security_inode_alloc+0x37/0x100
[  106.683598][ T5982]  security_inode_alloc+0x37/0x100
[  106.683626][ T5982]  inode_init_always_gfp+0x4a0/0x4e0
[  106.683681][ T5982]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  106.683711][ T5982]  alloc_inode+0x58/0x170
[  106.683728][ T5982]  new_inode+0x1d/0xe0
[  106.683792][ T5982]  __debugfs_create_file+0x97/0x2b0
[  106.683824][ T5982]  debugfs_create_file_full+0x3f/0x60
[  106.683855][ T5982]  ? __pfx_ip6gre_tap_setup+0x10/0x10
[  106.683940][ T5982]  ref_tracker_dir_debugfs+0x10e/0x220
[  106.683972][ T5982]  alloc_netdev_mqs+0x1a7/0xa70
[  106.684058][ T5982]  rtnl_create_link+0x239/0x720
[  106.684163][ T5982]  rtnl_newlink_create+0x174/0x650
[  106.684186][ T5982]  ? security_capable+0x7b/0x90
[  106.684292][ T5982]  ? netlink_ns_capable+0x86/0xa0
[  106.684320][ T5982]  rtnl_newlink+0x1185/0x1400
[  106.684360][ T5982]  ? __siphash_unaligned+0x197/0x2e0
[  106.684390][ T5982]  ? __memcg_slab_free_hook+0x10f/0x2c0
[  106.684468][ T5982]  ? __rcu_read_unlock+0x4e/0x70
[  106.684492][ T5982]  ? avc_has_perm_noaudit+0xab/0x130
[  106.684530][ T5982]  ? cred_has_capability+0x224/0x2a0
[  106.684559][ T5982]  ? selinux_capable+0x31/0x40
[  106.684651][ T5982]  ? security_capable+0x7b/0x90
[  106.684676][ T5982]  ? ns_capable+0x7c/0xb0
[  106.684705][ T5982]  ? __pfx_rtnl_newlink+0x10/0x10
[  106.684783][ T5982]  rtnetlink_rcv_msg+0x64b/0x720
[  106.684898][ T5982]  netlink_rcv_skb+0x123/0x220
[  106.684926][ T5982]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  106.685074][ T5982]  rtnetlink_rcv+0x1c/0x30
[  106.685105][ T5982]  netlink_unicast+0x5a8/0x680
[  106.685145][ T5982]  netlink_sendmsg+0x5c8/0x6f0
[  106.685180][ T5982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.685291][ T5982]  ____sys_sendmsg+0x563/0x5b0
[  106.685319][ T5982]  ___sys_sendmsg+0x195/0x1e0
[  106.685357][ T5982]  __x64_sys_sendmsg+0xd4/0x160
[  106.685451][ T5982]  x64_sys_call+0x194c/0x3020
[  106.685539][ T5982]  do_syscall_64+0x12c/0x3b0
[  106.685572][ T5982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.685598][ T5982] RIP: 0033:0x7ff6b1a6ce59
[  106.685618][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.685640][ T5982] RSP: 002b:00007ff6b04c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.685664][ T5982] RAX: ffffffffffffffda RBX: 00007ff6b1ce5fa0 RCX: 00007ff6b1a6ce59
[  106.685686][ T5982] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  106.685698][ T5982] RBP: 00007ff6b04c7090 R08: 0000000000000000 R09: 0000000000000000
[  106.685711][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  106.685725][ T5982] R13: 00007ff6b1ce6038 R14: 00007ff6b1ce5fa0 R15: 00007fff06af7c28
[  106.685747][ T5982]  </TASK>
[  106.685967][ T5982] debugfs: out of free dentries, can not create file 'netdev@ffff88811aa78598'
[  107.152510][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.174857][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.228692][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'.
[  107.239673][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  107.239689][   T28] audit: type=1400 audit(1781257701.514:691): avc:  denied  { execute } for  pid=5993 comm="syz.4.784" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.393864][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[  107.573697][ T6031] FAULT_INJECTION: forcing a failure.
[  107.573697][ T6031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.587725][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.5.793 Not tainted syzkaller #0 PREEMPT(lazy) 
[  107.587755][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  107.587768][ T6031] Call Trace:
[  107.587776][ T6031]  <TASK>
[  107.587826][ T6031]  __dump_stack+0x1d/0x30
[  107.587909][ T6031]  dump_stack_lvl+0x95/0xd0
[  107.588004][ T6031]  dump_stack+0x15/0x1b
[  107.588027][ T6031]  should_fail_ex+0x263/0x280
[  107.588051][ T6031]  should_fail+0xb/0x20
[  107.588071][ T6031]  should_fail_usercopy+0x1a/0x20
[  107.588126][ T6031]  _copy_from_user+0x1c/0xb0
[  107.588242][ T6031]  __sys_bind+0x106/0x290
[  107.588265][ T6031]  __x64_sys_bind+0x3f/0x50
[  107.588284][ T6031]  x64_sys_call+0x2b30/0x3020
[  107.588383][ T6031]  do_syscall_64+0x12c/0x3b0
[  107.588413][ T6031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.588435][ T6031] RIP: 0033:0x7f456395ce59
[  107.588510][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.588532][ T6031] RSP: 002b:00007f45623af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  107.588557][ T6031] RAX: ffffffffffffffda RBX: 00007f4563bd5fa0 RCX: 00007f456395ce59
[  107.588572][ T6031] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000005
[  107.588585][ T6031] RBP: 00007f45623af090 R08: 0000000000000000 R09: 0000000000000000
[  107.588599][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.588613][ T6031] R13: 00007f4563bd6038 R14: 00007f4563bd5fa0 R15: 00007ffd661877f8
[  107.588635][ T6031]  </TASK>
[  107.752408][ T6033] __nla_validate_parse: 3 callbacks suppressed
[  107.752471][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[  108.039779][   T28] audit: type=1400 audit(1781257702.314:692): avc:  denied  { create } for  pid=6056 comm="syz.3.802" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  108.060537][ T4467] usb 3-1: enqueue for inactive port 0
[  108.066167][ T4467] usb 3-1: enqueue for inactive port 0
[  108.072433][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'.
[  108.080021][   T28] audit: type=1400 audit(1781257702.314:693): avc:  denied  { unlink } for  pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  108.081999][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'.
[  108.105155][ T6053] loop5: detected capacity change from 0 to 2048
[  108.134542][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'.
[  108.142057][ T4467] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  108.179180][ T6053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.429185][ T6070] FAULT_INJECTION: forcing a failure.
[  108.429185][ T6070] name failslab, interval 1, probability 0, space 0, times 0
[  108.443735][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.5.799 Not tainted syzkaller #0 PREEMPT(lazy) 
[  108.443762][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  108.443853][ T6070] Call Trace:
[  108.443860][ T6070]  <TASK>
[  108.443868][ T6070]  __dump_stack+0x1d/0x30
[  108.443894][ T6070]  dump_stack_lvl+0x95/0xd0
[  108.443914][ T6070]  dump_stack+0x15/0x1b
[  108.443932][ T6070]  should_fail_ex+0x263/0x280
[  108.443989][ T6070]  should_failslab+0x8c/0xb0
[  108.444025][ T6070]  kmem_cache_alloc_noprof+0x66/0x3f0
[  108.444133][ T6070]  ? security_inode_alloc+0x37/0x100
[  108.444168][ T6070]  security_inode_alloc+0x37/0x100
[  108.444195][ T6070]  inode_init_always_gfp+0x4a0/0x4e0
[  108.444261][ T6070]  alloc_inode+0x58/0x170
[  108.444301][ T6070]  create_pipe_files+0x41/0x440
[  108.444346][ T6070]  __do_pipe_flags+0x44/0x140
[  108.444375][ T6070]  do_pipe2+0x61/0x140
[  108.444409][ T6070]  ? ksys_write+0x161/0x1a0
[  108.444442][ T6070]  ? switch_fpu_return+0xb2/0x1b0
[  108.444533][ T6070]  __x64_sys_pipe2+0x30/0x40
[  108.444568][ T6070]  x64_sys_call+0x2c9b/0x3020
[  108.444596][ T6070]  do_syscall_64+0x12c/0x3b0
[  108.444681][ T6070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.444705][ T6070] RIP: 0033:0x7f456395ce59
[  108.444722][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.444744][ T6070] RSP: 002b:00007f456236d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  108.444778][ T6070] RAX: ffffffffffffffda RBX: 00007f4563bd6180 RCX: 00007f456395ce59
[  108.444797][ T6070] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
[  108.444812][ T6070] RBP: 00007f456236d090 R08: 0000000000000000 R09: 0000000000000000
[  108.444826][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.444841][ T6070] R13: 00007f4563bd6218 R14: 00007f4563bd6180 R15: 00007ffd661877f8
[  108.444946][ T6070]  </TASK>
[  108.447075][   T28] audit: type=1400 audit(1781257702.694:694): avc:  denied  { write } for  pid=6048 comm="syz.5.799" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  109.083770][   T28] audit: type=1400 audit(1781257702.704:695): avc:  denied  { unlink } for  pid=6048 comm="syz.5.799" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  109.352819][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'.
[  109.422262][ T6082] loop2: detected capacity change from 0 to 512
[  109.469707][ T6082] ext2: Unknown parameter 'euid'
[  109.676170][ T6103] sg_write: data in/out 45445/136 bytes for SCSI command 0x0-- guessing data in;
[  109.676170][ T6103]    program syz.4.817 not setting count and/or reply_len properly
[  109.705424][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.717725][ T6102] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  109.734147][ T6102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.804699][ T6110] loop1: detected capacity change from 0 to 128
[  109.846281][ T6110] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[  109.846711][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'.
[  109.870103][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'.
[  109.879411][ T6110] FAT-fs (loop1): Filesystem has been set read-only
[  110.102954][ T6131] loop1: detected capacity change from 0 to 128
[  110.116713][ T6131] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  110.135934][ T6131] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  110.185077][ T3401] kernel read not supported for file /newroot/171 (pid: 3401 comm: kworker/0:6)
[  110.209426][ T6133] loop3: detected capacity change from 0 to 1024
[  110.216435][ T6133] EXT4-fs: Ignoring removed bh option
[  110.306097][   T28] audit: type=1400 audit(1781257704.464:696): avc:  denied  { write } for  pid=6124 comm="syz.3.826" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  110.361675][ T6133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.388718][   T28] audit: type=1326 audit(1781257704.484:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba83ce59 code=0x7ffc0000
[  110.414010][   T28] audit: type=1326 audit(1781257704.484:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba83ce59 code=0x7ffc0000
[  110.439585][   T28] audit: type=1326 audit(1781257704.484:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba83ce59 code=0x7ffc0000
[  110.666214][ T6140] loop1: detected capacity change from 0 to 512
[  110.673425][ T6140] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.706986][ T6140] EXT4-fs (loop1): 1 truncate cleaned up
[  110.713163][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.755814][   T28] audit: type=1326 audit(1781257704.484:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bba83ce59 code=0x7ffc0000
[  110.882428][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'.
[  110.891446][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.832'.
[  110.900546][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'.
[  111.050157][ T6160] loop2: detected capacity change from 0 to 512
[  111.093908][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.106684][ T6160] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.162994][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.426396][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.450509][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.702191][ T6186] loop4: detected capacity change from 0 to 8192
[  111.753091][ T6186]  loop4: p1 < > p2 p4 < p5 >
[  111.763724][ T6186] loop4: partition table partially beyond EOD, truncated
[  111.780349][ T6186] loop4: p1 start 134217728 is beyond EOD, truncated
[  111.787246][ T6186] loop4: p2 size 591360 extends beyond EOD, truncated
[  111.807740][ T6186] loop4: p5 size 591360 extends beyond EOD, truncated
[  111.830756][ T6206] loop5: detected capacity change from 0 to 1024
[  111.861046][ T6206] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block
[  111.861046][ T6206] 
[  111.915652][ T6206] gretap0 speed is unknown, defaulting to 1000
[  111.921864][ T6206] gretap0 speed is unknown, defaulting to 1000
[  111.928259][ T6206] gretap0 speed is unknown, defaulting to 1000
[  111.940228][ T6206] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  111.947638][ T6206] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  111.971413][ T6206] gretap0 speed is unknown, defaulting to 1000
[  111.978001][ T6206] gretap0 speed is unknown, defaulting to 1000
[  111.984435][ T6220] loop5: detected capacity change from 0 to 1024
[  111.984761][ T6206] gretap0 speed is unknown, defaulting to 1000
[  111.997338][ T6206] gretap0 speed is unknown, defaulting to 1000
[  112.003953][ T6206] gretap0 speed is unknown, defaulting to 1000
[  112.016701][ T6222] loop2: detected capacity change from 0 to 512
[  112.044989][ T6220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.071205][ T6223] loop4: detected capacity change from 0 to 256
[  112.095688][ T6223] FAT-fs (loop4): Directory bread(block 64) failed
[  112.102212][ T6223] FAT-fs (loop4): Directory bread(block 65) failed
[  112.108723][ T6223] FAT-fs (loop4): Directory bread(block 66) failed
[  112.115866][ T6223] FAT-fs (loop4): Directory bread(block 67) failed
[  112.122904][ T6223] FAT-fs (loop4): Directory bread(block 68) failed
[  112.129605][ T6223] FAT-fs (loop4): Directory bread(block 69) failed
[  112.132019][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.136534][ T6223] FAT-fs (loop4): Directory bread(block 70) failed
[  112.154692][ T6222] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.155955][ T6223] FAT-fs (loop4): Directory bread(block 71) failed
[  112.173393][ T6222] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks
[  112.174418][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.182923][ T6222] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  112.200040][ T6223] FAT-fs (loop4): Directory bread(block 72) failed
[  112.215104][ T6223] FAT-fs (loop4): Directory bread(block 73) failed
[  112.820671][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.964378][ T6246] __nla_validate_parse: 5 callbacks suppressed
[  112.964401][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'.
[  113.172987][   T28] kauditd_printk_skb: 82 callbacks suppressed
[  113.173001][   T28] audit: type=1326 audit(1781257707.454:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.217126][   T28] audit: type=1326 audit(1781257707.484:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.242366][   T28] audit: type=1326 audit(1781257707.484:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.267583][   T28] audit: type=1326 audit(1781257707.484:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.292805][   T28] audit: type=1326 audit(1781257707.484:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.391692][ T6260] gretap0 speed is unknown, defaulting to 1000
[  113.572803][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.586350][   T28] audit: type=1326 audit(1781257707.484:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.630203][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.660540][ T6266] gretap0 speed is unknown, defaulting to 1000
[  113.689661][   T28] audit: type=1326 audit(1781257707.484:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.5.867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f456395ce59 code=0x7ffc0000
[  113.836034][ T2495] kworker/u8:7: attempt to access beyond end of device
[  113.836034][ T2495] loop4: rw=1, sector=1224, nr_sectors = 76 limit=256
[  113.887025][ T6285] xt_TPROXY: Can be used only with -p tcp or -p udp
[  113.965712][ T6277]  loop2: p1 < > p2 p4 < p5 >
[  113.970691][ T6277] loop2: partition table partially beyond EOD, truncated
[  113.978092][ T6277] loop2: p1 start 134217728 is beyond EOD, truncated
[  113.985063][ T6277] loop2: p2 size 591360 extends beyond EOD, truncated
[  113.993640][ T6277] loop2: p5 size 591360 extends beyond EOD, truncated
[  114.019297][ T6292] netlink: 48 bytes leftover after parsing attributes in process `syz.4.879'.
[  114.055070][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  114.059711][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  114.066557][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  114.198219][ T6302] gretap0 speed is unknown, defaulting to 1000
[  114.390431][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'.
[  114.454384][ T6318] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.891: bad orphan inode 13
[  114.464595][ T6318] loop2: lost filesystem error report for type 5 error -117
[  114.464841][ T6318] ext4_test_bit(bit=12, block=4) = 1
[  114.472258][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  114.472277][    C0] EXT4-fs (loop2): initial error at time 1781257708: ext4_orphan_get:1423
[  114.472316][    C0] EXT4-fs (loop2): last error at time 1781257708: ext4_orphan_get:1423
[  114.501662][ T6318] is_bad_inode(inode)=0
[  114.505829][ T6318] NEXT_ORPHAN(inode)=0
[  114.509899][ T6318] max_ino=32
[  114.513156][ T6318] i_nlink=1
[  114.516593][ T6318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.543292][   T28] audit: type=1400 audit(1781257708.824:790): avc:  denied  { mount } for  pid=6317 comm="syz.2.891" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  114.581456][ T6323] gretap0 speed is unknown, defaulting to 1000
[  114.588206][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.709323][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'.
[  114.780099][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'.
[  114.789619][   T69] ==================================================================
[  114.790048][ T6323]  loop1: p1 < > p2 p4 < p5 >
[  114.797736][   T69] BUG: KCSAN: data-race in atime_needs_update / touch_atime
[  114.797774][   T69] 
[  114.797781][   T69] read to 0xffff88811d481918 of 4 bytes by task 2495 on cpu 1:
[  114.797799][   T69]  atime_needs_update+0x25f/0x3e0
[  114.797826][   T69]  touch_atime+0x4a/0x330
[  114.797851][   T69]  shmem_file_read_iter+0x3f4/0x4b0
[  114.802772][ T6323] loop1: partition table partially beyond EOD, 
[  114.809782][   T69]  lo_rw_aio+0x67d/0x730
[  114.809808][   T69]  loop_process_work+0x56c/0xac0
[  114.809828][   T69]  loop_workfn+0x31/0x40
[  114.812568][ T6323] truncated
[  114.819671][   T69]  process_scheduled_works+0x4f0/0x9c0
[  114.819705][   T69]  worker_thread+0x58a/0x780
[  114.825086][ T6323] loop1: p1 start 134217728 is beyond EOD, 
[  114.829024][   T69]  kthread+0x22a/0x280
[  114.829045][   T69]  ret_from_fork+0x146/0x330
[  114.829076][   T69]  ret_from_fork_asm+0x1a/0x30
[  114.835781][ T6323] truncated
[  114.840476][   T69] 
[  114.840484][   T69] write to 0xffff88811d481918 of 4 bytes by task 69 on cpu 0:
[  114.840503][   T69]  touch_atime+0x1d7/0x330
[  114.840531][   T69]  shmem_file_read_iter+0x3f4/0x4b0
[  114.846394][ T6323] loop1: p2 size 591360 extends beyond EOD, 
[  114.849677][   T69]  lo_rw_aio+0x67d/0x730
[  114.849700][   T69]  loop_process_work+0x56c/0xac0
[  114.849720][   T69]  loop_rootcg_workfn+0x22/0x30
[  114.854072][ T6323] truncated
[  114.857028][   T69]  process_scheduled_works+0x4f0/0x9c0
[  114.857059][   T69]  worker_thread+0x58a/0x780
[  114.857089][   T69]  kthread+0x22a/0x280
[  114.867226][ T6323] loop1: p5 size 591360 extends beyond EOD, 
[  114.872975][   T69]  ret_from_fork+0x146/0x330
[  114.873010][   T69]  ret_from_fork_asm+0x1a/0x30
[  114.873036][   T69] 
[  114.873041][   T69] value changed: 0x00de9787 -> 0x04721e87
[  114.873054][   T69] 
[  114.873058][   T69] Reported by Kernel Concurrency Sanitizer on:
[  114.873071][   T69] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(lazy) 
[  114.877436][ T6323] truncated
[  114.881704][   T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  114.881722][   T69] Workqueue: loop1 loop_rootcg_workfn
[  114.881759][   T69] ==================================================================
[  115.068518][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  115.068677][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  115.079786][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  117.144579][   T28] audit: type=1400 audit(1781257711.424:791): avc:  denied  { write } for  pid=6336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.167550][   T28] audit: type=1400 audit(1781257711.424:792): avc:  denied  { write } for  pid=6347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1